Nginx_PHP_PHP-FPM网站环境部署手册

1. 下载稳定版源代码安装文件：

nginx-1.6.2.tar.gz

http://nginx.org/download/

php-5.5.23.tar.gz

http://php.net/downloads.php

PCRE(使Nginx支持HTTP Rewrite模块)：pcre-8.35.tar.gz

ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/

可利用TCMalloc来优化Nginx的性能，需要如下两个包，一般在物理机上配置可提高性能，如果是虚拟机就不要配置这个：

libunwind-1.1.tar.gz（64位系统才需要）

http://ftp.yzu.edu.tw/nongnu/libunwind/

gperftools-2.1.tar.gz

http://download.csdn.net/detail/chunmanchunman/8201565

libmcrypt-2.5.8.tar.gz

http://sourceforge.net/projects/mcrypt/files/Libmcrypt/2.5.8/

mcrypt-2.6.8.tar.gz

http://sourceforge.net/projects/mcrypt/files/MCrypt/2.6.8/

jpegsrc.v9.tar.gz

http://www.ijg.org/files/

libpng-1.6.17.tar.gz

http://sourceforge.net/projects/libpng/files/libpng16/1.6.17/

freetype-2.5.5.tar.gz

http://ftp.twaren.net/Unix/NonGNU/freetype/

mhash-0.9.9.9.tar.gz

http://sourceforge.net/projects/mhash/files/mhash/0.9.9.9/

2. 编译安装Nginx并配置：

1）检查依赖的软件包，没有的要手动安装：

make gcc gcc-c++ autoconf libjpeg-turbo libjpeg-turbo-devel libpng

libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib 

zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses

ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5-libs

krb5-devel libidn libidn-devel openssl openssl-devel openldap 

openldap-devel openldap-clients openldap-servers portreserve 

gd gd-devel

# yum install e2fsprogs-devel openldap-devel openldap-clients

 openldap-servers portreserve gd gd-devel

2）修改系统内核和资源限制来优化Nginx性能：

# vi /etc/sysctl.conf

net.ipv4.tcp_max_tw_buckets = 10000    # timewait数量

net.ipv4.ip_local_port_range = 1024 65000  # 允许系统打开端口范围

net.ipv4.tcp_tw_recycle = 1   # 启用timewait快速回收，但会引起Android手机连接后台程序频繁超时，所以在APP服务器上设置为0

net.ipv4.tcp_tw_reuse = 1             # 启用timewait重用与新TCP

net.ipv4.tcp_syncookies = 1            # 开启SYN Cookies

net.core.somaxconn = 262144         # 系统能同时发起TCP连接数

net.core.netdev_max_backlog = 262144  #网口比内核处理数据包快时，允许发送到队列的数据包最大数目

net.ipv4.tcp_max_orphans = 262144   # 设置最多多少个TCP套接字不被关联到任何一个用户文件句柄上

net.ipv4.tcp_max_syn_backlog = 262144  

net.ipv4.tcp_synack_retries = 1

net.ipv4.tcp_syn_retries = 1

net.ipv4.tcp_fin_timeout = 1

net.ipv4.tcp_keepalive_time = 30

# /sbin/sysctl -p

# vi /etc/security/limits.conf

*        soft    nofile           10240

*        hard    nofile           65536

3）编译安装pcre-8.35，系统自带的版本过低：

# cd /usr/local/src

# tar xzvf pcre-8.35.tar.gz

# cd pcre-8.35

# ./configure --prefix=/usr/local/pcre

# make && make install

4）编译安装libunwind-1.1和gperftools-2.1，如果是虚拟机不用安装这两个软件包：

# tar xzvf libunwind-1.1.tar.gz

# cd libunwind-1.1

# CFLAGS=-fPIC ./configure

# make CFLAGS=-fPIC

# make CFLAGS=-fPIC install

# tar xzvf gperftools-2.1.tar.gz

# cd gperftools-2.1

# ./configure

# make && make install

# echo "/usr/local/lib" > /etc/ld.so.conf.d/usr_local_lib.conf

# /sbin/ldconfig

5）编译安装Nginx：

# cd /usr/local/src

# tar xzvf nginx-1.6.2.tar.gz

# cd nginx-1.6.2

# vi auto/cc/gcc

# debug             # 注释掉这两行，关闭debug模式

# CFLAGS="$CFLAGS -g"

# ./configure --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_sub_module --with-http_stub_status_module

-----------------------------------------------------------------------------------------------

