网邻's Blog
一个信息技术教师的blog

1. Unix兼容性强
2. 速度快
3. 极其稳定、可靠
4. 强大的网络功能
5. 多用户、多任务
6. 使用方便(按照极好的说明文件操作)

操作系统的安装建议参考FreeBSD Handbook，在此仅给出链接，以避免不必要的重复劳动：

• 英文版

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install.html

• 中文版

  http://cnsnap.cn.freebsd.org/doc/zh_CN.GB2312/books/handbook/install.html

1. 磁盘分区

由于是WEB服务系统，网站目录都放于/home目录下，因此home分区要有足够的空间。以一块硬盘146G/内存4G的服务器为例，可做如下分区：

　　/  1024M
　　swap 4096M
　　/var 10G
　　/usr 20G
　　/home 110G
　　/tmp 1024M

2. 软件包的选择

我们的WEB服务系统是要对外服务的，所以尽可能少的选择软件包，安装时建议选择Minimal，然后进入Custom选择doc，info，man，src即可。

配置1. 编辑/etc/rc.conf确保有如下内容：

　　sshd_enable="YES"
　　named_enable="YES"

2．根据硬件的配置重新编译内核,编译内核的办法参考FreeBSD Handbook,这里只给出链接:

• 英文版

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html

• 中文版

  http://cnsnap.cn.freebsd.org/doc/zh_CN.GB2312/books/handbook/kernelconfig.html

编译后系统的性能将得到较大的提升。

安装 Mysql5.1.40

Mysql5.1.40 下载地址： http://dev.mysql.com/get/Downloads/MySQL-5.1/mysql-5.1.40.tar.gz/from/pick

以mysql用户帐号的身份建立数据表

创建 Mysql 开机启动脚本

为 mysql.sh 脚本设置可执行属性

修改 /etc/rc.conf

加入以下内容

启动 Mysql

安装Nginx所需的pcre库

安装 Nginx0.8.24

创建 Nginx 日志目录

创建 Nginx 配置文件

输入以下内容：

user  www www;
worker_processes 8;

error_log  /var/log/nginx/error.log;
pid        /var/log/nginx/nginx.pid;

worker_rlimit_nofile 51200;
events {
  use kqueue;
  worker_connections 51200;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    server_names_hash_bucket_size 128;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;
    client_max_body_size 8m;

    sendfile        on;
    tcp_nopush     on;

    keepalive_timeout  30;

    tcp_nodelay on;

    fastcgi_connect_timeout 300;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 128k;

    gzip  on;
    gzip_min_length   1k;
    gzip_buffers      4 16k;
    gzip_http_version 1.1;
    gzip_comp_level   2;
    gzip_types text/plain application/x-javascript text/css application/xml
    gzip_vary on;

    server {
        listen       80;
        server_name  localhost;
        root   /home/excms;
        index  index.html index.htm index.php;

        location ~ .php$ {
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }

        location /nginx_status {
            stub_status on;
            access_log   off;
        }
    }
}

创建 Nginx 开机启动脚本

加入以下内容

#!/bin/sh

nginx=/usr/local/webserver/nginx/sbin/nginx
conf=/usr/local/webserver/nginx/conf/nginx.conf

case $1 in
       start)
              echo -n "Starting Nginx"
              $nginx -c $conf
              echo " done"
       ;;

       stop)
              echo -n "Stopping Nginx"
              killall -9 nginx
              echo " done"
       ;;

       test)
              $nginx -t -c $conf
       ;;

	reload)
              echo -n "Reloading Nginx"
              ps auxww | grep nginx | grep master | awk '{print $2}' | xargs kill -HUP
              echo " done"
       ;;

	restart)
		$nginx stop
		$nginx start
       ;;

       show)
              ps -aux|grep nginx
       ;;

       *)
              echo -n "Usage: $0 {start|restart|reload|stop|test|show}"
       ;;

esac

为 nginx.sh 脚本设置可执行属性

修改 /etc/rc.conf

加入以下内容

启动 Nginx

在不停止 Nginx 服务的情况下平滑变更 Nginx 配置
修改 /usr/local/webserver/nginx/conf/nginx.conf 配置文件后，请执行以下命令检查配置文件是否正确：

如果屏幕显示以下两行信息，说明配置文件正确：
the configuration file /usr/local/webserver/nginx/conf/nginx.conf syntax is ok
the configuration file /usr/local/webserver/nginx/conf/nginx.conf was tested successfully

tar zxvf zlib-1.2.3.tar.gz
cd zlib-1.2.3
./configure
make && make install clean
cd ..

tar zxvf libpng-1.2.40.tar.gz
cd libpng-1.2.40
./configure
make && make install clean
cd ..

tar zxvf jpegsrc.v7.tar.gz
cd jpeg-7
./configure –prefix=/usr/local/jpeg7 -enable-shared -enable-static
make && make install clean
cd ..

tar zxvf freetype-2.3.11.tar.gz
cd freetype-2.3.11
./configure
make && make install clean
cd ..

tar zxvf gd-2.0.35.tar.gz
cd gd-2.0.35
./configure --prefix=/usr/local/gd2 --with-jpeg=/usr/local/jpeg7 --width-png --width-zlib --width-freetype
make && make install clean
cd ..

tar -zxvf libxml2-2.7.6.tar.gz
cd libxml2-2.7.6
./configure
make && make install clean
cd ..

