十三周一次课

原创

河图再现 2018-03-19 21:11:13 ©著作权

文章标签 linux 十三周一次课 文章分类 运维

©著作权归作者所有：来自51CTO博客作者河图再现的原创作品，请联系作者获取转载授权，否则将追究法律责任

十三周一次课

12.21php-fpm的pool

12.22php-fpm的慢执行日志

12.23open_basedir

12.24php-fpm进程管理

12.21php-fpm的pool

php-fpm的pool目录概要

vim /usr/local/php/etc/php-fpm.conf//在[global]部分增加
include = etc/php-fpm.d/*.conf
mkdir /usr/local/php/etc/php-fpm.d/
cd /usr/local/php/etc/php-fpm.d/
vim www.conf //内容如下

[www]
listen = /tmp/www.sock
listen.mode=666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

继续编辑配置文件
vim aming.conf //内容如下

[aming]
listen = /tmp/aming.sock
listen.mode=666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

/usr/local/php/sbin/php-fpm –t
/etc/init.d/php-fpm restart

php-fpm的pool

1.php-fpm有一个概念，叫做pool。使用ps aux |grep php-fpm最右侧看到的那一列就是pool，也就是它的池子

[root@tianqi-01 vhost]# ps aux |grep php-fpm
root 1056 0.0 0.4 227204 4952 ? Ss 08:39 0:01 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf)
php-fpm 1057 0.0 0.4 227204 4716 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1058 0.0 0.4 227204 4716 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1059 0.0 0.4 227204 4716 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1060 0.0 0.4 227204 4716 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1061 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1062 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1063 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1064 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1065 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1066 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1067 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1068 0.0 0.4 227204 4720 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1069 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1070 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1071 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1072 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1073 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1074 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1075 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
php-fpm 1076 0.0 0.4 227204 4724 ? S 08:39 0:00 php-fpm: pool www
root 5360 0.0 0.0 112664 980 pts/0 S+ 21:50 0:00 grep --color=auto php-fpm
[root@tianqi-01 vhost]#

2.切换目录，会看到我们只定义了一个www的pool

[root@tianqi-01 vhost]# cd /usr/local/php-fpm/etc/
[root@tianqi-01 etc]# ls
pear.conf php-fpm.conf php-fpm.conf.default php.ini
[root@tianqi-01 etc]# cat php-fpm.conf

[global]
pid = /usr/local/php-fpm/var/run/php-fpm.pid
error_log = /usr/local/php-fpm/var/log/php-fpm.log
[www] //这里只定义了一个www的pool
listen = /tmp/php-fcgi.sock
#listen = 127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
[root@tianqi-01 etc]#

3.其实是支持定义多个池子的，每一个池子都可以监听不同的sock或者TCP/IP，nginx如果有多个站点，那么每个站点都能去使用一个独立的pool。这样做的优势就是，当其中一个php发生502了（502很有可能是php资源不够了），如果所有的网站使用了同一个池子，那其中一个网站发生了故障（比如写的程序有问题），那么它就会把你的php资源耗尽，这样就会造成其他的站点也会502，所以有必要把每一个站点隔离开来，每一个站点使用独立的pool。

4.设置多个pool

方法一

在/usr/local/php-fpm/etc/php-fpm里面，继续增加pool

写第二个pool，名称为tianqi.com，listen = /tmp/tianqi.sock
配置中的其他信息可根据自己的需求来配置

[root@tianqi-01 etc]# vim !$
vim php-fpm.conf

[global]
pid = /usr/local/php-fpm/var/run/php-fpm.pid
error_log = /usr/local/php-fpm/var/log/php-fpm.log
[www]
listen = /tmp/php-fcgi.sock
#listen = 127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
[tianqi.com]
listen = /tmp/tianqi.sock
#listen = 127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

保存退出

5.检查是否存在语法错误

[root@tianqi-01 etc]# /usr/local/php-fpm/sbin/php-fpm -t
[16-Mar-2018 21:58:38] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@tianqi-01 etc]#

