掘金 后端 ( ) • 2021-05-30 11:25
nginx+lua单机上万并发
openresty nginx lua build
.markdown-body{word-break:break-word;line-height:1.75;font-weight:400;font-size:15px;overflow-x:hidden;color:#333}.markdown-body h1,.markdown-body h2,.markdown-body h3,.markdown-body h4,.markdown-body h5,.markdown-body h6{line-height:1.5;margin-top:35px;margin-bottom:10px;padding-bottom:5px}.markdown-body h1{font-size:30px;margin-bottom:5px}.markdown-body h2{padding-bottom:12px;font-size:24px;border-bottom:1px solid #ececec}.markdown-body h3{font-size:18px;padding-bottom:0}.markdown-body h4{font-size:16px}.markdown-body h5{font-size:15px}.markdown-body h6{margin-top:5px}.markdown-body p{line-height:inherit;margin-top:22px;margin-bottom:22px}.markdown-body img{max-width:100%}.markdown-body hr{border:none;border-top:1px solid #ddd;margin-top:32px;margin-bottom:32px}.markdown-body code{word-break:break-word;border-radius:2px;overflow-x:auto;background-color:#fff5f5;color:#ff502c;font-size:.87em;padding:.065em .4em}.markdown-body code,.markdown-body pre{font-family:Menlo,Monaco,Consolas,Courier New,monospace}.markdown-body pre{overflow:auto;position:relative;line-height:1.75}.markdown-body pre>code{font-size:12px;padding:15px 12px;margin:0;word-break:normal;display:block;overflow-x:auto;color:#333;background:#f8f8f8}.markdown-body a{text-decoration:none;color:#0269c8;border-bottom:1px solid #d1e9ff}.markdown-body a:active,.markdown-body a:hover{color:#275b8c}.markdown-body table{display:inline-block!important;font-size:12px;width:auto;max-width:100%;overflow:auto;border:1px solid #f6f6f6}.markdown-body thead{background:#f6f6f6;color:#000;text-align:left}.markdown-body tr:nth-child(2n){background-color:#fcfcfc}.markdown-body td,.markdown-body th{padding:12px 7px;line-height:24px}.markdown-body td{min-width:120px}.markdown-body blockquote{color:#666;padding:1px 23px;margin:22px 0;border-left:4px solid #cbcbcb;background-color:#f8f8f8}.markdown-body blockquote:after{display:block;content:""}.markdown-body blockquote>p{margin:10px 0}.markdown-body ol,.markdown-body ul{padding-left:28px}.markdown-body ol li,.markdown-body ul li{margin-bottom:0;list-style:inherit}.markdown-body ol li .task-list-item,.markdown-body ul li .task-list-item{list-style:none}.markdown-body ol li .task-list-item ol,.markdown-body ol li .task-list-item ul,.markdown-body ul li .task-list-item ol,.markdown-body ul li .task-list-item ul{margin-top:0}.markdown-body ol ol,.markdown-body ol ul,.markdown-body ul ol,.markdown-body ul ul{margin-top:3px}.markdown-body ol li{padding-left:6px}.markdown-body .contains-task-list{padding-left:0}.markdown-body .task-list-item{list-style:none}@media (max-width:720px){.markdown-body h1{font-size:24px}.markdown-body h2{font-size:20px}.markdown-body h3{font-size:18px}}

nginx是我们最常用的服务器，常用于做内容分发和反向代理，lua是一种类C的脚本语言，广泛应用于游戏行业，十年前页游流行的时候，我曾经买过传奇类游戏的源码，游戏中的服务端就是用lua实现的。我们常用来配合nginx、envoy和redis做一些简单实用的功能，比如：超卖和少卖、排行榜等，减少请求到达后端java的频率

下面开始构建nginx+lua的镜像，自己构建的原因是怕别人提供的镜像里有病毒，docker非官方镜像中有很多病毒，这一点大家需要注意

本文采用openresty版本的nginx，具体openresty、nginx和lua的说明大家可以百度一下

构建镜像之前需要先准备好nginx-module-vts模块和openresty-1.15.8.3的压缩包，这两个压缩包百度一下就能找到，我也不知道公众号文章能不能插外链，其中nginx-module-vts这个模块的作用是统计nginx的访问数据，如果自己用prometheus+grafana监控nginx，就需要安装这个模块，我们索性一起编译进来

