Nginx.conf configuration file analysis

PS: I have been using Nginx for two or three years. Now I often encounter new users asking some very basic questions. I don’t have time to answer them one by one. I spent some time this afternoon and combined my own experience in using Nginx. I would like to share the description of the main configuration parameters, and also refer to some network content. This article is currently the most complete Chinese description of Nginx configuration parameters. For more detailed module parameters, please refer to: http://wiki.nginx.org/Main

<br>#Define the user and user group for Nginx running<br>user www www;

#nginx process number, it is recommended to set Is equal to the total number of CPU cores.
worker_processes 8;

#Global error log definition type, [ debug | info | notice | warn | error | crit ]
error_log /var/log/nginx/error.log info;

#Process file
pid /var/ run/nginx.pid;

#The maximum number of file descriptors opened by an nginx process. The theoretical value should be the maximum number of open files (system value ulimit -n) divided by the number of nginx processes, but nginx allocation requests are not uniform. , so it is recommended to keep the value consistent with ulimit -n.
worker_rlimit_nofile 65535;

#Working mode and maximum number of connections
events
{
#Reference event model, use [ kqueue | rtsig | epoll | /dev/poll | select | poll ]; The epoll model is in the Linux kernel version 2.6 or above High-performance network I/O model, if running on FreeBSD, use the kqueue model.
use epoll;
#Maximum number of connections for a single process (maximum number of connections = number of connections * number of processes)
worker_connections 65535;
}

#Set http server
http
{
include mime.types; #File extension Name and file type mapping table
default_type application/octet-stream; #Default file type
#charset utf-8; #Default encoding
server_names_hash_bucket_size 128; #Hash table size of server name
client_header_buffer_size 32k; #Upload file size limit
large_client_header_buffers 4 64k; #Set request buffer
client_max_body_size 8m; #Set request buffer
sendfile on; #Enable efficient file transfer mode. The sendfile instruction specifies whether nginx calls the sendfile function to output files. For ordinary applications, set it to on. If used For disk IO heavy load applications such as downloading, it can be set to off to balance disk and network I/O processing speeds and reduce system load. Note: If the image does not display properly, change this to off.
autoindex on; #Enable directory list access, suitable for downloading servers, closed by default.
tcp_nopush on; #Prevent network blocking
tcp_nodelay on; #Prevent network blocking
keepalive_timeout 120; #Long connection timeout, in seconds

#FastCGI related parameters are to improve the performance of the website: reduce resource usage and increase access speed. The following parameters can be understood literally.
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write _size 128k;

#gzip module settings
gzip on; #Turn on gzip compression output
gzip_min_length 1k; #Minimum Compressed file size
gzip_buffers 4 16k; #Compression buffer
gzip_http_version 1.0; #Compression version (default 1.1, if the front end is squid2.5, please use 1.0)
gzip_comp_level 2; #Compression level
gzip_types text/plain application/x-javascript text/css application/xml;
#Compression type already includes text/html by default, so there is no need to write it below. There will be no problem when writing it, but there will be a warning.
gzip_vary on;
#limit_zone crawler $binary_remote_addr 10m; #You need to use it when you enable the limit on the number of IP connections

upstream blog.ha97.com {
#Upstream load balancing, weight is the weight, and the weight can be defined according to the machine configuration. The weigth parameter represents the weight. The higher the weight, the greater the probability of being assigned.
server 192.168.80.121:80 weight=3;
server 192.168.80.122:80 weight=2;
server 192.168.80.123:80 weight=3;
}

#Virtual host configuration
server
{
#Listening port
listen 80;
#You can have multiple domain names, separated by spaces
server_name www.ha97.com ha97.com;
index index.html index.htm index.php;
root /data/www/ha97;
location ~ .*.(php|php5)?$
{
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi.conf;
}
#Image cache time setting
location ~ .*.(gif| jpg|jpeg|png|bmp|swf)$
{
expires 10d;
}
#JS and CSS cache time settings
location ~ .*.(js|css)?$
{
expires 1h;
}
# Log format setting
log_format access '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $http_x_forwarded_for';
#Define the access log of this virtual host
access_log /var/ log/nginx/ha97access.log access;

#Enable reverse proxy for "/"
location / {
proxy_pass http://127.0.0.1:88;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
#The backend web server can pass X- Forwarded-For Get the user's real IP
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#The following are some reverse proxy configurations, optional.
proxy_set_header Host $host;
client_max_body_size 10m; #The maximum number of bytes of a single file allowed to be requested by the client
client_body_buffer_size 128k; #The maximum number of bytes requested by the buffer proxy buffering client,
proxy_connect_timeout 90; #nginx and back-end server Connection timeout (proxy connection timeout)
proxy_send_timeout 90; #Backend server data return time (proxy send timeout)
proxy_read_timeout 90; #After successful connection, backend server response time (proxy receive timeout)
proxy_buffer_size 4k; #Settings The buffer size of the proxy server (nginx) to save user header information
proxy_buffers 4 32k; #proxy_buffers buffer, the average setting of the web page is below 32k
proxy_busy_buffers_size 64k; #Buffer size under high load (proxy_buffers*2)
proxy_temp_file_write_size 64k;
#Set the cache folder size. If it is larger than this value, it will be transmitted from the upstream server
}

#Set the address to view Nginx status
location /NginxStatus {
stub_status on;
access_log on;
auth_basic "NginxStatus";
auth_basic_user_file conf/htpasswd;
#htpasswd file content can be generated using the htpasswd tool provided by apache.
}

#Local dynamic and static separation reverse proxy configuration<br>#All jsp pages are processed by tomcat or resin<br>location ~ .(jsp|jspx|do)?$ {<br>proxy_set_header Host $host;<br>proxy_set_header X- Real-IP $remote_addr;<br>proxy_set_header .(htm|html|gif|jpg|jpeg|png|bmp|swf|ioc|rar|zip|txt|flv|mid|doc|ppt|pdf|xls|mp3|wma)$<br>{ expires 15d; }<br> location ~ .*.(js|css)?$<br>{ expires 1h; }<br>}<br>}<br><br><br>For more detailed module parameters, please refer to: http://wiki.nginx.org/Main<br><br>Permanent link: http://www.ha97.com/5194.html