优化LNMP架构采用“Website Baker”为小型公司创建高性能网站方

  优化LNMP架构采用“Website Baker”为小型公司创建高性能网站方案 参考图片： 1. 一、安装部署各种软件:
1.系统环境: 
硬件:HP 360G4/2G
System:Centos 5.4  
Web:nginx-1.1.6.tar.gz   
FastCGI:php-5.3.8.tar.gz 
DB:mysql-5.5.3-m3.tar.gz 
2. 安装编译环境 
#yum -y install gcc gcc-c++ autoconf automake openssl-devel zlib-devel pcre-devel   //pcre让nginx支持正则
#yum -yt groupinstall "Developement Tools" "Development Libraries" 1.编译安装mysql
//a.编译安装mysql的优点：源码包的默认编译参数默认以dubgu模式）给mysql的性能带来很大的损失，
// 此处使用 --without-debug参数禁用debug模式
//b.以静态方式编译（比动态方式提高5%-10%的性能）
// 此处使用 --with-mysqld-ldflgs=--all-staic 和 --with-client-ldflds=--all-staic参数
//c.使用unix套接字链接提高7.5%性能
// 此处使用--with-unix-socket-path=/usr/local/mysql/tmp/mysql.sock
//d.允许使用汇编模式 
// 此处使用 --enable-assembler  (优化性能)
//e.至于 --pgcc 目前没有在生产上使用过（据说可以提高1%）
//f.编译安装，可以在同一台服务器上安装多个mysql（前提要保证存放位置、sock不同）
#groupadd mysql                             //为mysql创建用户组
#useradd -g mysql mysql                     //将mysql用户添加到mysql组中
#tar zxvf mysql-5.5.3-m3.tar.gz             
#cd mysql-5.5.3-m3   
./configure
--prefix=/usr/local/mysql
--without-debug                            //取消debug模式编译
--enable-assembler
--with-mysqld-ldflags=-all-static
--with-client-ldflags=-all-static
--with-unix-socket-path=/usr/local/mysql/tmp/mysql.sock
--with-extra-charsets=utf8,gbk //如果没有问题则会显示
// Thank you for choosing MySQL!
// 以下时间将为很长，请为mysql创建配置文件或数据目录
#make && make install                           //如果编译安装没有问题则NEXT
#chmod 755 /usr/local/mysql             
#chown -R mysql:mysql /usr/local/mysql          //修改安装目录的用户和用户组为mysql
#mkdir -pv /mysql_data/{data,binlog,relaylog}   //为mysql提供数据存放目录
#/usr/local/mysql/bin/mysql_install_db         //推荐是用其它新分区，避免IO重读/分区
--basedir=/usr/local/mysql
--datadir=/mysql_data --user=mysql 
----------------------------------------------
//创建并优化my.cnf文件
#vi /mysql_data/my.cnf                            //创建后保存
[client]
character-set-server = utf8
port    = 3306
socket  = /usr/local/mysql/tmp/mysql.sock
[mysqld]
character-set-server = utf8
replicate-ignore-db = mysql
replicate-ignore-db = test
replicate-ignore-db = information_schema
user    = mysql
port    = 3306
socket  = /usr/local/mysql/tmp/mysql.sock                 
basedir = /usr/local/mysql
datadir = /mysql_data/data
log-error = /mysql_data/mysql.error.log
pid-file = /mysql_data/mysql.pid
skip-locking                                    //避免mysql外部锁定
open_files_limit = 10240
back_log = 384                                  //推荐小于512
max_connections = 5000
max_connect_errors = 6000
table_cache = 614
external-locking = FALSE
max_allowed_packet = 32M
sort_buffer_size = 1M
join_buffer_size = 1M
thread_cache_size = 300
query_cache_size = 512M
query_cache_limit = 2M
query_cache_min_res_unit = 2k
default-storage-engine = MyISAM
thread_stack = 192K
transaction_isolation = READ-COMMITTED
tmp_table_size = 246M
max_heap_table_size = 246M
long_query_time = 3
log-slave-updates
log-bin = /mysql_data/binlog/binlog
binlog_cache_size = 4M
binlog_format = MIXED
max_binlog_cache_size = 8M
max_binlog_size = 1G
relay-log-index = /mysql_data/relaylog/relaylog
relay-log-info-file = /mysql_data/relaylog/relaylog
relay-log = /mysql_data/relaylog/relaylog
expire_logs_days = 30
key_buffer_size = 256M            //索引缓冲区为256M 或（4G内存可512M）
read_buffer_size = 1M
read_rnd_buffer_size = 16M
