16. php
php-fpm配置相关
一、php-fpm配置
和LAMP不同的是，在LNMP架构中，php-fpm作为独立的一个服务存在，既然是独立服务，那么它必然有自己的配置文件。php-fpm的配置文件为/usr/local/php-fpm/etc/php-fpm.conf,它同样也支持include语句，类似于nginx.conf里面的include.
1. php-fpm 的pool
Nginx可以配置多个虚拟主机，php-fpm配置文件php-fpm.conf可以设置多个pool，每个pool可以监听一个端口，在其中一个pool资源耗尽，会导致其他站点无法访问资源，报502错误。有必要把站点进行分离，分别使用单独的pool。
1.打开php-fpm.conf
# vim /usr/local/php/etc/php-fpm.conf
# cd /usr/local/php-fpm/etc/
# ls
pear.confphp-fpm.confphp-fpm.conf.defaultphp.ini
# cat php-fpm.conf
pid = /usr/local/php-fpm/var/run/php-fpm.pid
error_log = /usr/local/php-fpm/var/log/php-fpm.log
listen = /tmp/php-fcgi.sock
#listen =127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
php-fpm.conf部分内容注解
#
#listen = /tmp/php-fcgi.sock
#监听地址，也可以写：listen = 127.0.0.1:9000，本地监听，也可以监听其他IP：port
#此处格式会影响配置Nginx和PHP结合时Nginx寻址PHP的路径
#listen.mode = 666
#当监听的为socket文件时该部分才生效，用于指定.sock文件的权限
#user = php-fpm
#group = php-fpm
#定义php-fpm服务的用户
在原来基础上在复制修改一个
listen = /tmp/xavier.sock
#listen =127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
检查并重启php-fpm服务
NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful
# /etc/init.d/php-fpm reload
Reload service php-fpmdone
查看下php-fpm服务
# ps aux |grep php-fpm
root 46840.00.2 2272684984 ? Ss 23:03 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf)
php-fpm 46850.00.2 2292925080 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46860.00.2 2292925080 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46870.00.2 2292925080 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46880.00.2 2292925084 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46890.00.2 2292925088 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46900.00.2 2292925088 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46910.00.2 2292925088 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46920.00.2 2292925088 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46930.00.2 2292925088 ? S 23:03 0:00 php-fpm: pool www
php-fpm 46940.00.2 2292925088 ? S 23:03 0:00 php-fpm: pool www
php-fpm 47050.00.2 2292925088 ?
php-fpm 48090.00.2 2292925084 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48100.00.2 2292925084 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48110.00.2 2292925084 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48120.00.2 2292925084 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48130.00.2 2292925088 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48140.00.2 2292925088 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48150.00.2 2292925088 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48160.00.2 2292925088 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48170.00.2 2292925088 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48180.00.2 2292925088 ? S 23:08 0:00 php-fpm: pool xavi.com
php-fpm 48190.00.2 2292925088 ? S 23:08 0:00 php-fpm: pool xavi.com
2.已经看到www和xavi.com两个pool了，下一步如何应用
# cd /usr/local/nginx/conf/vhost/
# ls
bcd.com.confload.confproxy.confssl.conftest.com.conf
# vim test.com.conf
# vim bcd.com.conf
server
{
listen 80 default_server;
server_name abcd.com;
index index.html index.htm index.php;
root /data/nginx/default;
location ~ \.php$
{
include fastcgi_params;
fastcgi_pass unix:/tmp/xavier.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /data/nginx/default$fastcgi_script_name;
}
另一种创建多个pool的方法
在/usr/local/nginx/conf/vhost/下有多个conf文件，这样我们可以配置多个虚拟机，那么php-fpm是否也支持多个conf文件呢，是的
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/cC5F8D5hDb.png?imageslim
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/KBbb2jFe68.png?imageslim
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/G4DmD178Ae.png?imageslim
# vi www.conf
listen = /tmp/php-fcgi.sock
#listen =127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
# vi xavi.conf
listen = /tmp/xavier.sock
#listen =127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
这样原有的php-fpm.conf就只有三行内容了
# cat ../php-fpm.conf
pid = /usr/local/php-fpm/var/run/php-fpm.pid
error_log = /usr/local/php-fpm/var/log/php-fpm.log
include = etc/php-fpm.d/*.conf
检查语法并重启
# /usr/local/php-fpm/sbin/php-fpm -t
NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful
# /etc/init.d/php-fpm restart
Gracefully shutting down php-fpm . done
Starting php-fpmdone
ps aux |grep php-fpm
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/2HJ2ji8FJG.png?imageslim
二、php-fpm慢执行日志
php网站，建议使用lnmp架构的一个好处就是查看“慢日志”，为什么这么说呢？当我们的客户或者manager发现站点访问速度点慢，如果全部的负载均不是很高，一切正常还是慢，怎么办？那唯一的办法就是检查“慢日志”，慢日志会向我们详细的展示某个页面的多少行代码在执行过程中超过了我们设定的阀值！
