[文章作者:张宴 本文版本:v1.2 最后修改:2008.01.02 转载请注明出处:http://blog.zyan.cc]
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
2、创建Varnish日志目录(/var/logs/):
3、编译安装varnish:
4、创建Varnish配置文件:
输入以下内容:
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
7、配置开机自动启动Varnish
在末尾增加以下内容:
8、优化Linux内核参数
在末尾增加以下内容:
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
(3)、例:清除所有缓存:
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
设置在每天00:00定时执行:
我曾经写过一篇文章──《初步试用Squid的替代产品──Varnish Cache网站加速器》,但当时仅仅是用着玩,没做深入研究。
今天写的这篇关于Varnish的文章,已经是一篇可以完全替代Squid做网站缓存加速器的详细解决方案了。网上关于Varnish的资料很少,中文资料更是微乎其微,希望本文能够吸引更多的人研究、使用Varnish。
在我看来,使用Varnish代替Squid的理由有三点:
1、Varnish采用了“Visual Page Cache”技术,在内存的利用上,Varnish比Squid具有优势,它避免了Squid频繁在内存、磁盘中交换文件,性能要比Squid高。
2、Varnish的稳定性还不错,我管理的一台图片服务器运行Varnish已经有一个月,没有发生过故障,而进行相同工作的Squid服务器就倒过几次。
3、通过Varnish管理端口,可以使用正则表达式快速、批量地清除部分缓存,这一点是Squid不能具备的。
下面来安装Varnish网站缓存加速器(Linux系统):
1、创建www用户和组,以及Varnish缓存文件存放目录(/var/vcache):
/usr/sbin/groupadd www -g 48
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
/usr/sbin/useradd -u 48 -g www www
mkdir -p /var/vcache
chmod +w /var/vcache
chown -R www:www /var/vcache
2、创建Varnish日志目录(/var/logs/):
mkdir -p /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
chmod +w /var/logs
chown -R www:www /var/logs
3、编译安装varnish:
wget http://blog.zyan.cc/soft/linux/varnish/varnish-1.1.2.tar.gz
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
tar zxvf varnish-1.1.2.tar.gz
cd varnish-1.1.2
./configure --prefix=/usr/local/varnish
make && make install
4、创建Varnish配置文件:
vi /usr/local/varnish/vcl.conf
输入以下内容:
引用
backend myblogserver {
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
set backend.host = "192.168.0.5";
set backend.port = "80";
}
acl purge {
"localhost";
"127.0.0.1";
"192.168.1.0"/24;
}
sub vcl_recv {
if (req.request == "PURGE") {
if (!client.ip ~ purge) {
error 405 "Not allowed.";
}
lookup;
}
if (req.http.host ~ "^blog.zyan.cc") {
set req.backend = myblogserver;
if (req.request != "GET" && req.request != "HEAD") {
pipe;
}
else {
lookup;
}
}
else {
error 404 "Zhang Yan Cache Server";
lookup;
}
}
sub vcl_hit {
if (req.request == "PURGE") {
set obj.ttl = 0s;
error 200 "Purged.";
}
}
sub vcl_miss {
if (req.request == "PURGE") {
error 404 "Not in cache.";
}
}
sub vcl_fetch {
if (req.request == "GET" && req.url ~ "\.(txt|js)$") {
set obj.ttl = 3600s;
}
else {
set obj.ttl = 30d;
}
}
这里,我对这段配置文件解释一下:
(1)、Varnish通过反向代理请求后端IP为192.168.0.5,端口为80的web服务器;
(2)、Varnish允许localhost、127.0.0.1、192.168.0.***三个来源IP通过PURGE方法清除缓存;
(3)、Varnish对域名为blog.zyan.cc的请求进行处理,非blog.zyan.cc域名的请求则返回“Zhang Yan Cache Server”;
(4)、Varnish对HTTP协议中的GET、HEAD请求进行缓存,对POST请求透过,让其直接访问后端Web服务器。之所以这样配置,是因为POST请求一般是发送数据给服务器的,需要服务器接收、处理,所以不缓存;
(5)、Varnish对以.txt和.js结尾的URL缓存时间设置1小时,对其他的URL缓存时间设置为30天。
5、启动Varnish
