Virnish使用
缓存基础原理
程序具有局部性
时间局部性
空间局部性
key-value 形式存储数据
key 访问路径、URL、hash
value web content
命中率 hit/(hit+miss)
文档命中率
从文档个数进行衡量
字节命中率
内容大小进行衡量
缓存对象
定期清理缓存
可缓存对象，缓存空间耗尽时
会发生缺页，发生页面置换，使用LRU(最近最少使用)
不可缓存对象
例如：用户私有数据等
缓存处理步骤
接收请求 ---> 解析请求（提取请求的URL及各种首部）---> 查询缓存 ---> 新鲜度检测 ---> 创建响应报文 ---> 发送响应报文 ---> 记录日志
新鲜度检测机制
过期时限
HTTP/1.0 Expires
Expires: expires: Fri, 07 Apr 2028 14:16:45 GMT
HTTP/1.1 Cache-Control
cache-control: max-age=315360000
有效性在验证 revalidate
如果原始内容为改变，则响应首部（不附带body部分），响应吗304 Not Modified
如果原始内容未发生改变，则正常响应，响应吗200
如果原始内容消失，则响应404，此时浏览器缓存中的cache object也应该被删除
条件式请求首部
If-Modified-Since
常用，基于请求内容的时间戳做验证
If-Unmodified-Since
If-Match
If-None-Match
Etag：fsahfi56435
如果Etag存在返回false，否则返回true，并带上请求内容
具体缓存参数
缓存参数解析
vanish基础了解
常见的缓存服务器开源解决方案
varnish
squid
官方站点
https://www.varnish-cache.org
varnish架构
Managerment
Command line
CLI interface
Telnet interface
Web interface
Initialization varnish CLI API
monitoring/mgmt Childs program
Managerment --> VCL complier --> C complier --> share object --> Child/cache
Child/cache
Command line 命令行接口 Storage/hashing hash 存储缓存对象 Log/stats 记录日志/统计各种数据 Acceptor 接收用户请求线程 Backend communication 如果缓存服务器没有请求内容，那么该缓存服务器会扮演客户端角色向后端服务器请求资源 Worker threads 工作线程，处理用户请求 Object expire 清理缓存中的过期对象
Log file
varnishlog 缓存对象日志 varnishstat 缓存对象状态 varnishhist CLI命令缓存 varnishtop 缓存对象排名 varnishncsa comment日志 # 共享内存日志大小一般默认为90MB # 分为两部分前一部分为计数器，后一部分请求相关的数据 # Log file的内存空间对于各Child是共享的 # 对于内存中log日志如果存储满了Child会从头开始覆盖原先内容 # 所以必须要有程序能定时读取内存中log，最好是以守护进程方式一直运行
DSL
vcl （Varnish Configuration Language）
varnish配置语言
缓存策略配置接口
基于“域”的简单编程语言
核心依赖包
# jemalloc第一次在2005年作为FreeBSD libc分配器使用，从那以后它就找到了它。许多应用程序依赖于其可预测的行为。 # 2010年jemalloc开发工作扩展到包括开发人员支持特性。例如堆分析和广泛的监视/调优钩子。现代jemalloc发行版将继续集成到FreeBSD中，因此具有通用性 # 高效的内存分配回收 Installed Packages Name : jemalloc Arch : x86_64 Version : 3.6.0 Release : 1.el7 Size : 317 k Repo : installed From repo : epel Summary : General-purpose scalable concurrent malloc implementation URL : http://www.canonware.com/jemalloc/ License : BSD Description : General-purpose scalable concurrent malloc(3) implementation. : This distribution is the stand-alone "portable" implementation of jemalloc.
软件包分析
/etc/varnish/default.vcl 主配置文件
/etc/varnish/varnish.params 各种环境变量，定义缓存工作机制
varnish 存储缓存方式
file
单个文件存储，不持久
性能提升不明显
*** varnish服务器不能随便重启，一但重启所有缓存对象将失效
malloc
基于内存缓存，不建议使用太大的空间，如果时间长了，缓存对象过期被删除，会留下很对内存碎片
persistent
基于文件的持久存储
配置varnish运行机制
varnish应用程序的命令行参数
监听的socket，使用的存储类型 ...
