Nginx負載均衡健康檢查性能提升

更新時間：2023年10月27日 09:55:27 作者：ChengKe_dawn

這篇文章主要為大家介紹了Nginx負載均衡健康檢查性能提升,有需要的朋友可以借鑒參考下,希望能夠有所幫助,祝大家多多進步,早日升職加薪

前言

在Nginx官方模塊提供的模塊中，沒有對負載均衡后端節(jié)點的健康檢查模塊但可以使用第三方模塊 nginx_upstream_check_module 來檢測后端服務(wù)器的健康狀態(tài)。我安裝Nginx的方式，是通過 yum 安裝的，通過 yum 安裝的沒有 nginx_upstream_check_module 這個模塊，所以我們需要先給 Nginx 把這個模塊安裝好。

如果你已經(jīng)yum安裝過Nginx，那么建議最好是先 yum remove nginx 卸載一下，暫時沒有找到找能不卸載然后給Nginx配置這個模塊的辦法。

安裝配置

安裝依賴包

yum -y install gcc glibc gcc-c++ openssl-devel pcre-devel patch

下載nginx源碼包和nginx_upstream_check模塊第三方模塊

Nginx官方地址

cd /usr/local
wget https://nginx.org/download/nginx-1.21.4.tar.gz
wget https://github.com/yaoweibin/nginx_upstream_check_module/archive/refs/heads/master.zip

該第三方模塊在 github 上的地址為：可以去查看，也給出了配置的示例，很詳細。地址

解壓Nginx源碼包和第三方模塊

tar -zxvf nginx-1.21.4.tar.gz
unzip nginx_upstream_check_module-master.zip

添加Nginx模塊

cd nginx-1.21.4/
patch -p1 &lt; ../nginx_upstream_check_module-master/check_1.20.1+.patch

p1代表在Nginx目錄，p0是不在Nginx目錄

編譯Nginx，需要添加upstream_check第三方模塊

通過 nginx -V 查看

將以上內(nèi)容復(fù)制下來

重新編譯的時候加上 --add-module=/usr/local/nginx_patch/nginx_upstream_check_module-master。模塊地址就是你下載 nginx_upstream_check_module 到本地的地址。(但是有時候nginx -v會失敗，但是不會又太大影響，直接復(fù)制下面的命令也是可以的)

./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --add-module=/usr/local/nginx_patch/nginx_upstream_check_module-master --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -pie'

編譯安裝

make && make install

啟動NGINX（防止因為報錯為啟動成功）

suho /usr/sbin/nginx

此時可能會報錯沒有發(fā)現(xiàn)某個文件夾，但是不影響，你去對應(yīng)的目錄創(chuàng)建一個即可

nginx -t 檢查nginx配置是否正確
nginx -s reload 重新加載配置文件

博主的nginx.conf配置(其實建議最好的每個站點的配置文件獨立開,但是我偷懶了并沒有)

注意，這配置文件通用性比較高，但是也是需要依賴自己的需求修改部分配置，博主是在兩臺服務(wù)器之間進行搭建的兩臺NGINX，雙方進行心跳檢測，ip為內(nèi)網(wǎng)和彈性兩個，10.75.25.207對應(yīng)的內(nèi)網(wǎng)是10.75.28.14

# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/
user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    map $time_iso8601 $logdate {
    '~^(?<ymd>\d{4}-\d{2}-\d{2})' $ymd;
    default    'date-not-found';
    }
send_timeout 30;
    client_body_buffer_size 40m;
    proxy_buffer_size 128k; 
    proxy_buffers 4 128k; 
    proxy_busy_buffers_size 128k;
    # access_log /var/log/nginx/access.log main;
    access_log  /var/log/nginx/access-$logdate.log main;
    server_tokens off;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /usr/local/nginx/conf/mime.types;
    default_type        application/octet-stream;
    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    server {
        listen       80;
        #listen 443 ssl http2;
        server_name  10.75.28.14 10.75.25.207;
        index  index.html;
        root /data/wwwroot/paizhu/dist/;
        gzip on; 
        gzip_buffers 32 4K; 
        gzip_comp_level 6; 
        gzip_min_length 200;
        # access_log /var/log/nginx/host.access_.log main; 
        gzip_types application/javascript text/css text/xml; 
        gzip_disable "MSIE [1-6]\."; 
        #配置禁用gzip條件，支持正則。此處表示ie6及以下不啟用gzip（因為ie低版本不支持）
        gzip_vary on;
        #SSL-END
        location /status {
            check_status;
            access_log   off;
        }
        location /file {
            alias /data/wwwroot/upload;
            try_files $uri @mongrel;
        }
        location @mongrel {
            if ($http_lan_check = "1") {
                return 404;
            }
            proxy_pass http://10.75.28.37:80;
            proxy_set_header lan-check "1";
        }
        location /oss {
            rewrite ^/oss(.*)$ /$1 break;
            proxy_pass http://szpzjdgzglxt.oss111b-cn-sx-zjsxzwy01-d01-a.inner.zjsxzwy.cn/;
            #proxy_set_header Host $host; OSS的反向代理，需要去掉來源地址，政務(wù)云是這樣
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header Upgrade $http_upgrade;
            proxy_http_version 1.1;
            add_header X-Cache $upstream_cache_status;
        }
        location /manage {
            proxy_pass http://manage;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header Upgrade $http_upgrade;
            #proxy_set_header Connection $connection_upgrade;
            proxy_http_version 1.1;
            # proxy_hide_header Upgrade;
            add_header X-Cache $upstream_cache_status;
            #Set Nginx Cache
            set $static_fileyb8cQBoU 0;
            if ( $uri ~* "\.(gif|png|jpg|css|js|woff|woff2)$" )
            {
                set $static_fileyb8cQBoU 1;
                expires 1m;
            }
            if ( $static_fileyb8cQBoU = 0 )
            {
                add_header Cache-Control no-cache;
            }
        }
        #error_page  404              /404.html;
        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
    upstream manage {
        least_conn;
        server 10.75.28.14:500 weight=1 max_fails=2 fail_timeout=10s; # 服務(wù)實例1
        server 10.75.28.14:501 weight=1 max_fails=2 fail_timeout=10s; # 服務(wù)實例2
        server 10.75.28.37:500 weight=1 max_fails=2 fail_timeout=10s; # 服務(wù)實例3
        server 10.75.28.37:501 weight=1 max_fails=2 fail_timeout=10s; # 服務(wù)實例4
        check interval=3000 rise=2 fall=5 timeout=1000 type=http;
        check_http_send "GET /manage/heartbeat HTTP/1.0\r\n\r\n";
        check_http_expect_alive http_2xx http_3xx;
    }
}