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
6、启动varnishncsa用来将Varnish访问日志写入日志文件:
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/varnish.log &
7、配置开机自动启动Varnish
vi /etc/rc.local
在末尾增加以下内容:
引用
ulimit -SHn 51200
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
/usr/local/varnish/sbin/varnishd -n /var/vcache -f /usr/local/varnish/vcl.conf -a 0.0.0.0:80 -s file,/var/vcache/varnish_cache.data,1G -g www -u www -w 30000,51200,10 -T 127.0.0.1:3500 -p client_http11=on
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
8、优化Linux内核参数
vi /etc/sysctl.conf
在末尾增加以下内容:
引用
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 5000 65000
再看看如何管理Varnish:
1、查看Varnish服务器连接数与命中率:
/usr/local/varnish/bin/varnishstat
2、通过Varnish管理端口进行管理:
用help看看可以使用哪些Varnish命令:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 help
引用
Available commands:
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
ping [timestamp]
status
start
stop
stats
vcl.load
vcl.inline
vcl.use
vcl.discard
vcl.list
vcl.show
param.show [-l] []
param.set
help [command]
url.purge
dump.pool
3、通过Varnish管理端口,使用正则表达式批量清除缓存:
(1)、例:清除类似http://blog.zyan.cc/a/zhangyan.html的URL地址):
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge /a/
(2)、例:清除类似http://blog.zyan.cc/tech的URL地址:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge w*$
(3)、例:清除所有缓存:
/usr/local/varnish/bin/varnishadm -T 127.0.0.1:3500 url.purge *$
4、一个清除Squid缓存的PHP函数(清除Varnish缓存同样可以使用该函数,无需作任何修改,十分方便):
附1:Varnish官方网站:http://www.varnish-cache.org/
附2:2007年12月10日,我写了一个每天0点运行,按天切割Varnish日志,生成一个压缩文件,同时删除上个月旧日志的脚本(/var/logs/cutlog.sh):
/var/logs/cutlog.sh文件内容如下:
引用
#!/bin/sh
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
# This file run at 00:00
date=$(date -d "yesterday" +"%Y-%m-%d")
pkill -9 varnishncsa
mv /var/logs/youvideo.log /var/logs/${date}.log
/usr/local/varnish/bin/varnishncsa -n /var/vcache -w /var/logs/youvideo.log &
mkdir -p /var/logs/youvideo/
gzip -c /var/logs/${date}.log > /var/logs/youvideo/${date}.log.gz
rm -f /var/logs/${date}.log
rm -f /var/logs/youvideo/$(date -d "-1 month" +"%Y-%m*").log.gz
设置在每天00:00定时执行:
/usr/bin/crontab -e
或者 vi /var/spool/cron/root
输入以下内容:引用
0 0 * * * /bin/sh /var/logs/cutlog.sh
jhgf
2024-5-30 14:14
Ledger Live is a comprehensive application designed to efficiently manage your Ledger hardware wallet. With its user-friendly interface, Ledger Live allows you to securely buy, sell, exchange, and expand your cryptocurrency holdings. Ledger Live supports a diverse array of cryptocurrencies and provides real-time updates on your balances along with detailed transaction tracking. By ensuring the safety of your digital assets, Ledger Live gives you full control over your financial portfolio.
afgooey
2024-5-30 16:54
afgooeyI found this blog site it’s very informative and helpful.
