This document provides an overview of the NGINX web server. It discusses why NGINX was created, its basic configuration and usage, how to set up servers and locations, handle static content, rewrite URLs, add authentication and caching, load balance between servers, and use PHP with FastCGI. The document also includes code examples for common NGINX configurations.

1. NGINX
THE WEB SERVER YOU MIGHT ACTUALLY LIKE

2. ABOUT ME
PHP since 10 years
CI
CleanCode
DevOps
TDD
Shipping

4. WORKING FOR
ResearchGate gives science back to the people who make it happen.
We help researchers build reputation and accelerate scientific
progress.
On their terms.

5. GET IN TOUCH
stackoverflow:
Twitter: @__edorian
Xing / G+: Volker Dusch
IRC: edorian
Mail: php@wallbash.com

6. LET'S GO

7. WHY ANOTHER WEBSERVER?

8. WHY NOT LIGHTTPD?

9. THE BASICS
Intro
Multiple Servers / Domains
Static content
SSL
Error pages
Rewrites
Auth
Caching
Load Balancing
Proxy
PHP!

10. INTRO
/etc/nginx/nginx.conf
/etc/nginx/conf.d/*.conf

11. NGINX CONF BASICS
user nginx;
worker_processes 6;
worker_cpu_affinity 000001 000010 000100 001000 010000 100000;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}

12. NGINX CONFIGURATION
These don't have to be in the same file. Just "include" .conf files.
http {
// ...
server {
// ...
location {
// ...
}
}
}

13. NGINX CONF: BASICS
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
access_log /var/log/nginx/access.log main;
sendfile on;
keepalive_timeout 65;
include /etc/nginx/conf.d/*.conf;
}

14. SERVERS
server {
server_name *.wallbash.com *.wallbash.de;
listen 80;
// ...
}
server {
server_name _;
listen 80;
// ...
}

15. STATIC CONTENT
location / {
root /var/www/myApp/html/
}

16. FANCY STATIC CONTENT
location ~ ^/(js|img|css) {
}

17. DENY ACCESS TO ALL .DOT-FILES
location ~ /. {
access_log off;
log_not_found off;
deny all;
}

18. SSL
server {
server_name _;
listen 80;
listen 443 ssl;
}

19. SSL - THE WHOLE STORY
ssl_certificate wildcard.crt;
ssl_certificate_key wildcard.key;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:10m;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AE
SGCM;
ssl_ecdh_curve secp521r1;

20. REWRITES
server {
server_name http://*;
listen 80;
rewrite ^ https://$host$request_uri permanent;
}

21. ERROR PAGES
error_page 500 501 502 503 504 /500.html;
location /500.html {
internal;
}
location /500 {
return 500;
}

22. CACHING
location ~ ^/(js|img|css) {
expires 14d;
}

23. CACHING - IN MEMCACHE!
server {
location / {
set $memcached_key $uri;
memcached_pass name:11211;
default_type text/html;
error_page 404 @fallback;
}
}
memcached_gzip_flag 2;
gunzip on;

24. AUTH
location / {
auth_basic "Restricted";
auth_basic_user_file /etc/nginx/conf.d/myApp.htpasswd;
}

25. LOAD BALANCING
upstream web_workers {
server www1.example.com;
server www2.example.com;
server www3.example.com;
server www4.example.com;
}

26. LOAD BALANCING LEGACY
upstream web_workers {
ip_hash;
server www1.example.com;
server www2.example.com;
server www3.example.com;
server www4.example.com;
}

27. PROXY
location / {
proxy_pass http://localhost:8000;
proxy_set_header X-Real-IP $remote_addr;
proxy_cache zone;
}

28. PHP!

29. PHP-FPM!?!
FastCGI Process Manager

30. FPM-CONFIG
[myApp]
listen = 9000
;listen.allowed_clients = 127.0.0.1
user = php
group = php
pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35
slowlog = /var/log/php-fpm/myApp-slow.log

31. NGINX + PHP
Modern frameworks
location / {
fastcgi_pass 127.0.0.1:9000;
fastcgi_param SCRIPT_FILENAME /var/www/myApp/index.php;
include fastcgi_params;
}

32. SUPPORTS ANY LAYOUT
location / {
try_files $uri $uri/ /index.php;
}

33. REALLY SUPPORTS ANY LAYOUT
Make /foo/ go to .../foo/index.php
location ~ ^.+.php {
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /var/www/myApp/src$fastcgi_script_name;
}

34. SCALING!
location / {
fastcgi_pass anontherServer:9000;
fastcgi_param SCRIPT_FILENAME /var/www/myApp/html/index.php;
include fastcgi_params;
}

35. THANKS HELGI!
@h
http://helgi.ws/
Further reading:
https://speakerdeck.com/u/helgi/p/cranking-nginx-to-11-phptek-
2012

36. THANK YOU