nginxのパフォーマンスチューニング

@shibuya.pm#17

Transcript

1. nginxͷύϑΥʔϚϯενϡʔχϯά
   Tatsuhiko Kubo@cubicdaiya
   Shibuya.pm#17@2015/06/02
   

   View Slide

2. @cubicdaiya / Tatsuhiko Kubo
   w 4PGUXBSF&OHJOFFSJO*OGSBTUSVDUVSF
   &OHJOFFSJOH!.FSDBSJ *OD
   w "VUIPSPGOHJOYCVJME
   w OHJOYSEQBSUZNPEVMFEFWFMPQFS
   w OHY@TNBMM@MJHIU OHY@EZOBNJD@VQTUSFBN FUDʜ
   w 'BWPSJUFT(P $ -VB OHJOY OHY@MVB
   

   View Slide

3. ੲnginxͷಛूهࣄΛॻ͖·ͨ͠
   

   View Slide

4. mozaic.fm#18ʹήετग़ԋ͠·ͨ͠
   IUUQNP[BJDGN
   

   View Slide

5. Agenda
   w OHJOYͷجຊతͳνϡʔχϯά
   w OHJOYͱIPͷϕϯνϚʔΫ
   w ߲໨ผνϡʔχϯά
   w H[JQѹॖ
   w όοϑΝϦϯά
   w )5514
   

   View Slide

6. nginx.conf
   w σϑΥϧτͩͱอकతͳઃఆ͕ଟ͍
   w ͋ΒΏΔ؀ڥͰಈ࡞͢ΔΑ͏ʹߟྀ͞ΕͯΔ
   w σΟϨΫςΟϒͨ͘͞Μ
   w OHY@DPSF@NPEVMF͚ͩͰݸҎ্
   

   View Slide

7. core functionality
   w XPSLFS@QSPDFTTFT
   w ϫʔΧϓϩηε਺
   w XPSLFS@DPOOFDUJPOT
   w ϫʔΧຖͷ࠷େ઀ଓ਺
   w XPSLFS@SMJNJU@OPpMF
   w ϫʔΧϓϩηε͕PQFOͰ͖ΔGEͷ࠷େ਺
   

   View Slide

8. σϑΥϧτ஋
   XPSLFS@QSPDFTTFT
   FWFOUT\
   XPSLFS@DPOOFDUJPOT
   ^
   XPSLFS@SMJNJU@OPpMFͷσϑΥϧτ஋͸04ґଘ
   

   View Slide

9. worker_processes
   w $16ͷίΞ਺Λ໨҆ʹ
   w BVUPʹ͢Δͱࣗಈతʹ$16ίΞ਺ͷϫʔΧʔϓ
   ϩηε͕ىಈ͢Δ
   w ઀ଓ਺ʹԠͯ͡େ͖͘͢Δ
   w $16ό΢ϯυʹͳΓͦ͏ͳΒ͞Βʹେ͖Ίʹ͢Δ
   w FHOHY@TNBMM@MJHIU OHY@MVB
   

   View Slide

10. worker_connections
    w ௨ৗ͸਺ઍ ʙ
    Ͱे෼
    w ສ୯ҐͰ΋͍͚ͦ͏͚ͩͲ΍ͬͨ͜ͱͳ͍
    w XPSLFS@QSPDFTTFTͱηοτͰߟ͑Δ
    w ϓϩΩγઌͷ઀ଓ਺΋ؚ·ΕΔ఺ʹ஫ҙ
    

    View Slide

11. worker_rlimit_nofile
    w ϫʔΧϓϩηε͕ΦʔϓϯͰ͖ΔGEͷ࠷େ਺
    w XPSLFS@DPOOFDUJPOTΑΓ΋༏ઌ͞ΕΔͷͰ஫ҙ
    XPSLFS@SMJNJU@OPpMF
    

    View Slide

12. νϡʔχϯάܥσΟϨΫςΟϒ(Ұ෦)
    w TFOEpMF
    w LFFQBMJWF@UJNFPVU
    w PQFO@pMF@DBDIF
    w UDQ@OPEFMBZ
    w UDQ@OPQVTI
    w MJTUFO
    

