LNMP架构之php - HelloWorld开发者社区

本文索引：

php-fpm的进程pool设置
php-fpm慢执行日志
open_basedir参数设置
php-fpm进程管理

php-fpm的pool

php-fpm.conf可以设置多个pool，在其中一个pool资源耗尽，会导致其他站点无法访问资源，报502错误。有必要把站点进行分离，分别使用单独的pool。

修改php-fpm配置文件代码

文件地址：/usr/local/php-fpm/etc/php-fpm.conf

[root@localhost etc]# vim php-fpm.conf ...

新增一个pool代码设置

[test] listen = /tmp/test.sock #listen = 127.0.0.1:9000 listen.mode = 666 user = php-fpm group = php-fpm pm = dynamic pm.max_children = 50 pm.start_servers = 20 pm.min_spare_servers = 5 pm.max_spare_servers = 35 pm.max_requests = 500 rlimit_files = 1024
修改虚拟主机配置文件

这里设置另外一个虚拟主机

实现不同虚拟主机访问资源pool的隔离，互不影响

[root@localhost etc]# cat /usr/local/nginx/conf/vhost/aaa.com.conf server { listen 80 default_server; index index.html index.htm index.php root /data/www/default; location ~ .php$ { include fastcgi_params; # 这里写对应php-fpm.conf内设置的sock fastcgi_pass unix:/tmp/test.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /data/www/default$fastcgi_script_name; } }
重启php-fpm服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [05-Jan-2018 19:37:17] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@localhost etc]# /etc/init.d/php-fpm reload Reload service php-fpm done
查看配置是否生效

已经可以看到创建的pool --- test

[root@localhost etc]# ps aux | grep php-fpm root 2895 1.7 0.3 227208 5008 ? Ss 19:37 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf) ... php-fpm 2915 0.0 0.3 227148 4712 ? S 19:37 0:00 php-fpm: pool www php-fpm 2916 1.4 0.3 227148 4708 ? S 19:37 0:00 php-fpm: pool test ... root 2937 0.0 0.0 112680 976 pts/0 S+ 19:37 0:00 grep --color=auto php-fpm

实现代码分离

在php-fpm.conf内添加如下代码就可以实现类似虚拟主机配置文件分离的效果。

[root@localhost etc]# cat php-fpm.conf
[global]
pid = /usr/local/php-fpm/var/run/php-fpm.pid
error_log = /usr/local/php-fpm/var/log/php-fpm.log
include = etc/php-fpm.d/*.conf

# 将原文件内的www、test pool模块分别写在不同的conf文件内
[root@localhost etc]# vim php-fpm.d/www.conf
[www]
#listen = /tmp/php-fcgi.sock
listen = 127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

[root@localhost etc]# vim php-fpm.d/test.conf
[test]
listen = /tmp/test.sock
#listen = 127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

重启php-fpm服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [05-Jan-2018 20:19:10] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@localhost etc]# /etc/init.d/php-fpm restart Gracefully shutting down php-fpm . done Starting php-fpm done
查看pool是否配置成功

这里test池在前，www池在后

[root@localhost etc]# ps aux | grep php-fpm root 3068 0.2 0.3 227236 4980 ? Ss 20:20 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf) php-fpm 3069 0.0 0.3 227176 4712 ? S 20:20 0:00 php-fpm: pool test php-fpm 3070 0.0 0.3 227176 4712 ? S 20:20 0:00 php-fpm: pool test php-fpm 3071 0.0 0.3 227176 4712 ? S 20:20 0:00 php-fpm: pool test php-fpm 3075 0.0 0.3 227176 4716 ? S 20:20 0:00 ... php-fpm 3079 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool test php-fpm 3080 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool test php-fpm 3081 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool test php-fpm 3089 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool www ... php-fpm 3107 0.0 0.3 227176 4724 ? S 20:20 0:00 php-fpm: pool www php-fpm 3108 0.0 0.3 227176 4724 ? S 20:20 0:00 php-fpm: pool www root 3110 0.0 0.0 112680 976 pts/0 S+ 20:20 0:00 grep --color=auto php-fpm

php-fpm慢执行日志

通过分析php的慢执行日志，可以得知php网站访问缓慢原因。

修改php配置文件www.conf

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/www.conf [www]

这里监听的sock修改为www.sock

listen = /tmp/www.sock ;listen = 127.0.0.1:9000 listen.mode = 666 user = php-fpm group = php-fpm pm = dynamic pm.max_children = 50 pm.start_servers = 20 pm.min_spare_servers = 5 pm.max_spare_servers = 35 pm.max_requests = 500 rlimit_files = 1024

