[文章作者:张宴 本文版本:v1.2 最后修改:2008.01.02 转载请注明出处:http://blog.zyan.cc]

  我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。

  今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。

  在我看来,使用Varnish代替Squid的理由有三点:
  1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
  2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
  3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。

  点击在新窗口中浏览此图片


  下面来安装Varnish网站缓存加速器(Linux系统):
  1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
/usr/sbin/groupadd www -g 48
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache


  2、创建Varnish日志目录(/var/logs/):
mkdir -p /var/logs
chmod +w /var/logs
chown -R www:www /var/logs


  3、编译安装varnish:
wget http://blog.zyan.cc/soft/linux/varnish/varnish-1.1.2.tar.gz
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install


  4、创建Varnish配置文件:
vi /usr/local/varnish/vcl.conf

  输入以下内容:
引用
backend myblogserver {
       set backend.host = "192.168.0.5";
       set backend.port = "80";
}

acl purge {
       "localhost";
       "127.0.0.1";
       "192.168.1.0"/24;
}

sub vcl_recv {
       if (req.request == "PURGE") {
               if (!client.ip ~ purge) {
                       error 405 "Not allowed.";
               }
               lookup;
       }

       if (req.http.host ~ "^blog.zyan.cc") {
               set req.backend = myblogserver;
               if (req.request != "GET" && req.request != "HEAD") {
                       pipe;
               }
               else {
                       lookup;
               }
       }
       else {
               error 404 "Zhang Yan Cache Server";
               lookup;
       }
}

sub vcl_hit {
       if (req.request == "PURGE") {
               set obj.ttl = 0s;
               error 200 "Purged.";
       }
}

sub vcl_miss {
       if (req.request == "PURGE") {
               error 404 "Not in cache.";
       }
}

sub vcl_fetch {
       if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
               set obj.ttl = 3600s;
       }
       else {
               set obj.ttl = 30d;
       }
}

  这里,我对这段配置文件解释一下:
  (1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
  (2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
  (3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
  (4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
  (5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。

  5、启动Varnish
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on


  6、启动varnishncsa用来将Varnish访问日志写入日志文件:
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/varnish.log &


  7、配置开机自动启动Varnish
vi /etc/rc.local

  在末尾增加以下内容:
引用
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &


  8、优化Linux内核参数
vi /etc/sysctl.conf

  在末尾增加以下内容:
引用
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000    65000



  再看看如何管理Varnish:
  1、查看Varnish服务器连接数与命中率:
/usr/local/varnish/bin/varnishstat

  点击在新窗口中浏览此图片

  2、通过Varnish管理端口进行管理:
  用help看看可以使用哪些Varnish命令:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 help

引用
Available commands:
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool


  3、通过Varnish管理端口,使用正则表达式批量清除缓存:
  (1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge /a/

  (2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge w*$

  (3)、例:清除所有缓存:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge *$


  4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):


  附1:Varnish官方网站:http://www.varnish-cache.org/

  附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
  /var/logs/cutlog.sh文件内容如下:
引用
#!/bin/sh
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz

  设置在每天00:00定时执行:
  
/usr/bin/crontab -e
  或者  
vi /var/spool/cron/root
  输入以下内容:
引用
0 0 * * * /bin/sh /var/logs/cutlog.sh



