Web服务(二)httpd配置参数详细介绍
一、配置文件和基本格式
配置文件路径:/etc/httpd/conf/httpd.conf
配置参数 值
1、配置指令不区分字符大小写;但是值有可能区分字符大小写
2、有些指令可以重复出现多次
配置文件格式:
1、全局配置
2、主机配置:用于仅提供一个站点
3、虚拟主机:用于提供多个站点(和主机配置不能同时生效)
配置文件语法测试:{service httpd configtest | httpd -t}
二、详细配置
1、监听套接字
1
2
3
4
5
|
#配置文件事例 #Listen 12.34.56.78:80 Listen 80
Listen 8080
Listen 192.168 . 1.110 : 8082
|
此指令可以出现多次;用于指定监听多个不同的套接字:
1
2
3
4
5
6
7
8
9
10
11
12
|
[Linux] #httpd -t
Syntax OK [Linux] #service httpd reload
Reloading httpd: [Linux] #ss -tnl
State Recv - Q Send - Q Local Address:Port Peer Address:Port
LISTEN 0 128 ::: 111 ::: *
LISTEN 0 128 * : 111 * : *
LISTEN 0 128 ::: 8080 ::: *
LISTEN 0 128 ::: 80 ::: *
LISTEN 0 128 192.168 . 1.186 : 8082 * : *
|
2、配置使用Keep Alive
1
2
3
4
5
6
7
|
# KeepAlive: Whether or not to allow persistent connections (more than # one request per connection). Set to "Off" to deactivate. # #KeepAlive On KeepAlive Off MaxKeepAliveRequests 100 #持久连接最大请求数
KeepAliveTimeout 15 #超时时间
|
3、多道处理模块MPM
查看系统默认启用的模块
1
2
3
4
5
6
7
8
9
10
|
[Linux] #httpd -l
Compiled in modules:
core.c
prefork.c #默认启用prefork模块
http_core.c
mod_so.c
[Linux] #
#如需启用worker模块;需要更改配置文件 [Linux] #vi /etc/sysconfig/httpd
#HTTPD=/usr/sbin/httpd.worker #启用该项后重启httpd |
配置模块信息
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
[Linux] #vi /etc/httpd/conf/httpd.conf
# prefork MPM # StartServers: number of server processes to start # MinSpareServers: minimum number of server processes which are kept spare # MaxSpareServers: maximum number of server processes which are kept spare # ServerLimit: maximum value for MaxClients for the lifetime of the server # MaxClients: maximum number of server processes allowed to start # MaxRequestsPerChild: maximum number of requests a server process serves prefork 稳定性较好,一个线程崩溃不会影响其他线程 <IfModule prefork.c> 判断prefork模块是否存在 StartServers 8 默认启动的工作进程数;不包含主进程
MinSpareServers 5 最少空闲进程数
MaxSpareServers 20 最大空闲进程数
ServerLimit 256 最大活动进程数
MaxClients 256 最多允许发起的请求的个数
MaxRequestsPerChild 4000 每个子进程在生命周期内所能够服务的最多请求个数
< / IfModule>
# worker MPM # StartServers: initial number of server processes to start # MaxClients: maximum number of simultaneous client connections # MinSpareThreads: minimum number of worker threads which are kept spare # MaxSpareThreads: maximum number of worker threads which are kept spare # ThreadsPerChild: constant number of worker threads in each server process # MaxRequestsPerChild: maximum number of requests a server process serves worker 多个进程;一个进程崩溃会影响其下的其他线程 <IfModule worker.c> 判断worker模块是否存在 StartServers 4 启动的子进程的个数
MaxClients 300 并发请求的最大个数
MinSpareThreads 25 最少空闲线程数
MaxSpareThreads 75 最大空闲线程数
ThreadsPerChild 25 每个子进程可生成的线程数
MaxRequestsPerChild 0 每个子进程在生命周期内所能够服务的最多请求个数; 0 表示不做限定
< / IfModule>
|
4、DSO模块的加载方式
LoadModule module_name /path/to/module
可以使用相对路径和绝对路径;相对路径则对于ServerRoot所定义的位置而言;
更改完成后service httpd reload可生效
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
# LoadModule foo_module modules/mod_foo.so # LoadModule auth_basic_module modules / mod_auth_basic.so
LoadModule auth_digest_module modules / mod_auth_digest.so
LoadModule authn_file_module modules / mod_authn_file.so
LoadModule authn_alias_module modules / mod_authn_alias.so
LoadModule authn_anon_module modules / mod_authn_anon.so
# # [Linux] #httpd -M #可以查看系统所有装载模块
Loaded Modules: core_module (static)
mpm_prefork_module (static)
http_module (static)
so_module (static)
auth_basic_module (shared)
auth_digest_module (shared)
authn_file_module (shared)
authn_alias_module (shared)
|
5、配置站点根目录和页面属性
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
# DocumentRoot: The directory out of which you will serve your # documents. By default, all requests are taken from this directory, but # symbolic links and aliases may be used to point to other locations. # DocumentRoot "/var/www/html"
DocumentRoot "/path/to/somewhere(站点路径)" #格式
# The Options directive is both complicated and important. Please see 下述站点有配置详细说明 # http://httpd.apache.org/docs/2.2/mod/core.html#options # for more information. # <Directory "/var/www/html" > #页面访问属性
# # Options Indexes FollowSymLinks
# # # Indexes 缺少默认页面时;允许将目录中的所有文件已列表形式返回给用户 FollowSymLinks 允许跟随符号链接所指向的原始文件;危险 None 所有都不启用
All 所有都启用
