FreeBSD + Nginx 环境搭建教程

• 为什么要选择 FreeBSD?
• 为什么要选择 Nginx?
• 安装 FreeBSD7.2
• 获取相关开源软件包
• 安装 Mysql5.1.40
• 安装 Nginx
  安装 pcre8.00
  安装 Nginx0.8.24
• 安装 libxml2-2.7.6
• 安装 GD
  安装 zlib1.2.3
  安装 libpng1.2.40
  安装 jpeg7
  安装 freetype2.3.11
  安装 gd2.0.35
• 安装 PHP
  安装 libiconv1.13
  安装 php5.2.11(FastCGI模式)
  安装 ZendOptimizer3.3.9
• 测试
• 系统优化
• 防ddos攻击

1. Unix兼容性强
2. 速度快
3. 极其稳定、可靠
4. 强大的网络功能
5. 多用户、多任务
6. 使用方便(按照极好的说明文件操作)

• 英文版 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install.html
• 中文版 http://cnsnap.cn.freebsd.org/doc/zh_CN.GB2312/books/handbook/install.html

　　/  1024M  
　　swap 4096M
　　/var 10G
　　/usr 20G
　　/home 110G
　　/tmp 1024M  

　　sshd_enable="YES"  
　　named_enable="YES"

• 英文版 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
• 中文版 http://cnsnap.cn.freebsd.org/doc/zh_CN.GB2312/books/handbook/kernelconfig.html

安装 Mysql5.1.40

安装Nginx所需的pcre库

安装 Nginx0.8.24

创建 Nginx 日志目录

创建 Nginx 配置文件

user  www www;
worker_processes 8;

error_log  /var/log/nginx/error.log;
pid        /var/log/nginx/nginx.pid;

worker_rlimit_nofile 51200;
events {
  use kqueue;
  worker_connections 51200;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    server_names_hash_bucket_size 128;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;
    client_max_body_size 8m;

    sendfile        on;
    tcp_nopush     on;
    
    keepalive_timeout  30;
    
    tcp_nodelay on;

    fastcgi_connect_timeout 300;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 128k;

    gzip  on;
    gzip_min_length   1k; 
    gzip_buffers      4 16k; 
    gzip_http_version 1.1; 
    gzip_comp_level   2;
    gzip_types text/plain application/x-javascript text/css application/xml  
    gzip_vary on;
    
    server {
        listen       80;
        server_name  localhost;
        root   /home/excms;
        index  index.html index.htm index.php;

        location ~ \.php$ {
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }

        location /nginx_status {
            stub_status on;
            access_log   off;
        }
    }
}

#!/bin/sh

nginx=/usr/local/webserver/nginx/sbin/nginx
conf=/usr/local/webserver/nginx/conf/nginx.conf

case $1 in
       start)
              echo -n "Starting Nginx"
              $nginx -c $conf
              echo " done"
       ;;

       stop)
              echo -n "Stopping Nginx"
              killall -9 nginx
              echo " done"
       ;;

       test)
              $nginx -t -c $conf
       ;;

        reload)
              echo -n "Reloading Nginx"
              ps auxww | grep nginx | grep master | awk '{print $2}' | xargs kill -HUP
              echo " done"
       ;;

        restart)
                $nginx stop
                $nginx start
       ;;

       show)
              ps -aux|grep nginx
       ;;

       *)
              echo -n "Usage: $0 {start|restart|reload|stop|test|show}"
       ;;
        
esac

tar zxvf zlib-1.2.3.tar.gz
cd zlib-1.2.3
./configure
make && make install clean
cd ..

tar zxvf libpng-1.2.40.tar.gz
cd libpng-1.2.40
./configure
make && make install clean
cd ..

tar zxvf jpegsrc.v7.tar.gz
cd jpeg-7
./configure –prefix=/usr/local/jpeg7 -enable-shared -enable-static
make && make install clean
cd ..

tar zxvf freetype-2.3.11.tar.gz
cd freetype-2.3.11
./configure
make && make install clean
cd ..

tar zxvf gd-2.0.35.tar.gz
cd gd-2.0.35
./configure --prefix=/usr/local/gd2 --with-jpeg=/usr/local/jpeg7 --width-png --width-zlib --width-freetype
make && make install clean
cd ..

tar -zxvf libxml2-2.7.6.tar.gz
cd libxml2-2.7.6
./configure
make && make install clean
cd ..

