[文章作者:张宴 本文版本:v1.2 最后修改:2008.01.02 转载请注明出处:http://blog.zyan.cc]
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
2、创建Varnish日志目录(/var/logs/):
3、编译安装varnish:
4、创建Varnish配置文件:
输入以下内容:
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
7、配置开机自动启动Varnish
在末尾增加以下内容:
8、优化Linux内核参数
在末尾增加以下内容:
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
(3)、例:清除所有缓存:
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
设置在每天00:00定时执行:
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
/usr/sbin/groupadd www -g 48
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
2、创建Varnish日志目录(/var/logs/):
mkdir -p /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
3、编译安装varnish:
wget http://blog.zyan.cc/soft/linux/varnish/varnish-1.1.2.tar.gz
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
4、创建Varnish配置文件:
vi /usr/local/varnish/vcl.conf
输入以下内容:
引用
backend myblogserver {
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/varnish.log &
7、配置开机自动启动Varnish
vi /etc/rc.local
在末尾增加以下内容:
引用
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
8、优化Linux内核参数
vi /etc/sysctl.conf
在末尾增加以下内容:
引用
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
/usr/local/varnish/bin/varnishstat
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 help
引用
Available commands:
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge /a/
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge w*$
(3)、例:清除所有缓存:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge *$
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
引用
#!/bin/sh
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
设置在每天00:00定时执行:
/usr/bin/crontab -e
或者 vi /var/spool/cron/root
输入以下内容:引用
0 0 * * * /bin/sh /var/logs/cutlog.sh
TurboTax Sign In
2020-2-15 18:17
Turbotax is an American tax preparation software which will guide you to urge your taxes wiped out the proper way. For using various features of Turbotax, you've got to travel through the method of the Turbotax sign in.
Hulu Login
2020-2-15 19:47
Entertainment can be more fun with Hulu as here you get access to a world full of your favorite TV shows. Here will get the opportunity to enjoy the latest content that you can stream in any of your devices supporting the app. Get your free trial and access to your device in theHulu Loginhttp://hulu-login.us/
Linksys Router Login
2020-2-15 19:48
The Linksys router web interface is the place where all the router settings are stored for example connectivity, wireless, security, etc. For making changes to the default settings, you need to login to your Linksys router. Also, you can change your router password after signing into your account. Once you have logged in, you will be able to adjust all the available settings according to your preference.Linksys Router Loginhttp://linksysrouterloginn.com/
Webroot.com/safe
2020-2-15 19:49
The more we are becoming tech-savvy, the more we need the cybersecurity. It becomes important to remain protected against all the existing and emerging online threats as they can damage your system and can also steal your data. For getting protection, you must need a comprehensive and ultimate security solution. Webroot.com/safe is one such software that can provide world-class security solutions to provide you and your device with outstanding protection Webroot.com/safehttp://webrootsafex.com/
Garmin.com/express
2020-2-15 19:50
The software gives you desktop notifications and step-by-step instructions so that you can update your devices with ease. Even if your application is not open or the device is not connected to your system, it will give you alerts on a regular basis. So for garmin.com/express setup, you need to follow all the full-proof steps given below. Garmin.com/expresshttp://garmincomexpress.download/
RajputSahab
2020-2-15 21:11
Thank you a bunch for sharing this with all of us you actually realize what you are talking about! Bookmarked. Please also seek advice from my site =). We could have a hyperlink change contract between us!seo consultant san Diegohttps://www.google.com/maps/d/u/0/viewer?ll=33.69036921620304%2C-118.4804758308594&z=9&mid=1Gt9yXDGqAO0j2TKfGUVyPsSmeOhugGfd
jamessmith
2020-2-16 20:07
How to Install AOL Desktop Gold on Mac?AOL Desktop gold has top tier includes that consistently pulls in numerous clients. Apple Mac client additionally thinks that it is increasingly appropriate to use for administrations like Emailing, Web perusing, IM discussion, and so forth. With this AOL administration, clients can send messages just as instant messages to their loved ones. AOL Desktop Gold likewise has the office of Web perusing on a similar stage which makes it increasingly appealing when contrasted with other mailing administrations suppliers.AOL is additionally known for its boundless email stockpiling limit. Speed and security are probably the best elements of AOL Gold. It is auto-refreshed and has a simple form in the past form. AOL clients additionally have the choice to utilize POP, SMTP, IMAP conventions. Mac clients consistently have some normal questions with respect to the Installation of AOL Desktop Gold. They some way or another thing that it's troublesome as How to Install AOL Desktop Gold on their Mac.visit:aol-desktop-gold-downloadaol-desktop-gold-download/
nimra
2020-2-16 22:53
Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I'll be subscribing to your feed and I hope you post again soon. Big thanks for the useful info. why indian visa gets rejected how to avoidhttps://www.india-visa-gov.in/evisa-india-information/why-indian-visa-gets-rejected-how-to-avoid
Theology Writing Services
2020-2-17 13:06
It is advisable for students to seek help when taking Religion & Theology Writing Services and Religion & Theology Research Paper Help for they can hire the best Religion & Theology Research Writing Service provider.
Nursing Research Paper Writing
2020-2-17 13:11
Companies offering Nursing Research Paper Writing Services should help students perform well by delivering papers prior to deadline as early delivery of Custom Nursing Research Papersand Nursing Term Paper Writing Services is very important.