bulk_insert_buffer_size = 64M
myisam_sort_buffer_size = 128M
myisam_max_sort_file_size = 10G
myisam_repair_threads = 1
myisam_recover interactive_timeout = 120
wait_timeout = 120 
skip-name-resolve                //避免做DNS 解析，提供IP地址连接 slave-skip-errors = 1032,1062,126,1114,1146,1048,1396
server-id = 1 innodb_additional_mem_pool_size = 16M
innodb_buffer_pool_size = 512M
innodb_data_file_path = ibdata1:256M:autoextend
innodb_file_io_threads = 4
innodb_thread_concurrency = 8
innodb_flush_log_at_trx_commit = 2
innodb_log_buffer_size = 16M
innodb_log_file_size = 128M
innodb_log_files_in_group = 3
innodb_max_dirty_pages_pct = 90
innodb_lock_wait_timeout = 120
innodb_file_per_table = 0 [mysqldump]
quick
max_allowed_packet = 32M #######################################
2.漫长的等待后启动mysql(SysV格式的脚本见附件）
#/usr/local/webserver/mysql/bin/mysql start
//管理mysql并修改密码和给新用户创建权限
#/usr/local/mysql/bin/mysql -u root -p -S /usr/local/mysql/tmp/mysql.sock
enter password: <Enter>              //默认为空  
#/usr/local/mysql/bin/mysqladmin -uroot -p paswword 'hanfeng'  //创建新密码为hanfeng
--------------------------------------------------
3.编译安装PHP
// 为PHP安装 事件触发网络库
#tar zxvf libevent-2.0.15-stable.tar.gz
#cd libevent-2.0.15-stable
#./configure && make && make install
// 为PHP安装 字符编码转换
#tar zxvf  libconv-1.13.1.tar.gz
#cd libconv-1.13.1
#./configure && make && make install
// 安装FastCGIのPHP
// 此处采用 
#tar zxvf php-5.3.8.tar.gz
#cd  php-5.3.8
#./configure
--prefix=/usr/local/php
--with-mysql=/usr/local/mysql
--with-mysqli==/usr/local/mysql/bin/mysql_config 
--with-openssl
--enable-fpm                                  //一定要有
--with-libevent-dir=/usr/local/lib
--enable-mbstring
--disable-debug                               //取消掉debug，为增加性能
--with-freetype-dir
--with-jpeg-dir
--with-png-dir
--with-zlib
--with-libxml-dir=/usr
--enable-xml
--with-iconv-dir=/usr/local 
--------------------------------------------------
4.随后将会看到
// Thank you for using PHP
#ln -s /usr/local/lib/libiconv.so.2 /usr/lib/libiconv.so.2        //做个连接防止make时缺少libiconv.so.2
#ln -s /usr/local/lib/libiconv.so.2 /usr/local/libiconv.so.2
#make ZEND_EXTRA_LIBS='-liconv'                                   //iconv库问题
5.漫长时间后将会看到
// Build complete. Don't forget to run 'make test'
#make install 
#cp php-5.3.8/php.ini-production /usr/local/php/etc/php.ini
#vi /usr/local/php/etc/php.ini 修改并保存
// 开启以下几项
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
6. 使用nohup在后台启动 php-fpm  为防止tty终端关闭导致php-fpm 挂掉！推荐生产环境使用nohup将命令放于后台运行
#nohup /usr/local/php/sbin/php-fpm &
[1] 18198
nohup: appending output to `nohup.out'
[1]+  Done    nohup /usr/local/php/sbin/php-fpm
//将命令加到开始启动
#echo "nohup /usr/local/php/sbin/php-fpm & > /dev/null" >> /ect/rc.local
7.//为nginx增加fastcgi_params 文件
#vi /etc/nginx/fastcgi.conf    //修改后保存
// 将里面内容替换为
fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx;
fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;
fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;
fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;
##########################################
8.为nginx 优化linux内核参数
vi /etc/sysctl.conf                  // 增加一下内容，并是修改生效
net.ipv4.tcp_max_syn_backlog = 65536
net.core.netdev_max_backlog = 32768
net.core.somaxconn = 32768
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw.reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.ip_local_port_range = 1024 65535