ExecCGI 是否允许使用mod_cgi模块执行CGI脚本 Includes 是否允许使用mod_include模块实现服务器端包含(SSI) MultiViews 允许使用mod_negotiation实现内容协商 SymLinksIfOwnerMatch 在链接文件属主属组与原始文件的属主属组相同时;允许跟随符号链接所指向的原始文件 # # # AllowOverride controls what directives may be placed in .htaccess files. # It can be "All", "None", or any combination of the keywords: # Options FileInfo AuthConfig Limit 基于主机的访问控制 # # AllowOverride None 表示下面这些控制机制是否被禁用; None 表示不被禁用
# # Controls who can get stuff from this server. # #allow允许;deny不允许
Order allow,deny #默认deny;没有allow的都deny;可以写多条;自上而下匹配
Allow from all 格式: from IP
Deny
#二者都匹配或二者都无匹配项时,则以后者为准;否则,则以匹配到的为准
< / Directory>
#最佳匹配:从列表中找出最小的能匹配到访问者的地址的条目为最终是生效的 #详细参考http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#allow |
6、定义默认主页面
1
2
3
4
5
|
# The index.html.var file (a type-map) is used to deliver content- # negotiated documents. The MultiViews Option can be used for the # same purpose, but it is much slower. # DirectoryIndex index.html index.html.var #自左而右依次查找
|
7、用户目录
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
# The path to the end user account 'public_html' directory must be # accessible to the webserver userid. This usually means that ~userid 权限说明 # must have permissions of 711, ~userid/public_html must have permissions # of 755, and documents contained therein must be world-readable. # Otherwise, the client will only receive a "403 Forbidden" message. # # See also: http://httpd.apache.org/docs/misc/FAQ.html#forbidden # <IfModule mod_userdir.c> #
# UserDir is disabled by default since it can confirm the presence
# of a username on the system (depending on home directory
# permissions).
#
UserDir disabled
disabled 禁止
UserDir public_html 用户家目录下的目录名称,所有位于此目录中的文件均可通过前述的访问路径进行访问;用户的家目录的赋予运行httpd进程的用户拥有执行权限;
#
# To enable requests to /~user/ to serve the user's public_html
# directory, remove the "UserDir disabled" line above, and uncomment
# the following line instead:
#
#UserDir public_html
< / IfModule>
|
8、配置日志功能
/var/log/httpd/access.log && error.log
access.log:其需要记录的内容需要自定义
访问日志:
CustomLog "/path/to/access_log_file" Format_Name
LogFormat Format_String Format_Nam
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
# The following directives define some format nicknames for use with # a CustomLog directive (see below). # LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
# # # % h:客户端地址
% l:远程登录名;通常为 -
% u:认证时的远程用户名;通常为 -
% t:接受到请求时的时间;
% r:请求报文的起始行;
% >s:响应状态码;
% b:响应报文的长度;单位字节;不包含HTTP首部
% {Header_Name}i:记录指定请求报文首部的内容(value)
% U:请求的URL;不包含其他任何请求串
# #具体请参照http://httpd.apache.org/docs/2.2/mod/mod_log_config.html # # ErrorLog: The location of the error log file. # If you do not specify an ErrorLog directive within a <VirtualHost> # container, error messages relating to that virtual host will be # logged here. If you *do* define an error logfile for a <VirtualHost> # container, that host's errors will be logged there and not here. # ErrorLog logs / error_log
|
9、路径别名和默认字符集
Alias /alias/ "/path/to/somewhere/" :前面别名结尾有/后面结尾就一定得有/
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
# We include the /icons/ alias for FancyIndexed directory listings. If you # do not use FancyIndexing, you may comment this out. # Alias / icons / "/var/www/icons/"
# # #字符集 # Specify a default charset for all content served; this enables # interpretation of all content as UTF-8 by default. To use the # default browser choice (ISO-8859-1), or to allow the META tags # in HTML content to override this choice, comment out this # directive: # AddDefaultCharset UTF - 8
|
10、CGI脚本路径别名
URL --> FileSystem Directory
CGI:Common Gateway Interface
有很多机制需要SUID或SGID权限;
httpd无法直接执行脚本;基于CGI协议调用脚本解释器;等待脚本解释器返回结果到web服务器
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
# ScriptAlias: This controls which directories contain server scripts. # ScriptAliases are essentially the same as Aliases, except that # documents in the realname directory are treated as applications and # run by the server when requested rather than as documents sent to the client. # The same rules about trailing "/" apply to ScriptAlias directives as to # Alias. # ScriptAlias / cgi - bin / "/var/www/cgi-bin/"
ScriptAlias / URL / "/path/to/somewhere/" #格式;路径需要执行权限
# #测试 cat << EOF Content - Type : text / html
<pre> The hostname is :`hostname`.