Ship From CA
2020-2-17 15:53
Buy Medicines Online from Ship From CA. No prescription is required for buy Hydrocodone, Oxycodone, Percocet, Vicodin and Oxycontin Online Overnight from us
Buy Hydrocodone online
2020-2-17 15:56
at first-class prices. Hydrocodone or Dihydrocodeinone is used for the treatment of moderate to severe level ache. Hydrocodone dosage is used to treat those people, who need medicine around-the-clock and for folks that do not get pain comfort from other medicinal drugs.Buy Hydrocodone online
installkaspersky
2020-2-17 16:55
install kaspersky with activation code | How to install and activate kaspersky on multiple computers• Each copy of a multiple-device license for Kaspersky Anti-Virus 2019 (for example, a 3 PCs license) is installed and activated in the same way on all computers you want to protect.• In conclusion to activate Kaspersky Internet Security 2019 on all computers, use one and the same activation code you purchased.<a href="https://installkaspersky.com/kaspersky-support-number/">kaspersky support number and Kaspersky Total Security Download</a><a href="https://installkaspersky.com/kaspersky-download-and-install">kaspersky installation</a><a href="https://installkaspersky.com/kaspersky-setup/">kaspersky setup</a><a href="https://installkaspersky.com">install kaspersky with activation code</a><a href="http://installkaspersky.com/kaspersky-code-activation">kaspersky code activation and kaspersky lab</a><a href="https://installkaspersky.com/geek-squad-kaspersky-activation-code">Geek squad kaspersky activation code</a>
Installtrendmicro
2020-2-17 17:09
Install trend micro at www.installtrendmicro.com antivirus is one of the top rated antivirus program available online. It safeguards a user from cyber threats such as malware, spyware and viruses that may steal confidential user information and that information later can be used by hackers for financial gains. Trend micro also optimizes computer system for performance related issues. <a href="https://installtrendmicro.com/download-trend-micro-with-key/">Download trend micro with Serial number</a><a href="https://installtrendmicro.com/">install trend micro activation code</a><a href="https://installtrendmicro.com/install-trend-micro-on-new-computer/">Install trend micro on new computer</a><a href="https://installtrendmicro.com/install-trend-micro-without-disk/">install trend micro without disk</a><a href="https://installtrendmicro.com/trend-micro-security-activation/">trend micro internet security activation</a><a href="https://installtrendmicro.com/best-buy-trendmicro/">trendmicro.com/bestbuy</a><a href="https://installtrendmicro.com/www-trendmicro-com-activation/">www.trendmicro.com/activation</a><a href="https://installtrendmicro.com/trendmicro-com-max/">www.trendmicro.com/getmax</a><a href="https://installtrendmicro.com/download-trend-micro-with-key/">trendmicro homeinstall</a>
24hrsonlinestore
2020-2-17 19:28
Looking to buy Oxycontin, Hydrocodone, Oxycodone, Percocet, Vicodin, and Norco Online. Just call 707-400-0134 any time to buy without a prescription.
GreysonAustin
2020-2-17 19:47
I just wanted to say that I love every time visiting your wonderful post! Very powerful and have true and fresh information. Thanks for the post and effort! Please keep sharing more such a blog.
Mcafee.com/activate
2020-2-18 12:34
Thanks for all the tips mentioned in this article! it’s always good to read things you have heard before and are implementing, but from a different perspective, always pick up some extra bits of information.
Office.com/setup
2020-2-18 12:35
I just wanted to say that I love every time visiting your wonderful post! Great information you shared through this blog. Keep it up and best of luck for your future blogs and posts.
installvipreantivirus
2020-2-18 14:16
Install vipre on your device and protect it from cyber threats.<a href="https://installvipreantivirus.com/">install vipre using product key</a><a href="https://installvipreantivirus.com/vipre-download-with-product-key/">vipre download with product key</a><a href="https://installvipreantivirus.com/vipre-activation/">vipre activation</a> <a href="https://installvipreantivirus.com/i-need-to-install-vipre/">i need to install vipre</a> <a href="https://installvipreantivirus.com/install-vipre-with-key-code/">install vipre with key code</a><a href="https://installvipreantivirus.com/vipre-download/">vipre download</a><a href="https://installvipreantivirus.com/vipre-antivirus-download/">vipre antivirus download</a> <a href="https://installvipreantivirus.com/viper-security/">viper security</a> <a href="https://installvipreantivirus.com/vipre-internet-security/">vipre internet security</a> <a href="https://installvipreantivirus.com/vipre-advanced-security-download/">vipre advanced security download</a> <a href="https://installvipreantivirus.com/vipre-rescue/">vipre rescue</a> <a href="https://installvipreantivirus.com/vipre-download-already-purchased-key/">vipre download already purchased key</a> <a href="https://installvipreantivirus.com/reinstall-vipre-with-product-key/">reinstall vipre with product key</a> <a href="https://installvipreantivirus.com/vipre-internet-security-lifetime-reinstall/">vipre internet security lifetime reinstall</a> <a href="https://installvipreantivirus.com/vipre-antivirus-hsn-install-download/">vipre antivirus hsn install download</a> <a href="https://installvipreantivirus.com/vipre-download-and-install/">vipre download and install</a>
mcafeedellactivation
2020-2-18 14:34
Activate mcafee on your dell computer and secure it against online threats such as malwares, spywares and viruses.https://mcafeedellactivation.com/https://mcafeedellactivation.com/mcafee-dell/https://mcafeedellactivation.com/mcafee-de... href="https://mcafeedellactivation.com/">www.mcafee.com/dellactivation </a><a href="https://mcafeedellactivation.com/mcafee-dell/">mcafee dell</a><a href="https://mcafeedellactivation.com/mcafee-dell-activation/">mcafee dell activation</a>
分页: 125/438 120 121 122 123 124 125 126 127 128 129