Varnish配置基础 #

Varnish配置
├── 启动参数配置
│   ├── 监听端口
│   ├── 存储配置
│   └── 运行时参数
├── VCL配置
│   ├── 后端定义
│   ├── ACL定义
│   └── 子程序
└── 管理配置
    ├── 密钥文件
    └── 管理端口

vcl 4.1;

# 这是单行注释

// 这也是单行注释

/*
 * 这是多行注释
 * 可以跨越多行
 */

vcl 4.1;

# 语句以分号结尾
set req.http.X-Custom = "value";

# 字符串使用双引号
set req.http.Host = "example.com";

# 正则表达式使用斜杠
if (req.url ~ "\.(css|js)$") {
    return (hash);
}

# 条件语句
if (req.method == "GET") {
    return (hash);
} elseif (req.method == "POST") {
    return (pass);
} else {
    return (synth(405, "Method Not Allowed"));
}

# 比较运算符
==  # 等于
!=  # 不等于
<   # 小于
>   # 大于
<=  # 小于等于
>=  # 大于等于

# 逻辑运算符
&&  # 与
||  # 或
!   # 非

# 正则匹配
~   # 匹配
!~  # 不匹配

vcl 4.1;

backend default {
    .host = "127.0.0.1";
    .port = "8080";
}

backend default {
    # 必需参数
    .host = "127.0.0.1";           # 后端主机地址
    .port = "8080";                 # 后端端口
    
    # 可选参数
    .host_header = "example.com";   # Host头
    .connect_timeout = 5s;          # 连接超时
    .first_byte_timeout = 90s;      # 首字节超时
    .between_bytes_timeout = 2s;    # 字节间超时
    .max_connections = 300;         # 最大连接数
    .proxy_header = 1;              # PROXY协议版本
}

backend static {
    .host = "192.168.1.10";
    .port = "80";
}

backend api {
    .host = "192.168.1.20";
    .port = "8080";
}

sub vcl_recv {
    if (req.url ~ "^/api/") {
        set req.backend_hint = api;
    } else {
        set req.backend_hint = static;
    }
}

acl purge {
    "localhost";
    "192.168.1.0"/24;
    !"192.168.1.100";
}

acl admin {
    "10.0.0.0"/8;
}

sub vcl_recv {
    if (req.method == "PURGE") {
        if (!client.ip ~ purge) {
            return (synth(405, "Not allowed."));
        }
        return (purge);
    }
}

sub vcl_recv {
    # 标准化请求方法
    if (req.method != "GET" &&
        req.method != "HEAD" &&
        req.method != "PUT" &&
        req.method != "POST" &&
        req.method != "TRACE" &&
        req.method != "OPTIONS" &&
        req.method != "DELETE") {
        return (pipe);
    }
    
    # 非GET/HEAD请求不缓存
    if (req.method != "GET" && req.method != "HEAD") {
        return (pass);
    }
    
    # 移除Cookie以缓存静态资源
    if (req.url ~ "\.(css|js|png|gif|jpg|jpeg|ico|svg|woff|woff2)$") {
        unset req.http.Cookie;
        return (hash);
    }
    
    # 带Cookie的请求不缓存
    if (req.http.Cookie) {
        return (pass);
    }
    
    return (hash);
}

sub vcl_backend_response {
    # 设置缓存时间
    if (beresp.ttl <= 0s) {
        set beresp.ttl = 5m;
    }
    
    # 静态资源缓存更长时间
    if (bereq.url ~ "\.(css|js|png|gif|jpg|jpeg|ico|svg)$") {
        set beresp.ttl = 1d;
        unset beresp.http.Set-Cookie;
    }
    
    # 动态内容短缓存
    if (beresp.http.Content-Type ~ "text/html") {
        set beresp.ttl = 5m;
    }
    
    # 不缓存带Set-Cookie的响应
    if (beresp.http.Set-Cookie) {
        set beresp.uncacheable = true;
        set beresp.ttl = 0s;
    }
}

sub vcl_deliver {
    # 添加缓存状态头
    if (obj.hits > 0) {
        set resp.http.X-Cache = "HIT";
        set resp.http.X-Cache-Hits = obj.hits;
    } else {
        set resp.http.X-Cache = "MISS";
    }
    
