Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;}...

81
Optimizing NGINX & PHP-FPM — From Beginner to Expert to Crazy International PHP Conference Fall 2019 - Munich

Transcript of Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;}...

Page 1: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Optimizing NGINX & PHP-FPM— From Beginner to Expert to Crazy

International PHP Conference Fall 2019 - Munich

Page 2: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Arne Blankerts

Co-Founder, The PHP Consulting Company

Page 3: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Basics

Page 4: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location / { root /usr/share/nginx/html; index index.html index.htm;}

location ~ \.php$ { root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;}

Page 5: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location / { root /usr/share/nginx/html; index index.html index.htm;}

location ~ \.php$ { root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/$fastcgi_script_name;}

Page 6: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location / { root /usr/share/nginx/html; index index.html index.htm;}

location ~ \.php$ { root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 7: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location / { root /usr/share/nginx/html; index index.html index.htm;}

location ~ \.php$ { root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 8: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location / { root /usr/share/nginx/html; index index.html index.htm;}

location ~ \.php$ { fastcgi_pass 127.0.0.1:9000; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 9: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location / { root /usr/share/nginx/html; index index.html index.htm;

try_files $uri $uri/ @php;}

location @php { fastcgi_pass 127.0.0.1:9000; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 10: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

root /usr/share/nginx/html;

location / { try_files $uri $uri/ @php;}

location @php { fastcgi_pass unix:/var/run/php-fpm.sock; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 11: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Compress all the things!

Page 12: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

root /usr/share/nginx/html;

location / { gzip_static on; try_files $uri $uri/ @php;}

location @php { gzip on; fastcgi_pass unix:/var/run/php-fpm.sock; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 13: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Content Security Policy

Page 14: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server { root /usr/share/nginx/html;

add_header Content-Security-Policy "default-src 'none'; img-src 'self'; \ script-src 'self'; style-src 'self'; font-src 'self'; base-uri 'self'; \ form-action 'self'; connect-src 'self'; frame-ancestors 'none'";}

Page 15: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server { root /usr/share/nginx/html;

include content-security-policy;}

Page 16: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

https://csp-evaluator.withgoogle.com

https://content-security-policy.com

https://report-uri.com/home/generate

https://csp-evaluator.withgoogle.com/
https://content-security-policy.com/
https://report-uri.com/home/generate
Page 17: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Additional Security Headers

Page 18: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server { root /usr/share/nginx/html;

include content-security-policy;

add_header X-Frame-Options DENY; add_header X-Content-Type-Options nosniff; add_header X-Xss-Protection "1; mode=block" always;}

Page 19: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;
Page 20: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Force Https

Page 21: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server { listen 80 default_server; listen [::]:80 default_server;

return 301 https://$host$request_uri;}

Page 22: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Sane TLS

Page 23: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server { listen 443 ssl http2; listen [::]:443 ssl http2;

ssl_certificate /path/to/signed_cert_plus_intermediates; ssl_certificate_key /path/to/private_key; ssl_session_timeout 1d; ssl_session_cache shared:MozSSL:10m; # about 40000 sessions ssl_session_tickets off;

ssl_dhparam /path/to/dhparam.pem;

ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:...:DHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers off;

add_header Strict-Transport-Security "max-age=63072000" always;

ssl_stapling on; ssl_stapling_verify on;

ssl_trusted_certificate /path/to/root_CA_cert_plus_intermediates;

resolver 127.0.0.1;}

Page 24: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Paranoid TLS

Page 25: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server { listen 443 ssl http2; listen [::]:443 ssl http2;

ssl_certificate /path/to/signed_cert_plus_intermediates; ssl_certificate_key /path/to/private_key; ssl_session_timeout 1d; ssl_session_cache shared:MozSSL:10m; # about 40000 sessions ssl_session_tickets off;

ssl_protocols TLSv1.3; ssl_prefer_server_ciphers off;

add_header Strict-Transport-Security "max-age=63072000" always;

ssl_stapling on; ssl_stapling_verify on;

ssl_trusted_certificate /path/to/root_CA_cert_plus_intermediates;

resolver 127.0.0.1;}

Page 26: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;
Page 27: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

https://observatory.mozilla.org

https://ssl-config.mozilla.org

https://securityheaders.com

https://observatory.mozilla.org/
https://ssl-config.mozilla.org/
https://securityheaders.com/
Page 28: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;
Page 29: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