这里添加下面两行代码

设置slowlog间隔为1s，间隔超过1s会记录到慢执行日志内

实际工作中，可以设置为2s，1s太过短暂

request_slowlog_timeout = 1

指定slowlog文件存放路径

slowlog = /usr/local/php-fpm/var/log/www-slow.log
重启php服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [05-Jan-2018 20:43:24] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@localhost etc]# /etc/init.d/php-fpm reload
修改虚拟主机配置文件

[root@localhost etc]# vim /usr/local/nginx/conf/vhost/test.com.conf

修改sock文件

fastcgi_pass unix:/tmp/www.sock; ...
重启nginx服务

[root@localhost etc]# /usr/local/nginx/sbin/nginx -t nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful [root@localhost etc]# /usr/local/nginx/sbin/nginx -s reload
设置测试php文件

[root@localhost etc]# vim /data/www/test.com/sleep.php

要查看具体的错误信息，可以开启php.ini内的display_error参数

查看慢执行日志

[root@localhost etc]# cat /usr/local/php-fpm/var/log/www-slow.log

[05-Jan-2018 21:13:15] [pool www] pid 3430 script_filename = /data/www/test.com/sleep.php [0x00007f616ec772d8] sleep() /data/www/test.com/sleep.php:3

open_basedir参数设置

相关配置代码

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/test.conf

添加如下代码

php_admin_value[open_basedir]=/data/www/test.com:/tmp/

效果测试

先测试错误配置时php脚本的效果

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/test.conf

将添加的代码内站点错误书写为aaa.com

php_admin_value[open_basedir]=/data/www/aaa.com:/tmp/

重启php-fpm服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t
[09-Jan-2018 18:35:50] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@localhost etc]# /etc/init.d/php-fpm restart
Gracefully shutting down php-fpm . done
Starting php-fpm  done

使用curl测试网页访问

# 由于已经设置了open_basedir，网页无法访问
[root@localhost etc]# curl -x 127.0.0.1:80 test.com/test.php -I
HTTP/1.1 404 Not Found
Server: nginx/1.12.2
Date: Tue, 09 Jan 2018 10:38:45 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.6.30

修改正确后验证

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/test.conf

将添加的代码错误书写为

php_admin_value[open_basedir]=/data/www/test.com:/tmp/

重启服务并验证

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t
[09-Jan-2018 18:39:10] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@localhost etc]# /etc/init.d/php-fpm restart
Gracefully shutting down php-fpm . done
Starting php-fpm  done

# 成功访问
[root@localhost etc]# curl -x 127.0.0.1:80 test.com/test.php -I
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Tue, 09 Jan 2018 10:39:20 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.6.30

php错误日志设置

修复php.ini配置文件，关闭display_errors参数

# 不在浏览器上显示错误信息
display_errors = Off

# 开启错误日志记录
log_errors = On
# 设置存放路径
error_log = /usr/local/php-fpm/var/log/php_errors.log
# 设置错误记录级别
error_reporting = E_ALL

为了防止错误日志无法创建并修改，最好先行创建并给予权限。

[root@localhost etc]# touch /usr/local/php-fpm/var/log/php_errors.log
[root@localhost etc]# chmod 777 /usr/local/php-fpm/var/log/php_errors.log

为了产生错误信息，先故意写错php代码

[root@localhost etc]# touch /usr/local/php-fpm/var/log/php_errors.log
[root@localhost etc]# chmod 777 /usr/local/php-fpm/var/log/php_errors.log 
php_admin_value[open_basedir]=/data/www/aaa.com:/tmp/

访问网页，其错误信息如下

[root@localhost etc]# curl -x 127.0.0.1:80 test.com/test.php -I
HTTP/1.1 404 Not Found
Server: nginx/1.12.2
Date: Tue, 09 Jan 2018 10:52:01 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/5.6.30

# 这里明确指出所要访问的网页不在aaa.com站点
[root@localhost etc]# cat /usr/local/php-fpm/var/log/php_errors.log 
[09-Jan-2018 10:52:01 UTC] PHP Warning:  Unknown: open_basedir restriction in effect. File(/data/www/test.com/test.php) is not within the allowed path(s): (/data/www/aaa.com:/tmp/) in Unknown on line 0
[09-Jan-2018 10:52:01 UTC] PHP Warning:  Unknown: failed to open stream: Operation not permitted in Unknown on line 0

修改正确后再查看日志(php文件已被解析)

[root@localhost etc]# cat /usr/local/php-fpm/var/log/php_errors.log 
...
[09-Jan-2018 10:53:18 UTC] PHP Warning:  phpinfo(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /data/www/test.com/test.php on line 2