## 下面的配置方法是在物理机上启用TCMalloc来优化Nginx的性能

# ./configure --user=nginxphp --group=nginxphp --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-google_perftools_module --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module  --with-http_sub_module --with-http_stub_status_module

------------------------------------------------------------------------------------------------

（说明：--with-pcre指向的是pcre源码解压的目录）

# make

# make install

# vi /etc/profile

export PATH=/usr/local/nginx/sbin:$PATH

# source /etc/profile

# nginx -V

nginx version: nginx/1.6.2

built by gcc 4.4.7 20120313 (Red Hat 4.4.7-4) (GCC) 

TLS SNI support enabled

configure arguments: --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_sub_module --with-http_stub_status_module

6）为Google-Perftools TCMalloc添加线程目录，这步是配置启用TCMalloc功能的，如果没有启用TCMalloc就不用配置：

# mkdir /tmp/tcmalloc

# chmod 0777 /tmp/tcmalloc

7）修改Nginx配置文件，这步是配置启用TCMalloc功能的，如果没有启用TCMalloc就不用配置：

# vi /usr/local/nginx/conf/nginx.conf

user  nobody nobody;

#pid        logs/nginx.pid;

google_perftools_profiles /tmp/tcmalloc;

8）启动，停止，热重启Nginx服务：

# /usr/local/nginx/sbin/nginx

# ps -ef|grep nginx

root     30048     1  0 18:18 ?        00:00:00 nginx: master process /usr/local/nginx/sbin/nginx

nginxphp 30049 30048  0 18:18 ?        00:00:00 nginx: worker process

# lsof -n |grep tcmall

nginx     30049  nginxphp    9w      REG                8,3        0    2106703 /tmp/tcmalloc.30049

# kill -QUIT master_pid

# kill -QUIT ‘cat /usr/local/nginx/logs/nginx.pid’

# kill -HUP ‘cat /usr/local/nginx/logs/nginx.pid’

6）添加Nginx为系统服务：

# vi /etc/rc.d/init.d/nginx

#!/bin/bash

# nginx Startup script for the Nginx HTTP Server

# it is v.0.0.2 version.

# chkconfig: - 85 15

# description: Nginx is a high-performance web and proxy server.

# It has a lot of features, but it's not for everyone.

# processname: nginx

# pidfile: /var/run/nginx.pid

# config: /usr/local/nginx/conf/nginx.conf

nginxd=/usr/local/nginx/sbin/nginx

nginx_config=/usr/local/nginx/conf/nginx.conf

nginx_pid=/usr/local/nginx/logs/nginx.pid

RETVAL=0

prog="nginx"

# Source function library.

. /etc/rc.d/init.d/functions

# Source networking configuration.

. /etc/sysconfig/network

# Check that networking is up.

[ ${NETWORKING} = "no" ] && exit 0

[ -x $nginxd ] || exit 0

# Start nginx daemons functions.

start() {

  if [ -e $nginx_pid ];then

    echo "nginx already running...."

    exit 1

  fi

  echo -n $"Starting $prog: "

  daemon $nginxd -c ${nginx_config}

  RETVAL=$?

  echo

  [ $RETVAL = 0 ] && touch /var/lock/subsys/nginx

  return $RETVAL

}

# Stop nginx daemons functions.

stop() {

  echo -n $"Stopping $prog: "

  killproc $nginxd

  RETVAL=$?

  echo

  [ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /usr/local/nginx/logs/nginx.pid

}

reload() {

  echo -n $"Reloading $prog: "

  #kill -HUP `cat ${nginx_pid}`

  killproc $nginxd -HUP

  RETVAL=$?

  echo

}

# See how we were called.

case "$1" in

  start)

    start

    ;;

  stop)

    stop

    ;;

  reload)

    reload

    ;;

  restart)

    stop

    start

    ;;

  status)

    status $prog

    RETVAL=$?

    ;;

  *)

  echo $"Usage: $prog {start|stop|restart|reload|status|help}"

