Wụnye Apache na CentOS7

2021-01-10 CentOS7 Apache HTTPS Gzip

Ntụziaka gọọmentị

Nnọọ weebụsaịtị Akwụkwọ ederede HTTPS Gzip

Mee nhazi

            yum -y install libmcrypt libmcrypt-devel mcrypt mhash
yum -y install httpd

Gbanwee faịlụ nhazi

Mgbe echichi ahụ mechara, anyị kwesịrị ime mgbanwe ụfọdụ na faịlụ nhazi. Ihe mgbanwe ụfọdụ akọwapụtara na-agụnyekarị: agbụ IP na ọdụ ụgbọ mmiri, gzip mkpakọ nnyefe, ọnụ ọgụgụ nke njikọta njikọta, na SSL. Ka anyị kọwaa ha otu otu n’okpuru.

Gbanwee agbụ IP na ọdụ ụgbọ mmiri

IP ndabara na ọdụ ụgbọ mmiri nke Apache na-ege ntị bụ 0.0.0.0:80. Ọ bụrụ na anyị mkpa gbanwee ekwu na IP na ọdụ ụgbọ mmiri, anyị nwere ike gbanwee ya ozugbo. Ọ bụrụ na anyị chọrọ ijikọ ọtụtụ ọdụ ụgbọ mmiri, anyị nwekwara ike ịgbakwunye ha. N'ihe atụ na-esonụ, anyị na-ekekọta ọdụ ụgbọ mmiri 80 na 443. Port 443 bụ nọmba ndabara ọdụ maka HTTPS.

            Listen 80
Listen 443 https

Mepee gzip nnyefe

Ebe ọ bụ na arụmọrụ CPU nke kọmpụta anyị dịtụ elu, ọ na-abụkarị ụkọ ga-apụta na ntanetị bandwidth, yabụ anyị nwere ike ịhọrọ ịgbanye gzip mkpakọ nnyefe. Enwere usoro mkpakọ 9. Anyị nwere ike ịhọrọ dịka arụmọrụ nke sava anyị wee chọta ọkwa kachasị adaba. N'ihe atụ dị n'okpuru, anyị setịpụrụ ya na ọkwa 1. Thedị faịlụ ndị abịakọtara bụ: html, xml, php, css, js, anyị nwekwara ike ịgbakwunye ụdị faịlụ dị iche iche dịka ọ dị mkpa.

            <IfModule mod_deflate.c>
    DeflateCompressionLevel 1
    AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript application/x-httpd-php
    AddOutputFilter DEFLATE js css
</IfModule>

Melite KeepAlive

Ọrụ nke KeepAlive bụ ime ka onye ahịa na ihe nkesa jikọọ maka oge. Mgbe anyị mepere ibe weebụ, anyị na-achọkarị ịbubata isi ọdịnaya, js, css, na foto.N'ihi na akụ ọ bụla chọrọ ịmalite arịrịọ HTTP dị iche, anyị na-eme ka KeepAlive belata oge achọrọ maka arịrịọ ọ bụla iji guzobe njikọ TCP / IP. Mana KeepAlive nwekwara ọghọm.Ọ ga - eme ka ihe onwunwe IO nke ihe nkesa ahụ nọrọ, yabụ anyị kwesịrị ịhọrọ ma ọ ga - enyere KeepAlive aka dịka ọnọdụ ahụ si dị. Ọ bụrụ na enyere KeepAlive aka, anyị kwesiri ịtọpụ oge kwesịrị ekwesị maka ya iji zere ihe nkesa IO ka ọ nọrọ ruo ogologo oge. Ihe atụ na-esonụ nwere ọtụtụ isi ntọala nke KeepAlive.

            KeepAlive On
MaxKeepAliveRequests 400
KeepAliveTimeout 5

Hazie ọnụ ọgụgụ nke otu oge

Nhazi ezi uche dị na ọnụọgụ nke ọnụ ọgụgụ nwere ike imeziwanye ihe nkesa nke ihe nkesa ahụ. Abụkarị Apache anyị na-arụ ọrụ na ọnọdụ mpm_prefork. Anyị kwesịrị ezi uche hazi ọtụtụ isi parameters. Ihe anyị kwesịrị ị attentiona ntị bụ na ọnụ ọgụgụ kachasị nke njikọ ekwesịghị ịbụ obere, obere ga-eme ka a jụ ọnụ ọgụgụ dị ukwuu nke ndị ọrụ na-arịọ mgbe nkwenye dị elu. Ezigbo uru anyị setịpụrụ kwesịrị ịzo aka na CPU na ebe nchekwa ahụ ọ bụrụhaala na akụrụngwa ezuola, anyị kwesịrị ịtọ ya ka o kwere mee, mana ọ bụrụ na anyị tinye ya oke, ihe nkesa ga-agwụ ma Apache ga-adakwa.

            <IfModule mpm_prefork_module>
    StartServers         10
    MinSpareServers      25
    MaxSpareServers      50
    ServerLimit          1500
    MaxClients           1000
    MaxRequestsPerChild  3000
</IfModule>

Hazie SSL

Imirikiti ebe nrụọrụ weebụ enyerela SSL aka ugbu a iji kwado njikọ HTTPS. Uru HTTPS bụ na ọdịnaya dị n'oge nnyefe ezoro ezo, yabụ ọ dịghị mkpa ichegbu onwe gị banyere ụcha ozi n'ihi na ndị ọzọ na-egbochi gị. Tupu anyị mee SSL, anyị ga-ebu ụzọ tinye akwụkwọ maka asambodo Mgbe anyị nwetara asambodo ahụ, gaa na nhazi ndị a iji mezue ntọala SSL.

            <VirtualHost *:443>
    ServerAdmin www.test.com
    ServerName www.testl.com
    DocumentRoot  /var/www/test
    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
    SSLHonorCipherOrder on
    SSLCertificateFile /etc/httpd/conf/cert/public.crt
    SSLCertificateKeyFile /etc/httpd/conf/cert/1533528967430.key
    SSLCertificateChainFile /etc/httpd/conf/cert/chain.crt
    AllowEncodedSlashes on
    <Directory "/var/www/test.com">
         Options FollowSymLinks
         AllowOverride All
         Order allow,deny
         Allow from all
    </Directory>
</VirtualHost>