nginx的负载介绍
指定上游服务器的upstream与server指令
指令介绍
Syntax: upstream name { ... } Default: — Context: http Syntax: server address [parameters]; Default: — Context: upstream
功能介绍:指定一组上游服务器地址,其中,可以是域名、IP地址或者Unix socket地址。可以在域名或者IP地址后面加端口,如果不加,默认80
参数介绍:backup 指定当前server为备份服务,当非备份server不可用时,请求才会转发到server里;down 标识某台服务以及下线,不在服务
加权轮Round-Robin算法:
功能:在加权轮讯的方式访问server指令指定上游服务。集成在nginx的upstream框架
指令:weight 服务访问的权重,默认是1;
max_conns:server 的最大并发连接数,仅做用于单worker进程。默认0 ,表示没有限制;
max_falis:在fail_timeout时间内,最大的失败次数。当达到最大失败是,会在fail_timeout秒内这台server不允许再次被选择;
fail_timeout :单位为秒,默认10 秒,具有两个功能指定一段时间内,最大的失败次数max_fails;达到max_fails后,该server不能访问的时间
对上游服务使用长连接
功能:通过复用连接,降低nginx与上游服务器简历关闭连接的消耗,提升吞吐量的同时降低延迟
模块:ngx_http_upstream_keepalive_module 模块;默认编译进nginx的通过--without-http_upstream_keepalive_module 可移除此模块
对上游连接的http头部设定
proxy_http_version 1.1; #因为http1.0不支持长连接;防止下游服务器传过来的是http1.0的协议,这边需要对它的协议重置 proxy_set_header Connection "";#
upstream_keepalive指令介绍
Syntax: keepalive connections; 最多保持多少空闲连接 Default: — Context: upstream Syntax: keepalive_requests number; Default: keepalive_requests 100; 一条连接上最多能有多少请求 Context: upstream Syntax: keepalive_timeout timeout; Default: keepalive_timeout 60s; 如果上一条请求请求完最多等多长时间,没有连接的话断开请求 Context: upstream
指定上游服务域名解析的resolver指令
Syntax: resolver address ... [valid=time] [ipv6=on|off]; 当我们使用域名访问的时候可以指定一个dns服务;设置访问dns访问超时时间 Default: — Context: http, server, location Syntax: resolver_timeout time; Default: resolver_timeout 30s; Context: http, server, location
配置
[root@python vhast]# cat shangyou.conf server { listen 8011; default_type text/plain; return 200 '8011 server response.\n'; } server { listen 8012; default_type text/plain; return 200 '8012 server response.\n'; } [root@python vhast]# cat upstream.conf upstream rrups{ server 127.0.0.1:8011 weight=2 max_conns=2 max_fails=2 fail_timeout=5; server 127.0.0.1:8012; keepalive 32; } server { server_name rrups.com; error_log rrups_error.log info; location /{ proxy_pass http://rrups; proxy_http_version 1.1; proxy_set_header Connection ""; } }
测试
[root@python vhast]# curl rrups.com 8011 server response. [root@python vhast]# curl rrups.com 8011 server response. [root@python vhast]# curl rrups.com 8012 server response. [root@python vhast]# curl rrups.com 8011 server response.
测试场链接;并没有断开
[root@python vhast]# tcpdump -i lo port 8011 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on lo, link-type EN10MB (Ethernet), capture size 262144 bytes 15:28:37.168360 IP localhost.40308 > localhost.8011: Flags [S], seq 2102663491, win 43690, options [mss 65495,sackOK,TS val 259 080435 ecr 0,nop,wscale 7], length 015:28:37.168418 IP localhost.8011 > localhost.40308: Flags [S.], seq 127783339, ack 2102663492, win 43690, options [mss 65495,s ackOK,TS val 259080435 ecr 259080435,nop,wscale 7], length 015:28:37.168454 IP localhost.40308 > localhost.8011: Flags [.], ack 1, win 342, options [nop,nop,TS val 259080435 ecr 259080435 ], length 015:28:37.168540 IP localhost.40308 > localhost.8011: Flags [P.], seq 1:70, ack 1, win 342, options [nop,nop,TS val 259080435 ec r 259080435], length 6915:28:37.168562 IP localhost.8011 > localhost.40308: Flags [.], ack 70, win 342, options [nop,nop,TS val 259080435 ecr 25908043 5], length 015:28:37.168678 IP localhost.8011 > localhost.40308: Flags [P.], seq 1:171, ack 70, win 342, options [nop,nop,TS val 259080435 ecr 259080435], length 17015:28:37.168700 IP localhost.40308 > localhost.8011: Flags [.], ack 171, win 350, options [nop,nop,TS val 259080435 ecr 2590804 35], length 015:29:05.936003 IP localhost.40308 > localhost.8011: Flags [P.], seq 70:139, ack 171, win 350, options [nop,nop,TS val 25910920 3 ecr 259080435], length 6915:29:05.936305 IP localhost.8011 > localhost.40308: Flags [P.], seq 171:341, ack 139, win 342, options [nop,nop,TS val 2591092 03 ecr 259109203], length 17015:29:05.936358 IP localhost.40308 > localhost.8011: Flags [.], ack 341, win 359, options [nop,nop,TS val 259109203 ecr 2591092 03], length 0
