☰

带有 Nginx SSL 终止的 Varnish 缓存

tag-icon • tag-icon nginx wordpress cache varnish ubuntu-18.04
带有 Nginx SSL 终止的 Varnish 缓存

如何将 varnish 缓存与 nginx SSL 终止结合使用，用于仅 SSL（仅 Https）网站？我使用 ubuntu 18.04，目前正在我的服务器上运行 wordpress 网站。

答案1

到目前为止我添加了完整的方法

mkdir /var/cache/nginx/cache
chown nginx:nginx /var/cache/nginx/cache


现在编辑 nginx.conf 中的 http 部分

###New cache settings as default
proxy_cache_path /var/cache/nginx/cache levels=1:2 keys_zone=hd_cache:10m max_size=10g inactive=2d use_temp_path=off;
proxy_cache_methods GET HEAD POST;
proxy_cache_valid 200 302 3d;
proxy_cache_valid 404      1m;

编辑 /etc/nginx/sites-avaible/yoursite.com

#http to https redirect
server {
        server_name yoursite.com *.yoursite.com;
        listen 80;
        return 301 https://$host$request_uri;
}

#https server
server {
        proxy_read_timeout 3600;
        listen 443 ssl http2;
        server_name yoursite.com *.yoursite.com;

#a special location in case don't cache this file can be deleted
location updater/serversettings.xml {
          expires -1;
          add_header 'Cache-Control' 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
        }

                #The root/rest will be redirected
                location / {
                        proxy_cache             hd_cache;
                        proxy_set_header        X-Cache-Status $upstream_cache_status;
                        proxy_cache_valid       200 1w;
                        proxy_pass              https://10.10.200.4;
                        proxy_set_header        Host $http_host;
                        proxy_buffers           16 8m;
                        proxy_buffer_size       2m;
                        gzip on;
                        gzip_vary          on;
                        gzip_comp_level    9;
                        gzip_proxied       any;
}
    #SSL Cert section, as we require ssl, using certbot LetsEncrypt
    ssl_certificate /etc/letsencrypt/live/yoursite.com-0001/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/yoursite.com-0001/privkey.pem; # managed by Certbot
}

现在启用该站点。

ln -s /etc/nginx/sites-avaible/yoursite.com /etc/nginx/sites-enabled/yoursite.com

然后运行

服务 Nginx 重新加载

此设置对于 WordPress 网站来说运行良好，我遇到的页面速度计数器为 95+

相关内容