Apache Tips
& Tricks
Fabio Wakim Trentini

Agenda
Apache?
MPMs
Módulos
Proxy Reverso
URL Rewriting
Segurança
Performance

Apache?
A PAtCHy server
Suporta uma grande variedade de plataformas
Flexibilidade
Segurança

Apache?
Desde março/1996 é o
servidor mais usado na
internet
Em junho/2009 tem
47,12% de market
share
IIS tem 24,80%
Fonte: netcraft.com

MPMs
Multi Processing Modules
prefork (1.3)
worker (2.0)
event (2.2)

ThreadsPerChild
worker
thread
parent httpd child httpd worker
(root) (nobody) thread
worker
thread
Worker MPM

ThreadsPerChild MinSpareThreads
worker
thread
parent httpd child httpd worker
(root) (nobody) thread
worker
thread
worker
thread
child httpd worker
(nobody) thread
worker
thread
worker
thread
child httpd worker
(nobody) thread
worker
thread
MaxSpareThreads
Worker MPM

ThreadsPerChild MinSpareThreads
worker
thread
parent httpd child httpd worker
(root) (nobody) thread
worker
thread
worker
thread
child httpd worker
(nobody) thread
worker
thread
worker
thread
child httpd worker
(nobody) thread
worker
thread
MaxSpareThreads
MaxClients
ServerLimit
Worker MPM

ThreadsPerChild MinSpareThreads
worker
thread
parent httpd child httpd worker
(root) (nobody) thread
worker
thread
worker
thread
child httpd worker
(nobody) thread
worker
thread
worker
thread
child httpd worker
(nobody) thread
worker
thread
MaxSpareThreads
MaxClients
ServerLimit
ListenBacklog
Worker MPM

Módulos
core
73 módulos
171 módulos pra apache 2.X em http://
modules.apache.org

mod_alias
Redirect /images http://img.domain.com/product
RedirectMatch permanent ^/$ http://home.domain.com/

mod_authz_host
<Location /staging>
Order deny,allow
Deny from all
Allow from 172.22.0.0/255.255.0.0
Allow from 127.0.0.1
</Location>

mod_authz_host
SetEnvIf Referer ^http://.*domain.com referer-ok
SetEnvIf Remote_Addr 127.0.0.1 local
<Location /staging>
Order deny,allow
Deny from all
Allow from env=referer-ok env=local
</Location>

mod_cache
mod_disk_cache
htcacheclean
mod_mem_cache
MCacheRemovalAlgorithm
mod_libmemcached-cache (new!)

mod_dumpio
DumpIOLevel debug
DumpIOInput On
DumpIOOutput On

mod_headers
RequestHeader unset Cookie
Header set Server %{SERVER_SOFTWARE}e
SetEnvIfNoCase Referer (google.com|bing.com)
search_engine=$1
Header set Set-Cookie “SE=${search_engine}e; path=/;
domain=%{HTTP_HOST}e” env=search_engine

mod_log_config
%a Remote Address
%t Horário do recebimento do request
%D Tempo gasto para responder, em microssegundos
%{Foo}C Conteúdo do cookie “Foo” no request
%{Foo}e Conteúdo da variável “Foo”
%{Foo}i Conteúdo do header “Foo” no request
%{Foo}o Conteúdo do header “Foo” na resposta
%X Status da resposta

mod_setenvif
BrowserMatchNoCase iphone mobile
SetEnvIf Request_URI .gif image

mod_setenvif
Remote_Host
Remote_Addr
Server_Addr
Request_Method
Request_Protocol
Request_URI

mod_setenvif
allow from env=private
CustomLog logs/accesslog combined env=!image
Header set X-foo 1 env=bar

<Location />
E
</Location>
<Files f.html>
D
</Files>
<VirtualHost *>
<Directory /a/b>
B
</Directory>
</VirtualHost>
<DirectoryMatch "^.*b$">
C
</DirectoryMatch>
<Directory /a/b>
A
</Directory>
Directory, Location, Files
A>B>C>D>E

Proxy Reverso
mod_proxy
mod_proxy_ajp
mod_proxy_balancer
mod_proxy_connect
mod_proxy_ftp
mod_proxy_http
mod_rewrite