-p param = value 配置child子进程相关参数
-r param, param ... 设定只读参数列表
运行时参数
-p 选项指定
可以在程序运行中，通过CLI进行配置
vcl
配置缓存系统的缓存机制，通过vcl配置文件进行配置
/etc/varnish/varnish.params
需要先编译后应用，依赖C编译器
主配置文件分析及命令查看
man varnishd vim /etc/varnish/varnish.params # 指定varnish配置文件读取路劲 VARNISH_VCL_CONF=/etc/varnish/default.vcl # 指定监听端口 VARNISH_LISTEN_PORT=6081 # 指定管理IP VARNISH_ADMIN_LISTEN_ADDRESS=127.0.0.1 # 指定管理端口 VARNISH_ADMIN_LISTEN_PORT=6082 # 密钥文件 VARNISH_SECRET_FILE=/etc/varnish/secret # 存储机制 VARNISH_STORAGE="file,/var/lib/varnish/varnish_storage.bin,1G" # VARNISH_STORAGE="malloc,256M" # 联系后端服务器超时时间 VARNISH_TTL=120 # 运行varnish的用户 VARNISH_USER=varnish # 运行varnish的组 VARNISH_GROUP=varnish # 进程选项 #DAEMON_OPTS="-p thread_pool_min=5 -p thread_pool_max=500 -p thread_pool_timeout=300" vim /etc/varnish/default.vcl # 后端服务主机 backend default { .host = "192.168.180.130"; .port = "80"; }
启动服务器测试
systemctl start varnish.service curl http://192.168.180.128/xxx.html # 如果缓存服务器上没有则去指定的后端服务器获取一份，先保存在回复给客户端
varnishadm
# 交互式命令行工具 usage: varnishadm [-n ident] [-t timeout] [-S secretfile] -T [address]:port command [...] -n is mutually exlusive with -S and -T # 使用 varnishadm -S /etc/varnish/secret -T 127.0.0.1:6082 help [<command>] ping [<timestamp>] 探测服务器存活情况 auth <response> quit banner status 查看服务状态 start stop vcl.load <configname> <filename> 编译、装载、命名文件 vcl.load test default.vcl 200 VCL compiled vcl.inline <configname> <quoted_VCLstring> vcl.use <configname> 指定当前使用的VCL配置文件 vcl.discard <configname> 指定删除VCL文件 vcl.list 列出所有可用VCL文件 # 文件当前状态 版本号 随服务引导启动 active 0 boot param.show [-l] [<param>] 显示运行时参数 param.show thread_pools param.set <param> <value> 设置参数值 param.set thread_pools 4 # 更改线程池不会立刻生效 panic.show 查看子进程上一次崩溃详细 panic.clear storage.list vcl.show [-v] <configname> 指定VCL编译前的信息 backend.list [<backend_expression>] 后端服务器列表 backend.set_health <backend_expression> <state> 设置后端服务器状态 ban <field> <operator> <arg> [&& <field> <oper> <arg>]... 清理缓存中的缓存对象 ban.list 列出所有ban规则
日志信息查看
varnishlog
man varnishlog
http://varnish-cache.org/docs/trunk/reference/varnishlog.html
varnishncsa
man varnishncsa
http://varnish-cache.org/docs/trunk/reference/varnishncsa.html
日志统计
varnishstat
man varnishstat
-l 查看能显示的字段
-f 指明只显示的字段
http://varnish-cache.org/docs/trunk/reference/varnishstat.html
日志排序
varnishtop
man varnishtop
http://varnish-cache.org/docs/trunk/reference/varnishtop.html
vanish状态引擎详解
官方文档
http://varnish-cache.org/docs/4.0/reference/vcl.html
vcl v2
vcl v3
vcl v4
state engine
vcl_recv vcl_hash vcl_hit vcl_miss vcl_fetch vcl_deliver vcl_pipe 如果请求使用的http方法不是get、head方法直接传递到后端服务器 vcl_pass 遇到认证、用户私有数据get请求时，直接pass，请求直接传递到后端服务器 vcl_error 拒绝客户端请求、其它异常情况时，自动合成error页面返回客户端 # engine之间在一定程度上的相关性 # 前驱engine需要return指明转移到哪一个后续engine
state engine workflow (v3)
vcl_recv ---> vcl_hash ---> vcl_hit ---> vcl_deliver vcl_recv ---> vcl_hash ---> vcl_miss ---> vcl_fetch ---> vcl_deliver vcl_recv ---> vcl_pass ---> vcl_fetch ---> vcl_deliver vcl_recv ---> vcl_pipe
state engine workflow (v4)
如上图
vcl语法
The VCL Finite State Machine 通过 VCL 语言配置 1. 注释 //, #, /* foo */ for comment 2. sub $name 用于定义例程 sub vcl_recv { } 3. 不支持循环 no loop 4. 有众多内置变量，变量的可调用位置与state engine 有密切相关性 5. 支持终止语句，return（action),没有返回值 6. “域”专用 7. 操作符： =, ==, ~, !, &&, || 8. 条件判断 if (CONDITION){ }else{ } set name=value 设置变量值 unset name 9. 获取HTTP请求报文首部 req.http.HEADER req.http.X-Forwarded-For req.http.Authorication req.http.cookie
编辑一个VCL文件
sub vcl_recv { if(req.method == "PRI"){ return (synth(405)); } if (req.method!="GET" && req.method!="HEAD" && req.method!="PUT" && req.method!="POST" && req.method!="TRACE" && req.method!="OPTIONS" && req.method!="DELETE" &&{ return (pipe); } ) if (req.method!="GET" && req.method!="HEAD"){ return (pass); } if (req.http.Authorication || req.http.Cookie){ return (pass) } return (hash) } sub vcl_deliver { if (obj.hits>0) { set resq.http.X-cache = "HIT"; }else{ set resq.http.X-cache = "MISS"; } }
使用VCL例程
varnish -S /etc/varnish/secret -T 127.0.0.1:6082
vcl.load test1 test.vcl
vcl.use test1
vcl.show test1
varnish 内置变量
breq
