nginxのパフォーマンスチューニング

@shibuya.pm#17

Transcript

1. nginxͷύϑΥʔϚϯενϡʔχϯά Tatsuhiko Kubo@cubicdaiya Shibuya.pm#17@2015/06/02
2. @cubicdaiya / Tatsuhiko Kubo w 4PGUXBSF
   &OHJOFFS
   JO
   *OGSBTUSVDUVSF
   &OHJOFFSJOH
   !
   .FSDBSJ
   *OD
   w "VUIPS
   PG
   OHJOYCVJME
   w OHJOY
   SE
   QBSUZ
   NPEVMF
   EFWFMPQFS
   w OHY@TNBMM@MJHIU
   OHY@EZOBNJD@VQTUSFBN
   FUDʜ
   w 'BWPSJUFT
   (P
   $
   -VB
   OHJOY
   OHY@MVB
3. ੲnginxͷಛूهࣄΛॻ͖·ͨ͠
4. mozaic.fm#18ʹήετग़ԋ͠·ͨ͠ IUUQNP[BJDGN
5. Agenda w OHJOYͷجຊతͳνϡʔχϯά
   w OHJOYͱIPͷϕϯνϚʔΫ
   w ߲໨ผνϡʔχϯά
   w H[JQѹॖ
   w όοϑΝϦϯά
   w )5514
6. nginx.conf w σϑΥϧτͩͱอकతͳઃఆ͕ଟ͍
   w ͋ΒΏΔ؀ڥͰಈ࡞͢ΔΑ͏ʹߟྀ͞ΕͯΔ
   w σΟϨΫςΟϒͨ͘͞Μ
   w OHY@DPSF@NPEVMF͚ͩͰݸҎ্
7. core functionality w XPSLFS@QSPDFTTFT
   w ϫʔΧϓϩηε਺
   w XPSLFS@DPOOFDUJPOT
   w ϫʔΧຖͷ࠷େ઀ଓ਺
   w XPSLFS@SMJNJU@OPpMF
   w ϫʔΧϓϩηε͕PQFOͰ͖ΔGEͷ࠷େ਺
8. 
   σϑΥϧτ஋
   XPSLFS@QSPDFTTFT
   
   FWFOUT
   \
   
   
   
   
   
   
   
   
   
   XPSLFS@DPOOFDUJPOT
   
   ^ XPSLFS@SMJNJU@OPpMFͷσϑΥϧτ஋͸04ґଘ
9. worker_processes w $16ͷίΞ਺Λ໨҆ʹ
   w BVUPʹ͢Δͱࣗಈతʹ$16ίΞ਺ͷϫʔΧʔϓ ϩηε͕ىಈ͢Δ
   w ઀ଓ਺ʹԠͯ͡େ͖͘͢Δ
   w $16ό΢ϯυʹͳΓͦ͏ͳΒ͞Βʹେ͖Ίʹ͢Δ
   w FH
   OHY@TNBMM@MJHIU
   OHY@MVB
10. worker_connections w ௨ৗ͸਺ઍ ʙ Ͱे෼
    w ສ୯ҐͰ΋͍͚ͦ͏͚ͩͲ΍ͬͨ͜ͱͳ͍
    w XPSLFS@QSPDFTTFTͱηοτͰߟ͑Δ
    w ϓϩΩγઌͷ઀ଓ਺΋ؚ·ΕΔ఺ʹ஫ҙ
11. worker_rlimit_nofile w ϫʔΧϓϩηε͕ΦʔϓϯͰ͖ΔGEͷ࠷େ਺
    w XPSLFS@DPOOFDUJPOTΑΓ΋༏ઌ͞ΕΔͷͰ஫ҙ XPSLFS@SMJNJU@OPpMF
    