More than one backend

Page 30: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location @php { fastcgi_pass unix:/var/run/php-fpm.sock; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 31: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

upstream php-fpm { server unix:/var/run/php-fpm.sock;}

location @php { fastcgi_pass php-fpm; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 32: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

upstream php-fpm { server unix:/var/run/php-fpm.sock;

server 192.168.1.1:9000 weigth=5; server 192.168.1.2:1345 max_fails=3 fail_timeout=30s; server 192.168.1.3:9000 down;

server 192.168.1.4:9000 backup;}

location @php { fastcgi_pass php-fpm; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 33: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Semi dynamic backends

Page 34: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

upstream php-fpm { server unix:/var/run/php-fpm.sock;

include upstreams/*.conf;}

location @php { fastcgi_pass php-fpm; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 35: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Keep in touch

Page 36: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

upstream php-fpm { server unix:/var/run/php-fpm.sock; include upstreams/*.conf;

keepalive 10; }

location @php { fastcgi_pass php-fpm; fastcgi_keep_conn on; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;}

Page 37: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

O�oad Logging

Page 38: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location @php { fastcgi_pass php-fpm; fastcgi_keep_conn on; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php;

mirror @logging;}

location @logging { fastcgi_pass logger-pool; fastcgi_param SCRIPT_FILENAME /var/www/php/log.php; include fastcgi_params; fastcgi_param X-Original-Url $request_uri;}

Page 39: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location @php { fastcgi_pass php-fpm; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php; include fastcgi_params;

mirror @logging; mirror_request_body off;}

location @logging { fastcgi_pass logger-pool; include fastcgi_params; fastcgi_param SCRIPT_FILENAME /var/www/php/log.php; fastcgi_param X-Original-Url $request_uri;}

Page 40: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Who handles errors?

Page 41: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server { errorpage 404 /error/404.html;

location @php { fastcgi_pass php-fpm; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php; include fastcgi_params;

fastcgi_intercept_errors on; }

location /error/ { root /var/www/errors; }}

Page 42: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

map $http_accept_language $lang { default en; ~de de; # ...}

server {

errorpage 404 /error/$lang/404.html;

location @php { fastcgi_pass php-fpm; fastcgi_param SCRIPT_FILENAME /var/www/php/index.php; include fastcgi_params;

fastcgi_intercept_errors on; }

location /error/ { root /var/www/errors; }}

Page 43: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

More fun with maps

Page 44: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

More fun with maps

Also known as API versioning

Page 45: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

map $accept_header $backend { default ‘unix:/var/run/app_v1.sock’; ‘application/vnd.some-site.v2+json’ ‘unix:/var/run/app_v2.sock’; ‘application/vnd.some-site.v3+json’ ‘192.168.1.1:9000’;}

server { location @php { fastcgi_pass $backend; }}

Page 46: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

map $accept_header $backend { default ‘unix:/var/run/app_v1.sock’;

include /var/www/versions/*.conf;}

server { location @php { fastcgi_pass $backend; }}

Page 47: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server {

location / { try_files $uri $uri/ @new; }

location @new {

# ...

fastcgi_intercept_errors on; recursive_error_pages on;

error_page 404 = @old;

}

location @old {

# ...

}}

Page 48: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;
Page 49: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Sane Downloads

Page 50: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

class DownloadQuery {

// ...

public function execute(): Response { if (!$this->acl->isAccessGranted($this->file) { return new AccessDeniedResponse(); }

return new DownloadResponse($this->path . '/' . $this->file); }}

Page 51: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

class DownloadQuery {

// ...

public function execute(): Response { if (!$this->acl->isAccessGranted($this->file) { return new AccessDeniedResponse(); }

return new DownloadResponse($this->path . '/' . $this->file); }}

class DownloadResponse implements Response {

// ...

public function send() { header('X-Accel-Redirect: ' . $this->file); } }

Page 52: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

class DownloadQuery {

// ...

public function execute(): Response { if (!$this->acl->isAccessGranted($this->file) { return new AccessDeniedResponse(); }

return new DownloadResponse($this->path . '/' . $this->file); }}

class DownloadResponse implements Response {

// ...

public function send() { header('X-Accel-Redirect: ' . $this->file); } }

Page 53: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Sane large file uploads

Page 54: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server {

location /upload { limit_except POST { deny all; }

client_body_temp_path /var/www/data/uploads; client_body_in_file_only on; client_body_buffer_size 1024K; client_max_body_size 10G;

fastcgi_pass_request_headers on; fastcgi_pass_request_body off; fastcgi_ignore_client_abort on; fastcgi_param X-UPLOAD-FILE $request_body_file; }}

Page 55: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

// ...

let file = formElement.querySelector('input[type=file]').files[0];let xhr = new XMLHttpRequest();

xhr.open('POST', '/upload', true);xhr.setRequestHeader('X-Original', file.name);xhr.send(file);

// ...