    View Slide

13. sendfile
    w TFOpMFγεςϜίʔϧͷ༗ޮԽ
    w σϑΥϧτͩͱແޮ
    TFOEpMFPO
    

    View Slide

14. keepalive_timeout
    w ΫϥΠΞϯτͱͷΩʔϓΞϥΠϒ઀ଓͷ
    λΠϜΞ΢τ஋
    LFFQBMJWF@UJNFPVUT
    

    View Slide

15. open_file_cache
    w Ұ౓։͍ͨϑΝΠϧ৘ใΛΩϟογϡ
    w ϑΝΠϧͷGEɺαΠζɺߋ৽೔࣌
    PQFO@pMF@DBDIFNBYJOBDUJWFT
    

    View Slide

16. tcp_nodelay
    w 5$1@/0%&-":Φϓγϣϯͷ༗ޮԽ
    w σϑΥϧτͰ༗ޮ
    w /BHMFΞϧΰϦζϜΛېࢭ
    UDQ@OPEFMBZPO
    

    View Slide

17. tcp_nopush
    w 5$1@/0164)Φϓγϣϯͷ༗ޮԽ
    w -JOVYͩͱ5$1@$03,Φϓγϣϯ
    w TFOEpMF༗ޮ࣌ͷΈར༻Մೳ
    UDQ@OPQVTIPO
    

    View Slide

18. TCP_NODELAYͱTCP_NOPUSH
    w ͜ͷೋͭ͸ຊདྷ૬൓͢Δಈ࡞Λ͢Δ
    w 5$1@/0%&-":
    w ύέοτΛͰ͖Δ͚ͩଈ࠲ʹૹ৴͢Δ
    w 5$1@/0164)
    w ύέοτΛͰ͖Δ͚ͩ·ͱΊͯૹ৴͢Δ
    w OHJOY͸྆ํ૊Έ߹ΘͤՄೳ ཁTFOEpMF
    
    w ·ͣɺύέοτૹ৴Λ5$1@/0164)Ͱ஗Ԇͤ͞Δ
    5$1@/0164)ΛPGG5$1@/0%&-":Ͱϑϥογϡ
    

    View Slide

19. listen
    ύϥϝʔλଟ͗͢
    

    View Slide

20. ύϑΥʔϚϯεʹӨڹ͢Δ
    ओͳlistenύϥϝʔλ
    w TQEZ41%:Λ༗ޮʹ͢Δ
    w CBDLMPH/MJTUFOͷόοΫϩά਺
    w OFUDPSFTPNBYDPOO౳΋๨Εͣʹ
    w GBTUPQFO/5$1'BTU0QFO
    w SFVTFQPSU40@3&64&1035Λ༗ޮʹ͢Δ
    

    View Slide

21. nginxͱh2oͷϕϯνϚʔΫ
    w DYMBSHFPO&$
    w IPBMQIB
    w OHJOY
    w XSLͰϕϯνϚʔΫ
    w XSLDUEIUUQ
    

    View Slide

22. h2o.conf(࠷దԽલ)
    MJTUFO
    IPTUT
    
    QBUIT
    
    pMFEJSVTSMPDBMOHJOYIUNM
    

    View Slide

23. h2o.conf(࠷దԽޙ)
    OVNUISFBET
    OVNOBNFSFTPMVUJPOUISFBET
    NBYDPOOFDUJPOT
    MJTUFO
    IPTUT
    
    QBUIT
    
    pMFEJSVTSMPDBMOHJOYIUNM
    

    View Slide

24. nginx.conf(࠷దԽલ)
    XPSLFS@QSPDFTTFT
    FWFOUT\
    XPSLFS@DPOOFDUJPOT
    ^
    IUUQ\
    JODMVEFNJNFUZQFT
    EFGBVMU@UZQFBQQMJDBUJPOPDUFUTUSFBN
    BDDFTT@MPHPGG
    TFOEpMFPO
    LFFQBMJWF@UJNFPVU
    TFSWFS\
    MJTUFO
    TFSWFS@OBNFMPDBMIPTU
    MPDBUJPO\
    SPPUIUNM
    JOEFYJOEFYIUNMJOEFYIUN
    ^
    ^
    ^
    