在服务器上创建目录

cd /usr/local/docker
mkdir -p nginx-lua/build
cd nginx-lua
复制代码

搭建好之后的完整目录如下：

root@today2:/usr/local/docker/nginx-lua# tree
.
├── build
│   ├── Dockerfile
│   ├── nginx-module-vts.zip
│   └── openresty-1.15.8.3.tar.gz
├── docker-compose.yml
├── lua
│   ├── test.lua
├── nginx.conf
├── wwwroot
│   ├── index.html
复制代码

Dockerfile

Dockerfile文件放到build目录下，把下载好的nginx-module-vts.zip和openresty-1.15.8.3.tar.gz也放到build目录下

FROM ubuntu:xenial

# 更新数据源
WORKDIR /etc/apt
RUN echo 'deb http://mirrors.aliyun.com/ubuntu/ xenial main restricted universe multiverse' > sources.list
RUN echo 'deb http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted universe multiverse' >> sources.list
RUN echo 'deb http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted universe multiverse' >> sources.list
RUN echo 'deb http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse' >> sources.list
RUN apt-get update

# 安装依赖
RUN apt-get install unzip make gcc libpcre3-dev libssl-dev perl build-essential curl zlib1g-dev --assume-yes

# 复制工具包
ADD openresty-1.15.8.3.tar.gz /usr/local/src
ADD nginx-module-vts.zip /usr/local/src

# nginx-module-vts
WORKDIR /usr/local/src
RUN unzip nginx-module-vts.zip

WORKDIR /usr/local/src/openresty-1.15.8.3
RUN rm -rf ./Makefile
RUN ./configure --add-module=/usr/local/src/nginx-module-vts
RUN make && make install

# 配置 Nginx，注释掉，在启动容器时挂载到容器中
# ADD nginx.conf /usr/local/openresty/nginx/conf/

WORKDIR /
EXPOSE 80
CMD ["/usr/local/openresty/nginx/sbin/nginx", "-c", "/usr/local/openresty/nginx/conf/nginx.conf", "-g", "daemon off;"]
复制代码

nginx.conf

user root;
worker_processes  auto;

worker_rlimit_nofile 65535;

events {
worker_connections  102400;
use epoll;
}

http {
server_tokens off;
include mime.types;
default_type application/octet-stream;

#access_log /var/log/nginx/access.log;
access_log off;
error_log /var/log/nginx/error.log;

keepalive_timeout  65;
client_max_body_size 10m;

gzip on;
gzip_disable "msie6";
gzip_min_length 1000;
gzip_proxied expired no-cache no-store private auth;
gzip_types text/plain application/xml application/javascript text/css application/x-javascript;

# 下面3行是安装了nginx-module-vts模块后设置nginx流量统计，本文主要讲lua，所以下面3行可以注释掉
vhost_traffic_status_zone;
vhost_traffic_status_filter_by_host on;
vhost_traffic_status_filter_by_set_key $uri uri::$server_name;

server {
listen 80;
root /usr/share/nginx/html;

# lua脚本是否开启缓存，在调试阶段设为off（修改lua文件后不用重启nginx），在正式环境一定要注释掉这一行，以提高性能
lua_code_cache off;

# 这个location是真正调用lua脚本的设置
location /lua/test {
# 指定返回的类型是json
default_type 'application/json';
# 指定访问/lua/test时由test.lua来返回内容，这个路径需要注意是容器中的路径，千万不要和宿主机搞混淆了
content_by_lua_file '/usr/local/lua/test.lua';
}

# 也是流量统计，可以注释掉
location /status {
vhost_traffic_status_display;
vhost_traffic_status_display_format html;
}

}
}
复制代码

docker-compose.yml

version: '3.1'
services:
  nginx:
    build: build # 左边build指的是当前容器需要构建镜像，右边build表示构建镜像的文件在build这个目录下
    restart: always
    container_name: nginx
    network_mode: host # 不一定非要指定host模式，这里只是为了方便
    volumes:
      - ./nginx.conf:/usr/local/openresty/nginx/conf/nginx.conf
      - ./log:/var/log/nginx/
      - ./wwwroot:/usr/share/nginx/html
      - ./lua:/usr/local/lua
复制代码

test.lua

在./lua目录下创建test.lua文件

ngx.say('{"code": 1, "msg": "hello world!"}')
复制代码

启动容器后，访问IP:80/lua/test就可以看到输出了{"code": 1, "msg": "hello world!"}，说明lua脚本已经生效

至此nginx+lua已经搭建完毕，在以后的文章中会再介绍一些常用的lua脚本，如：JWT验证、操作Redis、消息队列等，可以实现很多功能，只要你能想到都可以实现

原创不易，三连给安排一下吧