[文章作者:张宴 本文版本:v1.2 最后修改:2008.01.02 转载请注明出处:http://blog.zyan.cc]
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
2、创建Varnish日志目录(/var/logs/):
3、编译安装varnish:
4、创建Varnish配置文件:
输入以下内容:
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
7、配置开机自动启动Varnish
在末尾增加以下内容:
8、优化Linux内核参数
在末尾增加以下内容:
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
(3)、例:清除所有缓存:
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
设置在每天00:00定时执行:
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
/usr/sbin/groupadd www -g 48
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
2、创建Varnish日志目录(/var/logs/):
mkdir -p /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
3、编译安装varnish:
wget http://blog.zyan.cc/soft/linux/varnish/varnish-1.1.2.tar.gz
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
4、创建Varnish配置文件:
vi /usr/local/varnish/vcl.conf
输入以下内容:
引用
backend myblogserver {
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/varnish.log &
7、配置开机自动启动Varnish
vi /etc/rc.local
在末尾增加以下内容:
引用
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
8、优化Linux内核参数
vi /etc/sysctl.conf
在末尾增加以下内容:
引用
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
/usr/local/varnish/bin/varnishstat
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 help
引用
Available commands:
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge /a/
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge w*$
(3)、例:清除所有缓存:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge *$
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
引用
#!/bin/sh
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
设置在每天00:00定时执行:
/usr/bin/crontab -e
或者 vi /var/spool/cron/root
输入以下内容:引用
0 0 * * * /bin/sh /var/logs/cutlog.sh
maverickadrew
2023-10-5 14:23
https://sites.google.com/view/deltacommunityunion/homehttps://sites.google.com/view/suncoastunionlogin/homehttps://sites.google.com/view/fifth-third-login/homehttps://sites.google.com/view/penfedunionlogin/homehttps://sites.google.com/view/openofficedownload/homehttps://sites.google.com/view/athenahealthlogi/homehttps://sites.google.com/wallet-extension.com/phantomwalletextension/homehttps://sites.google.com/365cryptocurrencies.com/atomicdexwallet/homehttps://sites.google.com/365cryptocurrencies.com/metamaskextension/homehttps://sites.google.com/metamaaslogi.com/metamasksignin/homehttps://sites.google.com/tomsazure.com/hirowalletextension/homehttps://sites.google.com/365cryptocurrencies.com/tronlinkwalletextension/home
vanilla gift card balance
2023-10-5 15:38
You can check Your Balance Online. Look for the website on the reverse of the card. Turn the card towards the other side using the black strip, and then look at the fine image on the back on the card. The card will typically have instructions on how to locate your balance. Sometimes, it will provide a link to a website you can go to find the balance.vanilla gift card balance
sfasf
2023-10-5 16:59
Rabby Wallet is related to cryptocurrency, blockchain technology, or financial services, I recommend conducting an internet search or visiting the official website of the product or service for the most up-to-date and accurate information.rabby walletcoinstats app is a cryptocurrency tracking and portfolio management platform. It is designed to help users monitor their cryptocurrency investments and stay informed about the latest developments in the crypto market.coinstats app
fgdf
2023-10-9 12:24
Capital One is a renowned financial institution known for its commitment to innovation and customer satisfaction. Their online banking platform allows customers to access and manage their accounts conveniently from anywhere with an internet connection. Capital One Login | Capital One Login | coinb
Vinsmoke Sanji
2023-10-9 12:54
To answer it in simple words, the need to download Metamask Extension arises when the investors is willing to manage their wallet through a web plugin instead of a mobile app.Coinbase Pro Sign In is an advanced feature of Coinbase which is also available as Advance Trade now a days.Recovering a Coinbase wallet without a seed phrase can be a challenge, but there are still some steps you can take to try to regain access to your funds.