yoroi wallet
2024-6-1 19:55
Bitcoin Wallet is a free software program that can be downloaded for desktops or mobiles. It allows for a safe connection to a Bitcoin hardware wallet.<a href="https://bitcoinwalte.com/">bitcoin wallet</a><a href="https://exodaswllet.com/">exodus wallet</a><a href="https://bitcoinwallte.com/">bitcoin wallet</a><a href="https://trezorsuitehub.com/">trezor suite</a><a href="https://trustwalte.org/">trust wallet</a><a href="https://trust-walte.org/">trust wallet</a><a href="https://trustwalte.org/">trust wallet download</a><a href="https://trust-walte.org/">trust wallet download</a><a href="https://venomwalue.com/">venom wallet</a><a href="https://blue-walte.org/">blue wallet</a><a href="https://yoroiowale.com/">yoroi wallet</a><a href="https://yoroiwalte.com/">yoroi wallet</a><a href="https://xversewalletapp.org/">xverse wallet</a><a href="https://xversewalte.org/">xverse wallet</a><a href="https://atomicwalte.org/">atomic wallet</a><a href="https://atomicwalte.co.uk/">atomic wallet</a><a href="https://officesetupp-office.org/">office setup</a><a href="https://office-officesetup.org/">office setup</a><a href="https://web--sso--robinhoodauth.com/">robinhood login</a>
Niki Jhone
2024-6-5 13:42
https://sites.google.com/extension-logi.com/phantomwalletextension/homehttps://sites.google.com/extension-logi.com/phantomextension/home
fg
2024-6-6 13:19
MetaMask Login is a popular cryptocurrency wallet and gateway to blockchain apps. MetaMask Login provides a secure and straightforward way to access your digital assets and interact with decentralized applications (dApps).MetaMask Login ensures that users can easily manage their Ethereum-based tokens and other digital assets. It offers robust security features, including encryption and password protection, to keep your assets safe.Exodus Wallet is a multi-cryptocurrency wallet designed for both beginners and experienced users. It offers a sleek, intuitive interface that allows users to manage, exchange, and store a wide variety of cryptocurrencies.
df
2024-6-8 14:26
Hydro Airdrop is a promotional event designed to distribute Hydro tokens to a broad audience. Participants can receive free Hydro tokens by completing simple tasks such as joining the Hydro community on social media, referring friends, or using specific features of the Hydro platform.https://hydroairdrop.com/
mjn express
2024-6-9 06:13
http://news.herbapproach.org/mjn-express/Thank You for providing a quality article on your blog site. Keep up the good work!
sds
2024-6-10 14:44
تعتمد خدمات <a href="https://gomhoria.net" name="شركات نقل اثاث بالقاهرة">شركات نقل اثاث بالقاهرة</a> في الجمهورية على استخدام أحدث التقنيات والمعدات الخاصة بنقل الأثاث بدون أي تلفيات أو خسائر. <a href="https://bit.ly/3UQc889" name="شركات نقل الاثاث بالهرم">شركات نقل الاثاث بالهرم</a> المتخصصة في هذا المجال تقدم خدماتها بفرق عمل مدربة تدريباً جيداً على تعامل مع الأثاث بكل حرفية وحذر، مما يضمن وصول العفش إلى مكان الوجهة بشكل سليم وبدون تضرر.
sdwfds
2024-6-10 14:45
تعتمد خدمات <a href="https://gomhoria.net" name="شركات نقل اثاث بالقاهرة">شركات نقل اثاث بالقاهرة</a> في الجمهورية على استخدام أحدث التقنيات والمعدات الخاصة بنقل الأثاث بدون أي تلفيات أو خسائر. <a href="https://bit.ly/3UQc889" name="شركات نقل الاثاث بالهرم">شركات نقل الاثاث بالهرم</a> المتخصصة في هذا المجال تقدم خدماتها بفرق عمل مدربة تدريباً جيداً على تعامل مع الأثاث بكل حرفية وحذر، مما يضمن وصول العفش إلى مكان الوجهة بشكل سليم وبدون تضرر.
sdwfds
2024-6-10 14:46
شركات نقل الاثاث بمدينة نصر شركات نقل اثاث بمدينة المستقبل شركة نقل الاثاث بالتجمع الخامس شركات نقل الاثاث في العاشر من رمضانشركات نقل الاثاث بالقاهرة الجديدةشركات نقل الاثاث بالخصوص شركات نقل الاثاث باكتوبر شركات نقل اثاث بالمقطم
black diamond stain
2024-6-11 10:42
black diamond stain Your thoughts about this are very organized and amazing.
skittles strain
2024-6-11 17:29
skittles strainI found this blog site it’s very informative and helpful.