12. νϡʔχϯάܥσΟϨΫςΟϒ(Ұ෦) w TFOEpMF
    w LFFQBMJWF@UJNFPVU
    w PQFO@pMF@DBDIF
    w UDQ@OPEFMBZ
    w UDQ@OPQVTI
    w MJTUFO
13. sendfile w TFOpMFγεςϜίʔϧͷ༗ޮԽ
    w σϑΥϧτͩͱແޮ TFOEpMF
    PO
14. keepalive_timeout w ΫϥΠΞϯτͱͷΩʔϓΞϥΠϒ઀ଓͷ λΠϜΞ΢τ஋ LFFQBMJWF@UJNFPVU
    T
15. open_file_cache w Ұ౓։͍ͨϑΝΠϧ৘ใΛΩϟογϡ
    w ϑΝΠϧͷGEɺαΠζɺߋ৽೔࣌
    PQFO@pMF@DBDIF
    NBY
    JOBDUJWFT
16. tcp_nodelay w 5$1@/0%&-":Φϓγϣϯͷ༗ޮԽ
    w σϑΥϧτͰ༗ޮ
    w /BHMFΞϧΰϦζϜΛېࢭ UDQ@OPEFMBZ
    PO
17. tcp_nopush w 5$1@/0164)Φϓγϣϯͷ༗ޮԽ
    w -JOVYͩͱ5$1@$03,Φϓγϣϯ
    w TFOEpMF༗ޮ࣌ͷΈར༻Մೳ UDQ@OPQVTI
    PO
18. TCP_NODELAYͱTCP_NOPUSH w ͜ͷೋͭ͸ຊདྷ૬൓͢Δಈ࡞Λ͢Δ
    w 5$1@/0%&-":
    w ύέοτΛͰ͖Δ͚ͩଈ࠲ʹૹ৴͢Δ
    w 5$1@/0164)
    w ύέοτΛͰ͖Δ͚ͩ·ͱΊͯૹ৴͢Δ
    w OHJOY͸྆ํ૊Έ߹ΘͤՄೳ ཁTFOEpMF
    w ·ͣɺύέοτૹ৴Λ5$1@/0164)Ͱ஗Ԇͤ͞Δ
    
    5$1@/0164)ΛPGG
    
    
    5$1@/0%&-":Ͱϑϥογϡ
19. listen ύϥϝʔλଟ͗͢
20. ύϑΥʔϚϯεʹӨڹ͢Δ ओͳlistenύϥϝʔλ w TQEZ
    
    41%:Λ༗ޮʹ͢Δ
    w CBDLMPH/
    
    MJTUFOͷόοΫϩά਺
    w OFUDPSFTPNBYDPOO౳΋๨Εͣʹ
    w GBTUPQFO/
    
    5$1
    'BTU
    0QFO
    w SFVTFQPSU
    
    40@3&64&1035Λ༗ޮʹ͢Δ
21. nginxͱh2oͷϕϯνϚʔΫ w DYMBSHF
    PO
    &$
    w IPBMQIB
    w OHJOY
    w XSLͰϕϯνϚʔΫ
    w XSL
    D
    
    U
    
    E
    
    IUUQ
22. h2o.conf(࠷దԽલ) MJTUFO
    
    IPTUT
    
    
    
    
    
    
    
    QBUIT
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    pMFEJS
    VTSMPDBMOHJOYIUNM
23. h2o.conf(࠷దԽޙ) OVNUISFBET
    
    OVNOBNFSFTPMVUJPOUISFBET
    
    NBYDPOOFDUJPOT
    
    MJTUFO
    
    IPTUT
    
    
    
    
    
    
    
    QBUIT
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    pMFEJS
    VTSMPDBMOHJOYIUNM
24. nginx.conf(࠷దԽલ) XPSLFS@QSPDFTTFT
    
    
    FWFOUT
    \
    
    
    
    
    XPSLFS@DPOOFDUJPOT
    
    
    ^
    IUUQ
    \
    
    
    
    
    JODMVEF
    
    
    
    
    
    
    NJNFUZQFT
    
    
    
    
    EFGBVMU@UZQF
    
    BQQMJDBUJPOPDUFUTUSFBN
    
    
    
    
    BDDFTT@MPH
    PGG
    
    
    
    
    TFOEpMF
    PO
    
    
    
    
    LFFQBMJWF@UJNFPVU
    
    
    
    
    
    
    TFSWFS
    \
    
    
    
    
    
    
    
    
    MJTUFO
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    TFSWFS@OBNF
    
    MPDBMIPTU
    
    
    
    
    
    
    
