Whakauruhia a Apache ki CentOS7

Tohutoro mana

Mahia te whakauru

            yum -y install libmcrypt libmcrypt-devel mcrypt mhash
yum -y install httpd
        

Whakakētia te konae whirihoranga

I muri i te otinga o te whakauru, me whakarereke e tatou te konae whirihoranga. Ko nga korero whakarereke motuhake kei roto ko te: IP herea me te tauranga, ko te gzip compression transmission, te maha o nga hononga honohono, me te SSL. Me whakamarama takitahi e maatau i raro.

Whakakētia te IP here me te tauranga

Ko te IP taunoa me te tauranga e whakarongo ana a Apache ko te 0.0.0.0:80. Mena me whakarereke te IP aroturukihia me te tauranga, ka taea e taatau te whakarereke tika. Mena me here e tatou nga tauranga maha, ka taea hoki e taatau te taapiri. I roto i te tauira e whai ake nei, ka herea e maatau nga tauranga 80 me 443. Ko te Tauranga 443 te nama tauranga taunoa mo HTTPS.

            Listen 80
Listen 443 https
        

Tuwherahia te whakawhitinga gzip

Na te mea he tiketike rawa te mahinga PTM a taatau rorohiko, ko te tikanga ka puta te pounamu i te peenewhanui whatunga, kia taea ai e taatau te whiriwhiri ki te whakaweto i te whakawhitinga koputatanga gzip. E 9 nga taumata o te pehanga. Ka taea e taatau te tohu kia rite ki nga mahi a ta tatou kaituku me te kimi i te taumata e tika ana. I roto i te tauira i raro ake nei kua whakaritea e maatau ki te taumata 1. Ko nga momo konae kohinga: html, xml, php, css, js, ka taea hoki e taatau te taapiri i nga momo konae ka hiahiatia ana.

            <IfModule mod_deflate.c>
    DeflateCompressionLevel 1
    AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript application/x-httpd-php
    AddOutputFilter DEFLATE js css
</IfModule>
        

Whakaritehia te KeepAlive

Ko te mahi a KeepAlive he hono tonu ki te kaihoko me te kaitoha mo etahi wa. Ka whakatuwherahia e maatau tetahi whaarangi paetukutuku, me uta nga korero matua, js, css, me nga pikitia. Na te mea ka tiimata te tono HTTP motuhake, ka taea e KeepAlive te whakaiti i te waa e hiahiatia ana mo ia tono ki te whakatu hononga TCP / IP. Engari he ngoikoretanga ano to KeepAlive, maana e riro ai nga rauemi IO o te kaitoha, na me whiriwhiri maatau ka taea te pupuri i a KeepAlive kia rite ki te ahuatanga ake. Mena kua whakahohehia a KeepAlive, me whakarite e tatou he waatea tika kia kore ai e nohoia te kaiwhakarato IO mo te wa roa. Ko te tauira e whai ake nei he maha nga waahanga nui mo KeepAlive.

            KeepAlive On
MaxKeepAliveRequests 400
KeepAliveTimeout 5
        

Whirihorahia te maha o te waatea

Ko te whirihoranga whaitake o te maha o nga wa ka rite ki te whakapai ake i te putanga o te kaituku. I te nuinga o te waa ka mahi to Apache i te momo mpm_prefork. Me tika te whirihora e tatou mo nga waahanga matua. Ko ta tatou me aro atu ko te rahinga hono o nga hononga kaua e iti rawa, no te mea ka iti rawa te maha o nga tono a nga kaiwhakamahi ka paopao ka nui ana te whakaae. Ko te uara whaitake i whakaritea e maatau ma te PTM o te kaitoha me te maumahara. I te mea e rawaka ana nga rauemi, me whakarite e tatou kia taea, engari ki te oti rawa te whakarite, ka pau nga rauemi a te kaituku, ka pakaru ano hoki a Apache.

            <IfModule mpm_prefork_module>
    StartServers         10
    MinSpareServers      25
    MaxSpareServers      50
    ServerLimit          1500
    MaxClients           1000
    MaxRequestsPerChild  3000
</IfModule>
        

Whirihorahia te SSL

Ko te nuinga o nga paetukutuku kua whakahohe SSL ki te tautoko i nga hononga haumaru HTTPS. Ko te painga o HTTPS ko nga korero i te wa o te whakawhiti kua hunahia, na reira kaore he take o te awangawanga mo te turuturu korero na te haukoti a etahi atu. I mua i te whakamanatanga SSL, me tono tuatahi mo te tiwhikete. I muri i te tiwhikete, tirohia te whirihoranga e whai ake nei hei whakaoti i nga tautuhinga SSL.

            <VirtualHost *:443>
    ServerAdmin www.test.com
    ServerName www.testl.com
    DocumentRoot  /var/www/test
    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
    SSLHonorCipherOrder on
    SSLCertificateFile /etc/httpd/conf/cert/public.crt
    SSLCertificateKeyFile /etc/httpd/conf/cert/1533528967430.key
    SSLCertificateChainFile /etc/httpd/conf/cert/chain.crt
    AllowEncodedSlashes on
    <Directory "/var/www/test.com">
         Options FollowSymLinks
         AllowOverride All
         Order allow,deny
         Allow from all
    </Directory>
</VirtualHost>