Trezor.io/start
2024-6-11 18:18
To get started protecting your cryptocurrency holdings, visit trezor.io/start. You can store your Bitcoin, Ethereum, and other digital currencies with confidence when you use Trezor's industry-leading hardware wallets. Organize your money and safeguard your investments against online attacks. Put your security first and get started right away.Read More:-Metamask Extension |ledger.com/start
Wedding Cake
2024-6-13 06:29
I really like the knowledge you present here in this article. Keep it up!Wedding Cake
THC Edibles
2024-6-13 11:24
http://herbapproach.com/product-category/edibles/This is absolutely outstanding work. Keep it up!
jasan
2024-6-13 16:42
Ledger Live is a comprehensive, easy-to-use application for managing Ledger hardware wallets. It provides a secure interface for users to store, manage, and trade cryptocurrencies. Ledger Live supports a wide range of cryptocurrencies and allows users to monitor their portfolio in real-time, view detailed transaction history, and receive notifications about their account. The app provides a seamless experience to buy, sell, and exchange digital assets directly within the platform. Security is paramount, as Ledger Live keeps private keys offline and integrates robust measures to securely verify transactions. The app is available for both desktop and mobile devices, allowing users to easily manage their digital assets anytime, anywhere. With its intuitive design and comprehensive functionality, Ledger Live is an essential tool for both beginners and experienced cryptocurrency users, providing security and efficient asset management.https://nz-ledgerlive.com/
jasan
2024-6-13 19:09
Ledger Live is a comprehensive, easy-to-use application for managing Ledger hardware wallets. It provides a secure interface for users to store, manage, and trade cryptocurrencies. Ledger Live supports a wide range of cryptocurrencies and allows users to monitor their portfolio in real-time, view detailed transaction history, and receive notifications about their account. The app provides a seamless experience to buy, sell, and exchange digital assets directly within the platform. Security is paramount, as Ledger Live keeps private keys offline and integrates robust measures to securely verify transactions. The app is available for both desktop and mobile devices, allowing users to easily manage their digital assets anytime, anywhere. With its intuitive design and comprehensive functionality, Ledger Live is an essential tool for both beginners and experienced cryptocurrency users, providing security and efficient asset management.
Cuevana
2024-6-17 21:15
In the ever-expanding universe of online streaming platforms, cuevana stands out as a pioneer, a disruptor, and a testament to the power of innovation in the digital age. Since its inception, Cuevana has been synonymous with accessibility, convenience, and a vast array of content, reshaping the way we consume movies and TV shows. Let's delve into the journey of Cuevana, exploring its origins, evolution, and impact on the streaming landscape. Cuevana<a href="https://w3.cuevana33.com/">cuevana</a><a href="https://v3.cuevana33.com/">cuevana</a><a href="https://vw3.cuevana33.com/">cuevana</a>
Ellaanna
2024-6-18 16:30
https://sites.google.com/phantomm-extension.com/phantomwalletextension/homehttps://sites.google.com/phantomm-extension.com/phantomextension/home
linajanker
2024-6-18 20:06
As the decentralized web develops further, MetaMask Portfolio is going to become an even more significant component. With its ability to facilitate smooth DApp interactions and support novel blockchain networks, MetaMask Portfolio is well-positioned to continue being a vital component of the bitcoin landscape.MetaMask serves as your entry point to the decentralized web and is much more than just a wallet. MetaMask Login offers the features and tools you need, regardless of skill level, to safely manage your digital assets and delve into the fascinating realm of blockchain technology. Start your trip into the decentralized web and the future of banking by installing MetaMask now.MetaMask Portfolio
分页: 425/436 420 421 422 423 424 425 426 427 428 429