6.若没有语法错误，做一个php-fpm重启

/etc/init.d/php-fpm restart 或使用 /etc/init.d/php-fpm reload

[root@tianqi-01 etc]# /etc/init.d/php-fpm reload
Reload service php-fpm done
[root@tianqi-01 etc]#

7.这里再来ps查看，会看到最右侧多了一个tianqi.com，这个就是两个不同的池子

[root@tianqi-01 etc]# ps aux |grep php-fpm
root 5389 0.2 0.4 227264 4976 ? Ss 21:59 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf)
php-fpm 5390 0.0 0.4 227204 4712 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5391 0.0 0.4 227204 4712 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5392 0.0 0.4 227204 4712 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5393 0.0 0.4 227204 4712 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5394 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5395 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5396 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5397 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5398 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5399 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5400 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5401 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5402 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5403 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5404 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5405 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5406 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5407 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5408 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5409 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool www
php-fpm 5410 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5411 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5412 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5413 0.0 0.4 227204 4716 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5414 0.0 0.4 227204 4720 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5415 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5416 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5417 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5418 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5419 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5420 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5421 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5422 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5423 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5424 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5425 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5426 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5427 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5428 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
php-fpm 5429 0.0 0.4 227204 4724 ? S 21:59 0:00 php-fpm: pool tianqi.com
root 5447 0.0 0.0 112660 984 pts/0 R+ 22:02 0:00 grep --color=auto php-fpm
[root@tianqi-01 etc]#

8.在nginx中使用新的pool

[root@tianqi-01 conf]# cd /usr/local/nginx/conf/vhost
[root@tianqi-01 vhost]# ls
aaa.com.conf load.conf proxy.conf ssl.conf test.com.conf
[root@tianqi-01 vhost]#

9.可以把test.com.conf定义成fastcgi_pass unix:/tmp/php-fcgi.sock;

这是www池子中的php-fcgi.sock

[root@tianqi-01 vhost]# vim test.com.conf

server
{
listen 80;
server_name test.com test2.com test3.com;
index index.html index.htm index.php;
root /data/wwwroot/test.com;
if ($host != 'test.com' ) {
rewrite ^/(.*)$ http://test.com/$1 permanent;
}

# location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
# {
# expires 7d;
# access_log off;
# }
location ~* ^.+\.(gif|jpg|png|swf|flv|rar|zip|doc|pdf|gz|bz2|jpeg|bmp|xls)$
{
expires 7d;
valid_referers none blocked server_names *.test.com ;
if ($invalid_referer) {
return 403;
}
access_log off;
}

location ~ .*\.(js|css)$
{
# expires 12h;
access_log off;
}
location /admin/
{
allow 127.0.0.1;
allow 192.168.11.136;
deny all;
}

location ~ .*(upload|image)/.*\.php$
{
deny all;
}
if ($http_user_agent ~* 'Spider/3.0|YoudaoBot|Tomato')
{
return 403;
}

location ~ \.php$
{
include fastcgi_params;
fastcgi_pass unix:/tmp/php-fcgi.sock;
#fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /data/wwwroot/test.com$fastcgi_script_name;
}

access_log /tmp/test.com.log combined_realip;
}
10.再把另一个aaa.com.conf中 fastcgi_pass unix:/tmp/tianqi.sock;

这是tianqi.com池子中的tianqi.sock
路径/data/wwwroot/default$fastcgi_script_name;

[root@tianqi-01 vhost]# vim aaa.com.conf

server
{
listen 80 default_server;
server_name aaa.com;
index index.html index.htm index.php;
root /data/wwwroot/default;
location ~ \.php$
{
include fastcgi_params;
fastcgi_pass unix:/tmp/tianqi.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /data/wwwroot/default$fastcgi_script_name;
}
}

保存退出

11.这样这两个站点就隔离开了

12.假设现在test.com请求量很大，最终将进程耗尽了，比如php-fpm耗尽了，这时候又有其他请求来了，就会报502，因为没有多余的php给进程提供服务了，而另一个站点则不受影响，因为使用的是另一个池子，另一个pool，这就是定义多个池子的原因

