Re: [users@httpd] basic question

[Igor Galić]

- "Lava Saleem"  wrote:

> Hi,
> I'm a new user for apache and I have simple questions first one is : I
> have already downloaded apache tomcat and now I need to set apache
> httpd as a proxy I have a httpd in my /etc linux box ( centos 2.6.18

That's interesting, because we haven't yet released 2.6.18

> and the apache tomcat is 7.0.4 ) but I don't see apache directory

You might want to consider to use 7.0.6, as http://tomcat.apache.org/
says: "This is the first stable release of the Tomcat 7 branch."

> beside the apache tomcat in the /opt directory, does that mean I have
> to download apache and mod_jk ?if it is not there how come I have

On this list we recommend mod_proxy_http or mod_proxy_ajp, see:
http://httpd.apache.org/docs/current/mod/mod_proxy.html
and http://www.apachetutor.org/admin/reverseproxies for a good
example on how to configure it.

(On us...@tomcat.apache.org we recommend mod_jk ;)

> httpd in /etc ? My second question is about uploading a website ( html
> embadded with java script ) into the apache how to do that ?


http://wiki.apache.org/httpd/DistrosDefaultLayout

You put it in the DocumentRoot:
http://httpd.apache.org/docs/current/mod/core.html#documentroot


> ps I have looked into the documentary but didn't find the answers
> 
> Thank you
> LS

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Performance tunning and tools

[Petr Hracek]

Dear users,

sorry for bother you with that issue.
Are there any tools how to measure performance of the apache 2.2?
Apache 2.2 is running under Linux operating system.

I would like to present that new configuration of apache 2.2 has
better performance.

Thank you in advance

-- 
Best Regards / S pozdravem
Petr Hracek

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Caching of files gif,css,js,jpg

[Petr Hracek]

Dear users,

I am solving the caching of the images under apache 2.2 my
configuration has actually following:

Here is the part of configuration file.


 Header unset ETag


FileETag None


Allow from all
Satisfy Any
ExpiresActive on
ExpiresDefault "access plus 1 weeks"



Allow from all
Satisfy Any
ExpiresActive on
ExpiresDefault "access plus 2 days"




Is it possible to define cache figure per session?
Is this configuration correct?

Reason of the question is following:
- Lets say the user connect to the system where the actuall situation
is installed
- Next day administrator will updated the system so that pictures will
be updated. Pictures will have the same
name
- Afterwards user which has been connected to the system had old
picture taken from the system.

Is it right that my configuration of apache will occurs that user will
see in case of css,gif updated after 1 week?
How is it possible to handle that situation or is it relevant only to
the browser side and not on the apache side?

Thank you in advance

-- 
Best Regards / S pozdravem
Petr Hracek

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Performance tunning and tools

[Tom Evans]

On Thu, Feb 3, 2011 at 9:57 AM, Petr Hracek  wrote:
> Dear users,
>
> sorry for bother you with that issue.
> Are there any tools how to measure performance of the apache 2.2?
> Apache 2.2 is running under Linux operating system.
>
> I would like to present that new configuration of apache 2.2 has
> better performance.
>
> Thank you in advance
>
> --
> Best Regards / S pozdravem
> Petr Hracek
>

Check out ab[1], flood[2], siege[3]

Cheers

Tom

[1] http://httpd.apache.org/docs/2.2/programs/ab.html
[2] http://httpd.apache.org/test/flood/
[3] http://www.joedog.org/index/siege-home

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Caching of files gif,css,js,jpg

[Igor Galić]

- "Petr Hracek"  wrote:

> Dear users,
> 
> I am solving the caching of the images under apache 2.2 my
> configuration has actually following:
> 
> Here is the part of configuration file.
> 
> 
>  Header unset ETag
> 
> 
> FileETag None
> 
> 
> Allow from all
> Satisfy Any
> ExpiresActive on
> ExpiresDefault "access plus 1 weeks"
> 
> 
> 
> Allow from all
> Satisfy Any
> ExpiresActive on
> ExpiresDefault "access plus 2 days"
> 
> 
> 
> 
> Is it possible to define cache figure per session?
> Is this configuration correct?
> 
> Reason of the question is following:
> - Lets say the user connect to the system where the actuall situation
> is installed
> - Next day administrator will updated the system so that pictures
> will
> be updated. Pictures will have the same name

That's bad practice.
You should upload pictures with new names.

