Question

我是Michal Karzynski的gunicorn-django教程之后的新手。我在Ubuntu 14上使用Django 1.7.4，我对gunicorn脚本的设置如下

#!/bin/bash

NAME="mytestapp"                                  # Name of the application
DJANGODIR=/var/www/testapp/src             # Django project directory
SOCKFILE=/var/www/testapp/run/gunicorn.sock  # we will communicte using this unix socket
USER=ubuntu                                        # the user to run as
GROUP=ubuntu                                     # the group to run as
NUM_WORKERS=3                                     # how many worker processes should Gunicorn spawn
DJANGO_SETTINGS_MODULE=testapp.settings             # which settings file should Django use
DJANGO_WSGI_MODULE=testapp.wsgi                     # WSGI module name

echo "Starting $NAME as `whoami`"

# Activate the virtual environment
cd $DJANGODIR
export DJANGO_SETTINGS_MODULE=$DJANGO_SETTINGS_MODULE
export PYTHONPATH=$DJANGODIR:$PYTHONPATH

# Create the run directory if it doesn't exist
RUNDIR=$(dirname $SOCKFILE)
test -d $RUNDIR || mkdir -p $RUNDIR

# Start your Django Unicorn
# Programs meant to be run under supervisor should not daemonize themselves (do not use --daemon)
exec gunicorn ${DJANGO_WSGI_MODULE}:application \
  --name $NAME \
  --workers $NUM_WORKERS \
  --user=$USER --group=$GROUP \
  --bind=0.0.0.0:8000 \
  --log-level=debug \
  --log-file=-

当我将绑定设置更改为unix：$ SOCKFILE时，我的脚本仍然运行，但我无法连接浏览器。在this question我已经读过在生产服务器上部署0.0.0.0:8000是不明智的。

我对unix套接字有所了解，但我不知道如何使用unix套接字文件来为我的网站提供服务。我试图以超级用户身份编辑套接字文件，但操作系统不允许我打开它。

如何设置套接字文件以允许我提供我的页面？

PS：这是我的nginx配置文件

upstream hello_app_server {
# fail_timeout=0 means we always retry an upstream even if it failed
# to return a good HTTP response (in case the Unicorn master nukes a
# single worker for timing out).

server 127.0.0.1:8000 fail_timeout=0;
} 

server {

    listen   80;
    server_name test.com;

    client_max_body_size 4G;

    access_log /var/www/testapp/src/logs/nginx-access.log;
    error_log /var/www/testapp/src/logs/nginx-error.log;

    location /static/ {
        alias   /var/www/testapp/src/static/static_dirs/;
    }

    location /media/ {
        alias   /var/www/testapp/src/static/media/;
    }

    location / {
        # an HTTP header important enough to have its own Wikipedia entry:
        #   http://en.wikipedia.org/wiki/X-Forwarded-For
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        # enable this if and only if you use HTTPS, this helps Rack
        # set the proper protocol for doing redirects:
        # proxy_set_header X-Forwarded-Proto https;

        # pass the Host: header from the client right along so redirects
        # can be set properly within the Rack application
        proxy_set_header Host $http_host;

        # we don't want nginx trying to do something clever with
        # redirects, we set the Host: header above already.
        proxy_redirect off;

        # set "proxy_buffering off" *only* for Rainbows! when doing
        # Comet/long-poll stuff.  It's also safe to set if you're
        # using only serving fast clients with Unicorn + nginx.
        # Otherwise you _want_ nginx to buffer responses to slow
        # clients, really.
        # proxy_buffering off;

        # Try to serve static files from nginx, no point in making an
        # *application* server like Unicorn/Rainbows! serve static files.

        if (!-f $request_filename) {
            proxy_pass http://hello_app_server;
            break;
        }

    }

    # Error pages
    error_page 500 502 503 504 /500.html;
    location = /500.html {
        root /var/www/testapp/src/static/;
    }
}

Answer 1

你应该使用像nginx这样的反向代理来坐在gunicorn面前，而这实际上是为你的网站服务的。他们通过套接字进行通信。

gunicorn文档有一个sample nginx configuration就是这样，尽管显然你应该让sockfile与你在gunicorn配置中的匹配。

Answer 2

如果您在服务器上本地工作，套接字是网络端口的更快，更有效的替代方案。但是，如果你的nginx服务器和你的django应用程序在不同的服务器上，那么你需要打开特定的ip连接。

对于您的示例，如果要使用套接字，则只需将上游服务器地址指向套接字文件即可。将nginx配置更改为

upstream hello_app_server {
# fail_timeout=0 means we always retry an upstream even if it failed
# to return a good HTTP response (in case the Unicorn master nukes a
# single worker for timing out).
    server unix:/var/www/testapp/run/gunicorn.sock fail_timeout=0;
} 

server {
    .
    .
    .
    # Rest of your file...

什么是gunicorn.sock？

2 个答案: