net.ipv4.tcp_syncookies = 1
net.ipv4.ip_local_port_range = 10240 60999
net.ipv4.tcp_max_syn_backlog=10240
net.core.somaxconn=10240
net.core.netdev_max_backlog=20480
net.ipv4.tcp_tw_reuse=1
net.ipv4.tcp_max_tw_buckets=5000
net.ipv4.tcp_fin_timeout=30

# /etc/security/limits.conf   (ulimit)
* soft nofile 100001
* hard nofile 100002
root soft nofile 100001
root hard nofile 100002

worker_processes  auto;     #
worker_cpu_affinity auto;   #
worker_rlimit_nofile 65535; #
worker_priority -19;        #
  
events {
    worker_connections  1024;   #
    use epoll;                  #
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    tcp_nodelay on;    #
    
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '   '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"';
     
    sendfile        on; #
    
    keepalive_requests 1000;    #
    keepalive_timeout  30;      #
 
    gzip  on;                   #
    gzip_min_length 20k;        #
    gzip_comp_level 2;          #
    gzip_types image/jpeg image/gif image/png;
   
    server {
        server_name www.atfxnews.com atfxnews.com;
        root /var/www/atfxnews/public;
        index index.html index.htm index.php;
        
        listen 80 backlog=1024;     #
        
        #rewrite ^(.*)$ https://www.atfxnews.com permanent;
        location / {
            if (!-e $request_filename) {
                rewrite ^(.*)$ /index.php$1 last;
            }
        }

        location ~ \.php {
            proxy_http_version 1.1;         #
            proxy_set_header Connection ""; #
            fastcgi_index index.php;
            fastcgi_pass 127.0.0.1:9000;
            fastcgi_split_path_info ^(.+\.php)(.*)$;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            fastcgi_param PATH_INFO $fastcgi_path_info;
            include fastcgi_params;
        }

    }

    server {
        server_name www.atfxnews.com atfxnews.com;
        listen 443 backlog=1024 ssl;    #
        root /var/www/atfxnews/public;
        index index.html index.php index.htm;
 
        ssl_certificate /var/www/ssl/Apache/2_www.atfxnews.com.crt;
        # ssl_certificate /var/www/ssl/Apache/zbp_chain.crt;
        ssl_certificate_key /var/www/ssl/Apache/3_www.atfxnews.com.key;
         
        location / {
            if (!-e $request_filename) {
                rewrite ^(.*)$ /index.php$1 last;
            }
        }
        
        location ~ \.php {
	    proxy_http_version 1.1;             #
	    proxy_set_header Connection "";     #
            fastcgi_index index.php;
            fastcgi_pass 127.0.0.1:9000;
            fastcgi_split_path_info ^(.+\.php)(.*)$;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            fastcgi_param PATH_INFO $fastcgi_path_info;
            include fastcgi_params;
        }
    }
    
    include conf.d/*.conf;
} 

listen = 127.0.0.1:9000
listen.backlog = 10240
process.priority = -19
pm = static                 # 静态模式
pm.max_children = 100        # 因为是2G内存，按每个worker进程会消耗20M内存，分配1600M内存给worker进程，400M留给其他程序
# pm.min_spare_servers = 5
# pm.max_spare_servers = 65
pm.max_requests = 1000
slowlog = /var/log/php-fpm/www-slow.log
rlimit_files = 10240