nginx config

#运行用户
user nobody nobody;
#启动进程,通常设置成和cpu的数量相等
worker_processes  4;
#全局错误日志及PID文件
#error_log  /www/nginx/logs/nginx_debug.log  debug_http  ;
#error_log  /www/nginx/logs/nginx_crit.log  crit ;
error_log  /www/nginx/logs/nginx_error.log error ;
pid         /var/run/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 102400;
#工作模式及连接数上限
events
{
 use epoll;
#单个后台worker process进程的最大并发链接数 
 worker_connections 102400;
# 并发总数是 worker_processes 和 worker_connections 的乘积
    # 即 max_clients = worker_processes * worker_connections
    # 在设置了反向代理的情况下，max_clients = worker_processes * worker_connections / 4  为什么
    # 为什么上面反向代理要除以4，应该说是一个经验值
    # 根据以上条件，正常情况下的Nginx Server可以应付的最大连接数为：4 * 8000 = 32000
    # worker_connections 值的设置跟物理内存大小有关
    # 因为并发受IO约束，max_clients的值须小于系统可以打开的最大文件数
    # 而系统可以打开的最大文件数和内存大小成正比，一般1GB内存的机器上可以打开的文件数大约是10万左右
    # 所以，worker_connections 的值需根据 worker_processes 进程数目和系统可以打开的最大文件总数进行适当地进行设置
    # 使得并发总数小于操作系统可以打开的最大文件数目
    # 其实质也就是根据主机的物理CPU和内存进行配置
    # 当然，理论上的并发总数可能会和实际有所偏差，因为主机还有其他的工作进程需要消耗系统资源。
}
http
{
#设定mime类型,类型由mime.type文件定义
 include       mime.types;
 default_type  application/octet-stream;
 server_names_hash_bucket_size 512;
 client_header_buffer_size 32k;
 large_client_header_buffers 8 32k;
 # 根据自己程序性质决定这块大小 如果存在大的body对象进行数据接收适当调整
 client_max_body_size 10m;
 client_body_buffer_size 128k;
 client_body_temp_path  /opt/nginx/client_temp 1 2;
 # 开启sendfile函数调用 一般开启
 sendfile on;
 tcp_nopush     on;
 keepalive_timeout 10;
 tcp_nodelay on;
 server_tokens off;
 server_name_in_redirect off;
 index index.html index.htm index.jsp;
 add_header X-UA-Compatible "IE=EmulateIE7";
 #add_header X-Cache '$upstream_cache_status from <%= fqdn %>';
 ####### begin gzip #######
 gzip on;
 gzip_min_length  20;
 gzip_buffers     16 32K;
 gzip_http_version 1.0;
 gzip_proxied any;
 gzip_comp_level 9;
 gzip_types      text/plain text/css application/javascript text/xml text/javascript application/x-javascript application/json 'application/json; charset=utf-8';
 gzip_vary on;
 ####### end gzip #######
 ####### start fastcgi #######
  fastcgi_connect_timeout 300;
  fastcgi_send_timeout 300;
  fastcgi_read_timeout 300;
  fastcgi_buffer_size 128k;
  fastcgi_buffers 8 128k;
 ####### end fastcgi #######
####### begin proxy #######
 proxy_redirect off;
 proxy_connect_timeout 60;
 proxy_send_timeout 120;
 proxy_read_timeout 120;
 proxy_headers_hash_max_size 5120;
 proxy_headers_hash_bucket_size 640;
 proxy_buffer_size 64k;
 proxy_buffers 32 64k;
 proxy_busy_buffers_size 64k;
 proxy_temp_path /opt/nginx/proxy_temp_dir;
 proxy_cache_path /opt/nginx/proxy_cache_dir levels=1:2 keys_zone=cache_one:50m inactive=1m max_size=2g;
 proxy_pass_header  Set-Cookie;
 proxy_set_header Host $host;
 #proxy_set_header  Cdn-Src-Ip  $clientip;
 #proxy_set_header  X-Real-IP  $remote_addr;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_next_upstream error timeout http_500 http_502 http_503 http_504;
 ####### end proxy #######
 ####### begin temp log #######
 log_format  access '$remote_addr $time_local "$request" '
                    '"$status" $body_bytes_sent "$http_referer" '
                    '$proxy_add_x_forwarded_for $upstream_addr '
                    '$upstream_response_time $request_time ';
####### end temp log #######
 ######## begin cluster #######
include /usr/local/nginx/conf/cluster/*.conf;
 ######## end cluster #######
 server
 {
   listen       127.0.0.1:80;
   listen       127.0.0.1:443 ssl;
   server_name <%= fqdn %>;
    ssl_certificate   /usr/local/nginx/cert/xx.pem;
    ssl_certificate_key  /usr/local/nginx/cert/xx.key;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
    ssl_prefer_server_ciphers on;
   location ^~ /nginx_status {
    stub_status on;
    allow 10.1.1.0/24;
    deny all;
   }
  }
  access_log   off;
  include /usr/local/nginx/conf/include/*.conf;
}