Page 56: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Tweaking FPM defaults

Page 57: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

[www]pm = staticpm.max_children = 10pm.max_requests = 500

Page 58: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

[www]pm = staticpm.max_children = 10pm.max_requests = 500

slowlog = /var/log/php-fpm/$pool.log.slowrequest_slowlog_timeout = 1s

Page 59: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Configure Opcache

Page 60: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

opcache.max_accelerated_files=20000opcache.memory_consumption=512

Page 61: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

opcache.max_accelerated_files=20000opcache.memory_consumption=512

opcache.validate_timestamps=0opcache.file_update_protection=0opcache.save_comments=0

Page 62: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

opcache.max_accelerated_files=20000opcache.memory_consumption=512

opcache.validate_timestamps=0opcache.file_update_protection=0opcache.save_comments=0

opcache.preload = /path/to/preload.php

Page 63: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Make Sessions fast

Page 64: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Make Sessions faster

Page 65: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

session.probability = 0

Page 66: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

session.probability = 0

session.save_handler = redissession.save_path = unix://var/run/redis.sock?persistent=1

Page 67: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

session.probability = 0

session.save_handler = redissession.save_path = unix://var/run/redis.sock?persistent=1

session.save_path = tcp://10.0.0.1:6379?persistent=1

Page 68: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Filter all the things?

Page 69: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location /img-low/ { alias /var/www/public/img/;

image_filter resize 150 100; error_page 415 = @empty;}

location @empty { empty_gif;}

Page 70: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

location /feed/ { proxy_pass http://feed-server/atom;

xslt_stylesheet /var/www/xsl/atom.xsl;}

Page 71: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

JavaScript!

Page 72: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

js_include path/to/switch.js;js_set $current select_pool;

server {

// [...]

location @php { fastcgi_pass unix:/var/run/php-fpm/$current.sock; include fastcgi_params; fastcgi_param REQUEST_URI $document_uri; fastcgi_param SCRIPT_FILENAME /var/www/php/bootstrap.php; }

}

Page 73: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

js_include path/to/switch.js;js_set $current select_pool;

server {

// [...]

location @php { fastcgi_pass unix:/var/run/php-fpm/$current.sock; include fastcgi_params; fastcgi_param REQUEST_URI $document_uri; fastcgi_param SCRIPT_FILENAME /var/www/php/bootstrap.php; }

}

function select_pool() { return 'www';}

Page 74: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Or Lua!

Page 75: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

server {

location @php { access_by_lua_file switch.lua;

fastcgi_pass unix:/var/run/php-fpm/$current.sock; include fastcgi_params; fastcgi_param REQUEST_URI $document_uri; fastcgi_param SCRIPT_FILENAME $current/runtime/bootstrap.php; }

}

Page 76: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

ngx.var.current = 'www';return

Page 77: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Single Sign On with Lua

Page 78: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

local uuid = ngx.var.cookie_uuid;if not uuid then ngx.redirect('/login');end

local redis = require "resty.redis"local red = redis:new()red:connect("127.0.0.1", 6379)local res, err = red:get(uuid)if res == ngx.null then ngx.redirect('/login');end

ngx.header["uuid"] = nilngx.req.set_header("X-UUID-INFO", uuid);ngx.req.set_header("X-USER-INFO", res);return

Page 79: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Sticky session

Page 80: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

local sid = ngx.var.cookie_PHPSESSID;local redis = require "resty.redis"local red = redis:new()

local keys = {'default'}if sid then keys[2] = sidend

red:set_timeout(100)local ok, err = red:connect("127.0.0.1", 6379)

local res, err = red:mget(unpack(keys))if (res[2] == ngx.null) then res[2] = nilend

if sid and not res[2] then red:set(sid, res[1])end

ngx.var.current = res[2] or res[1]return

Page 81: Optimizing NGINX & PHP-FPM...location / {root /usr/share/nginx/html; index index.html index.htm;} location ~ \.php$ {root html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php;

