Isa Apache pane CentOS7

Zvepamutemo mareferenzi

Ita kumisikidza

            yum -y install libmcrypt libmcrypt-devel mcrypt mhash
yum -y install httpd
        

Chinja faira rekumisikidza

Mushure mekumisikidza kwapera, tinofanirwa kugadzirisa zvimwe kufaira rekumisikidza. Izvo zvakasarudzika zvemukati zvinowanzo sanganisira: yakasungwa IP uye chiteshi, gzip kudzvanya kutapurirana, huwandu hwekubatana panguva imwe chete, uye SSL. Ngatitsanangurei imwe neimwe pazasi.

Chinja iyo yakasungwa IP uye chiteshi

Iyo yakasarudzika IP uye chiteshi icho Apache inoteerera kune iri 0.0.0.0:80. Kana isu tichida kugadzirisa iyo yakaongororwa IP uye chiteshi, tinogona kuzvishandura zvakananga. Kana isu tichida kusunga akawanda madoko, tinogonawo kuwedzera iwo. Mumuenzaniso unotevera, tinosunga zviteshi 80 uye 443. Port 443 ndiyo default port nhamba yeHTTPS.

            Listen 80
Listen 443 https
        

Vhura gzip kutapurirana

Nekuti macomputer edu eCPU mashandiro anenge akareba, kazhinji bhodhoro rinowoneka mu network bandwidth, saka tinogona kusarudza kubatidza gzip kudzvanya kutapurirana. Pane zvikamu gumi nepfumbamwe zvekumanikidza.Tinogona kusarudza zvinoenderana nekuita kweseva yedu uye nekuwana yakanyanya kukodzera nhanho. Mumuenzaniso pazasi, isu takaiisa padanho rekutanga. Iwo akamanikidzwa mafaira emhando ndeaya: html, xml, php, css, js, tinokwanisa zvakare kuwedzera mhando dzakamanikidzwa faira sezviri kudikanwa.

            <IfModule mod_deflate.c>
    DeflateCompressionLevel 1
    AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript application/x-httpd-php
    AddOutputFilter DEFLATE js css
</IfModule>
        

Seta KeepAlive

Basa reKearAlive nderekuchengetedza mutengi uye sevha zvakabatana kwenguva yakati. Patinovhura peji rewebhu, isu tinowanzoda kurodha zvirimo, js, css, uye mifananidzo.Sezvo zviwanikwa zvese zvichida kutanga chikumbiro chakasiyana cheHTTP, tinogonesa KeepAlive kudzikisa nguva inodiwa pachikumbiro chega chega chekumisikidza TCP / IP chinongedzo. Asi KeepAlive zvakare ine zvayakanakira.Ichakonzera kuti server zviwanikwa zviwanikwa zvigare, saka isu tinofanirwa kusarudza kuti tigone kuita KeepAlive zvinoenderana nemamiriro chaiwo. Kana KeepAlive yakagoneswa, isu tinodawo kumisikidza nguva yakaringana kuti inge ichidzivirira server IO kugara kwenguva refu. Muenzaniso unotevera une akati wandei marongero makuru eKearAlive.

            KeepAlive On
MaxKeepAliveRequests 400
KeepAliveTimeout 5
        

Gadzira iyo nhamba yezvakafanana

Kugadziriswa kunonzwisisika kwenhamba yezvimwe chete kunogona kuvandudza zvakanyanya kubudikidza neserura. Kazhinji yedu Apache inoshanda mu mpm_prefork modhi. Isu tinofanirwa kumisikidza zvine mutsindo akati wandei ma parameter akakosha. Chatinofanira kutarisisa ndechekuti huwandu hwakanyanya hwekubatanidza haufanire kuve hwakanyanya kushoma, hushoma huchaita kuti nhamba yakakura yezvikumbiro zvevashandisi irambwe kana concurrency yakakwira. Kukosha kwakaringana kwatinoisa kunofanirwa kureva iyo CPU ye server uye ndangariro. Chero bedzi zviwanikwa zvaringana, tinofanirwa kuzvimisikidza zvakakura sezvazvinogona, asi kana tikazvimisikidza zvakakura kwazvo, zviwanikwa zvevhavha zvinopera uye Apache ichapunzikawo.

            <IfModule mpm_prefork_module>
    StartServers         10
    MinSpareServers      25
    MaxSpareServers      50
    ServerLimit          1500
    MaxClients           1000
    MaxRequestsPerChild  3000
</IfModule>
        

Gadzira SSL

Mazhinji mawebhusaiti izvozvi ane SSL inogoneswa kutsigira HTTPS yakachengeteka kubatana. Iko kunakirwa kweHTTPS ndeyekuti izvo zvirimo panguva yekutapurirana zvakavharidzirwa, saka hapana chikonzero chekushushikana nezve ruzivo rwekudonha nekuda kwekubatikidzwa nevamwe. Tisati tagonesa SSL, tinofanirwa kutanga tanyorera chitupa. Mushure mekutora chitupa, tarisa kune inotevera gadziriso kupedzisa iyo SSL marongero.

            <VirtualHost *:443>
    ServerAdmin www.test.com
    ServerName www.testl.com
    DocumentRoot  /var/www/test
    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
    SSLHonorCipherOrder on
    SSLCertificateFile /etc/httpd/conf/cert/public.crt
    SSLCertificateKeyFile /etc/httpd/conf/cert/1533528967430.key
    SSLCertificateChainFile /etc/httpd/conf/cert/chain.crt
    AllowEncodedSlashes on
    <Directory "/var/www/test.com">
         Options FollowSymLinks
         AllowOverride All
         Order allow,deny
         Allow from all
    </Directory>
</VirtualHost>