# 由varnish发往backend server bereq Type: HTTP Readable from: backend The entire backend request HTTP data structure bereq.backend Type: BACKEND Readable from: vcl_pipe, backend Writable from: vcl_pipe, backend bereq.between_bytes_timeout Type: DURATION Readable from: backend Writable from: backend The time in seconds to wait between each received byte from the backend. Not available in pipe mode. bereq.connect_timeout Type: DURATION Readable from: vcl_pipe, backend Writable from: vcl_pipe, backend The time in seconds to wait for a backend connection. bereq.first_byte_timeout Type: DURATION Readable from: backend Writable from: backend The time in seconds to wait for the first byte from the backend. Not available in pipe mode. bereq.http. Type: HEADER Readable from: vcl_pipe, backend Writable from: vcl_pipe, backend The corresponding HTTP header. bereq.method Type: STRING Readable from: vcl_pipe, backend Writable from: vcl_pipe, backend The request type (e.g. "GET", "HEAD"). bereq.proto Type: STRING Readable from: vcl_pipe, backend Writable from: vcl_pipe, backend The HTTP protocol version used to talk to the server. bereq.retries Type: INT Readable from: backend A count of how many times this request has been retried. bereq.uncacheable Type: BOOL Readable from: backend Indicates whether this request is uncacheable due to a pass in the client side or a hit on an existing uncacheable object (aka hit-for-pass). bereq.url Type: STRING Readable from: vcl_pipe, backend Writable from: vcl_pipe, backend The requested URL. bereq.xid Type: STRING Readable from: backend Unique ID of this request.
beresp
beresp Type: HTTP Readable from: vcl_backend_response, vcl_backend_error The entire backend response HTTP data structure beresp.backend.ip Type: IP Readable from: vcl_backend_response, vcl_backend_error IP of the backend this response was fetched from. beresp.backend.name Type: STRING Readable from: vcl_backend_response, vcl_backend_error Name of the backend this response was fetched from. beresp.do_esi Type: BOOL Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Boolean. ESI-process the object after fetching it. Defaults to false. Set it to true to parse the object for ESI directives. Will only be honored if req.esi is true. beresp.do_gunzip Type: BOOL Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Boolean. Unzip the object before storing it in the cache. Defaults to false. beresp.do_gzip Type: BOOL Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Boolean. Gzip the object before storing it. Defaults to false. When http_gzip_support is on Varnish will request already compressed content from the backend and as such compression in Varnish is not needed. beresp.do_stream Type: BOOL Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Deliver the object to the client directly without fetching the whole object into varnish. If this request is pass'ed it will not be stored in memory. beresp.grace Type: DURATION Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Set to a period to enable grace. beresp.http. Type: HEADER Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error The corresponding HTTP header. beresp.keep Type: DURATION Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Set to a period to enable conditional backend requests. The keep time is cache lifetime in addition to the ttl. Objects with ttl expired but with keep time left may be used to issue conditional (If-Modified-Since / If-None-Match) requests to the backend to refresh them. beresp.proto Type: STRING Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error The HTTP protocol version used the backend replied with. beresp.reason Type: STRING Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error The HTTP status message returned by the server. beresp.status Type: INT Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error The HTTP status code returned by the server. beresp.storage_hint Type: STRING Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Hint to Varnish that you want to save this object to a particular storage backend. beresp.ttl Type: DURATION Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error The object's remaining time to live, in seconds. beresp.ttl is writable. beresp.uncacheable Type: BOOL Readable from: vcl_backend_response, vcl_backend_error Writable from: vcl_backend_response, vcl_backend_error Inherited from bereq.uncacheable, see there. Setting this variable makes the object uncacheable, which may get stored as a hit-for-pass object in the cache. Clearing the variable has no effect and will log the warning "Ignoring attempt to reset beresp.uncacheable".