##########################################
#sysctl -p                           //使其及时生效
--------------------------------------------------
9.编译安装nginx
#useradd -s /sbin/nologin -M nginx       //添加nginx用户
#tar zxvf nginx-1.1.6.tar.gz
#cd nginx-1.1.6
#./configure  
  --prefix=/usr/local/nginx                              //安装路径
  --sbin-path=/usr/sbin/nginx                            //可执行文件路径
  --conf-path=/etc/nginx/nginx.conf                      //最好定义到/etc下
  --pid-path=/usr/local/nginx/nginx.pid                    //pid文件存放位置，后面管理时将会用到
  --lock-path=/var/lock/nginx.lock            
  --user=nginx
  --group=nginx  
  --with-http_stub_status_module                         //以取得一些网页的运行状态
  --with-http_ssl_module                                 //支持https加密连接
  --with-http_gzip_static_module                         //静态缓存、压缩模块
  --with-http_realip_module                              //让nginx透明获取客户端IP
  --http-client-body-temp-path=/var/tmp/nginx/client/    //指定http客户端请求缓存文件存放目录
  --http-proxy-temp-path=/var/tmp/nginx/proxy/           //指定http反向代理缓存文件存放目录
  --http-fastcgi-temp-path=/var/tmp/nginx/fcgi/           //指定FastCGI缓存文件存放目录
#make && make install                                     //安装nginx 
10.编写SystemV风格的启动脚本（可在本文附件下载后直接使用）
//如果需要请参考: http://linuxxx.blog.51cto.com/1824808/705590 有关nginxd脚本的编写
//使用说明，保存nginxd脚本,赋予执行权限，添加服务和开机启动
#chmod +x /etc/init.d/nginxd
#chkconfig --add nginxd
// 如果不支持，则添加一下2行即可
// # chkconfig: - 85 15                #为必须字符
// # description: nginx is a World Wide Web server. It is used to serve
#chkconfig --level 2345 nginxd on        
11.第一次启动nginx
#service nginxd start    //没问题的话就显示，也会看到Welcome to nginx!
Starting nginx: [  OK  ]
在XP客户端访问一下 http://192.168.10.11   //服务器地址
--------------------------------------------------
12.优化配置nginx.conf 文件
user nginx nginx;
worker_processes  8;                       //我的服务器为双核双线程 pid        /usr/local/nginx/nginx.pid;     //PID 存在位置，和启用nginx.pid管理 events {
    use epoll;                             //使用的网络IO模型，CeotOs或REAL推荐使用epoll
    worker_connections  1024;              //允许的连接数
} http {
    include       mime.types;
    default_type  application/octet-stream;     log_format mylog  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';      
                       //mylog为自定义log_format的name,log_format用于定义log的格式
    sendfile on;
    tcp_nopush on;
    keepalive_timeout 60; //连接保持时间     gzip on;                           //开启gzip压缩，为客户端访问节省更大的带宽，提高访问速度
    gzip_min_length 1k;     
    gzip_buffers 4 8k;                 //安装原数据8K为单位的4倍申请内存
    gzip_http_version 1.1;             //http版本信息，目前为1.0和1.1
    gzip_comp_level 4;                 //gzip 压缩比（与CPU处理速度相反）
    gzip_types text/plain application/x-javascript text/css application/xml; 
    gzip_vary on;
    
    fastcgi_intercept_errors on;  
    fastcgi_connect_timeout 300; 
    fastcgi_send_timeout 300; 
    fastcgi_read_timeout 300; 
    fastcgi_buffer_size 64k; 
    fastcgi_buffers 4 64k; 
    fastcgi_busy_buffers_size 128k; 
    fastcgi_temp_file_write_size 128k;     server {
        listen       80;
        server_name  www.abc.com;
        access_log  logs/abc.access.log  mylog;   //用到了mylog，将日志定义为log_format格式         location / {
            root   /usr/local/nginx/html/abc;     
