为Tornado配置Nginx反向代理

Tornado的确很给力，知乎、Facebook一直在用。不过Tornado也有自己的局限性，比如它就没有实现完整的HTTP协议，甚至一些REST方法都不支持。不过这也难为它了，本来就是一个Web Framework顺便兼职干一点Web Server的事情而已，有就不错了。好在Tornado现在有了好伙伴Nginx，像HTTPS，负载均衡，静态文件这种破事都可以交给Nginx去处理了。

下载

从源代码编译安装Nginx需要处理一些依赖
Nginx官网
PCRE官网
ZLib官网
下载好之后解压至同一根目录下。

编译

1. $ ./configure
2. --sbin-path=/usr/local/nginx/nginx
3. --conf-path=/usr/local/nginx/nginx.conf
4. --pid-path=/usr/local/nginx/nginx.pid
5. --with-http_ssl_module
6. --with-pcre=../pcre-8.38
7. --with-zlib=../zlib-1.2.8
8. --with-openssl=../openssl-1.0.2g
10. #上面只是为了好看....
11. $ ./configure --sbin-path=/usr/local/nginx/nginx --conf-path=/usr/local/nginx/nginx.conf --pid-path=/usr/local/nginx/nginx.pid --with-http_ssl_module --with-pcre=../pcre-8.38 --with-zlib=../zlib-1.2.8 --with-openssl=../openssl-1.0.2g
13. $ make -j8 && sudo make install

需要注意的是，Mac下和Linux下默认生成的目录是不一样的。
nginx运行一般要求root权限。
nginx命令行参数相当简单，因为功夫全在配置文件里了……。

1. #启动Nginx实例
2. $ nginx
3. #使用指定的配置文件启动nginx
4. $ nginx -c <conf_file>
5. #向Nginx发出信号
6. $ nginx -s [stop| quit| reopen| reload]

Mac下的Nginx配置

1. user nobody nobody;
2. worker_processes 1;
4. error_log /var/log/nginx/error.log;
5. pid /var/run/nginx.pid;
7. events {
8. worker_connections 1024;
9. use kqueue;
10. }
12. http {
13. # Enumerate all the Tornado servers here
14. upstream frontends {
15. server 127.0.0.1:8888;
16. }
18. include /usr/local/nginx/conf/mime.types;
19. default_type application/octet-stream;
21. access_log /var/log/nginx/access.log;
23. keepalive_timeout 65;
24. proxy_read_timeout 200;
25. sendfile on;
26. tcp_nopush on;
27. tcp_nodelay on;
28. gzip on;
29. gzip_min_length 1000;
30. gzip_proxied any;
32. # Only retry if there was a communication error, not a timeout
33. # on the Tornado server (to avoid propagating "queries of death"
34. # to all frontends)
35. proxy_next_upstream error;
37. server {
38. listen 80;
40. # Allow file uploads
41. client_max_body_size 50M;
43. location ^~ /static/ {
44. root /Volumes/Data/vserver;
45. if ($query_string) {
46. expires max;
47. }
48. }
50. location ^~ /upload/ {
51. root /Volumes/Data/vserver;
52. if ($query_string) {
53. expires max;
54. }
55. }
56. location = /favicon.ico {
57. access_log off;
58. rewrite (.*) /static/other/favicon.ico;
59. }
61. location = /robots.txt {
62. rewrite (.*) /static/other/robots.txt;
63. }
65. # Ali heartbeat dectection
66. location = /status.taobao {
67. access_log off;
68. rewrite (.*) /static/other/status.taobao;
69. }
71. location / {
72. proxy_pass_header Server;
73. proxy_set_header Host $http_host;
74. proxy_redirect off;
75. proxy_set_header X-Real-IP $remote_addr;
76. proxy_set_header X-Scheme $scheme;
77. proxy_pass http://frontends;
78. }
79. }
80. }

Linux下Nginx的配置

1. # user nobody nobody;
2. worker_processes 1;
4. #error_log /var/log/nginx/error.log;
5. #pid /var/run/nginx.pid;
7. events {
8. worker_connections 1024;
9. }
11. http {
12. # Enumerate all the Tornado servers here
13. upstream frontends {
14. server 127.0.0.1:8888;
15. }
17. include /usr/local/nginx/mime.types;
18. default_type application/octet-stream;
20. #access_log /var/log/nginx/access.log;
22. keepalive_timeout 65;
23. proxy_read_timeout 200;
24. sendfile on;
25. tcp_nopush on;
26. tcp_nodelay on;
27. gzip on;
28. gzip_min_length 1000;
29. gzip_proxied any;
31. # Only retry if there was a communication error, not a timeout
32. # on the Tornado server (to avoid propagating "queries of death"
33. # to all frontends)
34. proxy_next_upstream error;
36. server {
37. listen 80;
39. # Allow file uploads
40. client_max_body_size 50M;
42. location ^~ /static/ {
43. root /home/vonng/vserver;
44. if ($query_string) {
45. expires max;
46. }
47. }
49. location ^~ /upload/ {
50. root /home/vonng/vserver;
51. if ($query_string) {
52. expires max;
53. }
54. }
55. location = /favicon.ico {
56. access_log off;
57. rewrite (.*) /static/other/favicon.ico;
58. }
60. location = /robots.txt {
61. rewrite (.*) /static/other/robots.txt;
62. }
64. # Ali heartbeat dectection
65. location = /status.taobao {
66. access_log off;
67. rewrite (.*) /static/other/status.taobao;
68. }
70. location / {
71. proxy_pass_header Server;
72. proxy_set_header Host $http_host;
73. proxy_redirect off;
74. proxy_set_header X-Real-IP $remote_addr;
75. proxy_set_header X-Scheme $scheme;
76. proxy_pass http://frontends;
77. }
78. }
79. }