    # 移除敏感头
    unset resp.http.X-Powered-By;
    unset resp.http.Server;
    
    # 添加调试信息
    if (req.http.X-Debug) {
        set resp.http.X-Varnish-Debug = "enabled";
    }
}

# 内存存储
-s malloc,1G

# 文件存储
-s file,/var/lib/varnish/storage.bin,2G

# 混合存储
-s malloc,512m -s file,/var/lib/varnish/storage.bin,1G

# 线程池配置
-p thread_pool_min=50
-p thread_pool_max=500
-p thread_pool_timeout=300
-p thread_pools=2

# 工作区内存
-p http_resp_size=64k
-p http_req_size=32k
-p workspace_backend=64k
-p workspace_client=64k

# 连接超时
-p connect_timeout=3.5
-p first_byte_timeout=60
-p between_bytes_timeout=60

# 查看所有参数
varnishadm param.show

# 查看特定参数
varnishadm param.show thread_pool_max

# 查看参数说明
varnishadm param.show -l thread_pool_max

# 修改参数
varnishadm param.set thread_pool_max 1000

# 修改超时
varnishadm param.set connect_timeout 5

vcl 4.1;

import std;

# 后端定义
backend default {
    .host = "127.0.0.1";
    .port = "8080";
    .connect_timeout = 5s;
    .first_byte_timeout = 90s;
    .between_bytes_timeout = 2s;
    .max_connections = 300;
}

# ACL定义
acl purge {
    "localhost";
    "192.168.1.0"/24;
}

# 初始化
sub vcl_init {
    # VMOD初始化
}

# 请求处理
sub vcl_recv {
    # PURGE请求处理
    if (req.method == "PURGE") {
        if (!client.ip ~ purge) {
            return (synth(405, "Not allowed."));
        }
        return (purge);
    }
    
    # BAN请求处理
    if (req.method == "BAN") {
        if (!client.ip ~ purge) {
            return (synth(405, "Not allowed."));
        }
        ban("req.url ~ " + req.url);
        return (synth(200, "Banned."));
    }
    
    # 非GET/HEAD请求
    if (req.method != "GET" && req.method != "HEAD") {
        return (pass);
    }
    
    # 移除静态资源的Cookie
    if (req.url ~ "\.(css|js|png|gif|jpg|jpeg|ico|svg|woff|woff2)$") {
        unset req.http.Cookie;
        return (hash);
    }
    
    # 健康检查
    if (req.url == "/healthcheck") {
        return (synth(200, "OK"));
    }
    
    return (hash);
}

# 缓存键计算
sub vcl_hash {
    hash_data(req.url);
    if (req.http.Host) {
        hash_data(req.http.Host);
    }
    return (lookup);
}

# 缓存命中
sub vcl_hit {
    return (deliver);
}

# 缓存未命中
sub vcl_miss {
    return (fetch);
}

# 后端响应处理
sub vcl_backend_response {
    # 设置默认TTL
    if (beresp.ttl <= 0s) {
        set beresp.ttl = 5m;
    }
    
    # 静态资源长缓存
    if (bereq.url ~ "\.(css|js|png|gif|jpg|jpeg|ico|svg|woff|woff2)$") {
        set beresp.ttl = 1d;
        unset beresp.http.Set-Cookie;
    }
    
    # 不缓存带Set-Cookie的响应
    if (beresp.http.Set-Cookie) {
        set beresp.uncacheable = true;
        set beresp.ttl = 0s;
    }
    
    # 设置宽限时间
    set beresp.grace = 1h;
}

# 响应处理
sub vcl_deliver {
    # 添加缓存状态头
    if (obj.hits > 0) {
        set resp.http.X-Cache = "HIT";
        set resp.http.X-Cache-Hits = obj.hits;
    } else {
        set resp.http.X-Cache = "MISS";
    }
    
    # 移除敏感头
    unset resp.http.X-Powered-By;
    unset resp.http.Via;
}

# 合成响应
sub vcl_synth {
    set resp.http.Content-Type = "text/html; charset=utf-8";
    synthetic({"<!DOCTYPE html>
<html>
<head><title>"} + resp.status + " " + resp.reason + {"</title></head>
<body>
<h1>"} + resp.status + " " + resp.reason + {"</h1>
<p>"} + resp.reason + {"</p>
</body>
</html>
"});
    return (deliver);
}

# 加载新VCL
varnishadm vcl.load new_config /etc/varnish/default.vcl

# 使用新VCL
varnishadm vcl.use new_config

# 查看VCL列表
varnishadm vcl.list

# 使用varnishreload脚本
varnishreload

# 或手动操作
varnishadm vcl.load reload_$(date +%s) /etc/varnish/default.vcl
varnishadm vcl.use reload_$(date +%s)

# 查看VCL列表
varnishadm vcl.list

# 回滚到旧配置
varnishadm vcl.use old_config_name

# 删除VCL
varnishadm vcl.discard unused_config