pgslotssgp
2023-10-10 11:43
ฤดูหนาวกำลังจะมาถึง และความมหัศจรรย์แห่งฤดูกาลก็เผยออกมา อากาศสดชื่น เกล็ดหิมะเต้นระบำตามสายลม และค่ำคืนอันแสนอบอุ่นข้างกองไฟกวักมือเรียก แต่จะเป็นอย่างไรถ้าฉันบอกคุณว่าฤดูหนาวนี้ คุณสามารถก้าวเข้าสู่โลกที่เสน่ห์อันหนาวเหน็บของแจ็ค ฟรอสต์มาบรรจบกับความตื่นเต้นของเกมสล็อตล่ะ ถูกต้องแล้ว เรากำลังดำดิ่งสู่ดินแดนมหัศจรรย์น้ำแข็งของ "Jack Frost's Winter" การผจญภัย สล็อตเว็บตรง 100% อันน่ารื่นรมย์ที่จะทำให้คุณอยากฤดูหนาวตลอดทั้งปี
stveevmarkle
2023-10-10 15:10
BlockWallet is where speed, reliability, security and privacy meet. Try the self-custodial Web3 wallet where your only concern will be the market itself.All eyes on your dreams with BlockWallet - your self-custodial Web3 wallet that handles the rest. blockwallet | Coin98
SHAH78923
2023-10-12 16:28
Ignite India Education is inspired by the former President of India Bharat Ratna Dr. APJ Abdul Kalam’s vision of “India Beyond 2020”. Our aim is to fulfil his vision by empowering society and transforming India into a developed nation through education. VISIT: https://igniteindiaeducation.com/nid-coaching-in-bangalore/
SHAH78923
2023-10-12 16:28
https://igniteindiaeducation.com/nata-coaching-in-hyderabad/
rose
2023-10-13 19:07
Coinbase wallet is a type of crypto wallet that lets you store your cryptocurrency in which your crypto is completely in your own control because it is a self-custody wallet. The essence of it being a self-custody wallet
charlotteyoung
2023-10-13 23:08
I am a student so I don’t need to worry about my business. The only thing which is important for me is to find who can answer my test questions for me
토토사이트추천
2023-10-17 13:19
I must say, I am deeply impressed. I rarely encounter a blog that is both educational and entertaining, no doubt you hit the nail on the head.토토사이트추천
dpismoth
2023-10-18 16:31
คุณพร้อมที่จะเริ่มต้นการผจญภัยครั้งยิ่งใหญ่ที่ผสมผสานความตื่นเต้นของสล็อตออนไลน์เข้ากับตำนานของ King Midas แล้วหรือยัง? มองไม่ไกลจาก "Midas Fortune" ของ สล็อต2023 – เกมที่รับประกันความร่ำรวยทองและสัมผัสของ Midas! ในโพสต์บนบล็อกนี้ เราจะเจาะลึกเข้าไปในโลกของ "Midas Fortune" และสำรวจทุกสิ่งที่คุณจำเป็นต้องรู้เพื่อร่ำรวยในเกมสล็อตออนไลน์ที่น่าหลงใหลนี้
dpismoth
2023-10-18 16:32
คุณพร้อมที่จะเริ่มต้นการผจญภัยครั้งยิ่งใหญ่ที่ผสมผสานความตื่นเต้นของสล็อตออนไลน์เข้ากับตำนานของ King Midas แล้วหรือยัง? มองไม่ไกลจาก "Midas Fortune" ของ สล็อต2023 – เกมที่รับประกันความร่ำรวยทองและสัมผัสของ Midas! ในโพสต์บนบล็อกนี้ เราจะเจาะลึกเข้าไปในโลกของ "Midas Fortune" และสำรวจทุกสิ่งที่คุณจำเป็นต้องรู้เพื่อร่ำรวยในเกมสล็อตออนไลน์ที่น่าหลงใหลนี้
jackmaa
2023-10-20 17:25
SafePal Wallet we can say that it is far different from the traditional crypto wallets where the wallet is present either in the hardware form or the software form
leo
2023-10-20 19:05
Cash App Login |LOBSTR Wallet |LOBSTR is a great way to get started with Stellar crypto.
naomifloress
2023-10-24 02:45
It was very useful and interesting for me to read. I also want to share some information about the best writing company where every student can buy marketing essay . If it is relevant for you, let me know!
stveevmarkle
2023-10-25 19:20
Get a closer look at your Vanguard retirement plan. Log in to get a complete picture of your plan account and help with reaching your financial goals.Log in to your Vanguard personal investor accounts here. vanguard login
stveevmarkle
2023-10-25 19:21
Get a closer look at your Vanguard retirement plan. Log in to get a complete picture of your plan account and help with reaching your financial goals.Log in to your Vanguard personal investor accounts here. vanguard login
alvis
2023-10-26 18:22
The Frame Wallet also has a social media account, especially for young traders who are constantly on their social media. So, teenagers who are too lazy to check the official website of Frame to stay updated on their wallets should follow its social media handles. https://sites.google.com/coinswalletes.com/framewallet/home
分页: 404/438 399 400 401 402 403 404 405 406 407 408