[文章作者:张宴 本文版本:v1.2 最后修改:2008.01.02 转载请注明出处:http://blog.zyan.cc]

  我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。

  今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。

  在我看来,使用Varnish代替Squid的理由有三点:
  1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
  2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
  3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。

  点击在新窗口中浏览此图片


  下面来安装Varnish网站缓存加速器(Linux系统):
  1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
/usr/sbin/groupadd www -g 48
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache


  2、创建Varnish日志目录(/var/logs/):
mkdir -p /var/logs
chmod +w /var/logs
chown -R www:www /var/logs


  3、编译安装varnish:
wget http://blog.zyan.cc/soft/linux/varnish/varnish-1.1.2.tar.gz
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install


  4、创建Varnish配置文件:
vi /usr/local/varnish/vcl.conf

  输入以下内容:
引用
backend myblogserver {
       set backend.host = "192.168.0.5";
       set backend.port = "80";
}

acl purge {
       "localhost";
       "127.0.0.1";
       "192.168.1.0"/24;
}

sub vcl_recv {
       if (req.request == "PURGE") {
               if (!client.ip ~ purge) {
                       error 405 "Not allowed.";
               }
               lookup;
       }

       if (req.http.host ~ "^blog.zyan.cc") {
               set req.backend = myblogserver;
               if (req.request != "GET" && req.request != "HEAD") {
                       pipe;
               }
               else {
                       lookup;
               }
       }
       else {
               error 404 "Zhang Yan Cache Server";
               lookup;
       }
}

sub vcl_hit {
       if (req.request == "PURGE") {
               set obj.ttl = 0s;
               error 200 "Purged.";
       }
}

sub vcl_miss {
       if (req.request == "PURGE") {
               error 404 "Not in cache.";
       }
}

sub vcl_fetch {
       if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
               set obj.ttl = 3600s;
       }
       else {
               set obj.ttl = 30d;
       }
}

  这里,我对这段配置文件解释一下:
  (1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
  (2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
  (3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
  (4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
  (5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。

  5、启动Varnish
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on


  6、启动varnishncsa用来将Varnish访问日志写入日志文件:
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/varnish.log &


  7、配置开机自动启动Varnish
vi /etc/rc.local

  在末尾增加以下内容:
引用
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &


  8、优化Linux内核参数
vi /etc/sysctl.conf

  在末尾增加以下内容:
引用
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000    65000



  再看看如何管理Varnish:
  1、查看Varnish服务器连接数与命中率:
/usr/local/varnish/bin/varnishstat

  点击在新窗口中浏览此图片

  2、通过Varnish管理端口进行管理:
  用help看看可以使用哪些Varnish命令:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 help

引用
Available commands:
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool


  3、通过Varnish管理端口,使用正则表达式批量清除缓存:
  (1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge /a/

  (2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge w*$

  (3)、例:清除所有缓存:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge *$


  4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):


  附1:Varnish官方网站:http://www.varnish-cache.org/

  附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
  /var/logs/cutlog.sh文件内容如下:
引用
#!/bin/sh
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz

  设置在每天00:00定时执行:
  
/usr/bin/crontab -e
  或者  
vi /var/spool/cron/root
  输入以下内容:
引用
0 0 * * * /bin/sh /var/logs/cutlog.sh



