在Spring Boot應用開發完成后，如何將其穩定、高效地部署到生產環境是每個開發者都需要掌握的關鍵技能。本文將詳細介紹Spring Boot項目的多種部署方案，從傳統部署到現代化容器部署，選擇最適合的部署策略。

1. 部署前的準備工作

1.1 項目打包優化

在部署之前，需要確保項目能夠正確打包。Spring Boot提供了多種打包方式：

Maven項目打包：

# 清理并打包
mvn clean package# 跳過測試打包（生產環境不推薦）
mvn clean package -DskipTests# 打包并運行測試
mvn clean package -Dspring.profiles.active=test

Gradle項目打包：

# 清理并構建
./gradlew clean build# 生成可執行jar
./gradlew bootJar

1.2 配置文件管理

生產環境需要獨立的配置文件，建議使用Spring Profile進行環境隔離：

application.yml（主配置）：

spring:profiles:active: @spring.profiles.active@application:name: your-application

application-prod.yml（生產環境配置）：

server:port: 8080servlet:context-path: /apitomcat:max-connections: 10000threads:max: 200min-spare: 10spring:datasource:url: jdbc:mysql://${DB_HOST:localhost}:${DB_PORT:3306}/${DB_NAME:your_db}?useSSL=true&serverTimezone=Asia/Shanghaiusername: ${DB_USERNAME:root}password: ${DB_PASSWORD:password}hikari:maximum-pool-size: 20minimum-idle: 5idle-timeout: 300000max-lifetime: 1200000connection-timeout: 20000jpa:hibernate:ddl-auto: validateshow-sql: falseproperties:hibernate:dialect: org.hibernate.dialect.MySQL8Dialectformat_sql: falseredis:host: ${REDIS_HOST:localhost}port: ${REDIS_PORT:6379}password: ${REDIS_PASSWORD:}timeout: 2000mslettuce:pool:max-active: 8max-idle: 8min-idle: 0logging:level:com.yourpackage: INFOorg.springframework.web: WARNpattern:file: "%d{yyyy-MM-dd HH:mm:ss} [%thread] %-5level %logger{36} - %msg%n"file:name: logs/application.logmax-size: 100MBmax-history: 30management:endpoints:web:exposure:include: health,info,metricsendpoint:health:show-details: when-authorized

2. 傳統服務器部署

2.1 Linux服務器部署

環境準備：

# 安裝Java 11
sudo apt update
sudo apt install openjdk-11-jdk# 驗證安裝
java -version

創建應用用戶：

# 創建專用用戶（安全最佳實踐）
sudo useradd -r -s /bin/false springboot
sudo mkdir -p /opt/your-app
sudo chown springboot:springboot /opt/your-app

部署腳本：

#!/bin/bash
# deploy.shAPP_NAME="your-app"
APP_VERSION="1.0.0"
JAR_FILE="${APP_NAME}-${APP_VERSION}.jar"
APP_DIR="/opt/${APP_NAME}"
PID_FILE="${APP_DIR}/${APP_NAME}.pid"# 停止舊版本
if [ -f "$PID_FILE" ]; thenPID=$(cat $PID_FILE)if ps -p $PID > /dev/null; thenecho "Stopping $APP_NAME (PID: $PID)"kill $PIDsleep 5firm -f $PID_FILE
fi# 備份當前版本
if [ -f "${APP_DIR}/${JAR_FILE}" ]; thencp "${APP_DIR}/${JAR_FILE}" "${APP_DIR}/${JAR_FILE}.backup"
fi# 部署新版本
cp "target/${JAR_FILE}" "${APP_DIR}/"
chown springboot:springboot "${APP_DIR}/${JAR_FILE}"# 啟動應用
cd $APP_DIR
sudo -u springboot nohup java \-Xms512m -Xmx1024m \-Dspring.profiles.active=prod \-Dfile.encoding=UTF-8 \-jar ${JAR_FILE} \> logs/application.log 2>&1 &echo $! > $PID_FILE
echo "$APP_NAME started successfully"

