Apache server configuration overview (1)

Source: Internet
Author: User
Tags types of functions
Apache server configuration overview (1)-Linux Enterprise Application-Linux server application information. For details, see the following section. The configuration file of the Apache server is located in the/usr/local/apache/conf/directory. Traditionally, three configuration files are used: httpd. conf, access. conf and srm. conf to configure the behavior of the Apache server.


Httpd. conf provides the most basic server configuration, which is a technical description of how the daemon httpd runs. srm. conf is the server's resource ing file, which tells the server of the MIME types of various files and how to support these files; access. conf is used to configure Server access permissions and control access restrictions for different users and computers. These three configuration files control all aspects of the server, therefore, to run the Server properly, you need to set these three files.


In addition to these three settings files, Apache uses the mime. types file to identify different files.

For the corresponding MIME type, the magic file sets some special identifiers for different MIME types, so that the Apache server cannot determine the MIME type of the file from the document suffix, the MIME type of a document can be determined by these special tags in the file content.


Bash-2.02 $ ls-l/usr/local/apache/conf

Total 100

-Rw-r -- 1 root wheel 348 Apr 16 16:01 access. conf

-Rw-r -- 1 root wheel 348 Feb 13 access. conf. default

-Rw-r -- 1 root wheel 30331 May 26 08:55 httpd. conf

-Rw-r -- 1 root wheel 29953 Feb 13 httpd. conf. default

-Rw-r -- 1 root wheel 12441 Apr 19 :42 magic

-Rw-r -- 1 root wheel 12441 Feb 13 magic. default

-Rw-r -- 1 root wheel 7334 Feb 13 mime. types

-Rw-r -- 1 root wheel 383 May 13 srm. conf

-Rw-r -- 1 root wheel 357 Feb 13 srm. conf. default


In fact, the current version of Apache will be httpd. conf, srm. conf and access. all configuration parameters in conf are placed in a configuration file httpd. conf only uses three configuration files for compatibility with previous versions (NCSA-httpd is used to use these three configuration files. The access. conf and srm. conf files provided do not have specific settings.


In the new version of Apache, all the settings are placed in httpd. conf, so you only need to adjust the settings in this file. The following uses the httpd. conf provided by default as an example to explain how

Configuration options of the server. However, you don't have to worry about providing too many parameters. Basically

You can run the Apache server without modifying the parameters. However, if you need to adjust the Apache service

You need to understand the meaning of the parameters.


There is a lot of controversy about the performance of Apache servers on the Internet. Basically, users who use Apache have almost no doubt about its excellent performance, apache also supports many well-known high-load websites. However, in the evaluation of commercial organizations, Apache often has a low score. Many people pointed out that in these evaluations, the performance of commercial Web servers and their operating systems is often adjusted by engineers of their professional companies, free operating systems and Web servers often use their default configurations or make minor changes. It should be noted that, apart from the performance adjustment of the operating system, the default configuration of the Apache server itself is by no means optimal and most efficient, however, to adapt to the configurations of almost all types of operating systems and all types of hardware, multi-platform software cannot provide optimal default configurations for specific platforms and hardware. Therefore, performance adjustment is essential when Apache is used.


Another fact ignored in business evaluation is that different types of functions are often compared during evaluation.

For example, the performance of the Standard CGI of Apache is compared with that of ISAPI, NSAPI, and other server-side APIs. In fact, Apache servers can be compared with modperl, FastCGI, functions similar to ASP are PHP, but because of Apache's open mode, these functions are implemented by independent development groups as independent modules. However, during the evaluation, the tester did not add a corresponding module to evaluate its performance.


Running Parameters of the HTTP daemon


Httpd. conf defines the parameters required by the httpd daemon to determine the running mode and environment.


ServerType standalone

ServerType defines the server startup mode. The default value is standalone and httpd.

The server will be started by itself and will reside in the host to monitor connection requests. In Linux, the Web server will be automatically started in the startup file/etc/rc. d/rc. local/init. d/apache. This method is recommended.