            index index.php index.html index.htm;
        }
        
        error_page  404 = /404.html;           //当访问不存在的页面时，提示用户重新访问主页    
        # redirect server error pages to the static page /50x.html
        error_page   500 502 503 504  /usr/local/nginx/50x/50x.html;  //各种错误页面
        location = /50x.html {
            root   html;
        }
        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        location ~ .php$ {
            root           html;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;                               //fastcgi 索引页格式
            fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            include        fastcgi_params;
        }
    }     server {
        listen       80;
        server_name  www.abcd.com;
        access_log  logs/abcd.access.log  mylog;
        location / {
            root  /usr/local/nginx/html/abcd;
            index index.php index.html index.htm;
            error_page  404 = /404.html;
            error_page   500 502 503 504  /usr/local/nginx/50x/50x.html; 
        location = /50x.html {
        
            root   html;
        location ~ .php$ {
            root   /usr/local/nginx/html/abcd/wb;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            include        fastcgi_params;
        }
        }
    }
}     
############### This is nginx.conf ###############
--------------------------------------------------
13.使用PID信号来控制管理nginx进程
// pid 存放位置  /usr/local/nginx/nginx.pid
// kill - 信号类型  cat `/usr/local/nginx/nginx.pid`
// 信号类型说明
// TERM,INT 快速关闭nginx ， 如以此kill掉8个进程是不是很悲剧
// OUT 从容关闭
// HUP 平滑重启,重新加载配置文件
// USR1 重新打开日志文件，在自动切割日志时比较使用
// USR2 平滑升级可执行程序
// WINCH 从容关闭进程,对于线上的nginx新旧版本更换 // 针对与上文的nginx.conf 修改此处使用HUP信号来控制
#kill -HUP cat `/usr/local/nginx/nginx.pid`  //让修改立即生效
14.访问简单测试测试页面
#vi /usr/local/nginx/html/index.php
<?php
phpinfo();
?> 15.测试访问数据库
<?php
link=mysql_connect("localhost","root","hanfeng");
if(!$link) echo "ERROR!";
else echo "OK!";
phpinfo();
?>
--------------------------------------------------
二、安装“Website Baker”
1.安装部署Website Baker
// 采用nginx的虚拟主机为企业N个域名做网站部署
#unzip WebsiteBaker_2.8*.zip
#mv WebsiteBaker_2.8* /usr/local/nginx/html/abc
#cp -r /usr/local/nginx/html/abc /usr/local/nginx/html/abcd
#cd /usr/local/nginx/html/abc
#cp wb/modules/fckeditor/fckeditor/editor/filemanager/connectors/php/config.php ./
#cp config.php ../abcd/wb/
#chmod 777 /usr/local/nginx/html/abc
#chmod 777 /usr/local/nginx/html/abcd
2.为Website Baker的创建数据库用户
#/usr/local/mysql/bin/mysql -uroot -p
mysql> GRANT ALL PRIVILEGES ON abc.* TO 'abc'@'localhost' IDENTIFIED BY 'hanfeng';
mysql> GRANT ALL PRIVILEGES ON abcd.* TO 'abcd'@'localhost' IDENTIFIED BY 'hanfeng';
mysql>flush privileges;
3.通过浏览器访问并install 和admin IE: http://www.abcd.com/install  安装  (abc.com同理) //以下仅有图片提供 
IE:  http://www.abcd.com/admin     管理
   //安装完后删除安装文件和upgrade-script.php文件
#rm -rf /usr/local/nginx/html/{abc,abcd}/{upgrade-script.php,install}  // admin进入界面请见文章开始 4.通过访问安装无误，证明基于LNMP下的“Website Baker”安装成功！
// 根据后台admin管理网站即可了！
说明： 1.本文不只是为了构建LNMP安装“Website Baker”网站，而是将最近学习到东西给朋友提供实际生产中的应用！ 2.nignx 日志切割、mysql数据备份已经配置为cron任务，并为编辑人员提供了bat文件自动上传和服务器状态查看！基本不需要专业运维人员管理，直接托付给IDC即可！ 3.LNMP编译安装优化多学自抚琴煮酒《构建高可用linux服务器》和张宴《实战Nginx取代Apache的高性能Web服务器》并借鉴51CTO《运维趋势之服务器优化_13期》； 4.不在于编译安装LNMP，而是优化期架构在生产中的应用，根据最近观察服务运行良好！