方法二

1.在vhost目录下是多个.conf文件，在nginx.conf里面加了一条 include vhost/*.conf;

[root@tianqi-01 vhost]# ls
aaa.com.conf load.conf proxy.conf ssl.conf test.com.conf
[root@tianqi-01 vhost]# tail ../nginx.conf
tcp_nodelay on;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 8k;
gzip_comp_level 5;
gzip_http_version 1.1;
gzip_types text/plain application/x-javascript text/css text/htm
application/xml;
include vhost/*.conf;
}
[root@tianqi-01 vhost]#

2.在php-fpm同样是支持 include vhost/*.conf;

3.在主配置文件php-fpm中的 [global] 加入include = etc/php-fpm.d/*.conf ，并将池子拆分出来，将其中的池子pool删除

快速删除内容方法，100dd就会给删除

[root@tianqi-01 vhost]# cd /usr/local/php-fpm/etc/
[root@tianqi-01 etc]# ls
pear.conf php-fpm.conf php-fpm.conf.default php.ini
[root@tianqi-01 etc]# vim php-fpm.conf
[global]
pid = /usr/local/php-fpm/var/run/php-fpm.pid
error_log = /usr/local/php-fpm/var/log/php-fpm.log
include = etc/php-fpm.d/*.conf //添加一条语句，删除下面的语句

保存退出

4.因为include = etc/php-fpm.d/，所以需要创建/php-fpm.d/的目录

[root@tianqi-01 etc]# mkdir php-fpm.d
[root@tianqi-01 etc]#

5.切换路径，并创建www.conf，然后将之前php-fpm.conf中的www部分写入到其中

[root@tianqi-01 etc]# cd !$
cd php-fpm.d
[root@tianqi-01 php-fpm.d]# vim www.conf

[www]
listen = /tmp/php-fcgi.sock
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

保存退出

6.然后再创建tianqi.conf

[root@tianqi-01 php-fpm.d]# vim tianqi.conf

[tianqi.com]
listen = /tmp/tianqi.sock
#listen = 127.0.0.1:9000
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

7.这样看着就会很干净，类似于nginx的vhost

8.检查是否有错误

[root@tianqi-01 php-fpm.d]# /usr/local/php-fpm/sbin/php-fpm -t
[16-Mar-2018 22:24:33] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@tianqi-01 php-fpm.d]#

9.然后重启查看

[root@tianqi-01 php-fpm.d]# /etc/init.d/php-fpm restart
Gracefully shutting down php-fpm . done
Starting php-fpm done
[root@tianqi-01 php-fpm.d]# !ps
ps aux |grep php-fpm
root 5511 2.0 0.4 227292 4984 ? Ss 22:25 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf)
php-fpm 5512 0.0 0.4 227232 4720 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5513 0.0 0.4 227232 4720 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5514 0.0 0.4 227232 4720 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5515 0.0 0.4 227232 4720 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5516 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5517 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5518 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5519 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5520 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5521 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5522 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5523 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5524 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5525 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5526 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5527 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5528 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5529 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5530 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5531 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool tianqi.com
php-fpm 5532 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5533 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5534 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5535 0.0 0.4 227232 4724 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5536 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5537 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5538 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5539 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5540 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5541 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5542 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5543 0.0 0.4 227232 4728 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5544 0.0 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5545 0.0 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5546 0.0 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5547 0.0 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5548 0.0 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5549 0.0 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5550 0.0 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
php-fpm 5551 0.4 0.4 227232 4732 ? S 22:25 0:00 php-fpm: pool www
root 5553 0.0 0.0 112660 980 pts/0 S+ 22:25 0:00 grep --color=auto php-fpm
[root@tianqi-01 php-fpm.d]#