  exit 1

esac

exit $RETVAL

# chmod 775 /etc/rc.d/init.d/nginx

# chkconfig nginx on

# chkconfig --level 24 nginx off

3. 编译安装PHP (5.3版以后PHP-FPM已集成到PHP内核中) 并配置：

1）检查依赖的软件包，没有的要手动安装：

make  gcc  gcc-c++  libxml2  libxml2-devel  autoconf libjpeg-turbo

libjpeg-turbo-devel  libpng  libpng-devel  freetype  freetype-devel 

zlib  zlib-devel  glibc  glibc-devel  glib2  glib2-devel

# yum install libjpeg-turbo-devel

2）更新几个PHP依赖的软件源码包：

# cd /usr/local/src

# tar xzvf jpegsrc.v9.tar.gz

# cd jpeg-9

# ./configure --prefix=/usr/local/jpeg9 --enable-shared --enable-static

# make && make install

# tar xzvf libpng-1.6.17.tar.gz

# cd libpng-1.6.17

# ./configure --prefix=/usr/local/png --enable-shared

# make && make install

# tar xzvf freetype-2.5.5.tar.gz

# cd freetype-2.5.5

# ./configure --prefix=/usr/local/freetype --enable-shared

# make && make install

# tar xzvf libmcrypt-2.5.8.tar.gz

# cd libmcrypt-2.5.8

# ./configure --prefix=/usr/local/libmcrypt --enable-shared

# make && make install

# tar xzvf mhash-0.9.9.9.tar.gz

# cd mhash-0.9.9.9

# ./configure --prefix=/usr/local/mhash --enable-shared

# make && make install

-------------------------------------------------------------------------------

## 这个测试环境中没安装成功，以后有机会再测试

# tar xzvf mcrypt-2.6.8.tar.gz

# cd mcrypt-2.6.8

# ./configure --prefix=/usr/local/mcrypt

--with-libmcrypt-prefix=/usr/local/libmcrypt --enable-shared

--------------------------------------------------------------------------------------------

3）编译安装PHP及PHP-FPM：

# cd /usr/local/src

# tar xzvf php-5.5.23.tar.gz

# cd php-5.5.23

(说明：下面的编译方法是针对MySQL服务器在另外的服务器上)

# ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc

 --with-mysql=mysqlnd --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd 

 --with-jpeg-dir=/usr/local/jpeg9

 --with-png-dir=/usr/local/png --with-freetype-dir=/usr/local/freetype

 --with-mhash=/usr/local/mhash --with-mcrypt=/usr/local/libmcrypt --with-gd

 --with-iconv --with-zlib --with-openssl --with-xmlrpc --with-gettext --with-curl

 --without-pear --enable-fpm --enable-bcmath --enable-shmop --enable-sysvsem

 --enable-mbstring --enable-ftp --enable-gd-native-ttf --enable-pcntl

 --enable-sockets --enable-zip --enable-soap --enable-session --enable-xml

 --enable-inline-optimization --enable-mbregex

http://www.cnxct.com/some-errors-on-compile-php-5-3-8-with-pdo_mysql-and-mysqlnd/

(说明：PHP5.4及以上版本默认连接MySQL的驱动就是mysqlnd，不需要在编译时加with-mysql, with-mysqli, with-pdo-mysql编译参数也行)

(说明：这个编译方法是对MySQL在本机上，只在某些情况下使用，例如集成化的安装环境，数据库和应用服务器在一起安装)

# ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc

 --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config

 --with-mysql-sock=/tmp/mysqld.sock --with-jpeg-dir=/usr/local/jpeg9

 --with-png-dir=/usr/local/png --with-freetype-dir=/usr/local/freetype

 --with-mhash=/usr/local/mhash --with-mcrypt=/usr/local/libmcrypt --with-gd

 --with-iconv --with-zlib --with-openssl --with-xmlrpc --with-gettext --with-curl

 --without-pear --enable-fpm --enable-bcmath --enable-shmop --enable-sysvsem

 --enable-mbstring --enable-ftp --enable-gd-native-ttf --enable-pcntl

 --enable-sockets --enable-zip --enable-soap --enable-session --enable-xml

 --enable-inline-optimization --enable-mbregex

# make

# make install

4）配置PHP和PHP-FPM：

# cp /usr/local/src/php-5.5.23/php.ini-production

 /usr/local/php/etc/php.ini

# vi /usr/local/php/etc/php.ini

disable_functions =

passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,escapeshellcmd,dll,popen,disk_free_space,checkdnsrr,checkdnsrr,getservbyname,getservbyport,disk_total_space,posix_ctermid,posix_get_last_error,posix_getcwd, posix_getegid,posix_geteuid,posix_getgid, posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid, posix_getppid,posix_getpwnam,posix_getpwuid, posix_getrlimit, posix_getsid,posix_getuid,posix_isatty, posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid, posix_setpgid,posix_setsid,posix_setuid,posix_strerror,posix_times,posix_ttyname,posix_uname

