PHP-FPM performance optimization: measures to improve website security and stability

PHP-FPM Performance Optimization: Measures to Improve Website Security and Stability

With the rapid development of the Internet, website performance optimization has become more and more important. . In PHP development, PHP-FPM (FastCGI Process Manager) is a common PHP solution used to improve performance and website stability. However, it is not enough to simply install and configure PHP-FPM. Some measures need to be taken to further optimize performance and improve the security and stability of the website. This article will introduce some specific code examples to help you better implement PHP-FPM performance optimization.

1. Configuring the PHP-FPM process pool

First, we need to configure the PHP-FPM process pool reasonably. By adjusting parameters such as the number of processes and the maximum number of requests, PHP-FPM can better meet the needs of the website. The following is an example PHP-FPM process pool configuration:

[www]
user = www-data
group = www-data
listen = /var/run/php/php7.4-fpm.sock
listen.owner = www-data
listen.group = www-data

pm = dynamic
pm.max_children = 20
pm.start_servers = 5
pm.min_spare_servers = 2
pm.max_spare_servers = 8
pm.process_idle_timeout = 10s
pm.max_requests = 500

In this example, we use the dynamic process management mode (pm = dynamic) and set the maximum number of child processes to 20 (pm.max_children) , the initial number of child processes is 5 (pm.start_servers), the minimum number of idle child processes is 2 (pm.min_spare_servers), the maximum number of idle child processes is 8 (pm.max_spare_servers), and the idle process timeout is 10 seconds (pm.process_idle_timeout ), the maximum number of requests is 500 (pm.max_requests).

According to the actual website load, these parameters can be adjusted as needed. By properly configuring the PHP-FPM process pool, performance and resource consumption can be better balanced.

2. Using OPcache

OPcache is a built-in extension of PHP that is used to cache and improve the execution performance of PHP scripts. Enabling OPcache can greatly reduce the compilation time of PHP scripts and reduce the load on the server. The following is an example OPcache configuration:

[opcache]
zend_extension=opcache.so
opcache.enable=1
opcache.enable_cli=1
opcache.memory_consumption=128
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=4000
opcache.validate_timestamps=0
opcache.revalidate_freq=60

In this example, we enabled OPcache (opcache.enable=1), set the memory consumption to 128MB (opcache.memory_consumption), and the interned string buffer is 8MB (opcache.interned_strings_buffer), the maximum number of cached files is 4000 (opcache.max_accelerated_files), the timestamp verification of the script is canceled (opcache.validate_timestamps=0), and the revalidation frequency is set to 60 seconds (opcache.revalidate_freq) .

By using OPcache, the execution performance of PHP scripts can be greatly improved and the load on the server can be reduced.

3. Turn on PHP security settings

In order to improve the security of the website, we also need to turn on some PHP security settings. The following are some common examples of PHP security settings:

display_errors = Off
allow_url_fopen = Off
expose_php = Off
open_basedir = /var/www/html:/tmp
disable_functions = exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source

In this example, we turn off error display (display_errors = Off), disable remote file operations (allow_url_fopen = Off), and hide PHP version information (expose_php = Off), set directory-based access restrictions for PHP (open_basedir = /var/www/html:/tmp), and disable some dangerous PHP functions (disable_functions).

By turning on these security settings, you can effectively reduce the risk of website attacks and improve website security.

Summary:

By properly configuring the PHP-FPM process pool, using OPcache, and turning on PHP security settings, you can further optimize the performance of PHP-FPM and improve the security and stability of the website. The above are just some simple examples, and the specific configuration needs to be adjusted according to the actual situation. Through continuous optimization and improvement, we can make PHP-FPM perform better and provide users with a better website experience.

The above is the detailed content of PHP-FPM performance optimization: measures to improve website security and stability. For more information, please follow other related articles on the PHP Chinese website!