nginx 配置实例（ssl、proxy、cache、gzip、upstream等优化）

[root@xxxxxxxxxxxxxx ~]# cat /usr/local/nginx/conf/nginx.conf
user  nobody;
worker_processes  ;
worker_cpu_affinity    ;
error_log  logs/error.log;
pid        logs/nginx.pid;

events {
    worker_connections  ;
    accept_mutex on;
    multi_accept on;
    use epoll;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  logs/access.log  main;

    sendfile        on;
    tcp_nopush     on;

    keepalive_timeout  ;
    keepalive_requests ;

    send_timeout ;

    gzip  on;
    gzip_min_length ;
    gzip_buffers  8k;
    gzip_types text/plain application/x-javascript application/javascript application/json text/css application/xml image/jpeg image/gif image/png;
    gzip_comp_level ;
    gzip_disable "MSIE 6\.";

    proxy_cache_path /usr/local/nginx/nginx_cache/ levels=: keys_zone=my_zone:10m inactive=300s max_size=5g;

    include vhost/*.conf;
}

upstream  yyyyyyy.com {
   server 127.0.0.1:  weight=;
   server 127.0.0.1:  weight=;
}
server{
    listen  ssl;
    server_name www.yyyyyyy.com yyyyyyy.com;
    ssl_certificate /usr/local/nginx/cert/yyyyyyy.com/2286250_yyyyyyy.com.pem;
    ssl_certificate_key /usr/local/nginx/cert/yyyyyyy.com/2286250_yyyyyyy.com.key;
    ssl_protocols TLSv1 TLSv1. TLSv1.;
    ssl_ciphers ALL:!DH:!EXPORT:!RC4:+HIGH:+MEDIUM:!eNULL;
    ssl_prefer_server_ciphers on;

    proxy_buffering on;
    proxy_buffer_size 4k;
    proxy_buffers  4k;
    proxy_busy_buffers_size 16k;
    proxy_temp_path /usr/local/nginx/proxy_temp  ;
    proxy_max_temp_file_size 100M;
    proxy_temp_file_write_size 16k;

    location /{
        root   /usr/local/android/marketone;
        index  index.html index.htm;
        error_page        /50x.html;
        proxy_cache my_zone;
        location = /50x.html {
            root   html;
        }
    }

        location /api/upload/ {
        proxy_pass http://127.0.0.1:8081/estrendMarket/upload/;
        proxy_set_header Host   $host;
        proxy_set_header X-Real-IP      $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /api/ {
        proxy_pass http://xxxxxx.com/estrendMarket/;
        index  index.html index.htm;
        proxy_set_header Host   $host;
        proxy_set_header X-Real-IP      $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

}