在Spring Boot应用开发完成后，如何将其稳定、高效地部署到生产环境是每个开发者都需要掌握的关键技能。本文将详细介绍Spring Boot项目的多种部署方案，从传统部署到现代化容器部署，选择最适合的部署策略。

1. 部署前的准备工作

1.1 项目打包优化

在部署之前，需要确保项目能够正确打包。Spring Boot提供了多种打包方式：

Maven项目打包：

# 清理并打包
mvn clean package# 跳过测试打包（生产环境不推荐）
mvn clean package -DskipTests# 打包并运行测试
mvn clean package -Dspring.profiles.active=test

Gradle项目打包：

# 清理并构建
./gradlew clean build# 生成可执行jar
./gradlew bootJar

1.2 配置文件管理

生产环境需要独立的配置文件，建议使用Spring Profile进行环境隔离：

application.yml（主配置）：

spring:profiles:active: @spring.profiles.active@application:name: your-application

application-prod.yml（生产环境配置）：

server:port: 8080servlet:context-path: /apitomcat:max-connections: 10000threads:max: 200min-spare: 10spring:datasource:url: jdbc:mysql://${DB_HOST:localhost}:${DB_PORT:3306}/${DB_NAME:your_db}?useSSL=true&serverTimezone=Asia/Shanghaiusername: ${DB_USERNAME:root}password: ${DB_PASSWORD:password}hikari:maximum-pool-size: 20minimum-idle: 5idle-timeout: 300000max-lifetime: 1200000connection-timeout: 20000jpa:hibernate:ddl-auto: validateshow-sql: falseproperties:hibernate:dialect: org.hibernate.dialect.MySQL8Dialectformat_sql: falseredis:host: ${REDIS_HOST:localhost}port: ${REDIS_PORT:6379}password: ${REDIS_PASSWORD:}timeout: 2000mslettuce:pool:max-active: 8max-idle: 8min-idle: 0logging:level:com.yourpackage: INFOorg.springframework.web: WARNpattern:file: "%d{yyyy-MM-dd HH:mm:ss} [%thread] %-5level %logger{36} - %msg%n"file:name: logs/application.logmax-size: 100MBmax-history: 30management:endpoints:web:exposure:include: health,info,metricsendpoint:health:show-details: when-authorized

2. 传统服务器部署

2.1 Linux服务器部署

环境准备：

# 安装Java 11
sudo apt update
sudo apt install openjdk-11-jdk# 验证安装
java -version

创建应用用户：

# 创建专用用户（安全最佳实践）
sudo useradd -r -s /bin/false springboot
sudo mkdir -p /opt/your-app
sudo chown springboot:springboot /opt/your-app

部署脚本：

#!/bin/bash
# deploy.shAPP_NAME="your-app"
APP_VERSION="1.0.0"
JAR_FILE="${APP_NAME}-${APP_VERSION}.jar"
APP_DIR="/opt/${APP_NAME}"
PID_FILE="${APP_DIR}/${APP_NAME}.pid"# 停止旧版本
if [ -f "$PID_FILE" ]; thenPID=$(cat $PID_FILE)if ps -p $PID > /dev/null; thenecho "Stopping $APP_NAME (PID: $PID)"kill $PIDsleep 5firm -f $PID_FILE
fi# 备份当前版本
if [ -f "${APP_DIR}/${JAR_FILE}" ]; thencp "${APP_DIR}/${JAR_FILE}" "${APP_DIR}/${JAR_FILE}.backup"
fi# 部署新版本
cp "target/${JAR_FILE}" "${APP_DIR}/"
chown springboot:springboot "${APP_DIR}/${JAR_FILE}"# 启动应用
cd $APP_DIR
sudo -u springboot nohup java \-Xms512m -Xmx1024m \-Dspring.profiles.active=prod \-Dfile.encoding=UTF-8 \-jar ${JAR_FILE} \> logs/application.log 2>&1 &echo $! > $PID_FILE
echo "$APP_NAME started successfully"