An inet method is another way to start the Apache server. The super server inetd is used to monitor connection requests and start the server. When you need to use the inetd startup method, you need to change it to this setting and block/etc/rc. d/rc. local/init. d/apache file, and change/etc/inetd. conf and restart inetd, then Apache can start from inetd.

The difference between the two methods is that the independent method is to manage the Startup Process of the server itself, so that

When the server is activated, multiple copies of the server can be started immediately. Each copy is stored in the memory. A connection request can be processed immediately without the need to generate a sub-process, faster response to client browser requests and better performance

High. The inetd method requires inetd to start the http server only after detecting a connection request. Because inetd needs to listen to too many ports, the response is slow and the efficiency is low, however, this saves the resources occupied by the Web server when no connection request is available. Therefore, the inetd method is only used on servers that are occasionally accessed and do not require access speed. In fact, the inetd method is not suitable for http burst and multi-connection features, because a page may contain multiple images, and each image will cause a connection request, even though the number of visitors causes less teaching, however, there are many transient connection requests, which are limited by the inetd performance and may even affect other server programs started by inetd.


ServerRoot "/usr/local"

ServerRoot is used to specify the running directory of the daemon httpd. After httpd is started

The current directory of the process is changed to this directory. Therefore, if the file or directory specified in the file is a relative path, the actual path is located under the path defined by ServerRoot.

Because httpd often performs concurrent file operations, it is necessary to use the locking method to ensure that file operations do not conflict. Due to the limited file lock capabilities of the NFS file system, therefore, this directory should be a local disk file system instead of an NFS file system.


# LockFile/var/run/httpd. lock

The LockFile parameter specifies the lock file of the httpd daemon. Generally, you do not need to set this parameter. The Apache server will automatically perform operations in the path under ServerRoot. However, if ServerRoot is an NFS file system, you need to use this parameter to specify the path in the local file system.


PidFile/var/run/httpd. pid

The process Number of the httpd daemon is recorded in the file specified by PidFile. Because httpd can automatically copy itself, there are multiple httpd processes in the system, but only one process is the process initially started, it is the parent process of other processes. sending signals to this process affects all httpd processes. The process Number of the httpd parent process is recorded in the file defined by PidFILE.


ScoreBoardFile/var/run/httpd. scoreboard

Httpd uses ScoreBoardFile to maintain internal data of a process. Therefore, you do not need to change this parameter unless the administrator wants to run several Apache servers on a computer, at this time, each Apache server requires an independent configuration file htt pd. conf, and use different ScoreBoardFile.


# ResourceConfig conf/srm. conf

# AccessConfig conf/access. conf

The two parameters ResourceConfig and AccessConfig are used to be compatible with the old version of Apache that uses the srm. conf and access. conf file. If there is no compatibility requirement, you can specify the corresponding setting file as/dev/null. This indicates that no other setting file exists and only httpd is used. conf file to save all the settings.


Timeout 300

Timeout defines the Timeout interval between the client program and the server. After the Timeout interval (in seconds) is exceeded, the server will be disconnected from the client.


KeepAlive On

In HTTP 1.0, only one HTTP request can be transmitted over one connection, while the KeepAlive parameter is used to support one connection and multiple transmission functions in HTTP 1.1, in this way, multiple HTTP requests can be transmitted in a connection. Although this function is only supported by newer browsers, this option is still enabled.


MaxKeepAliveRequests 100

MaxKeepAliveRequests is the maximum number of HTTP requests that a connection can perform. Set

If the value is set to 0, infinite transmission requests can be made in one connection. In fact, no client program requests too many pages in a single connection. Generally, the connection is completed if this limit is not reached.


KeepAliveTimeout 15

KeepAliveTimeout test the time between multiple requests in a connection. If the server

A request has been completed, but the next request of the customer program has not been received. The interval exceeds

After this parameter is set, the server will be disconnected.

