搬砖PHP-FPM的默认配置

前言

并没有做过多的解释，只是把默认的PHP-FPM配置项搬过来了。

开始

（1）可以配置的属性如下描述的：

; Per pool prefix
; It only applies on the following directives:
; - 'access.log' 
; - 'slowlog'
; - 'listen' (unixsocket)
; - 'chroot'
; - 'chdir'
; - 'php_values'
; - 'php_admin_values'
; When not set, the global prefix (or /usr) applies instead.
; Note: This directive can also be relative to the global prefix.
; Default Value: none
;prefix = /path/to/pools/$pool

listen配置

1. listen默认是listen = 127.0.0.1:9000。这个属性的配置在nginx中对应的是fastcgi_pass。listen的配置介绍是：

   ; The address on which to accept FastCGI requests.
   ; Valid syntaxes are:
   ;   'ip.add.re.ss:port'    - to listen on a TCP socket to a specific IPv4 address on
   ;                            a specific port;
   ;   '[ip\:6\:addr\:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
   ;                            a specific port;
   ;   'port'                 - to listen on a TCP socket to all IPv4 addresses on a
   ;                            specific port;
   ;   '[::]:port'            - to listen on a TCP socket to all addresses
   ;                            (IPv6 and IPv4-mapped) on a specific port;
   ;   '/path/to/unix/socket' - to listen on a unix socket.
   ; Note: This value is mandatory.

   可以支持的格式有：ip:port，ip6:port，port，[::]:port和 /path/to/unix/socket。如果是本地配置的话首选socket，因为速度最快。如果选用ip:port则可以将请求转发到IP所在的服务器响应。配合在nginx中配置upstream模块可以实现负载均衡。

2. listen其他的一些配置

; Set listen(2) backlog.
; Default Value: 65535 (-1 on FreeBSD and OpenBSD)
; listen.backlog = 65535

; Set permissions for unix socket, if one is used. In Linux, read/write
; permissions must be set in order to allow connections from a web server. Many
; BSD-derived systems allow connections regardless of permissions. 
; Default Values: user and group are set as the running user
;                 mode is set to 0660
;listen.owner = nobody
;listen.group = nobody
;listen.mode = 0660

; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
; must be separated by a comma. If this value is left blank, connections will be
; accepted from any ip address.
; Default Value: any
;listen.allowed_clients = 127.0.0.1

• listen.backlog = 65535：

  如果是web请求涉及到读写那么必须设置权限，默认是启动的用户和用户组，读写权限是0660。

• listen.owner = nobody：设置unix socket的可读写用户。

• listen.group = nobody：设置unix socket的可读写用户组。

• listen.mode = 0660：设置unix socket的可读写权限

• listen.allowed_clients = 127.0.0.1：限制可访问的IP。默认值是any，允许任何IP源的请求。

  pm模块

  pm模块的调优可以参考为高性能优化 PHP-FPM
  我只是做一个默认配置的搬砖者而已！

1. pm相关配置介绍如下

   ; Choose how the process manager will control the number of child processes.
   ; Possible Values:
   ;   static  - a fixed number (pm.max_children) of child processes;
   ;   dynamic - the number of child processes are set dynamically based on the
   ;             following directives. With this process management, there will be
   ;             always at least 1 children.
   ;             pm.max_children      - the maximum number of children that can
   ;                                    be alive at the same time.
   ;             pm.start_servers     - the number of children created on startup.
   ;             pm.min_spare_servers - the minimum number of children in 'idle'
   ;                                    state (waiting to process). If the number
   ;                                    of 'idle' processes is less than this
   ;                                    number then some children will be created.
   ;             pm.max_spare_servers - the maximum number of children in 'idle'
   ;                                    state (waiting to process). If the number
   ;                                    of 'idle' processes is greater than this
   ;                                    number then some children will be killed.
   ;  ondemand - no children are created at startup. Children will be forked when
   ;             new requests will connect. The following parameter are used:
   ;             pm.max_children           - the maximum number of children that
   ;                                         can be alive at the same time.
   ;             pm.process_idle_timeout   - The number of seconds after which
   ;                                         an idle process will be killed.
   ; Note: This value is mandatory.
   pm = dynamic

   pm可选值：static、dynamic、ondemand。
   默认配置中的值是dynamic。所以还得参考如下配置：

• pm.max_children = 5：最多多少个子进程同时存活
• pm.start_servers = 2：刚启动的时候启动的子进程数量
• pm.min_spare_servers = 1：空闲时最少有多少个子进程存在。如果当前少于这个进程数量就会启动部分子进程。
• pm.max_spare_servers = 3：空闲时最多有多少个子进程存在。如果当前多余这个进程数量部分子进程就会被杀死。
  注意dynamic的注释提到：子进程的管理会根据以下配置作为参考，但是至少是有一个子进程的。

static：固定的子进程数量。
ondemand：开始没子进程，随着请求的数量而启动子进程。受pm.max_children和pm.process_idle_timeout影响。

ondemand配置

; The number of seconds after which an idle process will be killed.
; Note: Used only when pm is set to 'ondemand'
; Default Value: 10s
;pm.process_idle_timeout = 10s;