2.2 Windows服務器部署

安裝為Windows服務：

@echo off
rem install-service.batset APP_NAME=YourApp
set JAR_FILE=your-app-1.0.0.jar
set SERVICE_NAME=YourAppServicerem 下載winsw工具
rem https://github.com/winsw/winsw/releasesrem 創建服務配置文件
echo ^<service^> > %SERVICE_NAME%.xml
echo   ^<id^>%SERVICE_NAME%^</id^> >> %SERVICE_NAME%.xml
echo   ^<name^>%APP_NAME%^</name^> >> %SERVICE_NAME%.xml
echo   ^<description^>Spring Boot Application^</description^> >> %SERVICE_NAME%.xml
echo   ^<executable^>java^</executable^> >> %SERVICE_NAME%.xml
echo   ^<arguments^>-jar %JAR_FILE%^</arguments^> >> %SERVICE_NAME%.xml
echo   ^<workingdirectory^>%CD%^</workingdirectory^> >> %SERVICE_NAME%.xml
echo ^</service^> >> %SERVICE_NAME%.xmlrem 安裝服務
winsw.exe install %SERVICE_NAME%.xmlrem 啟動服務
net start %SERVICE_NAME%

3. Docker容器化部署

3.1 單容器部署

Dockerfile優化版本：

# 多階段構建減少鏡像大小
FROM maven:3.8.4-openjdk-11 AS builder
WORKDIR /app
COPY pom.xml .
RUN mvn dependency:go-offline -B
COPY src ./src
RUN mvn clean package -DskipTests# 運行時鏡像
FROM openjdk:11-jre-slim
LABEL maintainer="your-email@example.com"# 創建應用用戶
RUN groupadd -r springboot && useradd -r -g springboot springboot# 安裝必要工具
RUN apt-get update && apt-get install -y \curl \&& rm -rf /var/lib/apt/lists/*WORKDIR /app# 復制jar文件
COPY --from=builder /app/target/*.jar app.jar# 更改文件所有者
RUN chown springboot:springboot app.jar# 切換到非root用戶
USER springboot# 健康檢查
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \CMD curl -f http://localhost:8080/actuator/health || exit 1EXPOSE 8080# 啟動參數優化
ENTRYPOINT ["java", \"-Djava.security.egd=file:/dev/./urandom", \"-Dspring.profiles.active=prod", \"-jar", \"app.jar"]

構建和運行：

# 構建鏡像
docker build -t your-app:latest .# 運行容器
docker run -d \--name your-app \-p 8080:8080 \-e SPRING_PROFILES_ACTIVE=prod \-e DB_HOST=host.docker.internal \-e DB_USERNAME=root \-e DB_PASSWORD=password \--restart unless-stopped \your-app:latest# 查看日志
docker logs -f your-app

3.2 Docker Compose編排

docker-compose.yml：

version: '3.8'services:app:build: .container_name: your-appports:- "8080:8080"environment:- SPRING_PROFILES_ACTIVE=prod- DB_HOST=mysql- DB_USERNAME=root- DB_PASSWORD=yourpassword- REDIS_HOST=redisdepends_on:mysql:condition: service_healthyredis:condition: service_startedvolumes:- app-logs:/app/logsnetworks:- app-networkrestart: unless-stoppedhealthcheck:test: ["CMD", "curl", "-f", "http://localhost:8080/actuator/health"]interval: 30stimeout: 10sretries: 3mysql:image: mysql:8.0container_name: your-app-mysqlenvironment:- MYSQL_ROOT_PASSWORD=yourpassword- MYSQL_DATABASE=your_db- MYSQL_USER=app_user- MYSQL_PASSWORD=app_passwordports:- "3306:3306"volumes:- mysql-data:/var/lib/mysql- ./init.sql:/docker-entrypoint-initdb.d/init.sqlnetworks:- app-networkrestart: unless-stoppedhealthcheck:test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]timeout: 20sretries: 10redis:image: redis:7-alpinecontainer_name: your-app-redisports:- "6379:6379"volumes:- redis-data:/datanetworks:- app-networkrestart: unless-stoppedcommand: redis-server --appendonly yesnginx:image: nginx:alpinecontainer_name: your-app-nginxports:- "80:80"- "443:443"volumes:- ./nginx.conf:/etc/nginx/nginx.conf- ./ssl:/etc/nginx/ssldepends_on:- appnetworks:- app-networkrestart: unless-stoppedvolumes:mysql-data:redis-data:app-logs:networks:app-network:driver: bridge

