Nginx反向代理和负载均衡的原理和实例

user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

	
	
    include /etc/nginx/conf.d/*.conf;
}

server {
    listen       80;
    server_name  localhost;

    #charset koi8-r;
    #access_log  /var/log/nginx/host.access.log  main;

    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
		proxy_pass http://127.0.0.1:8080/;
    }

    #error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }

    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    #
    #location ~ \.php$ {
    #    proxy_pass   http://127.0.0.1;
    #}

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    #location ~ \.php$ {
    #    root           html;
    #    fastcgi_pass   127.0.0.1:9000;
    #    fastcgi_index  index.php;
    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
    #    include        fastcgi_params;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #    deny  all;
    #}
}

...              #全局块

events {         #events块
   ...
}

http      #http块
{
    ...   #http全局块
    server        #server块
    { 
        ...       #server全局块
        location [PATTERN]   #location块
        {
            ...
        }
        location [PATTERN] 
        {
            ...
        }
    }
    server
    {
      ...
    }
    ...     #http全局块
}

user  nginx;                #配置用户或者组，默认为nobody nobody。
worker_processes  1;        #允许生成的进程数，默认为1

error_log  /var/log/nginx/error.log warn;       #制定日志路径，级别。这个设置可以放入全局块，http块，server块，级别以此为：debug|info|notice|warn|error|crit|alert|emerg
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;                   #最大连接数，默认为512
}

http {
    include       /etc/nginx/mime.types;        #文件扩展名与文件类型映射表
    default_type  application/octet-stream;     #默认文件类型，默认为text/plain

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';             #自定义格式

    access_log  /var/log/nginx/access.log  main;                                #combined为日志格式的默认值
    sendfile        on;                     #允许sendfile方式传输文件，默认为off，可以在http块，server块，location块。
    #tcp_nopush     on;
    keepalive_timeout  65;                  #连接超时时间，默认为75s，可以在http，server，location块。
    #gzip  on;

    server {
        listen       80;                        #监听的端口号
        server_name  localhost;                 #监听的地址，可以为ip，也可以为解析过的域名  
    
        location / {                                #请求的url过滤，正则匹配，~为区分大小写，~*为不区分大小写。
            root   /usr/share/nginx/html;           #根目录
            index  index.html index.htm;            #设置默认页
    		proxy_pass http://127.0.0.1:8080/;      #请求转向的地址
        }
        error_page   500 502 503 504  /50x.html;    #错误页
        location = /50x.html {
            root   /usr/share/nginx/html;
        } 
    }
}

upstream mysvr {   
      server xx.xx.xx.80:7080 backup;#热备
      server xx.xx.xx.201:7080 ;  
    }
	
server {  
        listen       80;  
        server_name  xxx.zwxzzz.top;  
        #charset koi8-r;  
        #access_log  logs/host.access.log  main;  
        location / {  
            proxy_pass   http://mysvr;  
            index  index.html index.htm;  
        }  
     } 

...
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [na:1.8.0_181]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [na:1.8.0_181]
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
	at java.lang.Thread.run(Thread.java:748) [na:1.8.0_181]

2018-11-01 18:24:09.951  INFO 21627 --- [nio-7080-exec-5] com.alibaba.druid.pool.DruidDataSource   : {dataSource-1} inited
Thu Nov 01 18:24:10 CST 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
1
2
3

...
2018-11-01 18:08:58.118  INFO 16382 --- [           main] s.w.ClassOrApiAnnotationResourceGrouping : Group for method hello was 这是一个hello类
2018-11-01 18:08:58.316  INFO 16382 --- [           main] s.b.c.e.t.TomcatEmbeddedServletContainer : Tomcat started on port(s): 7080 (http)
2018-11-01 18:08:58.325  INFO 16382 --- [           main] com.zwx.demo.DemoApplication             : Started DemoApplication in 11.954 seconds (JVM running for 12.755)

...
2018-11-01 18:08:58.316  INFO 16382 --- [           main] s.b.c.e.t.TomcatEmbeddedServletContainer : Tomcat started on port(s): 7080 (http)
2018-11-01 18:08:58.325  INFO 16382 --- [           main] com.zwx.demo.DemoApplication             : Started DemoApplication in 11.954 seconds (JVM running for 12.755)
2018-11-01 18:33:00.850  INFO 16382 --- [nio-7080-exec-1] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring FrameworkServlet 'dispatcherServlet'
2018-11-01 18:33:00.850  INFO 16382 --- [nio-7080-exec-1] o.s.web.servlet.DispatcherServlet        : FrameworkServlet 'dispatcherServlet': initialization started
2018-11-01 18:33:00.866  INFO 16382 --- [nio-7080-exec-1] o.s.web.servlet.DispatcherServlet        : FrameworkServlet 'dispatcherServlet': initialization completed in 16 ms
2018-11-01 18:33:01.058  INFO 16382 --- [nio-7080-exec-1] com.alibaba.druid.pool.DruidDataSource   : {dataSource-1} inited
Thu Nov 01 18:33:01 CST 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
4
5

11
13
15
17
19

Fri Nov 02 15:18:54 CST 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
10
12
14
16
18

Fri Nov 02 15:33:32 CST 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
21
24
27
40
41
42

Fri Nov 02 15:33:28 CST 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
20
22
23
25
26
28
29
30
31
32