2.2 Windows服务器部署

安装为Windows服务：

@echo off
rem install-service.batset APP_NAME=YourApp
set JAR_FILE=your-app-1.0.0.jar
set SERVICE_NAME=YourAppServicerem 下载winsw工具
rem https://github.com/winsw/winsw/releasesrem 创建服务配置文件
echo ^<service^> > %SERVICE_NAME%.xml
echo   ^<id^>%SERVICE_NAME%^</id^> >> %SERVICE_NAME%.xml
echo   ^<name^>%APP_NAME%^</name^> >> %SERVICE_NAME%.xml
echo   ^<description^>Spring Boot Application^</description^> >> %SERVICE_NAME%.xml
echo   ^<executable^>java^</executable^> >> %SERVICE_NAME%.xml
echo   ^<arguments^>-jar %JAR_FILE%^</arguments^> >> %SERVICE_NAME%.xml
echo   ^<workingdirectory^>%CD%^</workingdirectory^> >> %SERVICE_NAME%.xml
echo ^</service^> >> %SERVICE_NAME%.xmlrem 安装服务
winsw.exe install %SERVICE_NAME%.xmlrem 启动服务
net start %SERVICE_NAME%

3. Docker容器化部署

3.1 单容器部署

Dockerfile优化版本：

# 多阶段构建减少镜像大小
FROM maven:3.8.4-openjdk-11 AS builder
WORKDIR /app
COPY pom.xml .
RUN mvn dependency:go-offline -B
COPY src ./src
RUN mvn clean package -DskipTests# 运行时镜像
FROM openjdk:11-jre-slim
LABEL maintainer="your-email@example.com"# 创建应用用户
RUN groupadd -r springboot && useradd -r -g springboot springboot# 安装必要工具
RUN apt-get update && apt-get install -y \curl \&& rm -rf /var/lib/apt/lists/*WORKDIR /app# 复制jar文件
COPY --from=builder /app/target/*.jar app.jar# 更改文件所有者
RUN chown springboot:springboot app.jar# 切换到非root用户
USER springboot# 健康检查
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \CMD curl -f http://localhost:8080/actuator/health || exit 1EXPOSE 8080# 启动参数优化
ENTRYPOINT ["java", \"-Djava.security.egd=file:/dev/./urandom", \"-Dspring.profiles.active=prod", \"-jar", \"app.jar"]

构建和运行：

# 构建镜像
docker build -t your-app:latest .# 运行容器
docker run -d \--name your-app \-p 8080:8080 \-e SPRING_PROFILES_ACTIVE=prod \-e DB_HOST=host.docker.internal \-e DB_USERNAME=root \-e DB_PASSWORD=password \--restart unless-stopped \your-app:latest# 查看日志
docker logs -f your-app

3.2 Docker Compose编排

docker-compose.yml：

version: '3.8'services:app:build: .container_name: your-appports:- "8080:8080"environment:- SPRING_PROFILES_ACTIVE=prod- DB_HOST=mysql- DB_USERNAME=root- DB_PASSWORD=yourpassword- REDIS_HOST=redisdepends_on:mysql:condition: service_healthyredis:condition: service_startedvolumes:- app-logs:/app/logsnetworks:- app-networkrestart: unless-stoppedhealthcheck:test: ["CMD", "curl", "-f", "http://localhost:8080/actuator/health"]interval: 30stimeout: 10sretries: 3mysql:image: mysql:8.0container_name: your-app-mysqlenvironment:- MYSQL_ROOT_PASSWORD=yourpassword- MYSQL_DATABASE=your_db- MYSQL_USER=app_user- MYSQL_PASSWORD=app_passwordports:- "3306:3306"volumes:- mysql-data:/var/lib/mysql- ./init.sql:/docker-entrypoint-initdb.d/init.sqlnetworks:- app-networkrestart: unless-stoppedhealthcheck:test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]timeout: 20sretries: 10redis:image: redis:7-alpinecontainer_name: your-app-redisports:- "6379:6379"volumes:- redis-data:/datanetworks:- app-networkrestart: unless-stoppedcommand: redis-server --appendonly yesnginx:image: nginx:alpinecontainer_name: your-app-nginxports:- "80:80"- "443:443"volumes:- ./nginx.conf:/etc/nginx/nginx.conf- ./ssl:/etc/nginx/ssldepends_on:- appnetworks:- app-networkrestart: unless-stoppedvolumes:mysql-data:redis-data:app-logs:networks:app-network:driver: bridge

