Yadda ake Shigar da Varnish Cache 6 don Nginx akan CentOS/RHEL 8


Varnish Cache (wanda aka fi sani da Varnish) shine tushen buɗewa, mai ƙarfi, da hanzari mai saurin wakiltar HTTP tare da gine-ginen zamani da yaren sassauƙa mai sauƙi. Kasancewa wakili na baya yana nufin shine software da zaka iya turawa a gaban sabar yanar gizonka (wanda shine asalin uwar garke ko baya) kamar Nginx, don karɓar buƙatun abokan ciniki na HTTP kuma tura su zuwa sabar asali don aiki. Kuma yana isar da martani daga asalin sabar ga abokan ciniki.

Varnish tana aiki azaman matsakaici tsakanin Nginx da abokan ciniki amma tare da wasu fa'idodi. Babbar ma'anarta shine sanya aikace-aikacenku suyi sauri, ta hanyar aiki azaman injin ɓoye kaya. Yana karɓar buƙatu daga abokan ciniki kuma ya tura su zuwa bayan sau ɗaya don adana abubuwan da aka nema (adana fayiloli da gutsutsuren fayiloli a ƙwaƙwalwa). Don haka duk buƙatun da za a yi nan gaba don ainihin abin da ke ciki za a yi aiki daga ma'ajin.

Wannan yana sa aikace-aikacen gidan yanar gizonku su yi sauri da kai tsaye kuma a kaikaice yana inganta aikin gidan yanar gizonku gaba ɗaya saboda Varnish zai ba da abun ciki daga ƙwaƙwalwa maimakon fayilolin sarrafa Nginx daga faifan ajiya.

Baya ga ɓoyewa, Varnish yana da wasu maganganun amfani da yawa waɗanda suka haɗa da router na buƙatar HTTP, da ma'aunin ɗaukar nauyi, bangon aikace-aikacen gidan yanar gizo, da ƙari.

An tsara varnar ta amfani da ingantaccen tsarin Harshen Tsarin Haɓakawa na Varnish (VCL) wanda zai baka damar rubuta manufofi kan yadda yakamata a bi da buƙatun shigowa. Kuna iya amfani da shi don gina keɓaɓɓun mafita, dokoki, da kayayyaki.

A cikin wannan labarin, zamu bi cikin matakan don shigar da sabar yanar gizo ta Nginx da Varnish Cache 6 akan sabar CentOS 8 ko RHEL 8. Masu amfani da RHEL 8 ya kamata su tabbatar sun ba da damar sake rajista.

Don saitawa, cikakken ɗakunan LEMP maimakon girka sabar yanar gizo ta Nginx ita kaɗai, bincika waɗannan jagororin masu zuwa.

  1. Yadda ake Shigar da Sabo na LEMP akan CentOS 8
  2. Yadda ake Shigar da Sabo na LEMP akan RHEL 8

Mataki 1: Sanya Nginx Web Server akan CentOS/RHEL 8

1. Jirgin ruwa na CentOS/RHEL 8 tare da sabon juzu'in software na sabar yanar gizo Nginx, don haka zamu girka shi daga ma'ajiyar ajiya ta amfani da umarnin dnf masu zuwa.

# dnf update
# dnf install nginx

2. Da zarar an shigar da Nginx, kuna buƙatar farawa, kunnawa da tabbatar da matsayin ta amfani da dokokin systemctl masu zuwa.

# systemctl start nginx
# systemctl enable nginx
# systemctl status nginx

3. Idan kanada dan shaawa, zaka iya kuma duba soket din Nginx TCP, wanda yake gudana akan tashar jirgin ruwa ta 80 ta hanyar amfani da shi, ta hanyar amfani da wannan umurnin na ss.

# ss -tpln

4. Idan kana amfani da Tacewar zaɓi akan tsarin, tabbatar ka sabunta dokokin Tacewar zaɓi don ƙyale buƙatu zuwa sabar yanar gizo.

# firewall-cmd --zone=public --permanent --add-service=http
# firewall-cmd --reload

Mataki 2: Shigar da Varnish Cache 6 akan CentOS/RHEL 8

5. CentOS/RHEL 8 tana ba da tsarin Varnish Cache DNF koyaushe ta tsoho wanda ya ƙunshi sigar 6.0 LTS (Taimako na Tsawon Lokaci).

Don shigar da ƙirar, gudanar da umarni mai zuwa.

# dnf module install varnish

6. Da zarar an gama girke-girke, zaku iya tabbatar da sigar Varnish ɗin da aka sanya a cikin tsarinku.

# varnishd -V

7. Bayan girka Varnish Cache, babban umarnin da za'a aiwatar wanda aka sanya a karkashin/usr/sbin/varnishd da fayilolin sanyi na varnish suna cikin/etc/varnish /.

