☰

Http 的表现优于 Http2，为什么？请帮我解答一下？

tag-icon • tag-icon nginx performance http http2
Http 的表现优于 Http2，为什么？请帮我解答一下？

我目前正在对我的 NGINX Web 服务器容器进行性能测试，并遇到了一些意外结果。我的测试表明，尽管启用了 SSL 和重用端口，HTTP 性能仍优于 HTTP/2。

以下是 HTTP 的配置：

nginx.conf：

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
    worker_connections 768;
}

http {
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    gzip on;
    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}

website.conf（虚拟主机）：

server {
    listen 80 default_server;
    listen [::]:80 default_server;
    root /var/www/html;
    index index.php index.html index.htm;
    server_name _;
    location / {
        try_files $uri $uri/ =404;
    }
}

HTTP 测试 1 的结果：

docker run --rm -it ruslanys/wrk -t12 -c400 -d10s http://ip

运行 10 秒测试 @ http://ip 12 个线程和 400 个连接线程统计平均值标准差最大值 +/- 标准差延迟 1.60ms 0.97ms 27.52ms 75.52% 请求/秒 20.40k 2.79k 105.77k 96.34% 2441871 个请求，耗时 10.09 秒，读取 61.93GB 请求/秒：241889.68 传输/秒：6.13GB...

以下是 HTTP/2 的配置：

nginx.conf：

user www-data;
worker_processes 16;
pid /run/nginx.pid;
thread_pool iopool threads=32 max_queue=65536;
pcre_jit on;
events {
    worker_connections 8000;
    use epoll;

multi_accept on;
accept_mutex off;

}

http {
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    gzip                on;
    keepalive_timeout   5;
    types_hash_max_size 2048;
    client_max_body_size 2G;
    http2 on;
    gzip_vary on;
    gzip_disable "MSIE [1-6]\.";
    gzip_proxied any;
    gzip_http_version 1.0;
    gzip_min_length  1000;
    gzip_comp_level  7;
    gzip_buffers  16 8k;
    gzip_types    text/plain text/xml text/css application/x-javascript application/xml application/javascript application/xml+rss text/javascript application/atom+xml application/json image/svg+xml;
    
reset_timedout_connection on;

aio threads;

server_tokens off;
# Open File Cache
open_file_cache          max=4096 inactive=5m;
open_file_cache_valid    5m;
open_file_cache_min_uses 2;
open_file_cache_errors   on;

server_names_hash_max_size 2048;
 server_names_hash_bucket_size 512;
    real_ip_header CF-Connecting-IP;
    
    log_format debugging '$remote_addr - $remote_user [$time_local] '
                 '"$request" $status $body_bytes_sent '
                 '"$http_referer" "$http_user_agent" "$http_x_forwarded_for" $request_time';

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    include             vhosts/*.conf;
}

网站.conf：

server {
    listen 443 ssl fastopen=256 deferred reuseport so_keepalive=on ipv6only=on;
    server_name _;
    ssl_certificate /etc/nginx/ssl/xxx.crt;
    ssl_certificate_key /etc/nginx/ssl/xxx.key;
    ssl_trusted_certificate /etc/nginx/ssl/xxx.crt;
    index index.php index.htm index.html;
    root /var/www/html;

 # Enable session resumption to improve HTTPS performance
    ssl_session_timeout 1d;
    ssl_session_cache shared:MozSSL:10m;  # about 40000 sessions
    ssl_session_tickets off;

    # Enable OCSP stapling for better privacy and performance
    ssl_stapling on;
    ssl_stapling_verify on;

    # recommended ssl settings for better security
    ssl_protocols TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
}

HTTP/2 的测试结果：

docker run --rm -it ruslanys/wrk -t12 -c400 -d10s https://ip

运行 10 秒测试 @ https://ip 12 个线程和 400 个连接线程统计平均值标准差最大值 +/- 标准差延迟 3.27 毫秒 1.83 毫秒 46.73 毫秒 72.65% 请求/秒 10.12k 0.87k 12.28k 76.58% 10.03 秒内 1210716 个请求，30.73GB 读取请求/秒：120722.60 传输/秒：3.06GB...

我使用以下 Dockerfile 构建了 Docker 映像：

# Base image
FROM debian:bullseye

RUN apt-get update && \
    apt-get install -y \
        build-essential \
        wget \
        libpcre3 \
        libpcre3-dev \
        zlib1g \
        zlib1g-dev \
        libssl-dev

ARG NGINX_VERSION="1.25.1"
ARG CONFIGURE_ARGUMENTS="--prefix=/etc/nginx \
    --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf \
    --error-log-path=/var/log/nginx/error.log \
    --http-log-path=/var/log/nginx/access.log \
    --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock \
    --http-client-body-temp-path=/var/cache/nginx/client_temp \
    --http-proxy-temp-path=/var/cache/nginx/proxy_temp \
    --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
    --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
    --http-scgi-temp-path=/var/cache/nginx/scgi_temp --with-compat \
    --with-file-aio --with-threads  --with-http_dav_module --with-http_flv_module \
    --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module \    --with-http_random_index_module --with-http_realip_module \
    --with-http_secure_link_module --with-http_slice_module \
    --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module \
    --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream \
    --with-stream_realip_module --with-stream_ssl_module \
    --with-stream_ssl_preread_module"

# Download, compile and install Nginx
RUN wget --inet4-only http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz && \
    tar -xzvf nginx-$NGINX_VERSION.tar.gz && \
    cd nginx-$NGINX_VERSION && \
    ./configure $CONFIGURE_ARGUMENTS && \
    make && make install && \
    cd .. && rm -rf nginx-$NGINX_VERSION nginx-$NGINX_VERSION.tar.gz

RUN mkdir -p /var/cache/nginx/client_temp

# Expose ports
EXPOSE 80 443

# Start Nginx
CMD /usr/sbin/nginx -g "daemon off;"

我的服务器环境是 Rocky Linux 9.2，Docker 版本 24.0.2，build cb74dfc，Linux 内核版本是 6.4.3-1.el9.elrepo.x86_64。NGINX 版本是 1.25.1。

有人能告诉我为什么我会看到这些结果吗？

相关内容