Shyira Apache kuri CentOS7

Ibisobanuro

Kora installation

            yum -y install libmcrypt libmcrypt-devel mcrypt mhash
yum -y install httpd
        

Hindura dosiye

Nyuma yo kwishyiriraho birangiye, dukeneye guhindura bimwe mubisobanuro dosiye. Ibintu byihariye byo guhindura mubisanzwe birimo: guhuza IP hamwe nicyambu, ihererekanyabubasha rya gzip, umubare wibihuza, hamwe na SSL. Reka tubasobanurire umwe umwe hepfo.

Hindura IP hamwe nicyambu

Mburabuzi IP nicyambu Apache yumva ni 0.0.0.0:80. Niba dukeneye guhindura IP ikurikiranwa hamwe nicyambu, turashobora kubihindura muburyo butaziguye. Niba dukeneye guhuza ibyambu byinshi, dushobora no kubyongera. Murugero rukurikira, duhuza ibyambu 80 na 443. Port 443 numero yicyambu isanzwe kuri HTTPS.

            Listen 80
Listen 443 https
        

Fungura ihererekanyabubasha

Kuberako imikorere ya CPU ya mudasobwa yacu iri hejuru cyane, mubisanzwe icyuho kizagaragara mumurongo mugari, kuburyo dushobora guhitamo gufungura gzip compression yoherejwe. Hano hari urwego 9 rwo kwikuramo. Turashobora guhitamo dukurikije imikorere ya seriveri yacu hanyuma tugashaka urwego rukwiye. Murugero rukurikira, twashizeho kurwego rwa 1. Ubwoko bwa dosiye zifunitse ni: html, xml, php, css, js, dushobora kandi kongeramo ubwoko bwa dosiye zifunitse nkuko bikenewe.

            <IfModule mod_deflate.c>
    DeflateCompressionLevel 1
    AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript application/x-httpd-php
    AddOutputFilter DEFLATE js css
</IfModule>
        

Shiraho Komeza

Igikorwa cya KeepAlive nugukomeza umukiriya na seriveri mugihe runaka. Iyo dufunguye urubuga, mubisanzwe dukenera gupakira ibintu byingenzi, js, css, namashusho.Kuko buri soko ikeneye gutangiza icyifuzo cya HTTP gitandukanye, dushoboza KeepAlive kugabanya igihe gikenewe kuri buri cyifuzo cyo gushiraho umurongo wa TCP / IP. Ariko KeepAlive nayo ifite ibibi.Bizatera seriveri ya IO ibikoresho, bityo rero dukeneye guhitamo niba ushobora gukora KeepAlive ukurikije uko ibintu bimeze. Niba KeepAlive ishoboye, dukeneye kandi gushyiraho igihe cyateganijwe kugirango twirinde seriveri IO itwarwa igihe kirekire. Urugero rukurikira rurimo ibice byinshi byingenzi bya KeepAlive.

            KeepAlive On
MaxKeepAliveRequests 400
KeepAliveTimeout 5
        

Hindura umubare wahujwe

Iboneza ryumvikana ryumubare uhuriweho urashobora kunoza cyane kwinjiza seriveri. Mubisanzwe Apache yacu ikora muburyo bwa mpm_prefork. Tugomba gushyira mu gaciro ibice byinshi byingenzi. Icyo dukeneye kwitondera nuko umubare ntarengwa wihuza utagomba kuba muto cyane, muto cyane bizatera umubare munini wabakoresha basaba kwangwa mugihe ihuriweho ari ryinshi. Agaciro keza dushyizeho kagomba kwerekeza kuri seriveri ya CPU hamwe nububiko.Igihe cyose ibikoresho birahagije, tugomba kubishyiraho binini bishoboka, ariko nitubishyiraho binini cyane, ibikoresho bya seriveri bizashira kandi Apache nayo izahanuka.

            <IfModule mpm_prefork_module>
    StartServers         10
    MinSpareServers      25
    MaxSpareServers      50
    ServerLimit          1500
    MaxClients           1000
    MaxRequestsPerChild  3000
</IfModule>
        

Hindura SSL

Imbuga nyinshi ubu zifite SSL zifasha gushyigikira HTTPS ihuza umutekano. Ibyiza bya HTTPS nuko ibikubiye mugihe cyo kohereza byabitswe, bityo rero ntampamvu yo guhangayikishwa no kumeneka amakuru kubera gufatwa nabandi. Mbere yo gushoboza SSL, tugomba kubanza gusaba icyemezo. Tumaze kubona icyemezo, reba iboneza bikurikira kugirango urangize igenamiterere rya SSL.

            <VirtualHost *:443>
    ServerAdmin www.test.com
    ServerName www.testl.com
    DocumentRoot  /var/www/test
    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
    SSLHonorCipherOrder on
    SSLCertificateFile /etc/httpd/conf/cert/public.crt
    SSLCertificateKeyFile /etc/httpd/conf/cert/1533528967430.key
    SSLCertificateChainFile /etc/httpd/conf/cert/chain.crt
    AllowEncodedSlashes on
    <Directory "/var/www/test.com">
         Options FollowSymLinks
         AllowOverride All
         Order allow,deny
         Allow from all
    </Directory>
</VirtualHost>