Ray, Apache guru - GoFuckYourself.com

fris · 07-13-2012, 12:42 PM

Which modeles do you have in your config?

curious if i need to remove any, i stripped it down pretty much

LoadModule auth_basic_module libexec/apache22/mod_auth_basic.so
LoadModule authz_host_module libexec/apache22/mod_authz_host.so
LoadModule log_config_module libexec/apache22/mod_log_config.so
LoadModule autoindex_module libexec/apache22/mod_autoindex.so
LoadModule alias_module libexec/apache22/mod_alias.so
LoadModule vhost_alias_module libexec/apache22/mod_vhost_alias.so
LoadModule dir_module libexec/apache22/mod_dir.so
LoadModule rewrite_module libexec/apache22/mod_rewrite.so
LoadModule mime_module libexec/apache22/mod_mime.so
LoadModule unique_id_module libexec/apache22/mod_unique_id.so
LoadModule auth_token_module libexec/apache22/mod_auth_token.so
LoadModule php5_module libexec/apache22/libphp5.so

raymor · 07-13-2012, 12:51 PM

Looks pretty minimal to me. I'm assuming the last three are there because you're using them. If they aren't used, they can be commented out. PHP especially is a serious security consideration, but of course virtually everyone uses it. I'd not load it if it weren't used, but it's probably being used.

mod_vhost_alias is not what most people use. It's typically used when you have thousands of sites, so it can probably go.

You probably don't want mod_autoindex either. That's the module that lists files if you don't create an index page. It's a security concern and is often disabled via Options anyway.

Hmm, it occurs to me I've hacked or at least read all of those modules. I guess I've worked with most of the 300,000 plus lined of Apache code by now. Now I'm learning a new system that's 1.1 million lines of code.

fris · 07-13-2012, 12:53 PM

Quote:

Originally Posted by raymor

Looks pretty minimal to me. I'm assuming the last three are there because you're using them. If they aren't used, they can be commented out. PHP especially is a serious security consideration, but of course virtually everyone uses it. I'd not load it if it weren't used, but it's probably being used.

mod_vhost_alias is not what most people use. It's typically used when you have thousands of sites, so it can probably go.

You probably don't want mod_autoindex either. That's the module that lists files if you don't crate an index page. It's a security concern and is often disabled via Options anyway.

will i need alias then if i dont have autoindex?

raymor · 07-13-2012, 12:57 PM

Quote:

Originally Posted by fris

will i need alias then if i dont have autoindex?

Yes, probably for ScriptAlias, used to set up cgi-bin.

fris · 07-13-2012, 01:02 PM

Quote:

Originally Posted by raymor

Yes, probably for ScriptAlias, used to set up cgi-bin.

ya i dont have cgi bin for any of the sites on the server, no scriptalias calls in httpd.conf

Klen · 07-13-2012, 06:00 PM

Oh those poor souls whose still uses apache...

Vapid - BANNED FOR LIFE · 07-13-2012, 06:05 PM

Apache is the only option in* some cases.

Klen · 07-13-2012, 06:07 PM

Quote:

Originally Posted by Terrorist

Apache is the only option is some cases.

That's true,but in such cases i rather uses lower quality script then install apache just to use some script which dont work on other httpd servers.

Vapid - BANNED FOR LIFE · 07-13-2012, 06:16 PM

Yes I have specifically avoided scripts that are apache dependent in the past.
Still if you want to proxy java for example, apache is your friend.
It's valuable in its versatility, but definitely bulky.

Klen · 07-13-2012, 06:31 PM

Quote:

Originally Posted by Terrorist

Yes I have specifically avoided scripts that are apache dependent in the past.
Still if you want to proxy java for example, apache is your friend.
It's valuable in its versatility, but definitely bulky.

Not sure what exactly you reffer but i proxied nginx to java without problem(jira/confluence script)

raymor · 07-13-2012, 06:37 PM

Quote:

Originally Posted by Terrorist

Yes I have specifically avoided scripts that are apache dependent in the past.
Still if you want to proxy java for example, apache is your friend.
It's valuable in its versatility, but definitely bulky.

Default configurations with everything but the kitchen sink certainly can be bulky. I think the smallest I've seen is 3MB on a box with 16MB RAM. Looks like Fris is shooting for around 12 MB unshared memory. I don't recall what PHP takes. I'd guess khttpd would be the slimmest, probably under a MB I'd guess.

Vapid - BANNED FOR LIFE · 07-13-2012, 06:47 PM

Yep I'm going to trim it down here soon too. Running it on windows. It's solid software at that.

07-13-2012, 12:42 PM	#1
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	Ray, Apache guru Which modeles do you have in your config? curious if i need to remove any, i stripped it down pretty much LoadModule auth_basic_module libexec/apache22/mod_auth_basic.so LoadModule authz_host_module libexec/apache22/mod_authz_host.so LoadModule log_config_module libexec/apache22/mod_log_config.so LoadModule autoindex_module libexec/apache22/mod_autoindex.so LoadModule alias_module libexec/apache22/mod_alias.so LoadModule vhost_alias_module libexec/apache22/mod_vhost_alias.so LoadModule dir_module libexec/apache22/mod_dir.so LoadModule rewrite_module libexec/apache22/mod_rewrite.so LoadModule mime_module libexec/apache22/mod_mime.so LoadModule unique_id_module libexec/apache22/mod_unique_id.so LoadModule auth_token_module libexec/apache22/mod_auth_token.so LoadModule php5_module libexec/apache22/libphp5.so __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

07-13-2012, 12:51 PM	#2
raymor Confirmed User Join Date: Oct 2002 Posts: 3,745	Looks pretty minimal to me. I'm assuming the last three are there because you're using them. If they aren't used, they can be commented out. PHP especially is a serious security consideration, but of course virtually everyone uses it. I'd not load it if it weren't used, but it's probably being used. mod_vhost_alias is not what most people use. It's typically used when you have thousands of sites, so it can probably go. You probably don't want mod_autoindex either. That's the module that lists files if you don't create an index page. It's a security concern and is often disabled via Options anyway. Hmm, it occurs to me I've hacked or at least read all of those modules. I guess I've worked with most of the 300,000 plus lined of Apache code by now. Now I'm learning a new system that's 1.1 million lines of code. Last edited by raymor; 07-13-2012 at 12:55 PM..

07-13-2012, 06:05 PM	#7
Vapid - BANNED FOR LIFE Barterer Industry Role: Join Date: Aug 2004 Posts: 4,864	Apache is the only option in* some cases. Last edited by Vapid - BANNED FOR LIFE; 07-13-2012 at 06:13 PM..

07-13-2012, 06:00 PM	#6
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Oh those poor souls whose still uses apache...

07-13-2012, 06:16 PM	#9
Vapid - BANNED FOR LIFE Barterer Industry Role: Join Date: Aug 2004 Posts: 4,864	Yes I have specifically avoided scripts that are apache dependent in the past. Still if you want to proxy java for example, apache is your friend. It's valuable in its versatility, but definitely bulky.

07-13-2012, 06:47 PM	#12
Vapid - BANNED FOR LIFE Barterer Industry Role: Join Date: Aug 2004 Posts: 4,864	Yep I'm going to trim it down here soon too. Running it on windows. It's solid software at that.