    
    MPDBUJPO
    
    \
    
    
    
    
    
    
    
    
    
    
    
    
    SPPU
    
    
    IUNM
    
    
    
    
    
    
    
    
    
    
    
    
    JOEFY
    
    JOEFYIUNM
    JOEFYIUN
    
    
    
    
    
    
    
    
    ^
    
    
    
    
    ^
    ^
25. nginx.conf(࠷దԽޙ) XPSLFS@QSPDFTTFT
    
    FWFOUT
    \
    
    
    
    
    XPSLFS@DPOOFDUJPOT
    
    
    
    
    
    
    BDDFQU@NVUFY@EFMBZ
    NT
    ^
    IUUQ
    \
    
    
    
    
    JODMVEF
    
    
    
    
    
    
    NJNFUZQFT
    
    
    
    
    EFGBVMU@UZQF
    
    BQQMJDBUJPOPDUFUTUSFBN
    
    
    
    
    BDDFTT@MPH
    PGG
    
    
    
    
    TFOEpMF
    PO
    
    
    
    
    PQFO@pMF@DBDIF
    NBY
    JOBDUJWFT
    
    
    
    
    UDQ@OPQVTI
    PO
    
    
    
    
    LFFQBMJWF@UJNFPVU
    
    
    
    
    
    
    TFSWFS
    \
    
    
    
    
    
    
    
    
    MJTUFO
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    TFSWFS@OBNF
    
    MPDBMIPTU
    
    
    
    
    
    
    
    
    MPDBUJPO
    
    \
    
    
    
    
    
    
    
    
    
    
    
    
    SPPU
    
    
    IUNM
    
    
    
    
    
    
    
    
    
    
    
    
    JOEFY
    
    JOEFYIUNM
    JOEFYIUN
    
    
    
    
    
    
    
    
    ^
    
    
    
    
    ^
    ^
26. nginxͱh2oͷϕϯνϚʔΫ SFRT SFRTFD XSL
    D
    
    U
    
    E
    
    IUUQ
27. nginxͱgzipѹॖ w H[JQ
    
    H[JQѹॖΛ༗ޮʹ͢Δ
    w H[JQ@UZQFT
    
    H[JQѹॖର৅ͷ$POUFOU5ZQF
    w H[JQ@DPNQ@MFWFM
    
    H[JQͷѹॖϨϕϧ
    w H[JQ@TUBUJD
    
    H[JQѹॖࡁΈϑΝΠϧͷ഑৴
    w HVO[JQ
    
    H[JQղౚ
28. gzipѹॖͷઃఆྫ H[JQ
    PO
    H[JQ@DPNQ@MFWFM
    
    H[JQ@UZQFT
    UFYUDTT
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    UFYUKBWBTDSJQU
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    BQQMJDBUJPOKBWBTDSJQU
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    BQQMJDBUJPOKTPO
29. nginxͱgzipѹॖ w ੩తίϯςϯπͷH[JQѹॖ͸ੵۃతʹ͢΂͖
    w $16ͷΦʔόʔϔουΑΓ΋ωοτϫʔΫͷ ϨΠςϯγͷํ͕͸Δ͔ʹେ͖͍
    w $16Ϧιʔεͷফඅྔ͕ແࢹͰ͖ͳ͍৔߹
    w H[JQ@TUBUJDͰH[JQѹॖࡁΈϑΝΠϧΛ഑৴
30. gzip_staticͷઃఆྫ 
    YYY DTTcKT H[͕ଘࡏͨ͠ΒͦΕΛͦͷ··഑৴
    
    ΫϥΠΞϯτ͕H[JQѹॖΛαϙʔτ͍ͯ͠ͳ͍৔߹͸H[ϑΝΠϧΛల։ͯ͠഑৴
    MPDBUJPO
    d
    = DTTcKT 
    \
    
    
    
    
    
    
    
    
    H[JQ@TUBUJD
    BMXBZT
    
    
    
    
    
    
    