Tags: , , ,



技术大类 » Cache与存储 | 评论(8653) | 引用(0) | 阅读(806726)
Chris Brown
2024-1-23 19:47
If there have been updates or changes to MetaMask since then, I recommend checking the official MetaMask App website or other reliable sources for the latest information. MetaMask app is both a wallet & a browser. It allows you to buy, send, spend & exchange your digital assets. Make payments to anyone, anywhere. Log into ...Metamask App
jackmaa Email
2024-1-24 13:16
Metamask Extension is an interpreter, a tour guide, a passport (or identification), and a secure pocket, all in one. Metamask is a browser extension that serves as a cryptocurrency wallet and a gateway to the world of decentralized applications
mahira saq Email
2024-1-24 15:24
Metamask Portfolio offers the following tools: Buy: This feature allows you to buy crypto with Fiat, to be deposited directly into your wallet. You can currently buy crypto with a Debit card, Paypal or your bank account
rosesaira
2024-1-24 17:51
Metamask Login is a self-custodial wallet that lets you access blockchain applications and web3 in seconds Download MetaMask today and start exploring Learn how to log in to MetaMask, a web3 browser extension that lets you interact with Ethereum
Housiey Email
2024-1-24 18:28
Kanakia Beverly Heights Bhayandar East - Virtual Tour, Pricing, Pros&ConsKanakia Beverly Heights will be constructed on 1.50 Acres of land parcel, 2 towers with G+6P+37 floors having 1 BHK, 2 BHK premium residences.https://housiey.com/projects/kanakia-beverly-heights
Robert Email
2024-1-24 19:59
MetaMask Chrome extension that serves as a cryptocurrency wallet and gateway to decentralized applications (DApps) on the Ethereum blockchain. With over a million users, MetaMask allows you to manage your Ethereum-based assets, including tokens and NFTs, directly from your browser.MetaMask Chrome also adds an extra layer of protection by requiring users to verify transactions. With its user-friendly interface and compatibility with multiple Ethereum networks, MetaMask is a must-have for anyone using the decentralized web and exploring the ever-expanding world of blockchain applications and assets.
buy fruit Email Homepage
2024-1-25 17:22
Shop for groceries online with our convenient grocery delivery service. Get fresh produce, pantry staples, and more delivered to your doorWeb   :-     https://freshbuyzar.com/
buy fruit Email Homepage
2024-1-25 17:22
Shop for groceries online with our convenient grocery delivery service. Get fresh produce, pantry staples, and more delivered to your doorWeb   :-     https://freshbuyzar.com/
jadmason Email Homepage
2024-1-25 17:47
Crypto.com login issues Crypto.com login issues official status page for any ongoing issues. If problems persist, contacting Crypto.com's customer support for assistance is recommended. It's crucial to stay vigilant against phishing attempts and only use official channels to address login concerns.paypal usdt  deals with major fiat currencies and a limited selection of cryptocurrencies. The cryptocurrencies supported by PayPal include Bitcoin, Ethereum, Litecoin, and Bitcoin Cash.
missy Email Homepage
2024-1-25 20:43
https://sites.google.com/view/paypalemailloginus/https://sites.google.com/view/paypallogininusa/https://sites.google.com/view/paypallogininus/https://sites.google.com/view/paypalloginius/https://sites.google.com/view/paypalloginusn/home/https://sites.google.com/view/paypallogiinus/home/https://sites.google.com/view/paypallogin-iusa/https://printersetupshop.com/canon/https://www.us-ijstartcannon.com/https://mytv.peoypal.com/https://cuevana33.com/https://www.mcakey.com/https://sites.google.com/pypyi.com/paypallogin/home/https://epayoption.com/paypallogin/https://antivirus.mcakey.com/antivirus-support/https://sites.google.com/pypyi.com/amazonprime/home/https://www.mykashipur.com/paypal-change-to-business-account/
JOHNN Email Homepage
2024-1-26 22:25
Thank you so much for this kind of valuable post its amazing post it may helpful for each visitors. For more information go through my websites here: fubo.tv/connect fubo.tv/connect
Metamask Chrome Extension Email
2024-1-27 14:24
To add MetaMask Chrome Extension,visit the Chrome Web Store, search for "MetaMask," and click "Add to Chrome." Follow the installation prompts, create a wallet, and securely store your private key. Once installed, the MetaMask icon will appear in your browser, allowing easy access to your Ethereum funds and DApps. It enhances your MetaMask Extension experience by integrating blockchain functionalities directly into your browser.
cavibe Email Homepage
2024-1-27 23:56
NICE ARTICLE. VISIT MY WEBSITE.Regards,fubo.tv/connect
fubo.tv/connect Email Homepage
2024-1-28 00:00
NICE ARTICLE. VISIT MY WEBSITE.Regards,fubo.tv/connect
pheehu Email
2024-1-28 02:08
+919681199245+918967686952https://www.kolkataescortsgirl.comhttps://www.shruthikapoor.comhttps://pheehu.com/https://bipasharoy.com/http://hotladki.com
johanrtose Email
2024-1-29 15:05
 wallet to DApps to perform actions such as trading on decentralized exchanges, participating in decentralized finance (DeFi) protocols, and more.Follow the on-screen instructions to and browser extension that allows users to interact with decentralized applications (DApps) and manage their Ethereum-based assets,to interact with decentralized applications (DApps) on the Ethereum blockchain. It provides a convenient way for users to manage their Ethereum-based assets, send and receive cryptocurrencies, and participate in various blockchain activities.  Here are key Always ensure that you are downloading browser extensions from official sources to avoid security risks.MetaMask ExtensionMetaMask Wallet Extension MetaMask Chrome Extension  .
ella Email
2024-1-30 22:29
Keep your crypto safe and secure with Okx Wallet. Our easy-to-use and highly secure wallet is perfect for storing all your digital assets in one place. Try it now!Okx WalletManage all your cryptocurrencies in one secure and user-friendly wallet with AtomicDEX. Download the AtomicDEX Wallet and take control of your digital assets today. AtomicDEX Wallet
shira Email Homepage
2024-1-31 13:51
But Metamask sign in is an exception, you can trust this wallet for the protection and it will not disappoint you. However, this blog is not an overview of the common things
cavib Email Homepage
2024-2-1 00:16
Thank you so much for this kind of valuable post its amazing post it may helpful for each visitors. For more information go through my websites here: fubo.tv/connect fubo.tv/connect
EdhaCare Email
2024-2-1 20:16
La chirurgie de remplacement de la hanche, également connue sous le nom d'arthroplastie de la hanche, est une intervention chirurgicale visant à remplacer une articulation de la hanche endommagée ou usée.chirurgie de remplacement de la hanche
分页: 412/433 第一页 上页 407 408 409 410 411 412 413 414 415 416 下页 最后页
发表评论
表情
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
emotemotemotemotemot
打开HTML
打开UBB
打开表情
隐藏
记住我
昵称   密码   游客无需密码
网址   电邮   [注册]