啟動和管理：

# 啟動所有服務
docker-compose up -d# 查看服務狀態
docker-compose ps# 查看日志
docker-compose logs -f app# 擴容應用實例
docker-compose up -d --scale app=3# 停止所有服務
docker-compose down

4. 云平臺部署

4.1 阿里云ECS部署

安全組配置：

• 入方向：開放80、443、8080端口
• 出方向：允許所有

自動化部署腳本：

#!/bin/bash
# aliyun-deploy.sh# 配置變量
REGION="cn-hangzhou"
IMAGE_ID="ubuntu_20_04_x64_20G_alibase_20210420.vhd"
INSTANCE_TYPE="ecs.t5-lc1m1.small"
SECURITY_GROUP_ID="sg-xxxxx"# 創建ECS實例
aliyun ecs CreateInstance \--RegionId $REGION \--ImageId $IMAGE_ID \--InstanceType $INSTANCE_TYPE \--SecurityGroupId $SECURITY_GROUP_ID \--InstanceName "springboot-app" \--InternetMaxBandwidthOut 100# 部署應用（在實例創建后執行）
# ... 部署邏輯

4.2 騰訊云CVM部署

類似阿里云，使用騰訊云CLI或控制臺創建實例，然后按照傳統服務器部署方式進行。

4.3 Kubernetes部署

deployment.yaml：

apiVersion: apps/v1
kind: Deployment
metadata:name: springboot-applabels:app: springboot-app
spec:replicas: 3selector:matchLabels:app: springboot-apptemplate:metadata:labels:app: springboot-appspec:containers:- name: appimage: your-app:latestports:- containerPort: 8080env:- name: SPRING_PROFILES_ACTIVEvalue: "prod"- name: DB_HOSTvalueFrom:secretKeyRef:name: app-secretkey: db-hostresources:requests:memory: "512Mi"cpu: "250m"limits:memory: "1Gi"cpu: "500m"livenessProbe:httpGet:path: /actuator/healthport: 8080initialDelaySeconds: 30periodSeconds: 10readinessProbe:httpGet:path: /actuator/healthport: 8080initialDelaySeconds: 5periodSeconds: 5---
apiVersion: v1
kind: Service
metadata:name: springboot-app-service
spec:selector:app: springboot-appports:- protocol: TCPport: 80targetPort: 8080type: LoadBalancer

5. 反向代理配置

5.1 Nginx配置

nginx.conf：

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;events {worker_connections 1024;use epoll;multi_accept on;
}http {include /etc/nginx/mime.types;default_type application/octet-stream;# 日志格式log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';access_log /var/log/nginx/access.log main;# 基本配置sendfile on;tcp_nopush on;tcp_nodelay on;keepalive_timeout 65;types_hash_max_size 2048;# Gzip壓縮gzip on;gzip_vary on;gzip_min_length 1024;gzip_comp_level 6;gzip_types text/plain text/css application/json application/javascript text/xml application/xml;# 上游服務器upstream springboot_backend {least_conn;server 127.0.0.1:8080 weight=1 max_fails=2 fail_timeout=30s;server 127.0.0.1:8081 weight=1 max_fails=2 fail_timeout=30s;keepalive 32;}# 限流配置limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;server {listen 80;server_name your-domain.com www.your-domain.com;# HTTP重定向到HTTPSreturn 301 https://$server_name$request_uri;}server {listen 443 ssl http2;server_name your-domain.com www.your-domain.com;# SSL配置ssl_certificate /etc/nginx/ssl/cert.pem;ssl_certificate_key /etc/nginx/ssl/key.pem;ssl_protocols TLSv1.2 TLSv1.3;ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384;ssl_prefer_server_ciphers off;# 安全頭add_header X-Frame-Options DENY;add_header X-Content-Type-Options nosniff;add_header X-XSS-Protection "1; mode=block";add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;# 靜態資源緩存location ~* \.(css|js|jpg|jpeg|png|gif|ico|svg)$ {expires 1y;add_header Cache-Control "public, immutable";}# API代理location /api/ {limit_req zone=api burst=20 nodelay;proxy_pass http://springboot_backend;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header X-Forwarded-Proto $scheme;# 連接超時設置proxy_connect_timeout 30s;proxy_send_timeout 30s;proxy_read_timeout 30s;# 緩沖設置proxy_buffering on;proxy_buffer_size 4k;proxy_buffers 8 4k;}# 健康檢查location /health {access_log off;proxy_pass http://springboot_backend/actuator/health;}}
}