client
# 将用户请求调度至后端，并做回话保持的 client.identity Type: STRING Readable from: client Writable from: client Identification of the client, used to load balance in the client director. client.ip Type: IP Readable from: client The client's IP address.
now
now Type: TIME Readable from: vcl_all The current time, in seconds since the epoch. When used in string context it returns a formatted string.
obj
obj.grace Type: DURATION Readable from: vcl_hit The object's remaining grace period in seconds. obj.hits Type: INT Readable from: vcl_hit, vcl_deliver The count of cache-hits on this object. A value of 0 indicates a cache miss. obj.http. Type: HEADER Readable from: vcl_hit The corresponding HTTP header. obj.keep Type: DURATION Readable from: vcl_hit The object's remaining keep period in seconds. obj.proto Type: STRING Readable from: vcl_hit The HTTP protocol version used when the object was retrieved. obj.reason Type: STRING Readable from: vcl_hit The HTTP status message returned by the server. obj.status Type: INT Readable from: vcl_hit The HTTP status code returned by the server. obj.ttl Type: DURATION Readable from: vcl_hit The object's remaining time to live, in seconds. obj.uncacheable Type: BOOL Readable from: vcl_deliver Whether the object is uncacheable (pass or hit-for-pass).
req
req Type: HTTP Readable from: client The entire request HTTP data structure req.backend_hint Type: BACKEND Readable from: client Writable from: client Set bereq.backend to this if we attempt to fetch. req.can_gzip Type: BOOL Readable from: client Does the client accept the gzip transfer encoding. req.esi Type: BOOL Readable from: client Writable from: client Boolean. Set to false to disable ESI processing regardless of any value in beresp.do_esi. Defaults to true. This variable is subject to change in future versions, you should avoid using it. req.esi_level Type: INT Readable from: client A count of how many levels of ESI requests we're currently at. req.hash_always_miss Type: BOOL Readable from: vcl_recv Writable from: vcl_recv Force a cache miss for this request. If set to true Varnish will disregard any existing objects and always (re)fetch from the backend. req.hash_ignore_busy Type: BOOL Readable from: vcl_recv Writable from: vcl_recv Ignore any busy object during cache lookup. You would want to do this if you have two server looking up content from each other to avoid potential deadlocks. req.http. Type: HEADER Readable from: client Writable from: client The corresponding HTTP header. req.method Type: STRING Readable from: client Writable from: client The request type (e.g. "GET", "HEAD"). req.proto Type: STRING Readable from: client Writable from: client The HTTP protocol version used by the client. req.restarts Type: INT Readable from: client A count of how many times this request has been restarted. req.ttl Type: DURATION Readable from: client Writable from: client req.url Type: STRING Readable from: client Writable from: client The requested URL. req.xid Type: STRING Readable from: client Unique ID of this request.
resp
resp Type: HTTP Readable from: vcl_deliver, vcl_synth The entire response HTTP data structure resp.http. Type: HEADER Readable from: vcl_deliver, vcl_synth Writable from: vcl_deliver, vcl_synth The corresponding HTTP header. resp.proto Type: STRING Readable from: vcl_deliver, vcl_synth Writable from: vcl_deliver, vcl_synth The HTTP protocol version to use for the response. resp.reason Type: STRING Readable from: vcl_deliver, vcl_synth Writable from: vcl_deliver, vcl_synth The HTTP status message that will be returned. resp.status Type: INT Readable from: vcl_deliver, vcl_synth Writable from: vcl_deliver, vcl_synth The HTTP status code that will be returned.
server
server.hostname Type: STRING Readable from: vcl_all The host name of the server. server.identity Type: STRING Readable from: vcl_all The identity of the server, as set by the -i parameter. If the -i parameter is not passed to varnishd, server.identity will be set to the name of the instance, as specified by the -n parameter. server.ip Type: IP Readable from: client The IP address of the socket on which the client connection was received.
storage
storage.<name>.free_space Type: BYTES Readable from: client, backend Free space available in the named stevedore. Only available for the malloc stevedore. storage.<name>.used_space Type: BYTES Readable from: client, backend Used space in the named stevedore. Only available for the malloc stevedore. storage.<name>.happy Type: BOOL Readable from: client, backend Health status for the named stevedore. Not available in any of the current stevedores.