    View Slide

25. nginx.conf(࠷దԽޙ)
    XPSLFS@QSPDFTTFT
    FWFOUT\
    XPSLFS@DPOOFDUJPOT
    BDDFQU@NVUFY@EFMBZNT
    ^
    IUUQ\
    JODMVEFNJNFUZQFT
    EFGBVMU@UZQFBQQMJDBUJPOPDUFUTUSFBN
    BDDFTT@MPHPGG
    TFOEpMFPO
    PQFO@pMF@DBDIFNBYJOBDUJWFT
    UDQ@OPQVTIPO
    LFFQBMJWF@UJNFPVU
    TFSWFS\
    MJTUFO
    TFSWFS@OBNFMPDBMIPTU
    MPDBUJPO\
    SPPUIUNM
    JOEFYJOEFYIUNMJOEFYIUN
    ^
    ^
    ^
    

    View Slide

26. nginxͱh2oͷϕϯνϚʔΫ
    SFRT
    
    SFRTFD
    
    XSLDUEIUUQ
    

    View Slide

27. nginxͱgzipѹॖ
    w H[JQH[JQѹॖΛ༗ޮʹ͢Δ
    w H[JQ@UZQFTH[JQѹॖର৅ͷ$POUFOU5ZQF
    w H[JQ@DPNQ@MFWFMH[JQͷѹॖϨϕϧ
    w H[JQ@TUBUJDH[JQѹॖࡁΈϑΝΠϧͷ഑৴
    w HVO[JQH[JQղౚ
    

    View Slide

28. gzipѹॖͷઃఆྫ
    H[JQPO
    H[JQ@DPNQ@MFWFM
    H[JQ@UZQFTUFYUDTT
    UFYUKBWBTDSJQU
    BQQMJDBUJPOKBWBTDSJQU
    BQQMJDBUJPOKTPO
    

    View Slide

29. nginxͱgzipѹॖ
    w ੩తίϯςϯπͷH[JQѹॖ͸ੵۃతʹ͢΂͖
    w $16ͷΦʔόʔϔουΑΓ΋ωοτϫʔΫͷ
    ϨΠςϯγͷํ͕͸Δ͔ʹେ͖͍
    w $16Ϧιʔεͷফඅྔ͕ແࢹͰ͖ͳ͍৔߹
    w H[JQ@TUBUJDͰH[JQѹॖࡁΈϑΝΠϧΛ഑৴
    

    View Slide

30. gzip_staticͷઃఆྫ
    YYY DTTcKT
    H[͕ଘࡏͨ͠ΒͦΕΛͦͷ··഑৴
    ΫϥΠΞϯτ͕H[JQѹॖΛαϙʔτ͍ͯ͠ͳ͍৔߹͸H[ϑΝΠϧΛల։ͯ͠഑৴
    MPDBUJPOd= DTTcKT
    \
    H[JQ@TUBUJDBMXBZT
    HVO[JQPO
    ^
    

    View Slide

31. zopfliͰ͞Βʹѹॖ
    w EFqBUFޓ׵ͷѹॖΞϧΰϦζϜπʔϧ
    w IUUQTHJUIVCDPNHPPHMF[PQqJ
    w [PQqJͰѹॖͨ͠΋ͷ͸HVO[JQՄೳ
    w ѹॖ཰͕ߴ͍෼ɺѹॖʹ͔͔Δ͕࣌ؒ௕͍
    w ࣄલʹѹॖ͢ΔͷͰ໰୊ʹͳΒͳ͍
    