; The number of requests each child process should execute before respawning.
; This can be useful to work around memory leaks in 3rd party libraries. For
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
; Default Value: 0
; pm.max_requests = 500

• pm.process_idle_timeout = 10s：子进程空闲时间超过10s子进程就会被杀死。pm是ondemand才有效。
• pm.max_requests = 500：最大同时存活的子进程数量，0表示无限大。对于第三方库可能存在内存泄露是个不错的方案。

pm.status_path配置

由于默认的介绍过多，所以尽量搬少一点。

; Default Value: not set 
; pm.status_path = /status

• pm.status_path：记录处理请求的状态到指定的文件，默认不设置。必须以/开头，且最好别以.php结尾，防止和真正的php脚本混合。可以以json、xml、html的格式输出，默认text/plain。在请求的后面增加请求格式，如：www.foo.bar/status?json ，还可以增加参数full获取更详细的值如：www.foo.bar/status?json&full

不带full参数输出的值如下介绍：

;   pool                 - the name of the pool;
;   process manager      - static, dynamic or ondemand;
;   start time           - the date and time FPM has started;
;   start since          - number of seconds since FPM has started;
;   accepted conn        - the number of request accepted by the pool;
;   listen queue         - the number of request in the queue of pending
;                          connections (see backlog in listen(2));
;   max listen queue     - the maximum number of requests in the queue
;                          of pending connections since FPM has started;
;   listen queue len     - the size of the socket queue of pending connections;
;   idle processes       - the number of idle processes;
;   active processes     - the number of active processes;
;   total processes      - the number of idle + active processes;
;   max active processes - the maximum number of active processes since FPM
;                          has started;
;   max children reached - number of times, the process limit has been reached,
;                          when pm tries to start more children (works only for
;                          pm 'dynamic' and 'ondemand');

带full参数输出如下：

;   pid                  - the PID of the process;
;   state                - the state of the process (Idle, Running, ...);
;   start time           - the date and time the process has started;
;   start since          - the number of seconds since the process has started;
;   requests             - the number of requests the process has served;
;   request duration     - the duration in µs of the requests;
;   request method       - the request method (GET, POST, ...);
;   request URI          - the request URI with the query string;
;   content length       - the content length of the request (only with POST);
;   user                 - the user (PHP_AUTH_USER) (or '-' if not set);
;   script               - the main script called (or '-' if not set);
;   last request cpu     - the %cpu the last request consumed
;                          it's always 0 if the process is not in Idle state
;                          because CPU calculation is done when the request
;                          processing has terminated;
;   last request memory  - the max amount of memory the last request consumed
;                          it's always 0 if the process is not in Idle state
;                          because memory calculation is done when the request
;                          processing has terminated;

ping 相关配置

; The ping URI to call the monitoring page of FPM. If this value is not set, no
; URI will be recognized as a ping page. This could be used to test from outside
; that FPM is alive and responding, or to
; - create a graph of FPM availability (rrd or such);
; - remove a server from a group if it is not responding (load balancing);
; - trigger alerts for the operating team (24/7).
; Note: The value must start with a leading slash (/). The value can be
;       anything, but it may not be a good idea to use the .php extension or it
;       may conflict with a real PHP file.
; Default Value: not set
; ping.path = /ping

; This directive may be used to customize the response of a ping request. The
; response is formatted as text/plain with a 200 response code.
; Default Value: pong
; ping.response = pong

• ping.path = /ping：用来监控FPM是否存活，默认是不设置。
• ping.response = pong：定制ping的输出

access.log和slowlog

; Default: not set
;access.log = log/$pool.access.log

; Default: "%R - %u %t \"%m %r\" %s"
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"

; The log file for slow requests
; Default Value: not set
; Note: slowlog is mandatory if request_slowlog_timeout is set
;slowlog = log/$pool.log.slow

; The timeout for serving a single request after which a PHP backtrace will be
; dumped to the 'slowlog' file. A value of '0s' means 'off'.
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
; Default Value: 0
;request_slowlog_timeout = 0

• access.log：支持很多种的占位符。具体先不粘贴了，篇幅有限。
• slowlog = log/$pool.log.slow：请求超时会被记录到这里，需要配置request_slowlog_timeout才有效。
• request_slowlog_timeout = 0：设置请求超时的时间，单位是： s(econds)(default), m(inutes), h(ours), or d(ays)

request_terminate_timeout

; The timeout for serving a single request after which the worker process will
; be killed. This option should be used when the 'max_execution_time' ini option
; does not stop script execution for some reason. A value of '0' means 'off'.
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
; Default Value: 0
;request_terminate_timeout = 0