Fayil /etc/varnish/default.vcl shine babban fayil ɗin daidaita varnish wanda aka rubuta ta amfani da VCL da/sauransu/varnish/sirri shine fayil ɗin ɓoyayyen varnish.

8. Na gaba, fara sabis na Varnish, ba shi damar farawa ta atomatik yayin fara aiki da tsarin kuma tabbatar cewa yana kan aiki.

# systemctl start varnish
# systemctl enable varnish
# systemctl status varnish

Mataki na 3: Saitin Nginx don Aiki tare da Varnish Cache

9. A wannan sashin, zamu nuna yadda ake tsara Varnish Cache don gudana a gaban Nginx. Ta hanyar tsoho Nginx yana saurara a tashar 80, yawanci kowane shingen uwar garke (ko mai masaukin baki) an saita shi don saurara akan wannan tashar.

Misali, kalli tsoffin nginx uwar garken da aka saita a babban fayil din sanyi (/etc/nginx/nginx.conf).

# vi /etc/nginx/nginx.conf

Bincika sashin toshe sabar kamar yadda aka nuna a cikin hoton da ke zuwa.

10. Don gudanar da Varnish a gaban Nginx, ya kamata ka canza tashar Nginx ta asali daga 80 zuwa 8080 (ko kuma duk wata tashar da kake so).

Wannan yakamata ayi a duk fayilolin sanyi na sabulu na gaba (yawanci ana ƙirƙirarsu a karkashin /etc/nginx/conf.d/) don shafuka ko aikace-aikacen yanar gizo da kuke son hidimtawa ta hanyar Varnish.

Misali, toshe sabar domin shafin gwajin mu tecmint.lan shine /etc/nginx/conf.d/tecmint.lan.conf kuma yana da tsari mai zuwa.

server {
        listen       8080;
        server_name  www.tecmint.lan;
        root         /var/www/html/tecmint.lan/;
        location / {
        }

        error_page 404 /404.html;
            location = /40x.html {
        }
        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
}

Mahimminci: Ka tuna ka dakatar da toshe hanyar sabar ta tsokaci ta hanyar yin tsokaci game da tsarin daidaitawarta a cikin fayil din /etc/nginx/nginx.conf kamar yadda aka nuna a cikin hoton mai zuwa. Wannan yana ba ku damar fara gudanar da sauran rukunin yanar gizo/aikace-aikace a kan sabarku, in ba haka ba, Nginx koyaushe zai gabatar da buƙatun zuwa toshe sabar toshe.

11. Da zarar daidaitawar ta kammala, bincika fayil ɗin sanyi don kowane kuskure kuma sake kunna sabis na Nginx don amfani da canje-canjen kwanan nan.

# nginx -t
# systemctl restart nginx

12. Na gaba, don karɓar buƙatun HTTP daga abokan ciniki, muna buƙatar saita Varnish don gudana akan tashar 80. Sabanin a kan sigogin da suka gabata na Varnish Cache inda aka yi wannan canjin a cikin fayil ɗin muhallin Varnish (wanda a yanzu aka rage daraja), a cikin sigar 6.0 da a sama.

Muna buƙatar yin canjin da ake buƙata a cikin fayil ɗin sabis na Varnish. Gudun umarni mai zuwa don buɗe fayil ɗin sabis ɗin da ya dace don gyara.

# systemctl edit --full  varnish

Nemo layin da ke gaba ka canza ƙimar sauyawa -a , wanda ke ƙayyade adireshin sauraren da tashar jirgin ruwa. Saita tashar jiragen ruwa zuwa 80 kamar yadda aka nuna a cikin hotunan hoto mai zuwa.

Lura idan baku tantance adireshin ba, varnishd zai saurari duk samfuran IPv4 da IPv6 da ke aiki akan sabar.

ExecStart=/usr/sbin/varnishd -a :80 -f /etc/varnish/default.vcl -s malloc,256m

Adana canje-canje a cikin fayil ɗin kuma fita.

13. Na gaba, kuna buƙatar ayyana sabar bayan bayanan da Varnish zai ziyarta don ɗora abun ciki daga. Ana yin wannan a cikin babban fayil ɗin sanyi na Varnish.