    View Slide

32. nginxͱόοϑΝϦϯά
    w DMJFOU@CPEZ@CVGGFS@TJ[F
    w QSPYZ@CVGGFS@TJ[F
    w QSPYZ@CVGGFST
    w QSPYZ@CVGGFSJOH
    w QSPYZ@SFRVFTU@CVGGFSJOH
    w FUDʜ
    

    View Slide

33. όοϑΝϦϯάͷOn/Off
    w QSPYZ@CVGGFSJOH EFGBVMUPO
    
    w FHετϦʔϛϯά૬౰ͷॲཧΛ͢Δࡍʹ
    PGGʹ͢Δ͔ݕ౼
    w QSPYZ@SFRVFTU@CVGGFSJOH EFGBVMUPO
    
    w FHେ͖ͳϑΝΠϧͷΞοϓϩʔυ͕ൃੜ͢Δࡍ
    ʹPGGʹ͢Δ͔ݕ౼
    ಛʹཧ༝͕ͳ͍ݶΓσϑΥϧτͰ0,
    

    View Slide

34. όοϑΝϦϯάͱI/O
    w OHJOYͷ֤όοϑΝͷαΠζ͸ൺֱతখ͞Ί
    w େମ਺,#ఔ౓
    w όοϑΝ͕଍Γͳ͘ͳΔͱσΟεΫʹॻ͖ग़͢
    w όοϑΝαΠζΛௐ੔PSUNQGTΛར༻
    

    View Slide

35. όοϑΝϦϯάͱtmpfs
    ϦΫΤετϘσΟͷॻ͖ग़͠ઌ
    DMJFOU@CPEZ@UFNQ@QBUIEFWTINDCU
    ϓϩΩγઌϨεϙϯεϘσΟͷॻ͖ग़͠ઌ
    QSPYZ@UFNQ@QBUIEFWTINQU
    ɾ
    ɾ
    ɾ
    

    View Slide

36. HTTPSؔ࿈ͷνϡʔχϯά
    w 5-44FTTJPO$BDIF
    w 5-44FTTJPO5JDLFUT
    w 0$414UBQMJOH
    w 41%:
    w 0QUJNJ[JOHUIF5-4SFDPSETJ[F
    

    View Slide

37. TLS Session Cache
    w 5-4ϋϯυγΣΠΫͷηογϣϯΛαʔόʹ
    Ωϟογϡ
    w OHJOYͰ͸ڞ༗ϝϞϦ্ͷอଘ͞ΕΔ
    w ࣍ճͷ5-4ϋϯυγΣΠΫΛলུ
    

    View Slide

38. TLS Session Cache with nginx
    TTM@TFTTJPO@DBDIFTIBSFE44-N
    TTM@TFTTJPO@UJNFPVUN
    

    View Slide

39. TLS Session Tickets
    w ҉߸Խͨ͠ηογϣϯ νέοτ
    ΛΫϥΠΞϯτ
    ʹ౉͢
    w νέοτΛݩʹ5-4ηογϣϯΛ࠶։
    w )5514αʔόෳ਺୆ͰηογϣϯΛڞ༗
    

    View Slide

40. TLS Session Tickets with nginx
    TTM@TFTTJPO@UJDLFUTPO
    TTM@TFTTJPO@UJDLFU@LFZFUDOHJOYTTMUJDLFULFZ
    

    View Slide

41. OCSP Stapling
    w 0$41ʹΑΔ44-ূ໌ॻͷࣦޮ֬ೝΛαʔόଆ
    ͰߦͬͯΩϟογϡ
    w ΫϥΠΞϯτଆͰ΍Δͱ5-4ϋϯυγΣΠΫ࣌
    ʹϨΠςϯγൃੜ
    

    View Slide

42. OCSP Stapling with nginx
    TTM@TUBQMJOHPO
    TTM@TUBQMJOH@WFSJGZPO
    TTM@USVTUFE@DFSUJpDBUFFUDOHJOYTTMDFSUDSU
    SFTPMWFSYYYYYYYYYYYYWBMJET
    SFTPMWFS@UJNFPVUT
    

