生产配置示例

生产配置示例

1. nginx.conf

user  www-data;

worker_processes  auto;
worker_rlimit_nofile 65535;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {
    worker_connections  4096;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$http_x_forwarded_for - $remote_addr - $remote_user '
    #                  '[$time_local] "$request" $status $body_bytes_sent '
    #                  '"$http_referer" "$http_user_agent"'
    #                  '"$http_x_forwarded_for" $request_time';

    #access_log  /var/log/nginx/access.log  main;
    ## LOG ##
    log_format  main  '$upstream_response_time $remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" "$request_time"';

    log_format json '{"@timestamp":"$time_iso8601",'
                     '"department":"devops",'
                     '"type":"prod_america_nginx",'
                     '"@version":"1",'
                     '"host":"$server_addr",'
                     '"client":"$remote_addr",'
                     '"real-client":"$http_x_forwarded_for",'
                     '"auth_user":"$remote_user",'
                     '"request":"$request",'
                     '"method":"$request_method",'
                     '"port":"$server_port",'
                     '"size":$body_bytes_sent,'
                     '"responsetime":$request_time,'
                     '"domain":"$host",'
                     '"UserAgent":"$http_user_agent",'
                     '"url":"$uri",'
                     '"status":"$status"}';


        <!--log_format logstash_json '{ "@timestamp": "$time_iso8601", '-->
        <!--'"remote_addr": "$remote_addr", '-->
        <!--'"referer": "$http_referer", '-->
        <!--'"request": "$request", '-->
        <!--'"status": $status, '-->
        <!--'"bytes":$body_bytes_sent, '-->
        <!--'"agent": "$http_user_agent", '-->
        <!--'"x_forwarded": "$http_x_forwarded_for", '-->
        <!--'"upstr_addr": "$upstream_addr",'-->
        <!--'"upstr_host": "$upstream_http_host",'-->
        <!--'"ups_resp_time": "$upstream_response_time" }';-->

    access_log   /data/logs/nginx/access_json.log   json;
    error_log    /data/logs/nginx/error.log   warn;

    ssi on;
    ssi_silent_errors off;

    server_tokens   off;

    sendfile        on;
    tcp_nopush      on;
    tcp_nodelay     on;

    client_max_body_size 8M;
    client_body_buffer_size 128k;

    keepalive_timeout  65;

    gzip on;
    gzip_min_length 10k;
    gzip_comp_level 3;
    gzip_types text/plain text/css application/javascript application/json
               application/xml application/xhtml+xml text/csv;

    include /etc/nginx/conf.d/*.conf;
}

2. redirect-all-to-https.conf

server {
    listen 80  default_server;
    listen 443 default_server;
    server_name _;

    access_log /var/log/nginx/redirect-all-to-https.access.log main;
    error_log /var/log/nginx/redirect-all-to-https.error.log warn;

    return 302 https://$host$request_uri;
}

3. upstream

####################
#  数据挖掘
####################
upstream wecash_mining_apis {
    server 10.40.58.116:8080 max_fails=2 fail_timeout=30s;
}
upstream wecash_mining_router {
    server 10.40.58.114:8080 max_fails=2 fail_timeout=30s;
}
upstream wecash_restful_apis {
    server 10.40.58.115:8081 max_fails=2 fail_timeout=30s;
    server 10.40.61.93:8081  max_fails=2 fail_timeout=30s;
}

4. Server段

server {
    listen       8081;
    server_name  10.40.61.75;
    aio threads=default;
    client_max_body_size    2048m;
    access_log  logs/wecash_mining.access.log main;
    error_log  logs/wecash_mining.error.log  error;
    location ~ ^/v1/(sms|employer) {
       proxy_next_upstream error timeout http_503 http_502 http_504;
       proxy_pass http://wecash_mining_apis;
       proxy_set_header X-Forwarded-For $http_x_forwarded_for;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header Host $http_host;
    }
    location ~ ^/api/v1/dispatch {
        proxy_next_upstream error timeout http_503 http_502 http_504;
        proxy_pass http://wecash_mining_router;
        proxy_set_header X-Forwarded-For $http_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
    }
    location ~ ^/api/v1/(phone_book|segmentation|apply_info|lastest_company|fund|credit_report|social_security|simple_operator|phone_tag) {
        proxy_next_upstream error timeout http_503 http_502 http_504;
        proxy_pass http://wecash_restful_apis;
        proxy_set_header X-Forwarded-For $http_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
    }
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }
}