Proxy Reverso
ProxyRequests Off
ProxyPreserveHost On
ProxyVia Off
ProxyTimeout 20
ProxyMaxForwards 10
ProxyBadHeader Ignore
ProxyErrorOverride On
ProxyStatus On

Proxy Reverso
ProxyPassMatch ^/images !
ProxyPass / http://backend:8080/ disablereuse=on
ProxyPassReverse / http://backend:8080/

Proxy Reverso
<Proxy balancer://supahclustah>
BalancerMember http://backend1:8080/
BalancerMember http://backend2:8080/ smax=10
</Proxy>
ProxyPass / balancer://supahclustah/ stickysession=JSESSIONID

Proxy Reverso
max max. número de conexões no backend
connectiontimeout timeout pra criar conexão
disablereuse não usa keepalive no backend
retry tempo de nova tentativa no backend
lbmethod byrequests / bytraffic
stickysession Usa cookie pra sticky

URL Rewriting
Black Magic
Condições
Regras
Flexibilidade

URL Rewriting
TinyURL em 2 linhas
RewriteEngine On
RewriteMap tinyurl dbm:/export/data/tinyurl.dbm
RewriteRule ^(.*)$ ${tinyurl:$1|http://domain.com} [L,NE]
/42 http://www.mysuperurl.com/

URL Rewriting
SEO Friendly o/
www.domain.com/my-super-topic-1234
www.domain.com/?q=1234
RewriteEngine On
RewriteRule /.*-([0-9]+)$ http://backend/viewpage/?q=$1 [P,L]

URL Rewriting
Arquivo Existe?
RewriteEngine On
RewriteCond %{REQUEST_METHOD} =GET [OR]
RewriteCond %{REQUEST_METHOD} =POST
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^/(.*)$ http://backend/$1 [P,L]

URL Rewriting
Porteiras
RewriteEngine On
RewriteCond ${HTTP:Cookie} !XR=1
RewriteCond ${DOCUMENT_ROOT}/.xrated -f
RewriteRule . http://porteira.domain.com/?redir=http://%
{HTTP_HOST}%{REQUEST_URI} [CO=XR:1,R,L]

URL Rewriting
Trocando query string por request header!
RewriteEngine On
RewriteCond %{QUERY_STRING} flavor=(.*)
RewriteRule (.*) $1 [E=flavor:%1]
RequestHeader set Accept application/%{flavor}e env=flavor

Segurança
LimitInternalRecursion
LimitRequestBody
LimitRequestFields
LimitRequestFieldSize
LimitRequestLine
RLimitCPU
RLimitMEM
RLimitNPROC

SSL
NameVirtualHost
SSLSessionCache
file
shm
distfile

Performance do servidor
Carregar somente os módulos necessários
Evitar excesso de log
Acertar tunables

Performance do servidor
UseCanonicalName Off
HostNameLookups Off
Options FollowSymLinks
AllowOverride None
EnableMMAP On
EnableSendfile On
ExtendedStatus Off
DirectoryIndex index.html

Performance do servidor
Timeout 30
KeepAlive On
KeepAliveTimeout 5
MaxKeepAliveRequests 200
MaxRequestsPerChild 0

Performance do cliente
Firebug / YSlow! / Page Speed / IRCache
WebPageTest / etc

Performance do cliente
Steve Souders’ rules
ETag
Expires
gzip/deflate

Performance do cliente
FileETag INode MTime Size
FileEtag None

Performance do cliente
ExpiresActive On
ExpiresByType image/jpeg M604800
ExpiresByType image/gif “access plus 1 week”

Performance do cliente
SetEnv gzip-only-text/html 1
SetOutputFilter DEFLATE
<LocationMatch “.(css|js|txt|xml|json)$”>
UnsetEnv gzip-only-text/html
SetOutputFilter DEFLATE
</LocationMatch>
BrowserMatch ^Mozilla/4 no-gzip
BrowserMatch bMSI[E]s4 no-gzip !gzip-only-text/html
Header append Vary User-Agent

Dúvidas?

Dúvidas?
KTHXBAI