编译安装PHP（FastCGI模式）

安装 ZendOptimizer

ZendOptimizer 官方下载地址： http://www.zend.com/en/products/guard/downloads

tar zxvf ZendOptimizer-3.3.9-freebsd6.0-i386.tar.gz
cd ZendOptimizer-3.3.3-freebsd6.0-i386
ln -s /usr/lib/libc.so /usr/lib/libc.so.6
ln -s /usr/lib/libcrypt.so /usr/lib/libcrypt.so.3
ln -s /usr/lib/libutil.so /usr/lib/libutil.so.5
ln -s /usr/lib/libm.so /usr/lib/libm.so.4
./install-tty
cd ..

安装过程中的提示全默认就可以，指定php.ini文件路径 /usr/local/webserver/php/etc，到Apache Web Server选no

vi /usr/local/webserver/php/etc/php-fpm.conf

#! /bin/sh

php_fpm_BIN=/usr/local/webserver/php/bin/php-cgi
php_fpm_CONF=/usr/local/webserver/php/etc/php-fpm.conf
php_fpm_PID=/usr/local/webserver/php/logs/php-fpm.pid

php_opts="--fpm-config $php_fpm_CONF"

wait_for_pid () {
	try=0

	while test $try -lt 35 ; do

		case "$1" in
			'created')
			if [ -f "$2" ] ; then
				try=''
				break
			fi
			;;

			'removed')
			if [ ! -f "$2" ] ; then
				try=''
				break
			fi
			;;
		esac

		echo -n .
		try=`expr $try + 1`
		sleep 1

	done

}

case "$1" in
	start)
		echo -n "Starting php_fpm "

		$php_fpm_BIN --fpm $php_opts

		if [ "$?" != 0 ] ; then
			echo " failed"
			exit 1
		fi

		wait_for_pid created $php_fpm_PID

		if [ -n "$try" ] ; then
			echo " failed"
			exit 1
		else
			echo " done"
		fi
	;;

	stop)
		echo -n "Shutting down php_fpm "

		if [ ! -r $php_fpm_PID ] ; then
			echo "warning, no pid file found - php-fpm is not running ?"
			exit 1
		fi

		kill -TERM `cat $php_fpm_PID`

		wait_for_pid removed $php_fpm_PID

		if [ -n "$try" ] ; then
			echo " failed"
			exit 1
		else
			echo " done"
		fi
	;;

	quit)
		echo -n "Gracefully shutting down php_fpm "

		if [ ! -r $php_fpm_PID ] ; then
			echo "warning, no pid file found - php-fpm is not running ?"
			exit 1
		fi

		kill -QUIT `cat $php_fpm_PID`

		wait_for_pid removed $php_fpm_PID

		if [ -n "$try" ] ; then
			echo " failed"
			exit 1
		else
			echo " done"
		fi
	;;

	restart)
		$0 stop
		$0 start
	;;

	reload)

		echo -n "Reload service php-fpm "

		if [ ! -r $php_fpm_PID ] ; then
			echo "warning, no pid file found - php-fpm is not running ?"
			exit 1
		fi

		kill -USR2 `cat $php_fpm_PID`

		echo " done"
	;;

	logrotate)

		echo -n "Re-opening php-fpm log file "

		if [ ! -r $php_fpm_PID ] ; then
			echo "warning, no pid file found - php-fpm is not running ?"
			exit 1
		fi

		kill -USR1 `cat $php_fpm_PID`

		echo " done"
	;;

	*)
		echo "Usage: $0 {start|stop|quit|restart|reload|logrotate}"
		exit 1
	;;

esac

<?
    phpinfo();
    ?>

kern.dfldsiz="2147483648"		# Set the initial data size limit
kern.maxdsiz="2147483648"		# Set the max data size
kern.ipc.nmbclusters="0"			# Set the number of mbuf clusters
kern.ipc.nsfbufs="66560"			# Set the number of sendfile(2) bufs

sysctl kern.ipc.maxsockets=100000		##增加并发的socket，对于ddos很有用
sysctl kern.ipc.somaxconn=65535		##打开文件数
sysctl net.inet.tcp.msl=2500			##timeout时间