Ahmad Haghighi haghighi

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

Overview

This is a solution of a common problem with Nexus Docker repositories. The administrator has to expose port for "pull", another port for "push", other ports for each hosted repository. This solution is about leveraging Nginx reverse proxy to avoid using these ports.

How it works ?

Given :

Nexus hostname is "nexus.example.com"
Nexus web port is 8081

	version: '3.7'
	services:
	dtrack:
	environment:
	# The Dependency-Track container can be configured using any of the
	# available configuration properties defined in:
	# https://docs.dependencytrack.org/getting-started/configuration/
	# All properties are upper case with periods replaced by underscores.
	#
	# Database Properties

	user web;

	# One worker process per CPU core.
	worker_processes 8;

	# Also set
	# /etc/security/limits.conf
	# web soft nofile 65535
	# web hard nofile 65535
	# /etc/default/nginx

	version: "2"

	services:
	sonarqube:
	image: sonarqube
	restart: always
	ports:
	- "9000:9000"
	networks:
	- sonarnet

	version: "3"

	services:
	prometheus:
	image: prom/prometheus
	volumes:
	- "prometheus_storage:/prometheus"
	- "./prometheus.yml:/etc/prometheus/prometheus.yml"
	restart: always
	ports:

	version: "3"

	services:
	grafana:
	image: grafana/grafana
	volumes:
	- "grafana-storage:/var/lib/grafana"
	- "./grafana-config/grafana.ini:/etc/grafana/grafana.ini"
	restart: always
	ports:

	# php occ twofactorauth:disable [--output [OUTPUT]] [--] <uid> <provider_id>
	sudo docker exec --user www-data nextcloud php occ twofactorauth:disable USERNAME totp

	server {
	listen *:80;
	server_name repo.samim.int;

	# allow large uploads of files
	client_max_body_size 1G;

	# optimize downloading files larger than 1G
	#proxy_max_temp_file_size 2G;

	version: "3"

	services:
	nexus:
	image: sonatype/nexus3
	volumes:
	- "nexus-docker-compose_nexus-data:/nexus-data"
	restart: always
	environment:
	- INSTALL4J_ADD_VM_PARAMS="-Xms4G -Xmx4G -XX:MaxDirectMemorySize=4014M " # 12 GB physical Memmory