See Theo's presentation from last year's Apache Con:
http://lethargy.org/~jesus/writes/web-performance-boot-camp

> - Afterwards user which has been connected to the system had old
> picture taken from the system.
> 
> Is it right that my configuration of apache will occurs that user
> will
> see in case of css,gif updated after 1 week?
> How is it possible to handle that situation or is it relevant only to
> the browser side and not on the apache side?
> 
> Thank you in advance
> 
> -- 
> Best Regards / S pozdravem
> Petr Hracek

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Performance tunning and tools

[Igor Galić]

- "Tom Evans"  wrote:

> On Thu, Feb 3, 2011 at 9:57 AM, Petr Hracek 
> wrote:
> > Dear users,
> >
> > sorry for bother you with that issue.
> > Are there any tools how to measure performance of the apache 2.2?
> > Apache 2.2 is running under Linux operating system.
> >
> > I would like to present that new configuration of apache 2.2 has
> > better performance.

http://wiki.apache.org/httpd/PerformanceScalingUp

Also consider:
http://wiki.apache.org/httpd/PerformanceScalingOut

And take a look at:
http://lethargy.org/~jesus/writes/web-performance-boot-camp

> > Thank you in advance
> >
> > --
> > Best Regards / S pozdravem
> > Petr Hracek
> >
> 
> Check out ab[1], flood[2], siege[3]

tsung, jmeter, etc..

> Cheers
> 
> Tom
> 
> [1] http://httpd.apache.org/docs/2.2/programs/ab.html
> [2] http://httpd.apache.org/test/flood/
> [3] http://www.joedog.org/index/siege-home

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Performance tunning and tools

[Tom Evans]

2011/2/3 Igor Galić :
> - "Tom Evans"  wrote:
>> Check out ab[1], flood[2], siege[3]
>
> tsung, jmeter, etc..
>

I didn't know tsung, that looks very cool. Something to read over lunch...

Cheers

Tom

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Caching of files gif,css,js,jpg

[Petr Hracek]

Thank you answer.

and is it possible to do that so
so that GIF file will have the same name but they will be a symbolic
links to the
newer files?

best regards
Petr

2011/2/3 Igor Galić :
>
> - "Petr Hracek"  wrote:
>
>> Dear users,
>>
>> I am solving the caching of the images under apache 2.2 my
>> configuration has actually following:
>>
>> Here is the part of configuration file.
>> 
>> 
>>      Header unset ETag
>> 
>>
>> FileETag None
>>
>> 
>>     Allow from all
>>     Satisfy Any
>>     ExpiresActive on
>>     ExpiresDefault "access plus 1 weeks"
>> 
>>
>> 
>>     Allow from all
>>     Satisfy Any
>>     ExpiresActive on
>>     ExpiresDefault "access plus 2 days"
>> 
>>
>> 
>>
>> Is it possible to define cache figure per session?
>> Is this configuration correct?
>>
>> Reason of the question is following:
>> - Lets say the user connect to the system where the actuall situation
>> is installed
>> - Next day administrator will updated the system so that pictures
>> will
>> be updated. Pictures will have the same name
>
> That's bad practice.
> You should upload pictures with new names.
>
> See Theo's presentation from last year's Apache Con:
> http://lethargy.org/~jesus/writes/web-performance-boot-camp
>
>> - Afterwards user which has been connected to the system had old
>> picture taken from the system.
>>
>> Is it right that my configuration of apache will occurs that user
>> will
>> see in case of css,gif updated after 1 week?
>> How is it possible to handle that situation or is it relevant only to
>> the browser side and not on the apache side?
>>
>> Thank you in advance
>>
>> --
>> Best Regards / S pozdravem
>> Petr Hracek
>
> i
>
> --
> Igor Galić
>
> Tel: +43 (0) 664 886 22 883
> Mail: i.ga...@brainsware.org
> URL: http://brainsware.org/
>
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>   "   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>



-- 
Best Regards / S pozdravem
Petr Hracek

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Caching of files gif,css,js,jpg

[Igor Galić]

- "Petr Hracek"  wrote:

> Thank you answer.
> 
> and is it possible to do that so
> so that GIF file will have the same name but they will be a symbolic
> links to the newer files?

That doesn't make much sense either -- did you read the links I gave you?
The most potential for caching is on the client side.
As long as the client doesn't have to look it up (Expires in 30+ years)
it won't. If it has to look it up, then because the name changed.
Easy as that.
 
