请求一个关于nginx+fastcgi遇到的问题

e4twood

遇到一个很头疼的问题.
公司现在的web服务器是之前的系统管理员按照http://blog.s135.com/post/314.htm文章进行配置的.因为是内部测试,每天的流量也就2000多IP,同时在线最多也就一百多人.现在的问题是时不时的php-cgi进程突然从1到5、600。然后又迅速回到1.如果到5\600时，网站打开就会很慢或者打不开，查了很多资料，使用了php-fpm，但问题依然存在。快被折腾疯了，不知道该从何入手

nginx配置

1. user  www www;
   
2. worker_processes 4;
   
3. worker_cpu_affinity 0001 0010 0100 1000;
   
4. error_log  logs/error.log;
   
5. pid        logs/nginx.pid;
   
6. worker_rlimit_nofile 51200;
   
7. events
   
8. {
   
9.            use epoll;
   
10.        worker_connections 51200;
    
11. }
    
12. 
    
13. http
    
14. {
    
15.   include       mime.types;
    
16. error_page 500 502 503 504 [url]http://www.XXX.COM[/url](为公司的网址);  
    
17. default_type  application/octet-stream;
    
18. #fastcgi_connect_timeout 60;
    
19. #fastcgi_send_timeout 180;
    
20. #fastcgi_read_timeout 180;
    
21. fastcgi_buffer_size 128k;
    
22. fastcgi_buffers 4 256k;
    
23. #fastcgi_busy_buffers_size 256k;
    
24. #fastcgi_temp_file_write_size 256k;
    
25. client_header_buffer_size 128k;
    
26. #large_client_header_buffers 4 256k;
    
27. keepalive_timeout  60;   
    
28. gzip  on;
    
29. gzip_min_length  1000;
    
30. gzip_buffers     4 8k;
    
31. gzip_types       text/* text/css application/javascript application/x-javascript;
    
32. gzip_comp_level  9;
    
33. gzip_proxied     any;
    
34. gzip_vary        on;
    
35. output_buffers   4 32k;
    
36. postpone_output  1460;

复制代码

php-fpm的配置

1. <?xml version="1.0" ?>
   
2. <configuration>
   
3. 
   
4.         All relative paths in this config are relative to php's install prefix
   
5. 
   
6.         <section name="global_options">
   
7. 
   
8.                 Pid file
   
9.                 <value name="pid_file">logs/php-fpm.pid</value>
   
10. 
    
11.                 Error log file
    
12.                 <value name="error_log">logs/php-fpm.log</value>
    
13. 
    
14.                 When this amount of php processes exited with SIGSEGV or SIGBUS ...
    
15.                 <value name="emergency_restart_threshold">10</value>
    
16. 
    
17.                 ... in a less than this interval of time, a complete restart will be initiated.
    
18.                 Useful to work around accidental curruptions in accelerator's shared memory.
    
19.                 <value name="emergency_restart_interval">1m</value>
    
20. 
    
21.                 Time limit on waiting child's reaction on signals from master
    
22.                 <value name="process_control_timeout">5s</value>
    
23. 
    
24.                 Set to 'no' to debug fpm
    
25.                 <value name="daemonize">yes</value>
    
26. 
    
27.         </section>
    
28. 
    
29.         <workers>
    
30. 
    
31.                 <section name="pool">
    
32. 
    
33.                         Name of pool. Used in logs and stats.
    
34.                         <value name="name">main</value>
    
35. 
    
36.                         Address to accept fastcgi requests on.
    
37.                         Valid syntax is 'ip.ad.re.ss:port' or just 'port' or '/path/to/unix/socket'
    
38.                         <value name="listen_address">127.0.0.1:10080</value>
    
39. 
    
40.                         <value name="listen_options">
    
41. 
    
42.                                 Set listen(2) backlog
    
43.                                 <value name="backlog">-1</value>
    
44. 
    
45.                                 Set permissions for unix socket, if one used.
    
46.                                 In Linux read/write permissions must be set in order to allow connections from web server.
    
47.                                 Many BSD-derrived systems allow connections regardless of permissions.
    
48.                                 <value name="owner"></value>
    
49.                                 <value name="group"></value>
    
50.                                 <value name="mode">0666</value>
    
51.                         </value>
    
52. 
    