10.这就是多个池子的配置方法

12.22php-fpm的慢执行日志(非常有用)

php-fpm慢执行日志目录概要

vim /usr/local/php-fpm/etc/php-fpm.d/www.conf//加入如下内容

request_slowlog_timeout = 1
slowlog = /usr/local/php-fpm/var/log/www-slow.log

配置nginx的虚拟主机test.com.conf，把unix:/tmp/php-fcgi.sock改为unix:/tmp/www.sock
重新加载nginx服务
vim /data/wwwroot/test.com/sleep.php//写入如下内容

<?php 
echo “test slow log”;
sleep(2);echo “done”;
?>

curl -x127.0.0.1:80 test.com/sleep.php
cat /usr/local/php-fpm/var/log/www-slow.log

php-fpm慢执行日志

在做php网站的时候，建议使用LNMP，因为我们可以分析php的慢执行日志
查询方法：

1.系统负载高，可以通过各种工具查，查出是哪个进程导致
2.PHP网站访问慢，通过查看慢执行日志

1.配置www.conf 在配置文件中加入

request_slowlog_timeout = 1 //超过一秒钟就要记录日志

slowlog = /usr/local/php-fpm/var/log/www-slow.log //日志放到该路径下

[root@tianqi-01 php-fpm.d]# vim www.conf

保存退出

2.查看语法错误，并重新加载

[root@tianqi-01 php-fpm.d]# /usr/local/php-fpm/sbin/php-fpm -t
[16-Mar-2018 22:34:21] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful

[root@tianqi-01 php-fpm.d]# /etc/init.d/php-fpm reload
Reload service php-fpm done
[root@tianqi-01 php-fpm.d]#

3.修改虚拟主机配置文件

[root@dl-001 etc]# vim /usr/local/nginx/conf/vhost/test.com.conf
# 修改sock文件
fastcgi_pass unix:/tmp/www.sock;
...

4.重启nginx服务

[root@dl-001 etc]# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@dl-001 etc]# /usr/local/nginx/sbin/nginx -s reload

5.设置测试php文件

[root@dl-001 etc]# vim /data/www/test.com/sleep.php 
<?php
echo "test slow log";
sleep(2);
echo "done";
?>

说明：要查看具体的错误信息，可以开启php.ini内的display_error参数

6.查看慢执行日志

[root@localhost php-fpm.d]# cat /usr/local/php-fpm/var/log/www-slow.log

[22-Jun-2018 10:37:41] [pool www] pid 34788

script_filename = /data/wwwroot/test.com/sleep.php

[0x00007f1c8a2382f8] sleep() /data/wwwroot/test.com/sleep.php:3

[22-Jun-2018 10:37:53] [pool www] pid 34787

script_filename = /data/wwwroot/test.com/sleep.php

[0x00007f1c8a2382f8] sleep() /data/wwwroot/test.com/sleep.php:3

[22-Jun-2018 10:40:30] [pool www] pid 34882

script_filename = /data/wwwroot/test.com/sleep.php

[0x00007f5742a612f8] sleep() /data/wwwroot/test.com/sleep.php:3

7.查看具体是哪个脚本的哪一行比较慢

[root@localhost php-fpm.d]# cat /data/wwwroot/test.com/sleep.php

<?php

echo "test slow log";

sleep(2);

echo "done";

[root@localhost php-fpm.d]#

注：跟提示一样，是第3行慢，因为执行超过1秒钟，就慢了

8.以后遇到php网站访问慢的时候，就可以查看slowlog。一般会写成2秒，因为很多脚本执行要1秒，大家是可以接受的。

12.23open_basedir

php-fpm定义open_basedir目录概要

vim /usr/local/php-fpm/etc/php-fpm.d/test.conf//加入如下内容

php_admin_value[open_basedir]=/data/wwwroot/aming.com:/tmp/

创建测试php脚本，进行测试
再次更改aming.conf，修改路径，再次测试
配置错误日志
再次测试
查看错误日志

php-fpm定义open_basedir

open_basedir 的作用是限制php在指定的目录里活动。
因为如果服务器管理多个网站，在php.ini里定义多个open_basedir就不合适了，所以要么在apache虚拟主机配置文件里面定义，要么在php-fpm配置文件里面定义，我们可以针对不同的池子（pool）定义对应的open_basedir
```
php_admin_value[open_basedir]=/data/wwwroot/test.com:/tmp/
```
```
  - 如果路径出错，就会无法正常访问，导致404页面 curl直接连会提示“No input file specified.”
```