MinSpareServers 5 MaxSpareServers 10

On the Web server that uses a sub-process to process HTTP requests, the response time is delayed because the sub-process must be generated first to process the customer's requests. However, the Apache server uses a special technique to get rid of this problem. This means that multiple idle sub-processes are generated in advance and reside in the system. Once a request appears, immediately use these idle sub-processes for processing, so that there is no latency caused by the generation of sub-processes. As client requests increase, the number of sub-processes started increases. However, these server copies do not exit immediately after an HTTP request is processed, instead, wait in the computer for the next request. However, the number of idle sub-process Replicas cannot be increased or decreased. Too many idle sub-processes do not process tasks and occupy the server's processing capabilities. Therefore, the number of idle copies must be limited, maintain a proper number of processes so that you can respond to customer requests in a timely manner and reduce the number of unnecessary processes.

Therefore, you can use the MinSpareServers parameter to set the minimum number of idle sub-processes and

Use the MaxSpareServers parameter to limit the maximum number of idle sub-processes. Redundant server process copies will exit. Set according to the actual situation of the server. If the server performance is high

If these parameters are frequently accessed, you must increase the settings of these two parameters. For high-load professional websites, these two values

It should be roughly the same, and is equivalent to the maximum number of server copies supported by the system, and also reduces unnecessary secondary

Log out.


StartServers 5

The StartServers parameter is used to set the number of subprocess replicas started at httpd startup. this parameter is related to the MinSpareServers and MaxSpareServers parameters defined above, it is used to start idle sub-processes to speed up server response. This parameter should be set to a value between the first two values, which is less than MinSpareServers and greater than MaxS pareServers.


MaxClients 150

On the other hand, the server's capabilities are limited after all, and it is impossible to process unlimited connections at the same time.

Therefore, the Maxclient s parameter is used to specify the maximum number of concurrent clients supported by the server. If this value is set too large, when the system is busy, it has to switch between too many processes to serve too many customers. This slows down the response to each customer and reduces the overall efficiency. If this value is set to a small value, some customer connection requests will be rejected when the system is busy. When the server performance is high, you can add this setting as appropriate. For professional websites, the policy to improve server efficiency should be used. Therefore, this parameter cannot exceed the hardware limit. If access is frequently denied, the server hardware needs to be upgraded. For non-professional websites, users are not very concerned about the response speed to the customer's browser, or think that the response speed is slower than that of the rejected connection. This parameter can also be set slightly beyond the hardware conditions.

This parameter limits the settings of MinSpareServers and MaxSpareServers.

.


MaxRequestsPerChild 30

A sub-process is a commonly used method for providing Web services. A sub-process is a connection service, the problem is that each connection requires system operations to generate and exit sub-processes, so that these additional processes occupy a large amount of processing capabilities of the computer. Therefore, the best way is that a sub-process can connect to the service for multiple times, so that the system consumption of the generated and exited processes is not required. Apache uses this method. After a connection is completed, the sub-process does not exit, but stays in the system waiting for the next service request, which greatly improves the performance.

However, due to the constant application and release of memory by the neutron process during the processing process, an increase in the number of times will cause

Some memory spam will affect the system stability and the effective use of system resources. Therefore, after a replica processes requests for a certain number of times, the child process can be exited and then exited from the original

Re-copy a clean copy in the httpd process to improve system stability. In this way, each

The number of service requests processed by sub-processes is defined by MaxRe questPerChild. The default value is 30,

This value is too conservative for Linux systems with high stability. It can be set to 1000 or higher, and 0 to support unlimited service processing for each copy.


# Listen 3000.

# Listen 12.34.56.78: 80

# BindAddress *

The Listen parameter can be used to specify the server to monitor port 80

HTTP request. Because the FreeBSD system can have multiple IP addresses at the same time, you can also specify that the server only listens to HTTP requests from the IP address of a BindAddress. If this item is not configured, the server will respond to requests from all IP addresses.

