{"id":75,"date":"2010-10-11T05:27:42","date_gmt":"2010-10-11T05:27:42","guid":{"rendered":"http:\/\/sherinsunny.wordpress.com\/?p=75"},"modified":"2010-10-11T05:27:42","modified_gmt":"2010-10-11T05:27:42","slug":"nginx-and-varnish-cache-and-reverse-proxy-to-apache","status":"publish","type":"post","link":"https:\/\/linuxmaster.in\/?p=75","title":{"rendered":"Nginx Servive static pages from Varnish Cache bypass the dynamic pages as Reverse Proxy To Apache"},"content":{"rendered":"

First Install nginx,varnish and apache.<\/p>\n

Install nginx
\n*********************
\nType the following commands to download nginx, enter:
\n# cd \/opt
\n# wget http:\/\/sysoev.ru\/nginx\/nginx-0.8.33.tar.gz<\/p>\n

Untar nginx, enter:
\n# tar -zxvf nginx-0.8.33.tar.gz
\n# cd nginx-0.8.33<\/p>\n

Configure nginx for 64 bit RHEL \/ CentOS Linux:
\n# .\/configure –without-http_autoindex_module –without-http_ssi_module –without-http_userid_module –without-http_auth_basic_module –without-http_geo_module –without-http_fastcgi_module –without-http_empty_gif_module –with-openssl=\/lib64<\/p>\n

# make
\n# make install
\n\/usr\/local\/nginx\/sbin\/nginx
\n\/usr\/local\/nginx\/sbin\/nginx -c \/usr\/local\/nginx\/conf\/nginx.conf<\/p>\n

*********************************<\/p>\n

Change the port of apache to 81 and nginx to 80 so that the webserver port is 80.
\n\/usr\/local\/nginx\/sbin\/nginx -v
\nDefault nginx.conf (\/usr\/local\/nginx\/conf\/nginx.conf)<\/p>\n

*********************************************************<\/p>\n

#user nobody;
\nworker_processes 1;<\/p>\n

#error_log logs\/error.log;
\n#error_log logs\/error.log notice;
\n#error_log logs\/error.log info;<\/p>\n

#pid logs\/nginx.pid;<\/p>\n

events {
\n worker_connections 1024;
\n}<\/p>\n

http {
\n include mime.types;
\n default_type application\/octet-stream;<\/p>\n

#log_format main ‘$remote_addr – $remote_user [$time_local] “$request” ‘
\n # ‘$status $body_bytes_sent “$http_referer” ‘
\n # ‘”$http_user_agent” “$http_x_forwarded_for”‘;<\/p>\n

#access_log logs\/access.log main;<\/p>\n

sendfile on;
\n #tcp_nopush on;<\/p>\n

#keepalive_timeout 0;
\n keepalive_timeout 65;
\nupstream cache_servers {
\n server localhost:6081 max_fails=3 fail_timeout=30s;
\n }
\n #gzip on;
\nserver {
\n access_log off;<\/p>\n

error_log logs\/vhost-error_log warn;
\n listen 80;
\n server_name emegano.com;<\/p>\n

# uncomment location below to make nginx serve static files instead of Apache
\n # NOTE this will cause issues with bandwidth accounting as files wont be logged
\n location ~* \\.(gif|jpg|jpeg|3gp|wmv|avi|mpg|mpeg|mp4|js|css)$ {
\n root \/var\/www\/html\/emegano.com;
\n }<\/p>\n

location \/ {
\n proxy_send_timeout 90;
\n proxy_read_timeout 90;<\/p>\n

proxy_buffer_size 4k;
\n # you can increase proxy_buffers here to suppress “an upstream response
\n # is buffered to a temporary file” warning
\n proxy_buffers 16 32k;
\n proxy_busy_buffers_size 64k;
\n proxy_temp_file_write_size 64k;<\/p>\n

proxy_connect_timeout 30s;<\/p>\n

# proxy_redirect http:\/\/www.emegano.com:81 http:\/\/www.emegano.com;
\n # proxy_redirect http:\/\/emegano.com:81 http:\/\/emegano.com;<\/p>\n

proxy_pass http:\/\/41.223.52.100:6081;
\n #proxy_pass http:\/\/cache_servers\/;
\n # proxy_redirect http:\/\/cache_servers\/ http:\/\/$host:$server_port\/;<\/p>\n

proxy_set_header Host $host;
\n proxy_set_header X-Real-IP $remote_addr;
\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
\n }
\n }<\/p>\n

# another virtual host using mix of IP-, name-, and port-based configuration
\n #
\n #server {
\n # listen 8000;
\n # listen somename:8080;
\n # server_name somename alias another.alias;<\/p>\n

# location \/ {
\n # root html;
\n # index index.html index.htm;
\n # }
\n #}<\/p>\n

# HTTPS server
\n #
\n #server {
\n # listen 443;
\n # server_name localhost;<\/p>\n

# ssl on;
\n # ssl_certificate cert.pem;
\n # ssl_certificate_key cert.key;<\/p>\n

# ssl_session_timeout 5m;<\/p>\n

# ssl_protocols SSLv2 SSLv3 TLSv1;
\n # ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
\n # ssl_prefer_server_ciphers on;<\/p>\n