Tags: , , ,



技术大类 » Cache与存储 | 评论(8366) | 引用(0) | 阅读(697707)
Annie Jasmine` Email Homepage
2020-2-4 19:31
An interesting article, I took in a lot of new things for myself, which I hadn't examined beforehand, yet shockingly not all the tips are fitting right currently to show day works. https://mycrmsystem.co.uk/
Annie Jasmine Email Homepage
2020-2-4 19:33
An interesting article, I took in a lot of new things for myself, which I hadn't considered already, yet tragically not all the tips are suitable right currently to show day works. https://mycrmsystem.co.uk/
Techpout Email Homepage
2020-2-4 19:34
This is a great post you share here. I just love the way you write this post. Thank You for sharing this informative post with us. Keep this great job up! Also Read: Free Sports Streaming Sites
Annie Jasmine Email Homepage
2020-2-4 19:45
I like your clarification here which is the best piece of this method which every one of you have utilized, Thanks a ton for these affiliations close by. keep it up. https://mycrmsystem.co.uk/
How To Read Tarot Cards Email Homepage
2020-2-4 20:25
Well written & articulated article! I simply enjoy reading your work. Do you know that how to read tarot cards can be explained in a simple way? Reading tarot cards can help you to make effective life decisions and avoid problems. Read on further to know more.
james smith Email Homepage
2020-2-4 20:40
McAfee antivirus is surely the reputed antivirus in the digitized world which was founded in the late eighties. The company boasts about having stayed on the top of the market since its release. But in recent years it has loosened its grip due to the release of some other antiviruses. To make this even, McAfee has upgraded its features and is now ready to take on the market with its wide range of features and of course a personal firewall.mcafee.com/activate
installvipre Email Homepage
2020-2-5 14:04
my-kaspersky Email Homepage
2020-2-5 14:26
wpexpert support Email Homepage
2020-2-5 15:31
In this present era of the internet, the websites have become a critical medium that worldwide organizations use for various unique purposes.  WordPress support number your business, you could not in hence its reputation and rankings. Most of the companies have created at least a single website for their business to help people finding them easily.
installnorton Email Homepage
2020-2-5 15:33
<a href="https://installnorton.org/install-norton/">install norton on computer</a>
towmwick09 Email Homepage
2020-2-5 19:53
Protect your devices from malware and virus attacks install and activate through mcafee.com/activate website. if you need any help regarding activation you can contact our mcafee support team.https://mymcafeecomactivate.com/
seofirms Email
2020-2-5 19:56
A major thank you for your article. Really anticipating read more.Top SEO Company in IndiaBest SEO Companies in India
clary Email Homepage
2020-2-6 13:12
Now a days it is very convenient to print your documents anywhere and anytime. The right HP Wireless Printer Setup  allows you to print from any place and work from any location and also print at an ease. Since, there are no cables associated with wireless printer, the efficiency of the wireless printer increases and hence the comfort of running a business increases. But if you still a little confused and face problems during HP Printer wireless Setup, you can also connect to our experts they will help you in getting the direction of setup process.
name97x Email Homepage
2020-2-6 14:16
Garmin’s versatile range of products are engineered with cutting edge technology to deliver products that are prepared for the future. Garmin.com/Express ingenious product range is backed by advanced, functionally-integrated technology that extends the unmatched user experience. In short, it transforms next-generation technology into a simple yet valuable experience for users.Garmin.com/Expresshttps://garmincomexpresss.com/
name97x Email Homepage
2020-2-6 14:17
You can also seek the help of our experts to help you install the extender by calling us at our toll-free customer service numbers or by chatting with them.hulu loginhttp://hulu-login.us/
name97x Email Homepage
2020-2-6 14:18
Garmin Express is a software that is designed to manage your Garmin devices. With the help of this software, you can register, set up, and update your devices. In fact, garmin.com/express software notifies you when new map updates are available and helps you in installing them. Also,
name97x Email Homepage
2020-2-6 14:18
Microsoft Office is a software that brings together the best tools for business, educational institutions as well as for home users. Office is a combination of best-in-class applications including Ms-Word, Excel, Outlook, Access, Powerpoint, and Publisher. It has a large number of products and each product serves a unique purpose.
name97x Email Homepage
2020-2-6 14:18
Webroot.com/safe is a cloud-based antivirus software. This antivirus software offers complete security of your device from malware and viruses. It protects you during web surfing sessions by blocking harmful sites. Webroot has advanced security that helps to protect your private and financial information when you go online.
name97x Email Homepage
2020-2-6 14:19
The Linksys router web interface is the place where all the router settings are stored for example connectivity, wireless, security, etc. For making changes to the default settings, you need to login to your Linksys router. Also, you can change your router password after signing into your account.
Roku.com/link Email Homepage
2020-2-7 15:43
To use Roku streaming Device user have to make the Roku Account or sign in to roku.com/link by giving the alphanumeric Roku actuation code. Roku is an entertainment stick which streams various channels, for example, amazon prime, Netflix, Hulu, ESPN all channels at one place. Steps to create online Roku account is very simple which are referenced here:<a href="https://roku-comlink.us"> roku.com/link</a>
分页: 119/419 第一页 上页 114 115 116 117 118 119 120 121 122 123 下页 最后页
发表评论
表情
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
打开HTML
打开UBB
打开表情
隐藏
记住我
昵称   密码   游客无需密码
网址   电邮   [注册]