Sanya Apache akan CentOS7

Bayanin hukuma

Yi shigarwa

            yum -y install libmcrypt libmcrypt-devel mcrypt mhash
yum -y install httpd
        

Gyara fayil ɗin sanyi

Bayan an gama shigarwa, muna buƙatar yin ɗan gyare-gyare ga fayil ɗin sanyi. Specificayyadaddun abubuwan gyare-gyare galibi sun haɗa da: ɗaure IP da tashar jiragen ruwa, watsawar gzip matsa lamba, adadin haɗin haɗi, da SSL. Bari mu bayyana su daya bayan daya a kasa.

Gyara da daure IP da tashar jiragen ruwa

Tsoho IP da tashar jiragen ruwa da Apache ke saurara shine 0.0.0.0:80. Idan muna buƙatar gyara IP da tashar kulawa, zamu iya gyaggyara shi kai tsaye. Idan muna buƙatar ɗaure tashoshi da yawa, za mu iya ƙara su. A cikin misali mai zuwa, muna ɗaure tashoshi 80 da 443. Port 443 shine asalin tashar tashar jirgin ruwa ta HTTPS.

            Listen 80
Listen 443 https
        

Bude watsa gzip

Saboda aikin CPU na kwamfutarmu yana da ɗan girma, yawanci ƙaramin ƙaramin abu zai bayyana a cikin bandwidth na cibiyar sadarwa, don haka zamu iya zaɓar kunna watsawar gzip compression. Akwai matakan matsi 9. Za mu iya zaɓar gwargwadon aikin sabarmu kuma sami matakin da ya fi dacewa. A cikin misalin da ke ƙasa, mun saita shi zuwa matakin 1. Nau'in fayilolin da aka matse sune: html, xml, php, css, js, za mu iya ƙara nau'in fayil ɗin da aka matse kamar yadda ake buƙata.

            <IfModule mod_deflate.c>
    DeflateCompressionLevel 1
    AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript application/x-httpd-php
    AddOutputFilter DEFLATE js css
</IfModule>
        

Kafa KeepAlive

Aikin KeepAlive shine kiyaye abokin harka da sabar a hade na wani lokaci. Lokacin da muke buɗe shafin yanar gizo, yawanci muna buƙatar loda babban abun ciki, js, css, da hotuna. Tunda kowace hanya tana buƙatar fara buƙatun HTTP daban, muna ba da damar KeepAlive don rage lokacin da ake buƙata don kowane buƙata don kafa hanyar haɗin TCP / IP. Amma KeepAlive shima yana da rashi, zai haifar da abubuwan IO na saba, don haka yakamata mu zaɓi ko a bawa KeepAlive dama bisa ga ainihin yanayin. Idan aka kunnawa KeepAlive, muna kuma buƙatar saita lokacin hutu mai dacewa don kar ayi amfani da uwar garken IO na dogon lokaci. Misali mai zuwa ya ƙunshi manyan saituna masu yawa na KeepAlive.

            KeepAlive On
MaxKeepAliveRequests 400
KeepAliveTimeout 5
        

Sanya adadin na lokaci daya

Daidaitaccen daidaita adadin lokaci ɗaya na iya inganta haɓakar uwar garken ƙwarai. Yawancin lokaci Apache ɗinmu yana aiki a cikin yanayin mpm_prefork. Muna buƙatar daidaita daidaitattun sigogi da yawa da kyau. Abin da ya kamata mu kula da shi shi ne cewa matsakaicin adadin hanyoyin haɗi kada ya zama ƙarami kaɗan, ƙarami zai sa a ƙi yawan adadin buƙatun mai amfani yayin da daidaituwa ta yi yawa. Valueimar da muka saita mai kyau ya kamata ya koma zuwa CPU da ƙwaƙwalwar uwar garke .. Matukar dai albarkatun sun isa, ya kamata mu sanya shi yadda zai yiwu, amma idan muka saita shi da yawa, albarkatun uwar garken zasu ƙare kuma Apache shima zai faɗi.

            <IfModule mpm_prefork_module>
    StartServers         10
    MinSpareServers      25
    MaxSpareServers      50
    ServerLimit          1500
    MaxClients           1000
    MaxRequestsPerChild  3000
</IfModule>
        

Sanya SSL

Yawancin rukunin yanar gizon yanzu suna da SSL don tallafawa HTTPS amintattun haɗi. Amfanin HTTPS shine cewa abun cikin yayin watsawa rufaffen abu ne, don haka babu buƙatar damuwa game da ɓarkewar bayanai saboda kutse daga wasu. Kafin kunna SSL, dole ne mu fara neman takardar shaidar Bayan mun sami takardar shaidar, koma zuwa ga tsari mai zuwa don kammala saitunan SSL.

            <VirtualHost *:443>
    ServerAdmin www.test.com
    ServerName www.testl.com
    DocumentRoot  /var/www/test
    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
    SSLHonorCipherOrder on
    SSLCertificateFile /etc/httpd/conf/cert/public.crt
    SSLCertificateKeyFile /etc/httpd/conf/cert/1533528967430.key
    SSLCertificateChainFile /etc/httpd/conf/cert/chain.crt
    AllowEncodedSlashes on
    <Directory "/var/www/test.com">
         Options FollowSymLinks
         AllowOverride All
         Order allow,deny
         Allow from all
    </Directory>
</VirtualHost>