LNMP架构之php-fpm相关配置

本文索引：

php-fpm的进程pool设置 php-fpm慢执行日志 open_basedir参数设置 php-fpm进程管理

---

php-fpm的pool

php-fpm.conf可以设置多个pool，在其中一个pool资源耗尽，会导致其他站点无法访问资源，报502错误。有必要把站点进行分离，分别使用单独的pool。

修改php-fpm配置文件代码

# 文件地址：/usr/local/php-fpm/etc/php-fpm.conf [root@localhost etc]# vim php-fpm.conf ... # 新增一个pool代码设置 [test] listen = /tmp/test.sock #listen = 127.0.0.1:9000 listen.mode = 666 user = php-fpm group = php-fpm pm = dynamic pm.max_children = 50 pm.start_servers = 20 pm.min_spare_servers = 5 pm.max_spare_servers = 35 pm.max_requests = 500 rlimit_files = 1024 修改虚拟主机配置文件

# 这里设置另外一个虚拟主机 # 实现不同虚拟主机访问资源pool的隔离，互不影响 [root@localhost etc]# cat /usr/local/nginx/conf/vhost/aaa.com.conf server { listen 80 default_server; index index.html index.htm index.php root /data/www/default; location ~ .php$ { include fastcgi_params; # 这里写对应php-fpm.conf内设置的sock fastcgi_pass unix:/tmp/test.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /data/www/default$fastcgi_script_name; } } 重启php-fpm服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [05-Jan-2018 19:37:17] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful [root@localhost etc]# /etc/init.d/php-fpm reload Reload service php-fpm done 查看配置是否生效

# 已经可以看到创建的pool --- test [root@localhost etc]# ps aux | grep php-fpm root 2895 1.7 0.3 227208 5008 ? Ss 19:37 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf) ... php-fpm 2915 0.0 0.3 227148 4712 ? S 19:37 0:00 php-fpm: pool www php-fpm 2916 1.4 0.3 227148 4708 ? S 19:37 0:00 php-fpm: pool test ... root 2937 0.0 0.0 112680 976 pts/0 S+ 19:37 0:00 grep --color=auto php-fpm 实现代码分离

在php-fpm.conf内添加如下代码就可以实现类似虚拟主机配置文件分离的效果。

[root@localhost etc]# cat php-fpm.conf [global] pid = /usr/local/php-fpm/var/run/php-fpm.pid error_log = /usr/local/php-fpm/var/log/php-fpm.log include = etc/php-fpm.d/*.conf # 将原文件内的www、test pool模块分别写在不同的conf文件内 [root@localhost etc]# vim php-fpm.d/www.conf [www] #listen = /tmp/php-fcgi.sock listen = 127.0.0.1:9000 listen.mode = 666 user = php-fpm group = php-fpm pm = dynamic pm.max_children = 50 pm.start_servers = 20 pm.min_spare_servers = 5 pm.max_spare_servers = 35 pm.max_requests = 500 rlimit_files = 1024 [root@localhost etc]# vim php-fpm.d/test.conf [test] listen = /tmp/test.sock #listen = 127.0.0.1:9000 listen.mode = 666 user = php-fpm group = php-fpm pm = dynamic pm.max_children = 50 pm.start_servers = 20 pm.min_spare_servers = 5 pm.max_spare_servers = 35 pm.max_requests = 500 rlimit_files = 1024 重启php-fpm服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [05-Jan-2018 20:19:10] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful [root@localhost etc]# /etc/init.d/php-fpm restart Gracefully shutting down php-fpm . done Starting php-fpm done 查看pool是否配置成功

# 这里test池在前，www池在后 [root@localhost etc]# ps aux | grep php-fpm root 3068 0.2 0.3 227236 4980 ? Ss 20:20 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf) php-fpm 3069 0.0 0.3 227176 4712 ? S 20:20 0:00 php-fpm: pool test php-fpm 3070 0.0 0.3 227176 4712 ? S 20:20 0:00 php-fpm: pool test php-fpm 3071 0.0 0.3 227176 4712 ? S 20:20 0:00 php-fpm: pool test php-fpm 3075 0.0 0.3 227176 4716 ? S 20:20 0:00 ... php-fpm 3079 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool test php-fpm 3080 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool test php-fpm 3081 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool test php-fpm 3089 0.0 0.3 227176 4716 ? S 20:20 0:00 php-fpm: pool www ... php-fpm 3107 0.0 0.3 227176 4724 ? S 20:20 0:00 php-fpm: pool www php-fpm 3108 0.0 0.3 227176 4724 ? S 20:20 0:00 php-fpm: pool www root 3110 0.0 0.0 112680 976 pts/0 S+ 20:20 0:00 grep --color=auto php-fpm

---

php-fpm慢执行日志

通过分析php的慢执行日志，可以得知php网站访问缓慢原因。

修改php配置文件www.conf

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/www.conf [www] # 这里监听的sock修改为www.sock listen = /tmp/www.sock ;listen = 127.0.0.1:9000 listen.mode = 666 user = php-fpm group = php-fpm pm = dynamic pm.max_children = 50 pm.start_servers = 20 pm.min_spare_servers = 5 pm.max_spare_servers = 35 pm.max_requests = 500 rlimit_files = 1024 # 这里添加下面两行代码 # 设置slowlog间隔为1s，间隔超过1s会记录到慢执行日志内 # 实际工作中，可以设置为2s，1s太过短暂 request_slowlog_timeout = 1 # 指定slowlog文件存放路径 slowlog = /usr/local/php-fpm/var/log/www-slow.log 重启php服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [05-Jan-2018 20:43:24] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful [root@localhost etc]# /etc/init.d/php-fpm reload 修改虚拟主机配置文件