启动和管理：

# 启动所有服务
docker-compose up -d# 查看服务状态
docker-compose ps# 查看日志
docker-compose logs -f app# 扩容应用实例
docker-compose up -d --scale app=3# 停止所有服务
docker-compose down

4. 云平台部署

4.1 阿里云ECS部署

安全组配置：

• 入方向：开放80、443、8080端口
• 出方向：允许所有

自动化部署脚本：

#!/bin/bash
# aliyun-deploy.sh# 配置变量
REGION="cn-hangzhou"
IMAGE_ID="ubuntu_20_04_x64_20G_alibase_20210420.vhd"
INSTANCE_TYPE="ecs.t5-lc1m1.small"
SECURITY_GROUP_ID="sg-xxxxx"# 创建ECS实例
aliyun ecs CreateInstance \--RegionId $REGION \--ImageId $IMAGE_ID \--InstanceType $INSTANCE_TYPE \--SecurityGroupId $SECURITY_GROUP_ID \--InstanceName "springboot-app" \--InternetMaxBandwidthOut 100# 部署应用（在实例创建后执行）
# ... 部署逻辑

4.2 腾讯云CVM部署

类似阿里云，使用腾讯云CLI或控制台创建实例，然后按照传统服务器部署方式进行。

4.3 Kubernetes部署

deployment.yaml：

apiVersion: apps/v1
kind: Deployment
metadata:name: springboot-applabels:app: springboot-app
spec:replicas: 3selector:matchLabels:app: springboot-apptemplate:metadata:labels:app: springboot-appspec:containers:- name: appimage: your-app:latestports:- containerPort: 8080env:- name: SPRING_PROFILES_ACTIVEvalue: "prod"- name: DB_HOSTvalueFrom:secretKeyRef:name: app-secretkey: db-hostresources:requests:memory: "512Mi"cpu: "250m"limits:memory: "1Gi"cpu: "500m"livenessProbe:httpGet:path: /actuator/healthport: 8080initialDelaySeconds: 30periodSeconds: 10readinessProbe:httpGet:path: /actuator/healthport: 8080initialDelaySeconds: 5periodSeconds: 5---
apiVersion: v1
kind: Service
metadata:name: springboot-app-service
spec:selector:app: springboot-appports:- protocol: TCPport: 80targetPort: 8080type: LoadBalancer

5. 反向代理配置

5.1 Nginx配置

nginx.conf：

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;events {worker_connections 1024;use epoll;multi_accept on;
}http {include /etc/nginx/mime.types;default_type application/octet-stream;# 日志格式log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';access_log /var/log/nginx/access.log main;# 基本配置sendfile on;tcp_nopush on;tcp_nodelay on;keepalive_timeout 65;types_hash_max_size 2048;# Gzip压缩gzip on;gzip_vary on;gzip_min_length 1024;gzip_comp_level 6;gzip_types text/plain text/css application/json application/javascript text/xml application/xml;# 上游服务器upstream springboot_backend {least_conn;server 127.0.0.1:8080 weight=1 max_fails=2 fail_timeout=30s;server 127.0.0.1:8081 weight=1 max_fails=2 fail_timeout=30s;keepalive 32;}# 限流配置limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;server {listen 80;server_name your-domain.com www.your-domain.com;# HTTP重定向到HTTPSreturn 301 https://$server_name$request_uri;}server {listen 443 ssl http2;server_name your-domain.com www.your-domain.com;# SSL配置ssl_certificate /etc/nginx/ssl/cert.pem;ssl_certificate_key /etc/nginx/ssl/key.pem;ssl_protocols TLSv1.2 TLSv1.3;ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384;ssl_prefer_server_ciphers off;# 安全头add_header X-Frame-Options DENY;add_header X-Content-Type-Options nosniff;add_header X-XSS-Protection "1; mode=block";add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;# 静态资源缓存location ~* \.(css|js|jpg|jpeg|png|gif|ico|svg)$ {expires 1y;add_header Cache-Control "public, immutable";}# API代理location /api/ {limit_req zone=api burst=20 nodelay;proxy_pass http://springboot_backend;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header X-Forwarded-Proto $scheme;# 连接超时设置proxy_connect_timeout 30s;proxy_send_timeout 30s;proxy_read_timeout 30s;# 缓冲设置proxy_buffering on;proxy_buffer_size 4k;proxy_buffers 8 4k;}# 健康检查location /health {access_log off;proxy_pass http://springboot_backend/actuator/health;}}
}