2.1 配置www.conf吧
在原有的基础上面，增加两行：
request_slowlog_timeout = 2
slowlog = /usr/local/php-fpm/var/log/www_slow.log
命令的意思是：只要执行某条语句超过2秒就会记录到咱们规定的日志文件中去。
开启慢执行日志
# vim /usr/local/php-fpm/etc/php-fpm.d/www.conf
listen = /tmp/php-fcgi.sock
#listen =127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
request_slowlog_timeout = 2
slowlog = /usr/local/php-fpm/var/log/www_slow.log
# /usr/local/php-fpm/sbin/php-fpm -t
NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful
2.查看慢执行日志
# ls /usr/local/php-fpm/var/log/
php-fpm.logwww-slow.log
# cat /usr/local/php-fpm/var/log/www-slow.log
[*]我们发现已经有配置文件，但是还没有记录任何的错误；
cat /usr/local/nginx/conf/vhost/test.com.conf
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/C8EFb2813h.png?imageslim
php-fcgi.sock被test.com.conf占用着,在/data/nginx/test.com/下创建sleep.php文件
# vim /data/nginx/test.com/sleep.
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/G7A6AJE4ch.png?imageslim
错误报告：
# vim /data/nginx/test.com/sleep.php
# curl -x127.0.0.1:80 test.com/sleep.php
curl: (7) Failed connect to 127.0.0.1:80; 拒绝连接
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/l6Kc4e66Ec.png?imageslim
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/FiG1I45hFk.png?imageslim
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/G2Dmdhl73H.png?imageslim
设置了重复多个default 80端口，以及忘了}符号，以后测试文件及时删除
测试结果
# curl -x127.0.0.1:80 test.com/sleep.php
slowlog test!done#
#cat /usr/local/php-fpm/var/log/www-slow.log
pid 4662
script_filename = /data/nginx/test.com/sleep.php
sleep() /data/nginx/test.com/sleep.php:1
pid 4664
script_filename = /data/nginx/test.com/sleep.php
sleep() /data/nginx/test.com/sleep.php:1 //第一行
# cat /data/nginx/test.com/sleep.php
错误分析2
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/5ifbBiCfK0.png?imageslim
最简单的方法是打开配置文件，查看错误日志：vim /usr/local/php-fpm/etc/php.ini
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/IFmbcH4i6B.png?imageslim
识别出来是语法错误
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/h7m94gBgCL.png?imageslim
三、Open_basedir
如果一个server有很多个web服务，那么不建议直接把open_basedir直接配置在php.ini中了。Appache可以针对每个虚拟主机设置一个Open_basedir，php-fpm同样也可以针对不同的pool设置不同的Open_basedir.
#vim /usr/local/php-fpm/etc/php-fpm.d/www.conf
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/Gahb8ELdki.png?imageslim
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/Jc8KEDbH9K.png?imageslim
目的：这样就完全限制了在xavi.com目录下不可以访问其它的站点资源，进行物理隔离多个站点
上述排错是打开php.ini中display_error在生产情况下是不安全的。
建立日志查错体系
vim /usr/local/php-fpm/etc/php.ini
增加如下配置：搜索/error_log
errot_log = /usr/local/php-fpm/var/log/php_error.log
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/HDg0CCC9H2.png?imageslim
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/A0B9iJE6A0.png?imageslim
# grep error_log /usr/local/php-fpm/etc/php.ini
; server-specific log, STDERR, or a location specified by the error_log
; Set maximum length of log_errors. In error_log information about the source is
;error_log = php_errors.log
;error_log = syslog
error_log = /usr/local/php-fpm/var/log/php_error.log
; OPcache error_log file name. Empty string assumes "stderr".
;opcache.error_log=
为保证日志正常输出，把该路径下的日志文件建立起来，并更改其属性
# touch /usr/local/php-fpm/var/log/php_error.log
# chmod 777 /usr/local/php-fpm/var/log/php_error.log
测试错误日志：
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/25k7kbKmkL.png?imageslim
修改问conf文件一定要把php-fpm重新启动才能生效
# !curl
curl -x127.0.0.1:80 test.com/sleep.php
slowlog test!done# /etc/init.d/php-fpm restart
Gracefully shutting down php-fpm . done
Starting php-fpmdone
# curl -x127.0.0.1:80 test.com/sleep.php
No input file specified.
# !cat
cat /usr/local/php-fpm/var/log/php_error.log
PHP Deprecated:Comments starting with '#' are deprecated in Unknown on line 1 in Unknown on line 0
PHP Deprecated:Comments starting with '#' are deprecated in Unknown on line 1 in Unknown on line 0
PHP Warning:Unknown: open_basedir restriction in effect. File(/data/nginx/test.com/sleep.php) is not within the allowed path(s): (/data/nginx/wwtest.com:/tmp/) in Unknown on line 0
PHP Warning:Unknown: failed to open stream: Operation not permitted in Unknown on line 0
http://p0weeraap.bkt.clouddn.com/xavi2017/180320/4LGd6jHeb2.png?imageslim
四、php-fpm进程管理
[*] [ ] pm = dynamic ;
动态进程管理，也可以是static,只有此处设置为dynamic，下面的配置才生效
[*] [ ] pm.max_children = 50 ;
最大子进程数，ps aux可以查看
[*] [ ] pm.start_serve = 20;启动服务时会启动的进程数
[*] [ ] pm.min_spare_servers = 5;
定义空闲时段，子进程数的最小数量，如果达到这个数值时，php-fpm
;服务会自动派生新的子进程。
[*] [ ] pm.max_spare_servers = 35 ;
定义在空闲时段，子进程的最大值，如果高于这个数值就开始清理空闲的子进程。
[*][ ] pm.max_requests = 500 ;定义一个子进程最多处理的请求数，也就是说在一个php-fpm的子进程最多可以处理这么请求，当达到这个数值时，他会自动退出。
页:
[1]