    
    HVO[JQ
    PO
    ^
31. zopfliͰ͞Βʹѹॖ w EFqBUFޓ׵ͷѹॖΞϧΰϦζϜ
    
    πʔϧ
    w IUUQTHJUIVCDPNHPPHMF[PQqJ
    w [PQqJͰѹॖͨ͠΋ͷ͸HVO[JQՄೳ
    w ѹॖ཰͕ߴ͍෼ɺѹॖʹ͔͔Δ͕࣌ؒ௕͍
    w ࣄલʹѹॖ͢ΔͷͰ໰୊ʹͳΒͳ͍
32. nginxͱόοϑΝϦϯά w DMJFOU@CPEZ@CVGGFS@TJ[F
    w QSPYZ@CVGGFS@TJ[F
    w QSPYZ@CVGGFST
    w QSPYZ@CVGGFSJOH
    w QSPYZ@SFRVFTU@CVGGFSJOH
    w FUDʜ
33. όοϑΝϦϯάͷOn/Off w QSPYZ@CVGGFSJOH
    
    EFGBVMU
    PO
    w FH
    ετϦʔϛϯά૬౰ͷॲཧΛ͢Δࡍʹ PGGʹ͢Δ͔ݕ౼
    w QSPYZ@SFRVFTU@CVGGFSJOH
    
    EFGBVMU
    PO
    w FH
    େ͖ͳϑΝΠϧͷΞοϓϩʔυ͕ൃੜ͢Δࡍ ʹPGGʹ͢Δ͔ݕ౼ ಛʹཧ༝͕ͳ͍ݶΓσϑΥϧτͰ0,
34. όοϑΝϦϯάͱI/O w OHJOYͷ֤όοϑΝͷαΠζ͸ൺֱతখ͞Ί
    w େମ਺,#ఔ౓
    w όοϑΝ͕଍Γͳ͘ͳΔͱσΟεΫʹॻ͖ग़͢
    w όοϑΝαΠζΛௐ੔
    PS
    UNQGTΛར༻
35. όοϑΝϦϯάͱtmpfs 
    ϦΫΤετϘσΟͷॻ͖ग़͠ઌ
    DMJFOU@CPEZ@UFNQ@QBUI
    EFWTINDCU
    
    
    
    ϓϩΩγઌϨεϙϯεϘσΟͷॻ͖ग़͠ઌ
    QSPYZ@UFNQ@QBUI
    EFWTINQU
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    ɾ
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    ɾ
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    ɾ
36. HTTPSؔ࿈ͷνϡʔχϯά w 5-4
    4FTTJPO
    $BDIF
    w 5-4
    4FTTJPO
    5JDLFUT
    w 0$41
    4UBQMJOH
    w 41%:
    w 0QUJNJ[JOH
    UIF
    5-4SFDPSE
    TJ[F
37. TLS Session Cache w 5-4ϋϯυγΣΠΫͷηογϣϯΛαʔόʹ Ωϟογϡ
    w OHJOYͰ͸ڞ༗ϝϞϦ্ͷอଘ͞ΕΔ
    w ࣍ճͷ5-4ϋϯυγΣΠΫΛলུ
38. TLS Session Cache with nginx TTM@TFTTJPO@DBDIF
    TIBSFE44-N
    TTM@TFTTJPO@UJNFPVU
    N
39. TLS Session Tickets w ҉߸Խͨ͠ηογϣϯ νέοτ ΛΫϥΠΞϯτ ʹ౉͢
    w νέοτΛݩʹ5-4ηογϣϯΛ࠶։
    w )5514αʔόෳ਺୆ͰηογϣϯΛڞ༗
40. TLS Session Tickets with nginx TTM@TFTTJPO@UJDLFUT
    PO
    TTM@TFTTJPO@UJDLFU@LFZ
    FUDOHJOYTTMUJDLFULFZ
41. OCSP Stapling w 0$41ʹΑΔ44-ূ໌ॻͷࣦޮ֬ೝΛαʔόଆ ͰߦͬͯΩϟογϡ
    w ΫϥΠΞϯτଆͰ΍Δͱ5-4ϋϯυγΣΠΫ࣌ ʹϨΠςϯγൃੜ
42. OCSP Stapling with nginx TTM@TUBQMJOH
    PO
    TTM@TUBQMJOH@WFSJGZ
    PO
    TTM@USVTUFE@DFSUJpDBUF
    FUDOHJOYTTMDFSUDSU
    SFTPMWFS
    YYYYYYYYYYYY
    WBMJET
    SFTPMWFS@UJNFPVU
    T
43. SPDY with nginx MJTUFO
    
