为什么你的 Nginx 撑不住高并发？

# 工作进程数 = CPU核心数worker_processes auto;
# 每个进程的最大连接数worker_connections 65535;
# 工作进程优先级（-20到20，数值越小优先级越高）worker_priority -10;
# CPU亲和性绑定，避免进程在CPU间切换worker_cpu_affinity auto;
# 工作进程打开文件数限制worker_rlimit_nofile 100000;

events {    # 使用epoll事件驱动（Linux最优选择）    useepoll;        # 允许同时接受多个连接    multi_accepton;        # 连接数配置    worker_connections65535;        # 接受连接后立即禁用accpet锁    accept_mutexoff;}

http {    # 高效文件传输    sendfileon;    tcp_nopushon;    tcp_nodelayon;        # 连接超时配置    keepalive_timeout60;    keepalive_requests10000;    client_header_timeout10;    client_body_timeout10;    send_timeout10;        # 缓冲区大小优化    client_header_buffer_size4k;    large_client_header_buffers88k;    client_body_buffer_size128k;    client_max_body_size50m;        # 开启gzip压缩    gzipon;    gzip_varyon;    gzip_min_length1000;    gzip_comp_level6;    gzip_types        text/plain        text/css        text/javascript        application/javascript        application/json        application/xml;        # 隐藏版本信息    server_tokensoff;}

http {    # 连接池配置    upstream backend {        keepalive300;        keepalive_requests10000;        keepalive_timeout60s;                server192.168.1.100:8080 weight=3 max_fails=3 fail_timeout=30s;        server192.168.1.101:8080 weight=2 max_fails=3 fail_timeout=30s;    }        # 打开文件缓存    open_file_cache max=100000 inactive=20s;    open_file_cache_valid30s;    open_file_cache_min_uses2;    open_file_cache_errorson;        # FastCGI缓存配置（适用于PHP）    fastcgi_cache_path /var/cache/nginx levels=1:2 keys_zone=fcgi:100m inactive=60m;    fastcgi_cache_key"$scheme$request_method$host$request_uri";    fastcgi_cache_use_staleerror timeout invalid_header http_500;}

    
http {    # 限制请求速率    limit_req_zone$binary_remote_addr zone=api:10m rate=100r/s;    limit_req_zone$binary_remote_addr zone=login:10m rate=5r/s;        # 限制连接数    limit_conn_zone$binary_remote_addr zone=perip:10m;    limit_conn_zone$server_name zone=perserver:10m;        server {        # 应用限流规则        limit_req zone=api burst=200 nodelay;        limit_conn perip 20;        limit_conn perserver 2000;                # 静态资源长缓存        location~* \.(jpg|jpeg|png|gif|ico|css|js)$ {            expires1y;            add_header Cache-Control "public, immutable";        }                # API接口优化        location /api/ {            limit_req zone=api burst=50 nodelay;            proxy_pass http://backend;            proxy_http_version1.1;            proxy_set_header Connection "";            proxy_connect_timeout5s;            proxy_send_timeout10s;            proxy_read_timeout10s;        }    }}

# 编辑 /etc/sysctl.confcat >> /etc/sysctl.conf << EOF
# 网络核心参数net.core.somaxconn = 65535net.core.netdev_max_backlog = 30000net.core.rmem_default = 262144net.core.rmem_max = 16777216net.core.wmem_default = 262144net.core.wmem_max = 16777216
# TCP参数优化net.ipv4.tcp_max_syn_backlog = 65535net.ipv4.tcp_syncookies = 1net.ipv4.tcp_tw_reuse = 1net.ipv4.tcp_fin_timeout = 15net.ipv4.tcp_keepalive_time = 600net.ipv4.tcp_keepalive_probes = 3net.ipv4.tcp_keepalive_intvl = 15
# 连接跟踪表大小net.netfilter.nf_conntrack_max = 1048576net.nf_conntrack_max = 1048576
# 文件描述符限制fs.file-max = 1048576
EOF
# 应用配置sysctl -p

# 编辑 /etc/security/limits.confcat >> /etc/security/limits.conf << EOF
# 用户进程限制* soft nofile 1048576* hard nofile 1048576* soft nproc 1048576* hard nproc 1048576
# nginx用户特殊配置nginx soft nofile 1048576nginx hard nofile 1048576
EOF

#!/bin/bash# nginx_monitor.sh - Nginx性能监控脚本
echo"=== Nginx连接状态 ==="ss -s
echo"=== 活跃连接数 ==="netstat -n | awk '/^tcp/ {++S[$NF]} END {for(a in S) print a, S[a]}'
echo"=== Nginx进程状态 ==="ps aux | grep nginx | grep -v grep
echo"=== 系统负载 ==="uptime
echo"=== 内存使用情况 ==="free -h
echo"=== Nginx访问统计 ==="curl -s http://localhost/nginx_status

# wrk压测工具使用wrk -t20 -c1000 -d60s --latency http://your-domain.com/
# ab压测命令ab -n 100000 -c 1000 http://your-domain.com/
# 系统资源监控top -p $(pgrep nginx | tr '\n' ',' | sed 's/,$//')

# 三级缓存配置示例location / {    # L1: Nginx本地缓存    try_files$uri@proxy;}
location@proxy {    # L2: 代理缓存    proxy_cache my_cache;    proxy_cache_valid2003021h;    proxy_cache_valid4041m;    proxy_pass http://backend;        # 缓存锁，防止缓存击穿    proxy_cache_lockon;    proxy_cache_lock_timeout5s;}

upstream backend {    # 一致性哈希，保证会话粘性    hash $remote_addr consistent;        # 健康检查（需要nginx-plus或第三方模块）    server 192.168.1.100:8080 weight=3 max_fails=3 fail_timeout=30s;    server 192.168.1.101:8080 weight=3 max_fails=3 fail_timeout=30s;    server 192.168.1.102:8080 weight=2 max_fails=3 fail_timeout=30s backup;}