Functions
The following built-in functions are available: ban(expression) Invalidates all objects in cache that match the expression with the ban mechanism. call(subroutine) Run a VCL subroutine within the current scope. hash_data(input) Adds an input to the hash input. In the built-in VCL hash_data() is called on the host and URL of the request. Available in vcl_hash. new() Instanciate a new VCL object. Available in vcl_init. return() End execution of the current VCL subroutine, and continue to the next step in the request handling state machine. rollback() Restore req HTTP headers to their original state. This function is deprecated. Use std.rollback() instead. synthetic(STRING) Prepare a synthetic response body containing the STRING. Available in vcl_synth and vcl_backend_error. regsub(str, regex, sub) Returns a copy of str with the first occurrence of the regular expression regex replaced with sub. Within sub, \0 (which can also be spelled \&) is replaced with the entire matched string, and \n is replaced with the contents of subgroup n in the matched string. regsuball(str, regex, sub) As regsub() but this replaces all occurrences.
varnish实用用法
官方文档
http://www.varnish-cache.org/trac/wiki/VCLExamples
man文档
man varnishd
man vmod_directors
常用示例
添加后端服务器
backend csssrv { .host = "192.168.180.130"; .port = "80"; .probe = [ .url = "/test1.html"; ] } backend imagesrv { .host = "192.168.180.130"; .port = "80"; # 可用参数 host (mandatory) # The host to be used. IP address or a hostname that resolves to a single IP address. port # The port on the backend that Varnish should connect to. host_header # A host header to add. connect_timeout # Timeout for connections. first_byte_timeout # Timeout for first byte. between_bytes_timeout # Timeout between bytes. probe # Attach a probe to the backend. See Probes. # 健康状态使用如下 max_connections # Maximum number of open connections towards this backend. If Varnish reaches the maximum Varnish it will start failing connections. }
初始化定义backend集群
import directors; sub vcl_init { new cluster1 = directors.round_robin(); cluster1.add_backend(csssrv, 1.0); cluster1.add_backend(imagesrv, 1.0); } # 可使用负载均很算法 fallback random round_robin hash ...
健康状态检测
probe name { .attribute = "value"; # 可用属性 url The URL to query. Defaults to "/". request # Specify a full HTTP request using multiple strings. .request will have rn automatically inserted after every string. If specified, .request will take precedence over .url. expected_response # The expected HTTP response code. Defaults to 200. timeout # The timeout for the probe. Default is 2s. interval # How often the probe is run. Default is 5s. initial # How many of the polls in .window are considered good when Varnish starts. Defaults to the value of threshold - 1. In this case, the backend starts as sick and requires one single poll to be considered healthy. window # How many of the latest polls we examine to determine backend health. Defaults to 8. threshold # How many of the polls in .window must have succeeded for us to consider the backend healthy. Defaults to 3. # window and treshold 最近8次请求中，只要有3个成功就算正常 }
添加支持虚拟主机或集群
sub vcl_recv { if (req.http.host ~ "www.exmaple.com") { ... } } sub vcl_recv { set req.backend_hint = cluster1.backend(); }
强制对某资源请求不检查缓存
sub vcl_recv { if (req.url ~ "(?i)^/xxx.html$") { return (pass); } }
对公共类型资源，取消Cookie
sub vcl_backend_fetch { if (beresp.http.cache-control !~ "s-maxage") { if (req.url ~ "(?i)\.jpg$") { set beresp.ttl = 3600 s; unset beresp.http.Set-Cookie; } if (req.url ~ "(?i)\.css$") { set beresp.ttl = 600 s; unset beresp.http.Set-Cookie; } } }
资源请求分离配置
sub vcl_recv { if (req.url ~ "(?i)\.(jpg|png|gif)$") { ser req.backend_hint = imagesrv; } else if (req.url ~ "(?i)\.css$") { ser req.backend_hint = csssrv; } }