只需要加下面一行配置即可

1.针对www的pool进行配置，在最后面添加一句

[root@localhost php-fpm.d]# ls

aming.conf www.conf

[root@localhost php-fpm.d]# vim www.conf

[www]

listen = /tmp/php-fcgi.sock

listen.mode = 666

user = php-fpm

group = php-fpm

pm = dynamic

pm.max_children = 50

pm.start_servers = 20

pm.min_spare_servers = 5

pm.max_spare_servers = 35

pm.max_requests = 500

rlimit_files = 1024

request_slowlog_timeout = 1

slowlog = /usr/local/php-fpm/var/log/www-slow.log

php_admin_value[open_basedir]=/data/wwwroot/test.com:/tmp/

2.重启php-fpm

[root@localhost php-fpm.d]# /etc/init.d/php-fpm restart

Gracefully shutting down php-fpm . done

Starting php-fpm done

[root@localhost php-fpm.d]#

3.访问测试

[root@localhost php-fpm.d]# curl -x127.0.0.1:80 test.com/sleep.php -I

HTTP/1.1 200 OK

Server: nginx/1.12.1

Date: Fri, 22 Jun 2018 03:06:38 GMT

Content-Type: text/html; charset=UTF-8

Connection: keep-alive

X-Powered-By: PHP/5.6.30

[root@localhost php-fpm.d]#

4.如果open_basedir定义不对，就会导致无法访问，出现404状态码，输入curl命令会出现“No input file specified”错误。

5.定义错误日志

[root@localhost php-fpm.d]# vim /usr/local/php-fpm/etc/php.ini

搜索/display_errors，将display_errors = On改为display_errors = Off

搜索/error_log，添加下面一句

;error_log = php_errors.log

; Log errors to syslog (Event Log on Windows).

;error_log = syslog

error_log = /usr/local/php-fpm/var/log/php_errors.log

搜索/error_reporting，将自带的error_reporting注释掉

;error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT

error_reporting = E_ALL #定义错误日志的级别，所有

display_errors = Off 正常情况下，在线上这个是off的，别人不能通过浏览器看到你的错误信息，而是把你的错误信息记录到服务器的某一个文件里

6.查看设置的错误日志文件是否生成

[root@localhost php-fpm.d]# grep error_log /usr/local/php-fpm/etc/php.ini

; server-specific log, STDERR, or a location specified by the error_log

; Set maximum length of log_errors. In error_log information about the source is

;error_log = php_errors.log

;error_log = syslog

error_log = /usr/local/php-fpm/var/log/php_errors.log

; OPcache error_log file name. Empty string assumes "stderr".

;opcache.error_log=

[root@localhost php-fpm.d]# ls /usr/local/php-fpm/var/log/

php-fpm.log www-slow.log

[root@localhost php-fpm.d]#

7.手动生成错误日志文件，并设置权限为777，防止不能够正常写入

[root@localhost php-fpm.d]# touch /usr/local/php-fpm/var/log/php_errors.log

[root@localhost php-fpm.d]# chmod 777 !$

chmod 777 /usr/local/php-fpm/var/log/php_errors.log

[root@localhost php-fpm.d]#

8.这里为了测试方便，故意写错/usr/local/php-fpm/etc/php-fpm.d/www.conf的open_basedir路径。

[root@localhost php-fpm.d]# vim www.conf

[www]