[root@localhost etc]# vim /usr/local/nginx/conf/vhost/test.com.conf # 修改sock文件 fastcgi_pass unix:/tmp/www.sock; ... 重启nginx服务

[root@localhost etc]# /usr/local/nginx/sbin/nginx -t nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful [root@localhost etc]# /usr/local/nginx/sbin/nginx -s reload 设置测试php文件

[root@localhost etc]# vim /data/www/test.com/sleep.php <?php echo "test slow log"; sleep(2); echo "done"; ?>

要查看具体的错误信息，可以开启php.ini内的display_error参数

查看慢执行日志

[root@localhost etc]# cat /usr/local/php-fpm/var/log/www-slow.log [05-Jan-2018 21:13:15] [pool www] pid 3430 script_filename = /data/www/test.com/sleep.php [0x00007f616ec772d8] sleep() /data/www/test.com/sleep.php:3

---

open_basedir参数设置 相关配置代码

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/test.conf # 添加如下代码 php_admin_value[open_basedir]=/data/www/test.com:/tmp/ 效果测试 先测试错误配置时php脚本的效果

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/test.conf # 将添加的代码内站点错误书写为aaa.com php_admin_value[open_basedir]=/data/www/aaa.com:/tmp/

重启php-fpm服务

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [09-Jan-2018 18:35:50] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful [root@localhost etc]# /etc/init.d/php-fpm restart Gracefully shutting down php-fpm . done Starting php-fpm done

使用curl测试网页访问

# 由于已经设置了open_basedir，网页无法访问 [root@localhost etc]# curl -x 127.0.0.1:80 test.com/test.php -I HTTP/1.1 404 Not Found Server: nginx/1.12.2 Date: Tue, 09 Jan 2018 10:38:45 GMT Content-Type: text/html; charset=UTF-8 Connection: keep-alive X-Powered-By: PHP/5.6.30 修改正确后验证

[root@localhost etc]# vim /usr/local/php-fpm/etc/php-fpm.d/test.conf # 将添加的代码错误书写为 php_admin_value[open_basedir]=/data/www/test.com:/tmp/

重启服务并验证

[root@localhost etc]# /usr/local/php-fpm/sbin/php-fpm -t [09-Jan-2018 18:39:10] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful [root@localhost etc]# /etc/init.d/php-fpm restart Gracefully shutting down php-fpm . done Starting php-fpm done # 成功访问 [root@localhost etc]# curl -x 127.0.0.1:80 test.com/test.php -I HTTP/1.1 200 OK Server: nginx/1.12.2 Date: Tue, 09 Jan 2018 10:39:20 GMT Content-Type: text/html; charset=UTF-8 Connection: keep-alive X-Powered-By: PHP/5.6.30 php错误日志设置

修复php.ini配置文件，关闭display_errors参数

# 不在浏览器上显示错误信息 display_errors = Off # 开启错误日志记录 log_errors = On # 设置存放路径 error_log = /usr/local/php-fpm/var/log/php_errors.log # 设置错误记录级别 error_reporting = E_ALL

为了防止错误日志无法创建并修改，最好先行创建并给予权限。

[root@localhost etc]# touch /usr/local/php-fpm/var/log/php_errors.log [root@localhost etc]# chmod 777 /usr/local/php-fpm/var/log/php_errors.log

为了产生错误信息，先故意写错php代码

[root@localhost etc]# touch /usr/local/php-fpm/var/log/php_errors.log [root@localhost etc]# chmod 777 /usr/local/php-fpm/var/log/php_errors.log php_admin_value[open_basedir]=/data/www/aaa.com:/tmp/

访问网页，其错误信息如下

[root@localhost etc]# curl -x 127.0.0.1:80 test.com/test.php -I HTTP/1.1 404 Not Found Server: nginx/1.12.2 Date: Tue, 09 Jan 2018 10:52:01 GMT Content-Type: text/html; charset=UTF-8 Connection: keep-alive X-Powered-By: PHP/5.6.30 # 这里明确指出所要访问的网页不在aaa.com站点 [root@localhost etc]# cat /usr/local/php-fpm/var/log/php_errors.log [09-Jan-2018 10:52:01 UTC] PHP Warning: Unknown: open_basedir restriction in effect. File(/data/www/test.com/test.php) is not within the allowed path(s): (/data/www/aaa.com:/tmp/) in Unknown on line 0 [09-Jan-2018 10:52:01 UTC] PHP Warning: Unknown: failed to open stream: Operation not permitted in Unknown on line 0

修改正确后再查看日志(php文件已被解析)

[root@localhost etc]# cat /usr/local/php-fpm/var/log/php_errors.log ... [09-Jan-2018 10:53:18 UTC] PHP Warning: phpinfo(): It is not safe to rely on the system\'s timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone \'UTC\' for now, but please set date.timezone to select your timezone. in /data/www/test.com/test.php on line 2

---

php-fpm进程管理 进程管理

# 动态进程管理 pm = dynamic # 静态进程管理 # 设置了静态进程管理的配置项只有紧跟该行的那项配置生效 pm = static 最大子进程数

# 可以使用ps aux进行查看 pm.max_children = 50 设置启动时开启的PHP进程数

# 值可以根据需要进行修改 pm.start_servers = 20 在空闲时段，子进程数的最小值

# 如果达到这个数值，php-fpm服务会自动派生新的子进程 pm.min_spare_servers = 5 定义在空闲时段，子进程数的最大值

# 如果高于这个数值，就开始清理空闲的子进程 pm.max_spare_servers = 35 定义一个子进程最多处理的请求数

# 对于该项而言，超出该值的话进程会因此而退出 pm.max_requests = 500

我们需要根据实际应用时的需要对上述参数的值进行配置，配置后重启php-fpm服务使其生效即可。

---