超时后;断开
15:30:05.944449 IP localhost.40308 > localhost.8011: Flags [F.], seq 139, ack 341, win 359, options [nop,nop,TS val 259169211 e cr 259109203], length 015:30:05.944588 IP localhost.8011 > localhost.40308: Flags [F.], seq 341, ack 140, win 342, options [nop,nop,TS val 259169212 e cr 259169211], length 0
基于客户端地址的IPhash算法与
配置
[root@python vhast]# cat upstream.conf upstream rrups{ ip_hash; server 127.0.0.1:8011 weight=2 max_conns=2 max_fails=2 fail_timeout=5; server 127.0.0.1:8012; #keepalive 32; } server { set_real_ip_from 192.168.183.4; #可信地址real,使用--with-http_realip_module 开启她;默认nginx未编译 real_ip_recursive on; #启用此模块; real_ip_header X-Forwarded-For; #表示X-Forwarded-For变量的值替换real_ip原来的值 server_name rrups.com; error_log rrups_error.log info; location /{ proxy_pass http://rrups; proxy_http_version 1.1; proxy_set_header Connection ""; } }
测试
[root@python vhast]# curl -H 'X-Forwarded-For:12.1.45.53' rrups.com 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For: 12.100.45.53' rrups.com 8011 server response. [root@python vhast]# curl -H 'X-Forwarded-For:12.1.45.53' rrups.com 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For:12.1.45.56' rrups.com 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For:11.8.45.56' rrups.com 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For:100.8.45.56' rrups.com 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For:100.9.67.51' rrups.com 8011 server response.
基于参数做hash
[root@python vhast]# cat upstream.conf upstream rrups{ #ip_hash; hash user_$arg_username; 用户名 server 127.0.0.1:8011; server 127.0.0.1:8012; #keepalive 32; } server { set_real_ip_from 192.168.183.4; real_ip_recursive on; real_ip_header X-Forwarded-For; server_name rrups.com; error_log rrups_error.log info; location /{ proxy_pass http://rrups; proxy_http_version 1.1; proxy_set_header Connection ""; } }
测试
[root@python vhast]# curl -H 'X-Forwarded-For: 100.8.45.56' rrups.com?username=chenxi 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For: 100.8.45.56' rrups.com?username=chenxi-990 8011 server response. [root@python vhast]# curl -H 'X-Forwarded-For: 100.8.45.56' rrups.com?username=chenxi 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For: 100.8.45.56' rrups.com?username=chenxiuughgh 8012 server response. [root@python vhast]# curl -H 'X-Forwarded-For: 100.8.45.56' rrups.com?username=chenxiuughgh-09876 8011 server response.
一致性hash
Syntax: hash key [consistent]; Default: — Context: upstream
最少连接算法
功能模块:ngx_http_upstream_ least_conn _module;默认编译进nginx里
指令介绍
Syntax: least_conn; Default: — Context: upstream
使用共享内存让负载均衡算法跨work进程生效
功能模块:ngx_http_upstream_ zone _module;默认启用
指令介绍
Syntax: zone name [size]; 名字:共享内存多大 Default: — Context: upstream
upstream 提供一些变量介绍(先不包含缓存的变量)
upstream_addr :上游服务器的IP为可读的127.0.0.1:8012 upstream_connect_time: 与上游服务建立连接消耗的时间,单位为秒。可精确到毫秒 upstream_header_time:接收上游服务器发送http头部响应的时间,单位为秒。可精确到毫秒 upstream_response_time:接收完上游服务器所有响应消耗的时间,单位为秒。精确到毫秒 upstream_http_名称:从上游服务器返回的响应头部的值 upstream_bytes_received:从上游服务器接收到响应长度,默认为字节 upstream_response_length:从上游服务器返回的包体的长度。默认字节 upstream_status:从上游服务器返回的http状态码;如果未连接502 upstream_cookie_名称:从上游服务器发回的Set-Cookie中取出cookie值 upstream_trailer_名称:从上游服务响应尾部取到的值