# location \/ {
\n # root html;
\n # index index.html index.htm;
\n # }
\n #}<\/p>\n

}
\n*****************************************************
\nyum install logrotate libgomp gcc cpp binutils kernel-headers glibc-headers glibc-devel
\nrpm -Uvh varnish-1.1.2-5el5.x86_64.rpm varnish-libs-1.1.2-5el5.x86_64.rpm
\nyum install varnish.x86_64
\nfor A in varnish varnishlog ; do chkconfig $A on ; service $A start ; done
\nVarnish default.vcl
\n*******************************************************
\ncat \/etc\/varnish\/default.vcl
\n#This is a basic VCL configuration file for varnish. See the vcl(7)
\n#man page for details on VCL syntax and semantics.
\n#
\n#Default backend definition. Set this to point to your content
\n#server.<\/p>\n

backend default {
\n .host = “41.223.52.100”;
\n .port = “81”;
\n}
\n#
\n#Below is a commented-out copy of the default VCL logic. If you
\n#redefine any of these subroutines, the built-in logic will be
\n#appended to your code.
\n#
\n#sub vcl_recv {
\n # if (req.request != “GET” &&
\n # req.request != “HEAD” &&
\n # req.request != “PUT” &&
\n # req.request != “POST” &&
\n # req.request != “TRACE” &&
\n #req.request != “OPTIONS” &&
\n # req.request != “DELETE”) {
\n# \/* Non-RFC2616 or CONNECT which is weird. *\/
\n # return (pipe);
\n # }
\n# if (req.request != “GET” && req.request != “HEAD”) {
\n# \/* We only deal with GET and HEAD by default *\/
\n# return (pass);
\n# }
\n# if (req.http.Authorization || req.http.Cookie) {
\n# \/* Not cacheable by default *\/
\n# return (pass);
\n# }
\n# return (lookup);
\n#}
\n#
\n#sub vcl_pipe {
\n# # Note that only the first request to the backend will have
\n# # X-Forwarded-For set. If you use X-Forwarded-For and want to
\n# # have it set for all requests, make sure to have:
\n# # set req.http.connection = “close”;
\n# # here. It is not set by default as it might break some broken web
\n# # applications, like IIS with NTLM authentication.
\n# return (pipe);
\n#}
\n#
\n#sub vcl_pass {
\n# return (pass);
\n#}
\n#
\n#sub vcl_hash {
\n# set req.hash += req.url;
\n# if (req.http.host) {
\n# set req.hash += req.http.host;
\n# } else {
\n# set req.hash += server.ip;
\n# }
\n# return (hash);
\n#}
\n#
\n#sub vcl_hit {
\n# if (!obj.cacheable) {
\n# return (pass);
\n# }
\n# return (deliver);
\n#}
\n#
\n#sub vcl_miss {
\n# return (fetch);
\n#}
\n#
\n#sub vcl_fetch {
\n# if (!obj.cacheable) {
\n# return (pass);
\n# }
\n# if (obj.http.Set-Cookie) {
\n# return (pass);
\n# }
\n# set obj.prefetch = -30s;
\n# return (deliver);
\n#}
\n#
\n#sub vcl_deliver {
\n# return (deliver);
\n#}
\n#
\n#sub vcl_discard {
\n# \/* XXX: Do not redefine vcl_discard{}, it is not yet supported *\/
\n# return (discard);
\n#}
\n#
\n#sub vcl_prefetch {
\n# \/* XXX: Do not redefine vcl_prefetch{}, it is not yet supported *\/
\n# return (fetch);
\n#}
\n#
\n#sub vcl_timeout {
\n# \/* XXX: Do not redefine vcl_timeout{}, it is not yet supported *\/
\n# return (discard);
\n#}
\n#
\n#sub vcl_error {
\n# set obj.http.Content-Type = “text\/html; charset=utf-8″;
\n# synthetic {”<\/p>\n

# “} obj.status ” ” obj.response {”
\n#
\n#
\n# Error “} obj.status ” ” obj.response {”
\n# <\/p>\n

“} obj.response {“<\/p>\n

# Guru Meditation:
\n# XID: “} req.xid {”
\n# <\/p>\n

\n

# <\/p>\n

\n# Varnish cache server<\/a>
\n# <\/address>\n

#};
\n# return (deliver);
\n#}<\/p>\n

***************************************************
\nVarnish
\n***************************************************
\n cat \/etc\/sysconfig\/varnish
\n# Configuration file for varnish
\n#
\n# \/etc\/init.d\/varnish expects the variable $DAEMON_OPTS to be set from this
\n# shell script fragment.
\n#<\/p>\n

