How to monitor Nginx SSL performance on Debian

This article describes how to effectively monitor the SSL performance of Nginx servers on Debian systems. We will use Nginx Exporter to export Nginx status data to Prometheus and then visually display it through Grafana.

Step 1: Configure Nginx

First, we need to enable the stub_status module in the Nginx configuration file to obtain the status information of Nginx. Add the following snippet in your Nginx configuration file (usually located in /etc/nginx/nginx.conf or its include file):

 location /nginx_status {
    stub_status;
    access_log off;
    allow 127.0.0.1; # Restrict access, only local access deny all;
}

Note: For security reasons, we have added access control, allowing only local IP addresses to access nginx_status . In production environments, be sure to configure stricter access control according to actual conditions.

After the configuration is complete, run the following command to reload the Nginx configuration:

 sudo nginx -t
sudo nginx -s reload

Step 2: Install and run Nginx Exporter

Nginx Exporter is a tool for collecting Nginx metrics and converting them into Prometheus readable format.

1. Download Nginx Exporter:

 wget https://github.com/nginxinc/nginx-prometheus-exporter/releases/download/v0.11.0/nginx-prometheus-exporter_0.11.0_linux_amd64.tar.gz

2. Unzip and enter the directory:

 tar -zxvf nginx-prometheus-exporter_0.11.0_linux_amd64.tar.gz
cd nginx-prometheus-exporter

3. Start Nginx Exporter and specify the URL of Nginx stub_status :

 ./nginx-prometheus-exporter -nginx.scrape-uri=http://127.0.0.1/nginx_status

Here we assume that Nginx is running locally with port 80. Please modify the -nginx.scrape-uri parameter according to your actual situation.

Step 3: Configure Prometheus

Prometheus is an open source monitoring and alarm system. We need to configure it to crawl the data of Nginx Exporter.

Add the following configuration in the Prometheus configuration file (usually located in /etc/prometheus/prometheus.yml ):

 scrape_configs:
  - job_name: 'nginx'
    scrape_interval: 10s
    static_configs:
      - targets: ['localhost:9113'] # Nginx Exporter Default Port

After saving the configuration file, restart the Prometheus service:

 sudo systemctl restart prometheus

Step 4: Use Grafana to visualize monitoring data

Import Prometheus' data into Grafana and create a dashboard to show Nginx's SSL performance metrics, such as the number of connections, requests, etc. For specific Grafana configuration steps, please refer to Grafana official documentation.

Through the above steps, you can effectively monitor Nginx's SSL performance on the Debian system. Remember to adjust the relevant configuration according to your actual environment, especially scrape_uri of Nginx Exporter and targets parameters of Prometheus.

The above is the detailed content of How to monitor Nginx SSL performance on Debian. For more information, please follow other related articles on the PHP Chinese website!