Apache Performance Tuning Forewarning: “Premature optimization is the root of all evil.” — Donald Knuth. Select MPM Chose the right MPM for the right job: prefork [default MPM for Apache 2.0 and 1.3]: • Apache 1.3-based. • Multiple processes, 1 thread per process, processes handle requests. • Used for security and stability. • Has higher […]
1. Apache server performance Apache server performance can be improved by adding additional hardware resources such as RAM, faster CPU etc. But, most of the time, the same result can be achieved by custom configuration of the server. This article looks into getting maximum performance out of Apache with the existing hardware resources, specifically on […]
Hardening guide for Apache From: ServerSignature OnTo: ServerSignature Off HostnameLookups Off From: # ServerTokensTo: ServerTokens Prod From: ServerAdmin you@yourhost.comTo: ServerAdmin webmaster@yourcompany.com From: LogLevel warnTo: LogLevel notice From: IndexOptions FancyIndexing VersionSortTo: # IndexOptions FancyIndexing VersionSort # To: # AddIcon From: DefaultIcon /icons/unknown.gifTo: # DefaultIcon /icons/unknown.gif From: Alias /icons/ “/var/apache2/icons/”To: # Alias /icons/ “/var/apache2/icons/” From: AliasMatchTo: # […]
Apache capacity planning LogFormat “%{X-Forwarded-For}i %l %u %t \”%r\” %>s %b \”%{Referer}i\” \”%{User-Agent}i\”” proxy SetEnvIf X-Forwarded-For “^.*\..*\..*\..*” forwarded CustomLog “logs/access_log” combined env=!forwarded CustomLog “logs/access_log” proxy env=forwarded The apache MPM http://articles.slicehost.com/2010/5/19/configuring-the-apache-mpm-on-centos http://www.howtoforge.com/configuring_apache_for_maximum_performance The apache MPM Part of the apache web server installation is the “MPM”, which stands for “Multi-Processing Method”. The MPM determines the mechanism apache […]
Extending Swap on an LVM2 Logical Volume 1)Check swap space and its utilization cat /proc/swaps # free 2) Scan (all disks) for Logical Volumes lvscan [root@localhost ~]# lvscan ACTIVE ‘/dev/VolGroup/lv_root’ [47.44 GiB] inherit ACTIVE ‘/dev/VolGroup/lv_home’ [46.19 GiB] inherit ACTIVE ‘/dev/VolGroup/lv_swap’ [5.88 GiB] inherit 3) Disable devices and files for paging and swapping swapoff -v /dev/VolGroup/lv_swap […]
Reducing Swap on an LVM2 Logical Volume 1) Check swap space and its utilization cat /proc/swaps # free 2) Scan (all disks) for Logical Volumes lvscan [root@localhost ~]# lvscan ACTIVE ‘/dev/VolGroup/lv_root’ [47.44 GiB] inherit ACTIVE ‘/dev/VolGroup/lv_home’ [46.19 GiB] inherit ACTIVE ‘/dev/VolGroup/lv_swap’ [5.88 GiB] inherit 3) Disable devices and files for paging and swapping swapoff -v […]
Centos 6 SFTP chroot Jail User and Group setup First you will want to establish the sftponly group groupadd sftponly Then create the user with the correct home directories and group useradd -d /var/www/vhosts/bob -s /bin/false -G sftponly bob Don’t forget at this point to also add password to these new accounts. SSHd configuration changes […]
CentOS – Install and Configure Shorewall Add repository EPEL that is provided from Fedora project. wget http://ftp.riken.jp/Linux/fedora/epel/RPM-GPG-KEY-EPEL-6 rpm –import RPM-GPG-KEY-EPEL-6 rm -f RPM-GPG-KEY-EPEL-6 vi /etc/yum.repos.d/epel.repo # create new [epel] name=EPEL RPM Repository for Red Hat Enterprise Linux baseurl=http://ftp.riken.jp/Linux/fedora/epel/6/$basearch/ gpgcheck=1 enabled=0 # when you use the repository, input yum command like follows yum –enablerepo=epel install shorewall […]
Configure Advanced Policy-based Firewall (APF), Brute Force Detection (BFD), DDoS Deflate Advanced Policy Firewall Description: Advanced Policy Firewall (APF) is an iptables(netfilter) based firewall system designed around the essential needs of today’s Linux servers. The configuration is designed to be very informative and easy to follow. The management on a day-to-day basis is conducted from […]
Firewall on Centos OS #!/bin/sh # # ## Set your IP address MYIP=”192.168.1.108″ # ## Flush rules & reset counters /sbin/iptables -F /sbin/iptables -Z # ## Set policies /sbin/iptables -P INPUT DROP /sbin/iptables -P FORWARD DROP /sbin/iptables -P OUTPUT DROP # ## Drop all incoming fragments /sbin/iptables -A INPUT -i eth0 -f -j DROP # […]
Recent Comments