> best regards
> Petr

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Re: Apache 2.2 with mod_ntlm not working

[a . smith]

Quoting a.sm...@ukgrid.net:

I'm attempting to get mod_ntlm2 working (I've not previously used  
it). On a FreeBSD 8.1 server I have installed apache 2.2 and  
mod_ntlm and added a section to the httpd.conf like:


Looks like its probably due to NTLMv1 not being allowed by default on  
Windows 2008R2 systems.


http://support.microsoft.com/kb/954387

thanks Andy.





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Re: Apache 2.2 with mod_ntlm not working

[Igor Galić]

- "a smith"  wrote:

> Quoting a.sm...@ukgrid.net:
> 
> > I'm attempting to get mod_ntlm2 working (I've not previously used  
> > it). On a FreeBSD 8.1 server I have installed apache 2.2 and  
> > mod_ntlm and added a section to the httpd.conf like:
> 
> Looks like its probably due to NTLMv1 not being allowed by default on 
> Windows 2008R2 systems.

It's the year 2011. Microsoft has been working hard since NT 4.0 to
deprecate NTLM. All of it. And still it's haunting us?
 
> http://support.microsoft.com/kb/954387
> 
> thanks Andy.

have you considered Kerberos?

Most Unixes these days are easily kerberized, if they don't come kerberized
out of the box already.

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] apache as a front end to tomcat instance

[bf...@free-man.net]

the only URL served by the new virtualhost  would be /portal/
and those will go to tomcat

=
BJ Freeman
Strategic Power Office with Supplier Automation  

Specialtymarket.com  
Systems Integrator-- Glad to Assist

Chat  Y! messenger: bjfr33man


James Godrej sent the following on 2/2/2011 8:25 PM:





- Original Message 

From: "bf...@free-man.net"
To: users@httpd.apache.org
Sent: Thu, 3 February, 2011 12:14:00 AM
Subject: Re: [users@httpd] apache as a front end to tomcat instance



then create a new virtualhost with the \



ProxyPass /portal/ ajp://192.168.1.4:8009/


=
Ok but if I create a different vhost for sakai instance then how will I
differentiate the requests i.e. I have a virtual host for research.openitup.in

and another vhost for sakai also will have same server name
research.openitup.in.

Suppose I create a new virtual host as you said then what would be the  server
name because this also has to come from research.openitup.in

so same server name and root / redirected at two places.




-
The official User-To-User support forum of the Apache HTTP Server Project.
Seehttp://httpd.apache.org/userslist.html>  for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
"   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] apache as a front end to tomcat instance

[James Godrej]

- Original Message 
From: "bf...@free-man.net" 
To: users@httpd.apache.org
Sent: Thu, 3 February, 2011 10:10:56 PM
Subject: Re: [users@httpd] apache as a front end to tomcat instance

the only URL served by the new virtualhost  would be /portal/
and those will go to tomcat

=
So what I understand is in that case I need to have a different ServerName if I 
configure  different vhost as you say and that
makes /portal  to go to tomcat.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] giving write permissions to apache user on some folders in document root

[James Godrej]

Hi,
I am trying to get a few Content Management Systems up and running.
But I have security concerns with respect to them  

1) please see following link
   http://www.dokeos.com/doc/installation_guide.html section 2 says
 The following directories need to be readable, writeable and executable for  
everyone: 


* dokeos/main/inc/conf/
* dokeos/main/upload/users/
* dokeos/main/default_course_document/
* dokeos/archive/
* dokeos/courses/
* dokeos/home/

I am not very happy with this idea of having directories to be 
readable,writeable and executable for every one.

2) http://doc.claroline.net/en/index.php/Install_general_information

the section
 Rights on folders  says

" If you don't want to set write access on the whole folders, which is 
recommended for security reasons, give to the web server user write access on 
these folders : "

Is this a recommended practice.?

3) Also another LMS (Learning Management System) while installing asked to give 
some folders writeable and executable for every one
here is a link
http://atutor.ca/atutor/docs/installation.php 
While installing it I got a message 

 “The directory you specify must be created if it does not already exist
 
and be writeable by the webserver. On Unix machines issue the command chmod 
a+rwx content, additionally the path may not contain any symbolic links.
chmod a+rwx /var/www/atutor/content”
 
 

4) Another LMS docebolms asked to give write permissions on 
 files/doceboCore/photo
files/common/users
files/doceboLms/course
files/doceboLms/forum
files/doceboLms/item
files/doceboLms/message
files/doceboLms/project
files/doceboLms/scorm
files/doceboLms/test
 
I checked its documentation
http://www.docebo.org/doceboCms/index.php?mn=docs&op=docs&pi=5_4&folder=7
but was not that helpful.