listen = /tmp/php-fcgi.sock

listen.mode = 666

user = php-fpm

group = php-fpm

pm = dynamic

pm.max_children = 50

pm.start_servers = 20

pm.min_spare_servers = 5

pm.max_spare_servers = 35

pm.max_requests = 500

rlimit_files = 1024

request_slowlog_timeout = 1

slowlog = /usr/local/php-fpm/var/log/www-slow.log

php_admin_value[open_basedir]=/data/wwwroot/wwtest.com:/tmp/

9.重启php-fpm

[root@localhost php-fpm.d]# /etc/init.d/php-fpm restart

Gracefully shutting down php-fpm . done

Starting php-fpm done

[root@localhost php-fpm.d]#

10.访问测试，会看到404状态码

[root@localhost php-fpm.d]# !curl

curl -x127.0.0.1:80 test.com/sleep.php -I

HTTP/1.1 404 Not Found

Server: nginx/1.12.1

Date: Fri, 22 Jun 2018 03:32:50 GMT

Content-Type: text/html; charset=UTF-8

Connection: keep-alive

X-Powered-By: PHP/5.6.30

[root@localhost php-fpm.d]#

11.查看错误日志，会看到访问地址有限制

[root@localhost php-fpm.d]# cat /usr/local/php-fpm/var/log/php_errors.log

[22-Jun-2018 03:31:39 UTC] PHP Deprecated: Comments starting with '#' are deprecated in Unknown on line 1 in Unknown on line 0

[22-Jun-2018 03:32:50 UTC] PHP Warning: Unknown: open_basedir restriction in effect. File(/data/wwwroot/test.com/sleep.php) is not within the allowed path(s): (/data/wwwroot/wwtest.com:/tmp/) in Unknown on line 0

[22-Jun-2018 03:32:50 UTC] PHP Warning: Unknown: failed to open stream: Operation not permitted in Unknown on line 0

[root@localhost php-fpm.d]#

12.再将配置文件中的open_basedir路径修改过来，重新加载php-fpm，再来访问，会看到正常显示

[root@localhost php-fpm.d]# !vim

vim www.conf

[www]

listen = /tmp/php-fcgi.sock

listen.mode = 666

user = php-fpm

group = php-fpm

pm = dynamic

pm.max_children = 50

pm.start_servers = 20

pm.min_spare_servers = 5

pm.max_spare_servers = 35

pm.max_requests = 500

rlimit_files = 1024

request_slowlog_timeout = 1

slowlog = /usr/local/php-fpm/var/log/www-slow.log

php_admin_value[open_basedir]=/data/wwwroot/test.com:/tmp/

[root@localhost php-fpm.d]# /etc/init.d/php-fpm restart

Gracefully shutting down php-fpm . done

Starting php-fpm done

[root@localhost php-fpm.d]# !curl

curl -x127.0.0.1:80 test.com/sleep.php -I

HTTP/1.1 200 OK

Server: nginx/1.12.1

Date: Fri, 22 Jun 2018 03:37:16 GMT

Content-Type: text/html; charset=UTF-8

Connection: keep-alive

X-Powered-By: PHP/5.6.30

[root@localhost php-fpm.d]#

12.24php-fpm进程管理

php-fpm进程管理

[root@hf-01 ~]# cat /usr/local/php-fpm/etc/php-fpm.d/www.conf [www]
listen = /tmp/php-fcgi.sock
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
request_slowlog_timeout = 1
slowlog = /usr/local/php-fpm/var/log/www-slow.logphp_admin_value[open_basedir]=/data/wwwroot/test.com:/tmp/[root@hf-01 ~]#

pm = dynamic //表示进程以什么形式启动，dynamic就是动态，动态就是一开始为一个数值，根据需求再自动生成，服务器比较闲的时候还会去销毁，销毁到一定程度就会自动生成新的
pm.max_children = 50 //最大子进程数，ps aux可以查看
pm.start_servers = 20 //启动服务时会启动的进程数
pm.min_spare_servers = 5 //定义在空闲时段，子进程数的最少数量，如果达到这个数值时，php-fpm服务会自动派生新的子进程。
pm.max_spare_servers = 35 //定义在空闲时段，子进程数的最大值，如果高于这个数值就开始清理空闲的子进程。
pm.max_requests = 500 //定义一个子进程最多处理的请求数，也就是说在一个php-fpm的子进程最多可以处理这么多请求，当达到这个数值时，它会自动退出。
rlimit_files = 1024
request_slowlog_timeout = 1
slowlog = /usr/local/php-fpm/var/log/www-slow.log
php_admin_value[open_basedir]=/data/wwwroot/test.com:/tmp/