6. 进程管理和监控

6.1 Systemd服务管理

创建服务文件：

# /etc/systemd/system/springboot-app.service
[Unit]
Description=Spring Boot Application
After=network.target mysql.service redis.service
Wants=mysql.service redis.service[Service]
Type=simple
User=springboot
Group=springboot
WorkingDirectory=/opt/springboot-app
ExecStart=/usr/bin/java -Xms512m -Xmx1024m -Dspring.profiles.active=prod -jar app.jar
ExecStop=/bin/kill -TERM $MAINPID
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal
SyslogIdentifier=springboot-app# 安全配置
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/opt/springboot-app/logs# 资源限制
LimitNOFILE=65536
LimitNPROC=4096[Install]
WantedBy=multi-user.target

服务管理命令：

# 重新加载systemd配置
sudo systemctl daemon-reload# 启用服务（开机自启）
sudo systemctl enable springboot-app# 启动服务
sudo systemctl start springboot-app# 查看服务状态
sudo systemctl status springboot-app# 查看日志
sudo journalctl -u springboot-app -f# 重启服务
sudo systemctl restart springboot-app

6.2 监控和日志

Prometheus监控配置：

# application-prod.yml 添加
management:endpoints:web:exposure:include: health,info,metrics,prometheusmetrics:export:prometheus:enabled: true

日志配置（logback-spring.xml）：

<?xml version="1.0" encoding="UTF-8"?>
<configuration><springProfile name="prod"><appender name="FILE" class="ch.qos.logback.core.rolling.RollingFileAppender"><file>logs/application.log</file><rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy"><fileNamePattern>logs/application.%d{yyyy-MM-dd}.%i.log</fileNamePattern><timeBasedFileNamingAndTriggeringPolicy class="ch.qos.logback.core.rolling.SizeAndTimeBasedFNATP"><maxFileSize>100MB</maxFileSize></timeBasedFileNamingAndTriggeringPolicy><maxHistory>30</maxHistory><totalSizeCap>3GB</totalSizeCap></rollingPolicy><encoder><pattern>%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{36} - %msg%n</pattern></encoder></appender><root level="INFO"><appender-ref ref="FILE"/></root></springProfile>
</configuration>

7. 性能优化和安全配置

7.1 JVM参数优化

# 生产环境JVM参数示例
java -server \-Xms1g -Xmx2g \-XX:+UseG1GC \-XX:MaxGCPauseMillis=200 \-XX:+HeapDumpOnOutOfMemoryError \-XX:HeapDumpPath=logs/heapdump.hprof \-XX:+PrintGCDetails \-XX:+PrintGCTimeStamps \-Xloggc:logs/gc.log \-XX:+UseGCLogFileRotation \-XX:NumberOfGCLogFiles=5 \-XX:GCLogFileSize=10M \-Dspring.profiles.active=prod \-Dfile.encoding=UTF-8 \-Djava.awt.headless=true \-Djava.security.egd=file:/dev/./urandom \-jar your-app.jar

7.2 应用安全配置

SecurityConfig.java：

@Configuration
@EnableWebSecurity
public class SecurityConfig {@Beanpublic SecurityFilterChain filterChain(HttpSecurity http) throws Exception {http.csrf().disable().sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and().headers().frameOptions().deny().contentTypeOptions().and().xssProtection().and().httpStrictTransportSecurity(hstsConfig -> hstsConfig.maxAgeInSeconds(31536000).includeSubDomains(true)).and().authorizeHttpRequests(authz -> authz.requestMatchers("/actuator/health").permitAll().requestMatchers("/api/public/**").permitAll().anyRequest().authenticated());return http.build();}
}

