user  nginx;
worker_processes  1;    #和cpu核心一致
#worker_cpu_affinity 0000000000000001 0000000000000010 0000000000000100 0000000000001000 0000000000010000 0000000000100000 0000000001000000 0000000010000000 0000000100000000 0000001000000000 0000010000000000 0000100000000000 0001000000000000 0010000000000000 0100000000000000 1000000000000000;
#worker_cpu_affinity auto; #自动分配


error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

worker_rlimit_nofile 25000;


events {
    use epoll;
    worker_connections  10240;   #每个worker进程可以处理多少个连接
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    charset utf-8;

    lua_package_path "/etc/nginx/waf/?.lua";
    lua_shared_dict limit 10m;
    init_by_lua_file  /etc/nginx/waf/init.lua;
    access_by_lua_file /etc/nginx/waf/waf.lua;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;
    #access_log off;  #建议在server设置

    sendfile        on; #静态文件只经过内核空间，不经过用户空间。
    tcp_nopush      on; #前提sendfile开启，把多个包进行整合，一次性发送。 适合静态资源
    tcp_nodelay     on; #前提开启长连接,数据报尽量不等待，立刻发送。 适合动态服务

    keepalive_timeout  65;

    gzip  on;
    gzip_disable "MSIE [1-6]\.";
    gzip_http_version 1.1;

    client_max_body_size 50m;

    include /etc/nginx/conf.d/*.conf;
}