    TTM
    TQEZ
44. Optimizing the TLS-record size w 5-4Ͱ͸ҰఆαΠζຖʹ௨৴಺༰Λ҉߸Խ͢Δ ௨শ 5-4SFDPSE
    w TTM@CVGGFS@TJ[F EFGBVMU
    L
    w ,#ͩͱେ͖͗ͯ͢৽ن5$1઀ଓ࣌ͷ355͕૿Ճ
    w Ұൠతͳ8FCαΠτͳΒখ͍͞΄͏͕͍͍
    w 55'# 5JNF
    5P
    'JSTU
    #ZUF վળʹޮՌ͋Γ TTM@CVGGFS@TJ[F
    L
45. ·ͱΊ w OHJOY͸ύϑΥʔϚϯεʹӨڹ͢ΔσΟϨΫςΟϒ ͕ͨ͘͞Μ͋Δ
    w σϑΥϧτઃఆ͸ׂͱอकత ແޮͳ΋ͷ΋ଟ͍
    w H[JQѹॖ͸ੵۃతʹ
    w όοϑΝͷαΠζͱϑΝΠϧ*0ͷؔ܎ʹ஫ҙ
    w )5514͸͍Ζ͍Ζͱ࠷దԽ߲໨͋Δ
46. ࢀߟจݙ / URL w OHJOY
    EPDVNFOUBUJPO
    w IUUQOHJOYPSHFOEPDT
    w 4FDVSJUZ
    
    4FSWFS
    4JEF
    5-4
    w IUUQTXJLJNP[JMMBPSH4FDVSJUZ4FSWFS@4JEF@5-4
    w 44-5-4҉߸ઃఆΨΠυϥΠϯ
    w IUUQXXXJQBHPKQTFDVSJUZWVMOTTM@DSZQU@DPOpHIUNM
    w 0QUJNJ[JOH
    /(*/9
    5-4
    
    5JNF
    5P
    'JSTU
    #ZUF
    55'#
    w IUUQTXXXJHWJUBDPNPQUJNJ[JOHOHJOYUMTUJNFUPpSTUCZUF
47. ࢀߟจݙ / URL w /(*/9
    015*.*;"5*0/
    6/%&345"/%*/(
    4&/%'*-&
    5$1@/0%&-":
    "/%
    5$1@/0164)
    w IUUQTUOFUOHJOYPQUJNJ[BUJPOVOEFSTUBOEJOHTFOEpMFUDQ@OPEFMBZBOE UDQ@OPQVTIIUNM
    w զʑ͸ͲͷΑ͏ʹͯ҆͠શͳ)5514௨৴Λఏڙ͢Ε͹ྑ͍͔
    w IUUQRJJUBDPNIBSVLBTBOJUFNTGFGCBCBDBGG
    w )JHI
    1FSGPSNBODF
    #SPXTFS
    /FUXPSLJOH
    w 0`3FJMMZ
    *MZB
    (SJHPSJL
48. w OHJOYͷύϥϝʔλνϡʔχϯάͱIP
    w IUUQRJJUBDPNDVCJDEBJZBJUFNTEDFDCF
    w OHJOYύϑΥʔϚϯενϡʔχϯάʙ੩తίϯςϯπ഑৴ฤʙ
    w IUUQRJJUBDPNDVCJDEBJZBJUFNTCBBCEEE
    w OHJOYͷϦΫΤετϘσΟͷόοϑΝϦϯάʹؔ͢Δ໰୊ͱͦͷվળࡦ
    w IUUQRJJUBDPNDVCJDEBJZBJUFNTGFFE ࢀߟจݙ / URL
49. ࠷ޙʹએ఻
50. YAPC::Asia Tokyo2015 ͷτʔΫʹԠื͠·ͨ͠ IUUQZBQDBTJBPSHUBMLTIPXBGGFBGCCEDB ࣮ફOHJOYϞδϡʔϧ։ൃʙ$ͱ-VBʙ