6. 進程管理和監控

6.1 Systemd服務管理

創建服務文件：

# /etc/systemd/system/springboot-app.service
[Unit]
Description=Spring Boot Application
After=network.target mysql.service redis.service
Wants=mysql.service redis.service[Service]
Type=simple
User=springboot
Group=springboot
WorkingDirectory=/opt/springboot-app
ExecStart=/usr/bin/java -Xms512m -Xmx1024m -Dspring.profiles.active=prod -jar app.jar
ExecStop=/bin/kill -TERM $MAINPID
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal
SyslogIdentifier=springboot-app# 安全配置
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/opt/springboot-app/logs# 資源限制
LimitNOFILE=65536
LimitNPROC=4096[Install]
WantedBy=multi-user.target

服務管理命令：

# 重新加載systemd配置
sudo systemctl daemon-reload# 啟用服務（開機自啟）
sudo systemctl enable springboot-app# 啟動服務
sudo systemctl start springboot-app# 查看服務狀態
sudo systemctl status springboot-app# 查看日志
sudo journalctl -u springboot-app -f# 重啟服務
sudo systemctl restart springboot-app

6.2 監控和日志

Prometheus監控配置：

# application-prod.yml 添加
management:endpoints:web:exposure:include: health,info,metrics,prometheusmetrics:export:prometheus:enabled: true

日志配置（logback-spring.xml）：

<?xml version="1.0" encoding="UTF-8"?>
<configuration><springProfile name="prod"><appender name="FILE" class="ch.qos.logback.core.rolling.RollingFileAppender"><file>logs/application.log</file><rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy"><fileNamePattern>logs/application.%d{yyyy-MM-dd}.%i.log</fileNamePattern><timeBasedFileNamingAndTriggeringPolicy class="ch.qos.logback.core.rolling.SizeAndTimeBasedFNATP"><maxFileSize>100MB</maxFileSize></timeBasedFileNamingAndTriggeringPolicy><maxHistory>30</maxHistory><totalSizeCap>3GB</totalSizeCap></rollingPolicy><encoder><pattern>%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{36} - %msg%n</pattern></encoder></appender><root level="INFO"><appender-ref ref="FILE"/></root></springProfile>
</configuration>

7. 性能優化和安全配置

7.1 JVM參數優化

# 生產環境JVM參數示例
java -server \-Xms1g -Xmx2g \-XX:+UseG1GC \-XX:MaxGCPauseMillis=200 \-XX:+HeapDumpOnOutOfMemoryError \-XX:HeapDumpPath=logs/heapdump.hprof \-XX:+PrintGCDetails \-XX:+PrintGCTimeStamps \-Xloggc:logs/gc.log \-XX:+UseGCLogFileRotation \-XX:NumberOfGCLogFiles=5 \-XX:GCLogFileSize=10M \-Dspring.profiles.active=prod \-Dfile.encoding=UTF-8 \-Djava.awt.headless=true \-Djava.security.egd=file:/dev/./urandom \-jar your-app.jar

7.2 應用安全配置

SecurityConfig.java：

@Configuration
@EnableWebSecurity
public class SecurityConfig {@Beanpublic SecurityFilterChain filterChain(HttpSecurity http) throws Exception {http.csrf().disable().sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and().headers().frameOptions().deny().contentTypeOptions().and().xssProtection().and().httpStrictTransportSecurity(hstsConfig -> hstsConfig.maxAgeInSeconds(31536000).includeSubDomains(true)).and().authorizeHttpRequests(authz -> authz.requestMatchers("/actuator/health").permitAll().requestMatchers("/api/public/**").permitAll().anyRequest().authenticated());return http.build();}
}