• request_terminate_timeout = 0：如果某个请求超时则将此进程杀死，特别是用在配置了max_execution_time属性但是却不知道什么原因导致进程无法结束的情况下。默认是0，不启用。

rlimit_files 和 rlimit_core

; Set open file descriptor rlimit.
; Default Value: system defined value
;rlimit_files = 1024

; Set max core size rlimit.
; Possible Values: 'unlimited' or an integer greater or equal to 0
; Default Value: system defined value
;rlimit_core = 0

• rlimit_files = 1024：设置打开文件描述符的限制，默认是系统的值。
• rlimit_core = 0：设置文件最大占用限制，默认是系统的值。

chroot

; Chroot to this directory at the start. This value must be defined as an
; absolute path. When this value is not set, chroot is not used.
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
; of its subdirectories. If the pool prefix is not set, the global prefix
; will be used instead.
; Note: chrooting is a great security feature and should be used whenever 
;       possible. However, all PHP paths will be relative to the chroot
;       (error_log, sessions.save_path, ...).
; Default Value: not set
;chroot = 

• chroot：把根目录换成指定的目的目录，必须是一个绝对路径。可以使用$pool或$prefix变量。

chdir

; Chdir to this directory at the start.
; Note: relative path can be used.
; Default Value: current directory or / when chroot
;chdir = /var/www

• chdir：改变当前目录，类似cd。默认值就是当前路径。如果启用chroot那么就是/。

catch_workers_output

; Redirect worker stdout and stderr into main error log. If not set, stdout and
; stderr will be redirected to /dev/null according to FastCGI specs.
; Note: on highloaded environement, this can cause some delay in the page
; process time (several ms).
; Default Value: no
;catch_workers_output = yes

• catch_workers_output = yes：默认是no。不设置则将错误和输出抛弃，设置则写入main error log。

environment相关

; Clear environment in FPM workers
; Prevents arbitrary environment variables from reaching FPM worker processes
; by clearing the environment in workers before env vars specified in this
; pool configuration are added.
; Setting to "no" will make all environment variables available to PHP code
; via getenv(), $_ENV and $_SERVER.
; Default Value: yes
;clear_env = no

; Limits the extensions of the main script FPM will allow to parse. This can
; prevent configuration mistakes on the web server side. You should only limit
; FPM to .php extensions to prevent malicious users to use other extensions to
; exectute php code.
; Note: set an empty value to allow all extensions.
; Default Value: .php
;security.limit_extensions = .php .php3 .php4 .php5

; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
; the current environment.
; Default Value: clean env
;env[HOSTNAME] = $HOSTNAME
;env[PATH] = /usr/local/bin:/usr/bin:/bin
;env[TMP] = /tmp
;env[TMPDIR] = /tmp
;env[TEMP] = /tmp

• clear_env = no：默认值是yes。开启的情况下使子进程可以获取到getenv，$_ENV，$_SERVER的值。
• security.limit_extensions = .php .php3 .php4 .php5：默认值是.php。限制FPM可以解析的脚本格式，如果设置为空表示可以解析所有格式的文件。主要目的是限制恶意用户通过一些扩展执行其他脚本。
• env：设置环境变量，默认是不设置。

其他一些php.ini的配置

; Additional php.ini defines, specific to this pool of workers. These settings
; overwrite the values previously defined in the php.ini. The directives are the
; same as the PHP SAPI:
;   php_value/php_flag             - you can set classic ini defines which can
;                                    be overwritten from PHP call 'ini_set'. 
;   php_admin_value/php_admin_flag - these directives won't be overwritten by
;                                     PHP call 'ini_set'
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.

; Defining 'extension' will load the corresponding shared extension from
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
; overwrite previously defined php.ini values, but will append the new value
; instead.

; Note: path INI options can be relative and will be expanded with the prefix
; (pool, global or /usr)

; Default Value: nothing is defined by default except the values in php.ini and
;                specified at startup with the -d argument
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
;php_flag[display_errors] = off
;php_admin_value[error_log] = /var/log/fpm-php.www.log
;php_admin_flag[log_errors] = on
;php_admin_value[memory_limit] = 32M

定义一些和php.ini配置相关的属性，只对当前的子进程起作用。相关的配置会覆盖php.ini的配置。

• php_value/php_flag：可以被ini_set重定义。
• php_admin_value/php_admin_flag：不可被ini_set重定义。不会覆盖

  注意：php_*flag能够接受的值：on, off, 1, 0, true, false, yes or no. 如果定义extension会从extension_dir读取扩展。如果定义disable_functions或者disable_classes不会覆盖原来的设置，但是会在原来的基础上追加。

本作品采用《CC 协议》，转载必须注明作者和本文链接