# vi /etc/varnish/default.vcl 

Bincika sashin daidaitattun bayanan baya kuma canza igiyar\"tsoho" zuwa uwar garken1 (ko kowane suna da kuka zaba don wakiltar sabarku ta asali). Sannan saita tashar zuwa 8080 (ko tashar sauraren Nginx da kuka bayyana a cikin sabarku) .

backend server1 {
    .host = "127.0.0.1";
    .port = "8080";
}

Don wannan jagorar, muna gudana Varnish da Nginx akan sabar ɗaya. Idan sabar yanar gizan ku ta Nginx tana gudana a wani mahallin daban. Misali, wani sabar mai adireshi 10.42.0.247, sannan saita saitin .host siga kamar yadda aka nuna.

backend server1 {
    .host = "10.42.0.247";
    .port = "8080";
}

Adana fayil ɗin kuma rufe shi.

14. Na gaba, kuna buƙatar sake loda tsarin sarrafa manajan tsarin saboda canje-canjen kwanan nan a cikin fayil ɗin sabis na Varnish, sannan sake kunna sabis ɗin Varnish don amfani da canje-canje kamar haka.

# systemctl daemon-reload
# systemctl restart varnish

15. Yanzu tabbatar cewa Nginx da Varnish suna sauraro akan kwasfan TCP da aka saita.

# ss -tpln

Mataki na 4: Gwajin Nginx Varnish Cache Setup

16. Na gaba, tabbatar da cewa ana amfani da shafukan yanar gizon ta hanyar Varnish Cache kamar haka. Bude burauzar yanar gizo ka yi amfani da uwar garken IP ko FDQN kamar yadda aka nuna a cikin hoton da ke gaba.

http://www.tecmin.lan
OR
http://10.42.0.144

17. A madadin haka, yi amfani da curl command kamar yadda aka nuna. Yi amfani da adireshin IP na uwar garke ko FQDN na gidan yanar gizo ko amfani da 127.0.0.1 ko localhost idan kuna gwaji a cikin gida.

# curl -I http:///www.tecmint.lan

Fa'idodi masu amfani da Varnish Cache

18. A wannan sashin na ƙarshe, zamu ɗan taƙaita wasu shirye-shiryen amfani masu amfani waɗanda Varnish Cache ke jigilar su, waɗanda zaku iya amfani dasu don sarrafa varnishd, samun damar shiga cikin abubuwan ƙwaƙwalwar ajiya da ƙididdigar gaba ɗaya da ƙari.

varnishadm mai amfani don sarrafa misalin Varnish mai gudana. Yana kafa haɗin CLI zuwa varnishd. Misali, zaka iya amfani dashi don lissafa bayanan baya kamar yadda aka nuna a cikin wannan hoton (karanta mutum varnishadm don karin bayani).

# varnishadm
varnish> backend.list

Mai amfani da varnishlog yana ba da damar yin amfani da takamaiman bayanai. Yana ba da bayani game da takamaiman abokan ciniki da buƙatun (karanta mutum varnishlog don ƙarin bayani).

# varnishlog

Wani varnishstat wanda aka fi sani da ƙididdigar varnish, wanda ke ba ku damar kallon aikin Varnish na yanzu ta hanyar samar da damar yin amfani da ƙididdigar ƙwaƙwalwar ajiya kamar abubuwan cache da ɓacewa, bayani game da adanawa, zaren da aka ƙirƙira, abubuwan da aka goge (karanta mutum varnishstat don ƙarin bayani) .

# varnishstat 

Mai amfani da varnishtop yana karanta bayanan ƙwaƙwalwar ajiyar da aka gabatar kuma yana gabatar da jerin abubuwan da aka sabunta akai-akai game da abubuwan shigarwa (karanta mutum varnishtop don ƙarin bayani).

# varnishtop 

Wani mai amfani da varnishhist (varnish history) mai amfani yana amfani da bayanan varnish sannan ya fitar da wani tarihin tarihi wanda yake nuna yadda ake rarraba bukatun n ta karshe ta hanyar sarrafa su (karanta mutum varnishhist don karin bayani).

# varnishhist

Shi ke nan! A cikin wannan jagorar, mun nuna yadda ake girka Varnish Cache da gudanar da ita a gaban uwar garken Nginx HTTP don hanzarta isar da abun cikin yanar gizo a cikin CentOS/RHEL 8.

Duk wani tunani ko tambayoyi game da wannan jagorar za'a iya raba su ta amfani da fom ɗin da ke ƙasa. Don ƙarin bayani, karanta bayanan Varnish Cache.

Babban raunin Varnish Cache shine rashin tallafi na asali ga HTTPS. Don kunna HTTPS akan rukunin yanar gizonku/aikace-aikacenku, kuna buƙatar saita wakili na ƙarshe na SSL/TLS don aiki tare tare da Varnish Cache don kare rukunin yanar gizonku. A cikin labarinmu na gaba, zamu nuna yadda ake kunna HTTPS don Varnish Cache ta amfani da Hitch akan CentOS/RHEL 8.