dynamic和static

pm = dynamic //表示进程以什么形式启动，dynamic就是动态，动态就是一开始为一个数值，根据需求再自动生成，服务器比较闲的时候还会去销毁，销毁到一定程度还有自动生成；根据下面的设置去进行设定“start_servers ”、“min_spare_servers ”、“max_spare_servers ”、“max_requests ”
pm = static 之后，一旦选择这个设置，下面的pm的各种设置只会有一个max_children生效，并启动的时候就生成50个

1.改变pm动态为静态

[root@localhost php-fpm.d]# vim www.conf

[www]

listen = /tmp/php-fcgi.sock

listen.mode = 666

user = php-fpm

group = php-fpm

#pm = dynamic

pm = static

[www]

listen = /tmp/php-fcgi.sock

#listen = 127.0.0.1:9000

listen.mode = 666

user = php-fpm

group = php-fpm

pm = dynamic

pm.max_children = 50

pm.start_servers = 20

pm.min_spare_servers = 5

pm.max_spare_servers = 35

pm.max_requests = 500

rlimit_files = 1024

[aming.com]

listen = /tmp/aming.sock

#listen = 127.0.0.1:9000

listen.mode = 666

user = php-fpm

group = php-fpm

pm = dynamic

pm.max_children = 50

pm.start_servers = 20

pm.min_spare_servers = 5

pm.max_spare_servers = 35

pm.max_requests = 500

rlimit_files = 1024

pm.max_children = 50

2.重启php-fpm服务

[root@localhost php-fpm.d]# /etc/init.d/php-fpm restart

Gracefully shutting down php-fpm . done

Starting php-fpm done

[root@localhost php-fpm.d]#

3.查看php-fpm进程

[root@localhost php-fpm.d]# ps aux |grep php-fpm

root 35451 0.7 0.4 227292 4984 ? Ss 11:49 0:00 php-fpm: master process (/usr/local/php-fpm/etc/php-fpm.conf)

php-fpm 35452 0.0 0.4 227232 4728 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35453 0.0 0.4 227232 4728 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35454 0.0 0.4 227232 4728 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35455 0.0 0.4 227232 4728 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35456 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35457 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35458 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35459 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35460 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35461 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35462 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35463 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35464 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35465 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35466 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35467 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35468 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35469 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35470 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35471 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool aming.com

php-fpm 35472 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35473 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35474 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35475 0.0 0.4 227232 4732 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35476 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35477 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35478 0.0 0.4 227232 4736 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35479 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35480 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35481 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35482 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35483 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35484 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35485 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35486 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35487 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35488 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35489 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35490 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

php-fpm 35491 0.0 0.4 227232 4740 ? S 11:49 0:00 php-fpm: pool www

root 35493 0.0 0.0 112660 976 pts/2 R+ 11:49 0:00 grep --color=auto php-fpm

[root@localhost php-fpm.d]#

4.这里aming.com只有20个进程，因为aming.conf里面只定义了20个

[root@localhost php-fpm.d]# cat aming.conf

[aming.com]

listen = /tmp/aming.sock

#listen = 127.0.0.1:9000

listen.mode = 666

user = php-fpm

group = php-fpm

pm = dynamic

pm.max_children = 50

pm.start_servers = 20

pm.min_spare_servers = 5

pm.max_spare_servers = 35

pm.max_requests = 500

rlimit_files = 1024

[root@localhost php-fpm.d]#

5.aming.com很闲，过一会儿会销毁，但最低会有5个

[root@localhost php-fpm.d]# ps aux |grep php-fpm |grep aming.com