(说明： 列出PHP可以禁用的函数，如果某些程序需要用到这个函数，可以删除，取消禁用)

date.timezone = PRC            -- 设置时区

expose_php = Off               -- 禁止显示PHP版本信息

short_open_tag = On            -- 支持PHP短标签 

# cp /usr/local/php/etc/php-fpm.conf.default

 /usr/local/php/etc/php-fpm.conf

# vi /usr/local/php/etc/php-fpm.conf

[global]

pid = run/php-fpm.pid

[www]

user = nobody

group = nobody

5）启动，停止PHP-FPM：

# /usr/local/php/sbin/php-fpm

6）配置PHP-FPM为系统服务：

# cp /usr/local/src/php-5.5.23/sapi/fpm/init.d.php-fpm

 /etc/init.d/php-fpm

# chmod +x /etc/init.d/php-fpm

# chkconfig php-fpm on

# chkconfig --level 24 php-fpm off

# service php-fpm start

4. 配置Nginx支持PHP：

user  nobody nobody;    -- 集成环境此用户名与组要和PHP-FPM的一样

http {

  server {

location / {

        root   html;

        index  index.php index.html index.htm;     -- 增加index.php

}

location ~ \.php$ {

    root          html;

    fastcgi_pass    127.0.0.1:9000;

    fastcgi_index   index.php;

    fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;

    include        fastcgi_params;

}

  }

}

(说明：SCRIPT_FILENAME后面的要改为$document_root或绝对路径)

# vi /usr/local/nginx/html/index.php

<?php

  Phpinfo();

?>

5. 在浏览器中访问：http://192.168.1.12，看到下面的信息，表示配置成功：

http://zyan.cc/nginx_php_v7/

http://www.linuxidc.com/Linux/2014-06/103266p2.htm

6. 配置PHP Memcached扩展：

1）下载源代码安装文件：

文件版本：memcache-2.2.7.tgz (稳定版)（比较旧的扩展，已不用）

下载地址：http://pecl.php.net/package/memcache

文件版本：libmemcached-1.0.18.tar.gz（比较新的扩展，使用这个）

下载地址：https://launchpad.net/libmemcached/+download

文件版本：memcached-2.2.0.tgz（配合上面的一起使用）

下载地址：http://pecl.php.net/package/memcached

## 可选的基于PHP5&Jquery的Memcached可视化管理监控工具

文件版本：memadmin-1.0.12.tar.gz

下载地址：http://www.junopen.com/memadmin/

------------------------------------------------------------------------------------------

2）安装PHP Memcache扩展（如果有比较旧的环境，可能用到这个）

# cd /usr/local/src

# tar xzvf memcache-2.2.7.tgz

# cd memcache-2.2.7

# /usr/local/php/bin/phpize

# ./configure --with-php-config=/usr/local/php/bin/php-config 

--enable-memcache

# make

# make install

Installing shared extensions:

/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/

--------------------------------------------------------------------------------------------

2）安装PHP Memcached扩展：

# cd /usr/local/src

# tar xzvf libmemcached-1.0.18.tar.gz

# cd libmemcached-1.0.18

# ./configure --prefix=/usr/local/libmemcached

# make

# make install

# tar xzvf memcached-2.2.0.tgz

# cd memcached-2.2.0

# /usr/local/php/bin/phpize

# ./configure --with-php-config=/usr/local/php/bin/php-config 

--with-libmemcached-dir=/usr/local/libmemcached --enable-memcached

# make

# make install

Installing shared extensions:

/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/

3）安装Memcached可视化管理监控工具，可选的：

# cd /usr/local/src

# tar xzvf memadmin-1.0.12.tar.gz

# mv memadmin /usr/local/nginx/html/

4）启用PHP 的Memcached动态扩展：

# vi /usr/local/php/etc/php.ini

extension=memcached.so

#extension=memcache.so

5）重加载PHP-FPM服务进程，使新添的Memcached动态扩展生效：

# service php-fpm reload

7. 配置PHP MongoDB扩展：

1）下载源代码安装文件：

文件版本：mongo-1.6.10.tgz (稳定版) 

下载地址：http://pecl.php.net/package/mongo

2）安装PHP MongoDB扩展：

# cd /usr/local/src

# tar xzvf mongo-1.6.10.tgz

# cd mongo-1.6.10

# /usr/local/php/bin/phpize

# ./configure --with-php-config=/usr/local/php/bin/php-config  --enable-mongo

# make

# make install

Installing shared extensions:

/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/

# ls /usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/

memcached.so  mongo.so  opcache.a  opcache.so

3）启用PHP 的MongoDB动态扩展：

# vi /usr/local/php/etc/php.ini

extension=mongo.so

4）重加载PHP-FPM服务进程，使新添的MongoDB动态扩展生效：

# service php-fpm reload