8. 部署最佳实践

8.1 蓝绿部署

#!/bin/bash
# blue-green-deploy.shBLUE_PORT=8080
GREEN_PORT=8081
NGINX_UPSTREAM_CONF="/etc/nginx/conf.d/upstream.conf"# 检查当前活跃端口
CURRENT_PORT=$(curl -s http://localhost/actuator/info | jq -r '.port // 8080')if [ "$CURRENT_PORT" = "$BLUE_PORT" ]; thenNEW_PORT=$GREEN_PORTOLD_PORT=$BLUE_PORT
elseNEW_PORT=$BLUE_PORTOLD_PORT=$GREEN_PORT
fiecho "Deploying to port $NEW_PORT"# 启动新版本
java -jar -Dserver.port=$NEW_PORT your-app-new.jar &
NEW_PID=$!# 等待新版本启动
sleep 30# 健康检查
if curl -f http://localhost:$NEW_PORT/actuator/health; thenecho "New version is healthy, switching traffic"# 更新Nginx配置sed -i "s/server 127.0.0.1:$OLD_PORT/server 127.0.0.1:$NEW_PORT/g" $NGINX_UPSTREAM_CONFnginx -s reload# 等待流量切换完成sleep 10# 停止旧版本kill $(lsof -t -i:$OLD_PORT)echo "Deployment successful"
elseecho "New version failed health check, rolling back"kill $NEW_PIDexit 1
fi

8.2 滚动更新

#!/bin/bash
# rolling-update.shINSTANCES=("8080" "8081" "8082")
NEW_JAR="your-app-new.jar"for port in "${INSTANCES[@]}"; doecho "Updating instance on port $port"# 从负载均衡器移除# 这里需要调用你的负载均衡器API# 停止实例kill $(lsof -t -i:$port)# 启动新版本nohup java -jar -Dserver.port=$port $NEW_JAR > logs/app-$port.log 2>&1 &# 等待启动sleep 30# 健康检查if curl -f http://localhost:$port/actuator/health; thenecho "Instance on port $port updated successfully"# 重新加入负载均衡器elseecho "Instance on port $port failed to start"exit 1fi# 等待一段时间再更新下一个实例sleep 10
done

9. 故障排查和运维

9.1 常见问题排查

端口占用：

# 查看端口占用
netstat -tulpn | grep :8080
lsof -i :8080# 杀死占用端口的进程
kill -9 $(lsof -t -i:8080)

内存问题：

# 查看内存使用
free -h
ps aux | grep java# 生成heap dump
jmap -dump:format=b,file=heapdump.hprof <pid># 分析GC
jstat -gc <pid> 5s

日志分析：

# 查看错误日志
tail -f logs/application.log | grep ERROR# 统计请求量
grep "GET\|POST" access.log | awk '{print $4}' | cut -d: -f1-2 | sort | uniq -c# 查看响应时间
awk '{print $NF}' access.log | sort -n | tail -10

9.2 性能监控

监控脚本：

#!/bin/bash
# monitor.shAPP_URL="http://localhost:8080"
ALERT_EMAIL="admin@example.com"# 检查应用状态
check_health() {local response=$(curl -s -o /dev/null -w "%{http_code}" $APP_URL/actuator/health)if [ "$response" != "200" ]; thenecho "Application is down! HTTP Status: $response" | mail -s "App Alert" $ALERT_EMAILreturn 1fireturn 0
}# 检查内存使用
check_memory() {local mem_usage=$(free | grep Mem | awk '{printf "%.2f", $3/$2 * 100.0}')local threshold=80if (( $(echo "$mem_usage > $threshold" | bc -l) )); thenecho "High memory usage: ${mem_usage}%" | mail -s "Memory Alert" $ALERT_EMAILfi
}# 检查磁盘空间
check_disk() {local disk_usage=$(df / | tail -1 | awk '{print $5}' | sed 's/%//')local threshold=85if [ "$disk_usage" -gt "$threshold" ]; thenecho "High disk usage: ${disk_usage}%" | mail -s "Disk Alert" $ALERT_EMAILfi
}# 执行检查
check_health && check_memory && check_disk

---

Spring Boot应用的部署涉及多个方面，从简单的jar包部署到复杂的容器化编排，每种方式都有其适用场景：

• 传统部署：适合小型项目和传统IT环境
• Docker部署：适合现代化应用和微服务架构
• 云平台部署：适合需要弹性伸缩和高可用的应用
• Kubernetes部署：适合大规模分布式应用