The time is :`date`.
< / pre>
EOF |
11、基于用户的访问控制
虚拟用户:不是系统的账号密码;
在配置文件LoadModule下(auth)开头的认证类型:
basic:基本认证;账号和**明文发送;
digest:摘要认证;hash编程之后发送
认证提供者(authentication provider):账号和**的存放位置(authn)
授权机制(authentication):根据什么进行授权(authz)
1、编辑配置文件使用:
1
2
3
4
5
6
7
8
9
10
11
12
13
|
[Linux] #vi /etc/httpd/conf/httpd.conf
#在<Directory>网站附近下找一个位置新建一个 <Directory "/var/www/html/fin" > #指定目录文件
Options None #没有任何选项
AllowOverride AuthConfig #使用认证配置
AuthType Basic #认证类型
AuthName "Private Area" #质询时窗口标题
# AuthBasicProvider file #认证提供者;默认为文件 AuthUserFile / etc / httpd / conf / .htpasswd #指定文件存放用户账号
# AuthGroupFile /etc/httpd/conf/.htgroup #指定文件存放组 # Require group GroupName #指定组名 Require valid - user #所有的合法账户
< / Directory>
|
2、使用htpasswd命令生成认证库
1
2
3
4
5
6
7
8
9
|
[Linux] #htpasswd -b /etc/httpd/conf/.htpasswd pipi pipi
Adding password for user pipi
[Linux] #
详细参数可以man htpasswd SYNOPSIS htpasswd [ - c ] [ - m ] [ - D ] passwdfile username
htpasswd - b [ - c ] [ - m | - d | - p | - s ] [ - D ] passwdfile username password
htpasswd - n [ - m | - d | - s | - p ] username
htpasswd - nb [ - m | - d | - s | - p ] username password
|
12、虚拟主机
一个物理服务器提供多个站点;使用虚拟主机得先取消中心主机
1、基于不同的IP实现不同的虚拟
使用不同IP;
2、基于不同的port实现不同的虚拟主机
使用不同端口
3、基于不同的FQDN实现不同的虚拟主机
使用不同的ServerName的值:FQDN
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
# DocumentRoot: The directory out of which you will serve your # documents. By default, all requests are taken from this directory, but # symbolic links and aliases may be used to point to other locations. # #DocumentRoot "/var/www/html" #这项需要先注释;中心主机 # #基于主机名不同进行测试;下面这项需要开启;IP和port是不需要开启的 NameVirtualHost * : 80
# # NOTE: NameVirtualHost cannot be used without a port specifier # (e.g. :80) if mod_ssl is being used, due to the nature of the # SSL protocol. # # VirtualHost example: # Almost any Apache directive may go into a VirtualHost container. # The first VirtualHost section is used for requests without a known # server name. # <VirtualHost * : 80 >
ServerAdmin [email protected]
DocumentRoot / var / www / docs / pipi #指定站点路径
ServerName www.pipi.com #指定FQDN
ErrorLog logs / pipi.com - error_log #指定错误日志路径及名称
CustomLog logs / pipi.com - access_log common #指定访问日志路径及名称
< / VirtualHost>
<VirtualHost * : 80 >
ServerAdmin [email protected]
DocumentRoot / var / www / docs / soul
ServerName www.soul.org
ErrorLog logs / soul.org - error_log
CustomLog logs / soul.org - access_log common
< / VirtualHost>
<VirtualHost * : 80 >
ServerAdmin [email protected]
DocumentRoot / www / docs / dark
ServerName www.dark.net
ErrorLog logs / dark.net - error_log
CustomLog logs / dark.net - access_log common
< / VirtualHost>
# #配置完成后需要在对应的路径下建立相应的文件 [Linux] #httpd -t
Syntax OK [Linux] #service httpd restart
Stopping httpd: [ OK ] Starting httpd: [ OK ] [Linux] #
|
配置完成后如在linux下测试则修改/etc/hosts文件;windows下修改C:\Windows\System32\drivers\etc\hosts文件
1
2
3
|
X.X.X.129 www.pipi.com X.X.X.129 www.soul.org X.X.X.129 www.dark.net |
修改完成后直接访问即可。
1
2
3
4
5
6
|
#查看日志文件 [Linux] #cd /var/log/httpd/
[Linux] #ls
access_log dark.net - access_log error_log pipi.com - access_log soul.org - access_log
access_log - 20140309 dark.net - error_log error_log - 20140309 pipi.com - error_log soul.org - error_log
[Linux] #
|
本文转自Mr_陈 51CTO博客,原文链接:http://blog.51cto.com/chenpipi/1379923,如需转载请自行联系原作者