[文章作者:张宴 本文版本:v1.2 最后修改:2008.01.02 转载请注明出处:http://blog.zyan.cc]
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
2、创建Varnish日志目录(/var/logs/):
3、编译安装varnish:
4、创建Varnish配置文件:
输入以下内容:
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
7、配置开机自动启动Varnish
在末尾增加以下内容:
8、优化Linux内核参数
在末尾增加以下内容:
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
(3)、例:清除所有缓存:
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
设置在每天00:00定时执行:
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
/usr/sbin/groupadd www -g 48
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
2、创建Varnish日志目录(/var/logs/):
mkdir -p /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
3、编译安装varnish:
wget http://blog.zyan.cc/soft/linux/varnish/varnish-1.1.2.tar.gz
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
4、创建Varnish配置文件:
vi /usr/local/varnish/vcl.conf
输入以下内容:
引用
backend myblogserver {
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/varnish.log &
7、配置开机自动启动Varnish
vi /etc/rc.local
在末尾增加以下内容:
引用
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
8、优化Linux内核参数
vi /etc/sysctl.conf
在末尾增加以下内容:
引用
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
/usr/local/varnish/bin/varnishstat
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 help
引用
Available commands:
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge /a/
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge w*$
(3)、例:清除所有缓存:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge *$
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
引用
#!/bin/sh
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
设置在每天00:00定时执行:
/usr/bin/crontab -e
或者 vi /var/spool/cron/root
输入以下内容:引用
0 0 * * * /bin/sh /var/logs/cutlog.sh
alvis
2024-2-12 19:56
Exodus Wallet est un portefeuille de crypto-monnaie sûr et sécurisé, mais il est aussi sûr et sécurisé que l'ordinateur sur lequel il réside et les pratiques que vous suivez. Exodus n'a aucune connaissance des actifs blockchain des utilisateurs, et toutes les clés et données de transaction sont stockées sur l'appareil de l'utilisateur, garantissant ainsi confidentialité et sécurité.
Super White Borneo Kratom
2024-2-12 20:59
Thank you for sharing the good writes up. Amazing!Super White Borneo Kratom
willa
2024-2-13 01:02
With Magic Eden Wallet, your cryptocurrency is always at your fingertips. Securely store and manage your digital assets with ease using our user-friendly interface. Sign up for MagicEden Wallet today!Magic Eden Wallet | Magic Eden Wallet
gulab118
2024-2-13 01:38
Everything is very open with a very clear description of the issues. It was informative. Your site is very useful. Many thanks for sharing!Viber For Windows Crackhttps://thesoftwares.net/viber-for-windows-crack/
Robret
2024-2-13 12:13
MetaMask Chrome extension que sirve como billetera de criptomonedas y puerta de entrada a aplicaciones basadas en blockchain. Para instalar MetaMask, vaya a Chrome Web Store, busque "MetaMask", luego haga clic en "Agregar a Chrome" y siga las instrucciones de instalación. Una vez instalado, cree una nueva billetera o importe una existente almacenando de forma segura su clave privada.Coinbase Download, visite la tienda de aplicaciones respectiva de su dispositivo: Google Play Store para Android o Apple App Store para iOS. Busque "Coinbase" en la barra de búsqueda, luego toque el ícono de la aplicación Coinbase. Una vez que haya localizado la aplicación, toque el botón "Instalar" (en Android) o el botón "Obtener" (en iOS) para iniciar el proceso de descarga e instalación.Coinbase Wallet, los usuarios pueden enviar y recibir fácilmente una amplia gama de criptomonedas, interactuar con aplicaciones descentralizadas (DApps) y explorar el ecosistema de finanzas descentralizadas (DeFi). La billetera admite tokens Ethereum y basados en Ethereum, así como otras criptomonedas importantes como Bitcoin y Litecoin.
