Nginx应用与运维实战 2020 (王小东)（Z-Library）

【One-Line Pitch】 A hands-on guide to running Nginx in production, covering configuration, Web/proxy/cache/load-balancing practice, monitoring and cluster operations, and integration with Kubernetes and microservices. Best for sysadmins, SREs, and backend engineers who already know basic Linux and want deployable Nginx recipes rather than theory. 【Book Arc】 - **Opening (~0%–20%)**: Architecture and internals, then compiling and deploying Nginx plus its derivatives Tengine and OpenResty, including dynamic and third-party modules. - **Early (~20%–40%)**: Core configuration directives — the nginx.conf structure, events/worker tuning, variables, access control, and HTTP feature modules for dynamic assignment and data handling. - **Middle (~40%–60%)**: Application practice: Web serving (HTTPS/TLS, Python/CGI-FastCGI-WSGI, WebDAV), reverse and forward proxying, caching (proxy cache, Memcached), and upstream load balancing. - **Late (~60%–80%)**: Operations management: log configuration and ELK-based analysis, status monitoring with Prometheus/Zabbix/Grafana, and building LVS+Keepalived Nginx clusters with Jenkins/GitLab/Ansible config management. - **Ending (~80%–100%)**: Cloud-native integration: Nginx Ingress deployment and configuration in Kubernetes, plus microservice gateways — OpenResty-based Kong and a look at Istio. 【Key Takeaways】 - **Nginx is a multi-role platform, not just a Web server** (Opening): routing, reverse proxy, and async event-driven handling are framed as its core value across modern architectures. - **Module compilation is a first-class skill** (Opening): static vs dynamic modules, `--with-compat` for load compatibility, and `--add-module`/`--add-dynamic-module` for third-party extensions. - **Configuration mastery centers on directive domains and inheritance** (Early): understanding http/server/location scope and how child domains override parent directives is the key to predictable configs. - **TLS/HTTPS hardening is treated concretely** (Early–Middle): certificate/key deployment, session cache and tickets, OCSP stapling, HSTS, and security headers are shown as a working config pattern. - **Caching and load balancing are the performance levers** (Middle): proxy cache with slicing, Memcached integration, and upstream strategies including weighted, backup, and consistent-hash (Ketama) balancing. - **Observability is built from logs plus metrics** (Late): access/error logs to syslog and ELK via Filebeat, plus status modules feeding Prometheus/Grafana and Zabbix. - **High availability is layered** (Late): LVS (DR mode) at transport layer with Keepalived/VRRP for failover, Nginx for application-layer balancing. - **Config management should be Web-driven and versioned** (Late): Jenkins + GitLab + Ansible combine into a rollback-capable Nginx cluster config framework. - **Kubernetes and microservices change the deployment model** (Ending): Nginx Ingress runs as Pods with annotation-driven routing/CORS/auth, while Kong and Istio represent the gateway/service-mesh direction. 【Reading Tips】 - Skim the architecture chapter if you already operate Nginx; deep-read the module compilation and core directive sections, since later chapters assume them. - Treat the config samples as templates — type them out and adapt, rather than reading passively; the book is explicitly example-driven. - The operations chapters (logs, monitoring, cluster) are the highest-value for working SREs; prioritize them if your goal is production reliability. - For the Kubernetes/microservices chapters, read alongside current Ingress and Kong docs, as API versions and tooling evolve quickly. 【Coverage Limits】 This guide is synthesized from stratified excerpts and the book's own table of contents; specific chapter-level detail beyond the sampled material (e.g., exact directive tables) is not fully covered here.