# Maximum number of open files (for ulimit -n)
\nNFILES=131072<\/p>\n

# Locked shared memory (for ulimit -l)
\n# Default log size is 82MB + header
\nMEMLOCK=82000<\/p>\n

# Maximum size of corefile (for ulimit -c). Default in Fedora is 0
\n# DAEMON_COREFILE_LIMIT=”unlimited”<\/p>\n

# This file contains 4 alternatives, please use only one.<\/p>\n

## Alternative 1, Minimal configuration, no VCL
\n#
\n# Listen on port 6081, administration on localhost:6082, and forward to
\n# content server on localhost:8080. Use a fixed-size cache file.
\n#
\n#DAEMON_OPTS=”-a 41.223.52.100:6081 \\
\n # -T localhost:6082 \\
\n # -b localhost:8080 \\
\n # -u varnish -g varnish \\
\n # -s file,\/var\/lib\/varnish\/varnish_storage.bin,1G”<\/p>\n

## Alternative 2, Configuration with VCL
\n#
\n# Listen on port 6081, administration on localhost:6082, and forward to
\n# one content server selected by the vcl file, based on the request. Use a
\n# fixed-size cache file.
\n#
\nDAEMON_OPTS=”-a 41.223.52.100:6081 \\
\n -T localhost:6082 \\
\n -f \/etc\/varnish\/default.vcl \\
\n -u varnish -g varnish \\
\n -s file,\/var\/lib\/varnish\/varnish_storage.bin,1G”<\/p>\n

## Alternative 3, Advanced configuration
\n#
\n# See varnishd(1) for more information.
\n#
\n# # Main configuration file. You probably want to change it \ud83d\ude42
\n VARNISH_VCL_CONF=\/etc\/varnish\/default.vcl
\n#
\n# # Default address and port to bind to
\n# # Blank address means all IPv4 and IPv6 interfaces, otherwise specify
\n# # a host name, an IPv4 dotted quad, or an IPv6 address in brackets.
\n# VARNISH_LISTEN_ADDRESS=
\n VARNISH_LISTEN_PORT=6081
\n#
\n# # Telnet admin interface listen address and port
\n VARNISH_ADMIN_LISTEN_ADDRESS=127.0.0.1
\n VARNISH_ADMIN_LISTEN_PORT=6082
\n#
\n# # The minimum number of worker threads to start
\n VARNISH_MIN_THREADS=1
\n#
\n# # The Maximum number of worker threads to start
\n VARNISH_MAX_THREADS=1000
\n#
\n# # Idle timeout for worker threads
\n VARNISH_THREAD_TIMEOUT=120
\n#
\n# # Cache file location
\n VARNISH_STORAGE_FILE=\/var\/lib\/varnish\/varnish_storage.bin
\n#
\n# # Cache file size: in bytes, optionally using k \/ M \/ G \/ T suffix,
\n# # or in percentage of available disk space using the % suffix.
\n VARNISH_STORAGE_SIZE=1G
\n#
\n# # Backend storage specification
\n VARNISH_STORAGE=”file,${VARNISH_STORAGE_FILE},${VARNISH_STORAGE_SIZE}”
\n#
\n# # Default TTL used when the backend does not specify one
\n VARNISH_TTL=120
\n#
\n# # DAEMON_OPTS is used by the init script. If you add or remove options, make
\n# # sure you update this section, too.
\n DAEMON_OPTS=”-a ${VARNISH_LISTEN_ADDRESS}:${VARNISH_LISTEN_PORT} \\
\n -f ${VARNISH_VCL_CONF} \\
\n -T ${VARNISH_ADMIN_LISTEN_ADDRESS}:${VARNISH_ADMIN_LISTEN_PORT} \\
\n -t ${VARNISH_TTL} \\
\n -w ${VARNISH_MIN_THREADS},${VARNISH_MAX_THREADS},${VARNISH_THREAD_TIMEOUT} \\
\n -u varnish -g varnish \\
\n -s ${VARNISH_STORAGE}”<\/p>\n

## Alternative 4, Do It Yourself. See varnishd(1) for more information.
\n#
\n# DAEMON_OPTS=””
\n*******************************************************************************************************************************************<\/p>\n","protected":false},"excerpt":{"rendered":"

First Install nginx,varnish and apache. Install nginx ********************* Type the following commands to download nginx, enter: # cd \/opt # wget http:\/\/sysoev.ru\/nginx\/nginx-0.8.33.tar.gz Untar nginx, enter: # tar -zxvf nginx-0.8.33.tar.gz # cd nginx-0.8.33 Configure nginx for 64 bit RHEL \/ CentOS Linux: # .\/configure –without-http_autoindex_module –without-http_ssi_module –without-http_userid_module –without-http_auth_basic_module –without-http_geo_module –without-http_fastcgi_module –without-http_empty_gif_module –with-openssl=\/lib64 # make # make … Continue reading “Nginx Servive static pages from Varnish Cache bypass the dynamic pages as Reverse Proxy To Apache”<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-75","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/linuxmaster.in\/index.php?rest_route=\/wp\/v2\/posts\/75","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxmaster.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxmaster.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxmaster.in\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxmaster.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=75"}],"version-history":[{"count":0,"href":"https:\/\/linuxmaster.in\/index.php?rest_route=\/wp\/v2\/posts\/75\/revisions"}],"wp:attachment":[{"href":"https:\/\/linuxmaster.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=75"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxmaster.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=75"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxmaster.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=75"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}