Even if the BindAddress parameter is used, the server can only respond to requests from one IP address. However, by using the extended Listen parameter, the HTTP daemon can still respond to requests from other IP addresses. In this case, the Listen parameter is used in the same way as the second example above. This complex usage is mainly used to set up virtual hosts. The VirtualHost parameter can be used to define virtual hosts with different IP addresses. However, this method is used to set virtual hosts in the earlier HTTP 1.0 standard. Each virtual host requires an IP address, in fact, it is not very useful. In HTTP 1.1, the support for single-IP multi-domain virtual hosts is added, making the virtual host settings more meaningful.


LoadModule mime_magic_module libexec/apache/mod_mime_magic.so

LoadModule info_module libexec/apache/mod_info.so

LoadModule speling_module libexec/apache/mod_speling.so

LoadModule proxy_module libexec/apache/libproxy. so

LoadModule rewrite_module libexec/apache/mod_rewrite.so

LoadModule anon_auth_module libexec/apache/mod_auth_anon.so

LoadModule db_auth_module libexec/apache/mod_auth_db.so

LoadModule digest_module libexec/apache/mod_digest.so

LoadModule cern_meta_module libexec/apache/mod_cern_meta.so

LoadModule expires_module libexec/apache/mod_expires.so

LoadModule headers_module libexec/apache/mod_headers.so

LoadModule usertrack_module libexec/apache/mod_usertrack.so

LoadModule unique_id_module libexec/apache/mod_unique_id.so


ClearModuleList

AddModule mod_env.c

AddModule mod_log_config.c

AddModule mod_mime_magic.c

AddModule mod_mime.c

AddModule mod_negotiation.c

AddModule mod_status.c

AddModule mod_info.c

AddModule mod_include.c

AddModule mod_autoindex.c

AddModule mod_dir.c

AddModule mod_cgi.c

AddModule mod_asis.c

AddModule mod_imap.c

AddModule mod_actions.c

AddModule mod_speling.c

AddModule mod_userdir.c

AddModule mod_proxy.c

AddModule mod_alias.c

AddModule mod_rewrite.c

AddModule mod_access.c

AddModule mod_auth.c

AddModule mod_auth_anon.c

AddModule mod_auth_db.c

AddModule mod_digest.c

AddModule mod_cern_meta.c

AddModule mod_expires.c

AddModule mod_headers.c

AddModule mod_usertrack.c

AddModule mod_unique_id.c

AddModule mod_so.c

AddModule mod_setenvif.c


An important feature of Apache server is its modular structure, which not only shows that it can compile

New functions can be added through the new module during translation. It also shows that the module can dynamically load http service processes.

It does not need to load unnecessary modules. To use the Dynamic loading Module of Apache, you only need to set the Load Module and AddModule parameters. This feature is the DSO (Dynamic Shared Object) feature of Apache, however, to make full use of the DSO feature is still not a simple task. Modifying the settings here may cause the server to fail to start normally. Therefore, if you do not want to add or reduce the features provided by the server, do not change the settings here.


The list above shows the modules supported by the default Apache server in Linux.

Multi-module is unnecessary, and unnecessary modules are not loaded into the memory. The module can be statically connected to the pache server, or dynamically loaded in this way. This Port is used to compile all Apache features into dynamic and loadable modules, rather than the default Apache approach, in this way, at the expense of a small amount of performance, it brings great flexibility.


Therefore, the ability to dynamically load has a slight impact on performance. Therefore, you can re-compile Apache and compile the functions you need into the Apache server to make the system clean, the efficiency has also been slightly improved. It is not necessary to recompile Apache for this purpose only. If you need to add other features and re-compile Apache, when adding other modules, you may wish to statically connect all modules to the Apache server. Some users prefer Dynamic Loading modules.


These modules are placed in the/usr/local/apache/libexec/directory, and each module corresponds to a feature of the Apache server. A detailed explanation of the functions of each module requires a considerable amount of space. The more important features will be explained in the following sections, for specific functions and usage of each module, You need to view the Apache documentation.


# ExtendedStatus On

The Apache server can report its running status through a special HTTP request.

The ExtendedStatus parameter allows the server to report more comprehensive running status information.
Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.