53.                         Additional php.ini defines, specific to this pool of workers.
    
54.                         <value name="php_defines">
    
55.                 <!--                <value name="sendmail_path">/usr/sbin/sendmail -t -i</value>                -->
    
56.                 <!--                <value name="display_errors">0</value>                                                                -->
    
57.                         </value>
    
58. 
    
59.                         Unix user of processes
    
60.                         <value name="user">www</value>
    
61. 
    
62.                         Unix group of processes
    
63.                         <value name="group">www</value>
    
64. 
    
65.                         Process manager settings
    
66.                         <value name="pm">
    
67. 
    
68.                                 Sets style of controling worker process count.
    
69.                                 Valid values are 'static' and 'apache-like'
    
70.                                 <value name="style">static</value>
    
71. 
    
72.                                 Sets the limit on the number of simultaneous requests that will be served.
    
73.                                 Equivalent to Apache MaxClients directive.
    
74.                                 Equivalent to PHP_FCGI_CHILDREN environment in original php.fcgi
    
75.                                 Used with any pm_style.
    
76.                                 <value name="max_children">120</value>
    
77. 
    
78.                                 Settings group for 'apache-like' pm style
    
79.                                 <value name="apache_like">
    
80. 
    
81.                                         Sets the number of server processes created on startup.
    
82.                                         Used only when 'apache-like' pm_style is selected
    
83.                                         <value name="StartServers">20</value>
    
84. 
    
85.                                         Sets the desired minimum number of idle server processes.
    
86.                                         Used only when 'apache-like' pm_style is selected
    
87.                                         <value name="MinSpareServers">5</value>
    
88. 
    
89.                                         Sets the desired maximum number of idle server processes.
    
90.                                         Used only when 'apache-like' pm_style is selected
    
91.                                         <value name="MaxSpareServers">35</value>
    
92. 
    
93.                                 </value>
    
94. 
    
95.                         </value>
    
96. 
    
97.                         Time limit on waiting execution of single request
    
98.                         Should be used when 'max_execution_time' ini option does not terminate execution for some reason
    
99.                         <value name="request_execution_timeout">31s</value>
    
100. 
     
101.                         Set open file desc rlimit
     
102.                         <value name="rlimit_files">51200</value>
     
103. 
     
104.                         Set max core size rlimit
     
105.                         <value name="rlimit_core">unlimited</value>
     
106. 
     
107.                         Chroot to this directory at the start
     
108.                         <value name="chroot"></value>
     
109. 
     
110.                         Chdir to this directory at the start
     
111.                         <value name="chdir"></value>
     
112. 
     
113.                         Redirect workers' stdout and stderr into main log.
     
114.                         If not set, they will be redirected to /dev/null, according to FastCGI specs
     
115.                         <value name="catch_workers_output">yes</value>
     
116. 
     
117.                         How much requests each process should execute before respawn.
     
118.                         Useful to work around memory leaks in 3rd party libraries.
     
119.                         For endless request processing please specify 0
     
120.                         Equivalent to PHP_FCGI_MAX_REQUESTS
     
121.                         <value name="max_requests">10240</value>
     
122. 
     
123.                         Comma separated list of ipv4 addresses of FastCGI clients that allowed to connect.
     
124.                         Equivalent to FCGI_WEB_SERVER_ADDRS environment in original php.fcgi (5.2.2+)
     
125.                         Makes sense only with AF_INET listening socket.
     
126.                         <value name="allowed_clients">127.0.0.1</value>
     
127. 
     
128.                         Pass environment variables like LD_LIBRARY_PATH
     
129.                         All $VARIABLEs are taken from current environment
     
130.                         <value name="environment">
     
131.                                 <value name="HOSTNAME">$HOSTNAME</value>
     
132.                                 <value name="PATH">/usr/local/bin:/usr/bin:/bin</value>
     
133.                                 <value name="TMP">/tmp</value>
     
134.                                 <value name="TMPDIR">/tmp</value>
     
135.                                 <value name="TEMP">/tmp</value>
     
136.                                 <value name="OSTYPE">$OSTYPE</value>
     
137.                                 <value name="MACHTYPE">$MACHTYPE</value>
     
138.                                 <value name="MALLOC_CHECK_">2</value>
     
139.                         </value>
     
140. 
     
141.                 </section>
     
142. 
     
143.         </workers>
     
144. 
     
145. </configuration>

复制代码

yhlovemj

先查是不是被攻击