编译安装PHP 5.2.11所需的支持库 libiconv

编译安装PHP（FastCGI模式）

安装 ZendOptimizer

tar zxvf ZendOptimizer-3.3.9-freebsd6.0-i386.tar.gz
cd ZendOptimizer-3.3.3-freebsd6.0-i386
ln -s /usr/lib/libc.so /usr/lib/libc.so.6 
ln -s /usr/lib/libcrypt.so /usr/lib/libcrypt.so.3 
ln -s /usr/lib/libutil.so /usr/lib/libutil.so.5 
ln -s /usr/lib/libm.so /usr/lib/libm.so.4 
./install-tty
cd ..

vi /usr/local/webserver/php/etc/php-fpm.conf

#! /bin/sh

php_fpm_BIN=/usr/local/webserver/php/bin/php-cgi
php_fpm_CONF=/usr/local/webserver/php/etc/php-fpm.conf
php_fpm_PID=/usr/local/webserver/php/logs/php-fpm.pid

php_opts="--fpm-config $php_fpm_CONF"

wait_for_pid () {
        try=0

        while test $try -lt 35 ; do

                case "$1" in
                        'created')
                        if [ -f "$2" ] ; then
                                try=''
                                break
                        fi
                        ;;

                        'removed')
                        if [ ! -f "$2" ] ; then
                                try=''
                                break
                        fi
                        ;;
                esac

                echo -n .
                try=`expr $try + 1`
                sleep 1

        done

}

case "$1" in
        start)
                echo -n "Starting php_fpm "

                $php_fpm_BIN --fpm $php_opts

                if [ "$?" != 0 ] ; then
                        echo " failed"
                        exit 1
                fi

                wait_for_pid created $php_fpm_PID

                if [ -n "$try" ] ; then
                        echo " failed"
                        exit 1
                else
                        echo " done"
                fi
        ;;

        stop)
                echo -n "Shutting down php_fpm "

                if [ ! -r $php_fpm_PID ] ; then
                        echo "warning, no pid file found - php-fpm is not running ?"
                        exit 1
                fi

                kill -TERM `cat $php_fpm_PID`

                wait_for_pid removed $php_fpm_PID

                if [ -n "$try" ] ; then
                        echo " failed"
                        exit 1
                else
                        echo " done"
                fi
        ;;

        quit)
                echo -n "Gracefully shutting down php_fpm "

                if [ ! -r $php_fpm_PID ] ; then
                        echo "warning, no pid file found - php-fpm is not running ?"
                        exit 1
                fi

                kill -QUIT `cat $php_fpm_PID`

                wait_for_pid removed $php_fpm_PID

                if [ -n "$try" ] ; then
                        echo " failed"
                        exit 1
                else
                        echo " done"
                fi
        ;;

        restart)
                $0 stop
                $0 start
        ;;

        reload)

                echo -n "Reload service php-fpm "

                if [ ! -r $php_fpm_PID ] ; then
                        echo "warning, no pid file found - php-fpm is not running ?"
                        exit 1
                fi

                kill -USR2 `cat $php_fpm_PID`

                echo " done"
        ;;

        logrotate)

                echo -n "Re-opening php-fpm log file "

                if [ ! -r $php_fpm_PID ] ; then
                        echo "warning, no pid file found - php-fpm is not running ?"
                        exit 1
                fi

                kill -USR1 `cat $php_fpm_PID`

                echo " done"
        ;;

        *)
                echo "Usage: $0 {start|stop|quit|restart|reload|logrotate}"
                exit 1
        ;;

esac

<?
    phpinfo();
    ?>

kern.dfldsiz="2147483648"             # Set the initial data size limit
kern.maxdsiz="2147483648"               # Set the max data size
kern.ipc.nmbclusters="0"                        # Set the number of mbuf clusters
kern.ipc.nsfbufs="66560"                        # Set the number of sendfile(2) bufs

sysctl kern.ipc.maxsockets=100000             ##增加并发的socket，对于ddos很有用
sysctl kern.ipc.somaxconn=65535         ##打开文件数
sysctl net.inet.tcp.msl=2500                    ##timeout时间