Chris BRown
2024-2-13 19:48
De plus, Trust Wallet Extension est disponible sous forme d'application mobile que vous pouvez installer sur les appareils Android et iOS. Par conséquent, nous devrions maintenant jeter un œil aux sections à venir pour en savoir plus sur ce portefeuille. Trust Wallet Extension
mahira saq
2024-2-14 17:04
Coinbase Wallet est un portefeuille de conservation autonome qui vous donne un controcirc le total sur votre crypto et la seacute curiteacute de vos actifs numeacute riques
dfs
2024-2-14 21:50
Secure your cryptocurrency with Phantom Extension - the ultimate Phantom Wallet Extension. Our easy-to-use extension ensures safe and convenient access to your digital assets. Adding Phantom Wallet Extension to Chrome is a simple process that can enhance your cryptocurrency management experience. With its user-friendly interface and robust security features, Phantom Wallet Extension is a valuable tool for crypto enthusiasts. Phantom Wallet Extension
Malik
2024-2-14 23:32
Nice posthttps://autorunways.com/capcut-crackeadeo/https://autorunways.com/capcut-crackeadeo/
Reacher
2024-2-15 13:17
Trezor Bridge est un logiciel permettant aux utilisateurs de connecter leur portefeuille Trezor à leur ordinateur. Il offre une interface sécurisée pour gérer les actifs cryptographiques et effectuer des transactions en toute tranquillité. Découvrez comment utiliser Trezor Bridge pour protéger vos fonds numériques.
shira
2024-2-15 16:56
Trezor Suite devrait apporter de nombreuses améliorations pour rendre l'utilisation de votre portefeuille encore plus sûre, avec une plus grande confidentialité et entièrement sécurisée par votre appareil Trezor navigateur, Ledger Live wallet.
lucasleoo
2024-2-16 17:45
Ledger Live is the official companion app for Ledger hardware wallets. Download it from Ledger's website or app stores. Manage your crypto assets securely, view balances, track transactions
rosesaira
2024-2-19 12:21
Ledger Wallet stocke vos cls et vous permet de signer des transactions, de grer de nouvelles adresses, d'initier des transferts, de suivre les soldes de portefeuille, de grer votre crypto et d'interagir avec les dApps
Cricketfinal
2024-2-19 12:47
Myfinal11 is one of the most effective websites to give fantasy sports previews and predictions. We take surpassing satisfaction in producing insightful and researched sports updates, predictions, and opinions to help the end-users. MyFinal11 covers sports like Cricket, Football, NBA, Hockey, Kabaddi, and more.click here :- https://myfinal11.in/dream11-match-prediction/
ella
2024-2-19 22:37
Secure and convenient Capital One login for your accounts. Easily manage your finances, make payments, and monitor your credit score with our user-friendly platform.Capital One Login | Capital One Login
lukerobinson291
2024-2-19 23:03
Transform your ideas into captivating presentations with our premium pay for PowerPoint presentation service Whether you\'re a student, professional, or business owner, we understand the importance of delivering visually stunning and impactful presentations that engage your audience. Our team of experienced designers and content creators is dedicated to crafting custom PowerPoint presentations that effectively communicate your message and enhance your storytelling. From sleek templates to dynamic visuals, we ensure that your presentation stands out and leaves a lasting impression. With a focus on creativity, professionalism, and attention to detail, our pay for PowerPoint presentation service guarantees that your slides are polished to perfection. Trust us to elevate your presentations and help you achieve your goals. Choose our service today and make your ideas shine.https://perfect-essay-writer.com/pay-for-powerpoint-presentation/
d
2024-2-20 18:10
Trezor Wallet Trezor Wallet is a hardware wallet designed to securely store and manage cryptocurrencies offline. With its robust security features and intuitive interface, the Trezor Wallet provides users with a safe and convenient way to access and control their digital assets.Trezor Bridge is a software component essential for secure communication between the Trezor hardware wallet and a computer or mobile device. It ensures seamless access to the Trezor Wallet interface, facilitating smooth interaction and management of cryptocurrencies.
selina
2024-2-21 18:25
Drafkings Clone Script|Bet365 Clone Script|Sports betting Script|Fanduel Clone Script
cavibe
2024-2-22 00:42
I want to to thank you foryour time for this wonderful read!! I definitely enjoyed every bit of itand i also have you book marked to check out new things on your blog.Regards,peacocktv.com/tvpeacocktv.com/tv/samsungpeacocktv.com/tvpeacocktv.com/tv/samsung
daisylee
2024-2-22 18:25
Trezor.io is can easily get your Trezor hardware wallet set up and running, ensuring the highest level of security for your cryptocurrencies. Trezor hardware wallets offer top-notch protection against hackers, malware, and other threats by keeping your sensitive data offline.
分页: 414/436 409 410 411 412 413 414 415 416 417 418