8. 部署最佳實踐

8.1 藍綠部署

#!/bin/bash
# blue-green-deploy.shBLUE_PORT=8080
GREEN_PORT=8081
NGINX_UPSTREAM_CONF="/etc/nginx/conf.d/upstream.conf"# 檢查當前活躍端口
CURRENT_PORT=$(curl -s http://localhost/actuator/info | jq -r '.port // 8080')if [ "$CURRENT_PORT" = "$BLUE_PORT" ]; thenNEW_PORT=$GREEN_PORTOLD_PORT=$BLUE_PORT
elseNEW_PORT=$BLUE_PORTOLD_PORT=$GREEN_PORT
fiecho "Deploying to port $NEW_PORT"# 啟動新版本
java -jar -Dserver.port=$NEW_PORT your-app-new.jar &
NEW_PID=$!# 等待新版本啟動
sleep 30# 健康檢查
if curl -f http://localhost:$NEW_PORT/actuator/health; thenecho "New version is healthy, switching traffic"# 更新Nginx配置sed -i "s/server 127.0.0.1:$OLD_PORT/server 127.0.0.1:$NEW_PORT/g" $NGINX_UPSTREAM_CONFnginx -s reload# 等待流量切換完成sleep 10# 停止舊版本kill $(lsof -t -i:$OLD_PORT)echo "Deployment successful"
elseecho "New version failed health check, rolling back"kill $NEW_PIDexit 1
fi

8.2 滾動更新

#!/bin/bash
# rolling-update.shINSTANCES=("8080" "8081" "8082")
NEW_JAR="your-app-new.jar"for port in "${INSTANCES[@]}"; doecho "Updating instance on port $port"# 從負載均衡器移除# 這里需要調用你的負載均衡器API# 停止實例kill $(lsof -t -i:$port)# 啟動新版本nohup java -jar -Dserver.port=$port $NEW_JAR > logs/app-$port.log 2>&1 &# 等待啟動sleep 30# 健康檢查if curl -f http://localhost:$port/actuator/health; thenecho "Instance on port $port updated successfully"# 重新加入負載均衡器elseecho "Instance on port $port failed to start"exit 1fi# 等待一段時間再更新下一個實例sleep 10
done

9. 故障排查和運維

9.1 常見問題排查

端口占用：

# 查看端口占用
netstat -tulpn | grep :8080
lsof -i :8080# 殺死占用端口的進程
kill -9 $(lsof -t -i:8080)

內存問題：

# 查看內存使用
free -h
ps aux | grep java# 生成heap dump
jmap -dump:format=b,file=heapdump.hprof <pid># 分析GC
jstat -gc <pid> 5s

日志分析：

# 查看錯誤日志
tail -f logs/application.log | grep ERROR# 統計請求量
grep "GET\|POST" access.log | awk '{print $4}' | cut -d: -f1-2 | sort | uniq -c# 查看響應時間
awk '{print $NF}' access.log | sort -n | tail -10

9.2 性能監控

監控腳本：

#!/bin/bash
# monitor.shAPP_URL="http://localhost:8080"
ALERT_EMAIL="admin@example.com"# 檢查應用狀態
check_health() {local response=$(curl -s -o /dev/null -w "%{http_code}" $APP_URL/actuator/health)if [ "$response" != "200" ]; thenecho "Application is down! HTTP Status: $response" | mail -s "App Alert" $ALERT_EMAILreturn 1fireturn 0
}# 檢查內存使用
check_memory() {local mem_usage=$(free | grep Mem | awk '{printf "%.2f", $3/$2 * 100.0}')local threshold=80if (( $(echo "$mem_usage > $threshold" | bc -l) )); thenecho "High memory usage: ${mem_usage}%" | mail -s "Memory Alert" $ALERT_EMAILfi
}# 檢查磁盤空間
check_disk() {local disk_usage=$(df / | tail -1 | awk '{print $5}' | sed 's/%//')local threshold=85if [ "$disk_usage" -gt "$threshold" ]; thenecho "High disk usage: ${disk_usage}%" | mail -s "Disk Alert" $ALERT_EMAILfi
}# 執行檢查
check_health && check_memory && check_disk

---

Spring Boot應用的部署涉及多個方面，從簡單的jar包部署到復雜的容器化編排，每種方式都有其適用場景：

• 傳統部署：適合小型項目和傳統IT環境
• Docker部署：適合現代化應用和微服務架構
• 云平臺部署：適合需要彈性伸縮和高可用的應用
• Kubernetes部署：適合大規模分布式應用