Ikani Apache pa CentOS7

Kutchulidwa kovomerezeka

Pangani unsembe

            yum -y install libmcrypt libmcrypt-devel mcrypt mhash
yum -y install httpd
        

Sinthani fayilo yosintha

Pambuyo pomaliza kukonza, tifunika kupanga zosintha mu fayilo yosintha. Zosinthidwazo nthawi zambiri zimaphatikizapo: IP yomangika ndi doko, kufalikira kwa gzip, kuchuluka kwa kulumikizana nthawi imodzi, ndi SSL. Tiyeni tiwafotokozere m'modzi m'munsimu.

Sinthani IP yomangika ndi doko

IP yosasinthika ndi doko lomwe Apache amamvera ndi 0.0.0.0:80. Ngati tikufuna kusintha IP yoyang'aniridwa ndi doko, titha kuzisintha mwachindunji. Ngati tikufuna kumanga madoko angapo, titha kuwonjezeranso. Mu chitsanzo chotsatira, timamanga madoko 80 ndi 443. Port 443 ndiye nambala yosasinthika ya doko la HTTPS.

            Listen 80
Listen 443 https
        

Tsegulani kufalikira kwa gzip

Chifukwa makina athu a CPU ndiwokwera kwambiri, nthawi zambiri botolo limawonekera pa bandwidth, kotero titha kusankha kutsegula gzip compression transmission. Pali mitundu ingapo ya kuponderezana 9. Titha kusankha molingana ndi magwiridwe antchito a seva yathu ndikupeza mulingo woyenera kwambiri. Mu chitsanzo chili pansipa, tidachiyika pamlingo woyamba. Mitundu yamafayilo opanikizika ndi awa: html, xml, php, css, js, titha kuwonjezera mitundu yamafayilo omwe amafunika pakufunika.

            <IfModule mod_deflate.c>
    DeflateCompressionLevel 1
    AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript application/x-httpd-php
    AddOutputFilter DEFLATE js css
</IfModule>
        

Khazikitsani KeepAlive

Ntchito ya KeepAlive ndiyo kusunga kasitomala ndi seva yolumikizidwa kwakanthawi. Tikatsegula tsamba lawebusayiti, nthawi zambiri timafunikira kutsegula zomwe zili, js, css, ndi zithunzi.Pakuti chida chilichonse chimafunikira kuyambitsa pempho la HTTP, timatha kukhala ndi KeepAlive kuti ichepetse nthawi yofunikira pempho lililonse kuti likhazikitse ulalo wa TCP / IP. Koma KeepAlive ilinso ndi zovuta zina. Idzapangitsa kuti zida za IO za seva zizitanganidwa, chifukwa chake tiyenera kusankha ngati tikufuna KeepAlive malinga ndi momwe zinthu ziliri. Ngati KeepAlive ndiyotheka, tifunikanso kuyika nthawi yoyenera kuti tipewe seva IO kukhala nthawi yayitali. Chitsanzo chotsatirachi chili ndi mawonekedwe angapo a KeepAlive.

            KeepAlive On
MaxKeepAliveRequests 400
KeepAliveTimeout 5
        

Konzani nambala yofanana

Kusintha koyenera kwa kuchuluka kwa nthawi imodzi kumatha kusintha kwambiri seva. Nthawi zambiri Apache athu amagwira ntchito mu mpm_prefork mode. Tiyenera kukhazikitsa magawo angapo ofunikira. Zomwe tikufunika kuzisamalira ndikuti kulumikizana kwakukulu sikuyenera kukhala kocheperako, kocheperako kumapangitsa kuti ogwiritsa ntchito ambiri akanidwe pomwe concurrency ikukwera. Mtengo woyenera womwe timakhazikitsa uyenera kutanthauza CPU ndi kukumbukira kwa seva. Malingana ngati zothandizira zili zokwanira, tiyenera kuziyika zazikulu momwe zingathere, koma ngati titaziyika zazikulu kwambiri, zinthu zapa seva zidzatha ndipo Apache nawonso adzawonongeka.

            <IfModule mpm_prefork_module>
    StartServers         10
    MinSpareServers      25
    MaxSpareServers      50
    ServerLimit          1500
    MaxClients           1000
    MaxRequestsPerChild  3000
</IfModule>
        

Konzani SSL

Mawebusayiti ambiri tsopano ali ndi SSL yothandizira kuthandizira kulumikizana kotetezeka kwa HTTPS. Ubwino wa HTTPS ndikuti zomwe zimafotokozedwazo zimasimbidwa, chifukwa chake palibe chifukwa chodandaulira za kutayika kwazidziwitso chifukwa chododometsedwa ndi ena. Tisanayambe SSL, choyamba tiyenera kufunsira chiphaso. Tikalandira satifiketi, yang'anani zosintha izi kuti mumalize zosintha za SSL.

            <VirtualHost *:443>
    ServerAdmin www.test.com
    ServerName www.testl.com
    DocumentRoot  /var/www/test
    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
    SSLHonorCipherOrder on
    SSLCertificateFile /etc/httpd/conf/cert/public.crt
    SSLCertificateKeyFile /etc/httpd/conf/cert/1533528967430.key
    SSLCertificateChainFile /etc/httpd/conf/cert/chain.crt
    AllowEncodedSlashes on
    <Directory "/var/www/test.com">
         Options FollowSymLinks
         AllowOverride All
         Order allow,deny
         Allow from all
    </Directory>
</VirtualHost>