    View Slide

43. SPDY with nginx
    MJTUFOTTMTQEZ
    

    View Slide

44. Optimizing the TLS-record size
    w 5-4Ͱ͸ҰఆαΠζຖʹ௨৴಺༰Λ҉߸Խ͢Δ ௨শ
    5-4SFDPSE
    
    w TTM@CVGGFS@TJ[F EFGBVMUL
    
    w ,#ͩͱେ͖͗ͯ͢৽ن5$1઀ଓ࣌ͷ355͕૿Ճ
    w Ұൠతͳ8FCαΠτͳΒখ͍͞΄͏͕͍͍
    w 55'# 5JNF5P'JSTU#ZUF
    վળʹޮՌ͋Γ
    TTM@CVGGFS@TJ[FL
    

    View Slide

45. ·ͱΊ
    w OHJOY͸ύϑΥʔϚϯεʹӨڹ͢ΔσΟϨΫςΟϒ
    ͕ͨ͘͞Μ͋Δ
    w σϑΥϧτઃఆ͸ׂͱอकత ແޮͳ΋ͷ΋ଟ͍
    
    w H[JQѹॖ͸ੵۃతʹ
    w όοϑΝͷαΠζͱϑΝΠϧ*0ͷؔ܎ʹ஫ҙ
    w )5514͸͍Ζ͍Ζͱ࠷దԽ߲໨͋Δ
    

    View Slide

46. ࢀߟจݙ / URL
    w OHJOYEPDVNFOUBUJPO
    w IUUQOHJOYPSHFOEPDT
    w 4FDVSJUZ4FSWFS4JEF5-4
    w IUUQTXJLJNP[JMMBPSH4FDVSJUZ4FSWFS@4JEF@5-4
    w 44-5-4҉߸ઃఆΨΠυϥΠϯ
    w IUUQXXXJQBHPKQTFDVSJUZWVMOTTM@DSZQU@DPOpHIUNM
    w 0QUJNJ[JOH/(*/95-45JNF5P'JSTU#ZUF 55'#
    
    w IUUQTXXXJHWJUBDPNPQUJNJ[JOHOHJOYUMTUJNFUPpSTUCZUF
    

    View Slide

47. ࢀߟจݙ / URL
    w /(*/9015*.*;"5*0/6/%&345"/%*/(
    4&/%'*-& 5$1@/0%&-":"/%5$1@/0164)
    w IUUQTUOFUOHJOYPQUJNJ[BUJPOVOEFSTUBOEJOHTFOEpMFUDQ@OPEFMBZBOE
    UDQ@OPQVTIIUNM
    w զʑ͸ͲͷΑ͏ʹͯ҆͠શͳ)5514௨৴Λఏڙ͢Ε͹ྑ͍͔
    w IUUQRJJUBDPNIBSVLBTBOJUFNTGFGCBCBDBGG
    w )JHI1FSGPSNBODF#SPXTFS/FUXPSLJOH
    w 0`3FJMMZ *MZB(SJHPSJL
    

    View Slide

48. w OHJOYͷύϥϝʔλνϡʔχϯάͱIP
    w IUUQRJJUBDPNDVCJDEBJZBJUFNTEDFDCF
    w OHJOYύϑΥʔϚϯενϡʔχϯάʙ੩తίϯςϯπ഑৴ฤʙ
    w IUUQRJJUBDPNDVCJDEBJZBJUFNTCBBCEEE
    w OHJOYͷϦΫΤετϘσΟͷόοϑΝϦϯάʹؔ͢Δ໰୊ͱͦͷվળࡦ
    w IUUQRJJUBDPNDVCJDEBJZBJUFNTGFFE
    ࢀߟจݙ / URL
    

    View Slide

49. ࠷ޙʹએ఻
    

    View Slide

50. YAPC::Asia Tokyo2015
    ͷτʔΫʹԠื͠·ͨ͠
    IUUQZBQDBTJBPSHUBMLTIPXBGGFBGCCEDB
    ࣮ફOHJOYϞδϡʔϧ։ൃʙ$ͱ-VBʙ
    

    View Slide