Thank you

https://thephp.cc [email protected] @arneblankerts

https://thephp.cc/
mailto:[email protected]
https://twitter.com/arneblankerts

Running PHP on Nginx / PHP wgtn

Running PHP on Nginx / PHP wgtn

Introduction to HTML & PHP

Introduction to HTML & PHP

1. HTML CSS-JavaScript Basics - PHP & MySQL Web Development

1. HTML CSS-JavaScript Basics - PHP & MySQL Web Development

Boost your website by running PHP on Nginx

Boost your website by running PHP on Nginx

XHTML & Forms. PHP and the WWW PHP and HTML forms – Forms are the main way users can interact with your PHP scrip Typical usage of the form tag in HTML.

XHTML & Forms. PHP and the WWW PHP and HTML forms – Forms are the main way users can interact with your PHP scrip Typical usage of the form tag in HTML.

Dockerizing PHP Apps - aurelijus.banelis.lt · Docker hub for development Task definition = docker-compose.yml PHP+Apache = PHP+Nginx (no big difference) Custom tooling for credentials

Dockerizing PHP Apps - aurelijus.banelis.lt · Docker hub for development Task definition = docker-compose.yml PHP+Apache = PHP+Nginx (no big difference) Custom tooling for credentials

Linux Network Servers nginx, PHP-FPM, MySQL

Linux Network Servers nginx, PHP-FPM, MySQL

css - Github Pagesyangliang.github.io/ppt/php/03-css.pdf · html css javascript html css javascript. Web'$ \ ...

css - Github Pagesyangliang.github.io/ppt/php/03-css.pdf · html css javascript html css javascript. Web'$ \ ...

Actian Hybrid Data Conference · •apt-get install php5-odbc Option 2: Install PDO –PHP Data Objects ... nginx 11474 11473 0 11:08 ? 00:00:00 php-fpm: pool www nginx 11475 11473

Actian Hybrid Data Conference · •apt-get install php5-odbc Option 2: Install PDO –PHP Data Objects ... nginx 11474 11473 0 11:08 ? 00:00:00 php-fpm: pool www nginx 11475 11473

Running php on nginx

Running php on nginx

HTML, Javascript, jQuery, PHP

HTML, Javascript, jQuery, PHP

HTML and Php r13

HTML and Php r13

Building High Performance Sites Nginx, MySQL, Varnish and Php

Building High Performance Sites Nginx, MySQL, Varnish and Php

Summary 1 Gordon Tian CS520/CS596_026. HTTP Browser – Chrome | FireFox XML/HTML/CSS3/JavaScript/REST Web Server – Nginx PHP/Python/Perl/Java/Ruby/Node.js.

Summary 1 Gordon Tian CS520/CS596_026. HTTP Browser – Chrome | FireFox XML/HTML/CSS3/JavaScript/REST Web Server – Nginx PHP/Python/Perl/Java/Ruby/Node.js.

4-Web forms and html (lect 1) php

4-Web forms and html (lect 1) php

Introduction to HTML & PHP - proness.kix.in · Hypertext Preprocessor PHP: Hypertext Preprocessor As the name suggests you do some processing and output HTML Sometimes also called

Introduction to HTML & PHP - proness.kix.in · Hypertext Preprocessor PHP: Hypertext Preprocessor As the name suggests you do some processing and output HTML Sometimes also called

HTML, PHP, and MySQL : Putting It All Together

HTML, PHP, and MySQL : Putting It All Together

Table of Contents - asis.anambaskab.go.id · memakai server seperti Apache - PHP, Nginx - PHP, Java - Tomcat - Apache atau IIS - ASP.NET sebagai pemroses data di sisi server, tetapi

Table of Contents - asis.anambaskab.go.id · memakai server seperti Apache - PHP, Nginx - PHP, Java - Tomcat - Apache atau IIS - ASP.NET sebagai pemroses data di sisi server, tetapi

PHP, HTML, STATE

PHP, HTML, STATE

6 weeks summer training dotnet java php html sigmaseosolutions

6 weeks summer training dotnet java php html sigmaseosolutions