I am not at all convinced by the idea of giving permissions to read,write and 
execute as these Learning Management Systems say.
Let me know what you people have to say?
What is the best practise in such situations?




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] apache as a front end to tomcat instance

[bf...@free-man.net]

the servername would be the URL for the domain in the browser.
since the previous emails are not included I don't have those available.


=
BJ Freeman
Strategic Power Office with Supplier Automation  

Specialtymarket.com  
Systems Integrator-- Glad to Assist

Chat  Y! messenger: bjfr33man


James Godrej sent the following on 2/3/2011 11:31 AM:





- Original Message 
From: "bf...@free-man.net"
To: users@httpd.apache.org
Sent: Thu, 3 February, 2011 10:10:56 PM
Subject: Re: [users@httpd] apache as a front end to tomcat instance

the only URL served by the new virtualhost  would be /portal/
and those will go to tomcat

=
So what I understand is in that case I need to have a different ServerName if I
configure  different vhost as you say and that
makes /portal  to go to tomcat.



-
The official User-To-User support forum of the Apache HTTP Server Project.
Seehttp://httpd.apache.org/userslist.html>  for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
"   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Help with cache tuning

[--[ UxBoD ]--]

Hello all,

I have been trying to tune my Apache vhost config and hoping for some help to 
critique, flame and slap me with a wet fish for being so silly. So this is my 
config so far:


ServerAdmin webmas...@somedomain.com
DocumentRoot "/www/somedomain.com"

AllowOverride All

   
   Header unset Etag
   FileETag None
   Header set Cache-control "public, max-age=604800"
   

   ExpiresActive On

   ExpiresDefault "access plus 1 month"
   ExpiresByType text/html "access plus 30 minutes"
   ExpiresByType text/css "access plus 2 weeks"
   ExpiresByType text/javascript "access plus 2 weeks"
   ExpiresByType image/png "access plus 1 month"
   ExpiresByType image/gif "access plus 1 month"
   ExpiresByType image/jpg "access plus 1 month"



ServerName www.somedomain.com
ServerAlias somedomain.com

AddOutputFilterByType DEFLATE text/html text/css text/xml 
application/x-javascript application/javascript application/xml

# Deactivate compression for buggy browsers
BrowserMatch ^Mozilla/4 gzip-only-text/html
BrowserMatch ^Mozilla/4\.0[678] no-gzip
BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

DeflateCompressionLevel 6

# Set header information for proxies
Header append Vary User-Agent

ErrorLog "logs/www.somedomain.com-error.log"
CustomLog "logs/www.somedomain.com-access.log" common


When I check with Chrome or Firefox I get messages about:

"The following cacheable resources have a short freshness lifetime"
"Consider adding a "Cache-Control: public" header to the following resources"

Yet I though from the above config I had added those.  I am using mod_deflate 
and mod_pagespeed which appear to be doing quite a good job but I feel my lack 
of Apache core workings is really letting performance down.

Any help from the experienced community would be very much appreciated by a 
n00b.
-- 
Thanks, Phil

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] giving write permissions to apache user on some folders in document root

[Scott Gifford]

On Thu, Feb 3, 2011 at 2:48 PM, James Godrej  wrote:
[ ... ]

> I am not at all convinced by the idea of giving permissions to read,write
> and
> execute as these Learning Management Systems say.
> Let me know what you people have to say?
> What is the best practise in such situations?
>

James,

You are right that making these directories writable by the Web server or
world-writable increases your security risk, since in many cases it allows
escalating the ability to write to the filesystem to the ability to execute
arbitrary code as your Web server user.

One option for mitigating this is to carefully configure the Apache-writable
directories so they will not execute content, by limiting the types of
content allowed there, disabling CGI execution, making sure .htaccess files
are ignored, etc.  Generally the content of these directories will be static
images and so won't need to be executed.

You may find you are able to run the content-management part of the system
using a different Apache instance than the user-viewable part.  That would
let you make these directories writable by the admin Apache instance but not
the public one, then protect that Apache instance with firewall rules, a
strong password, SSL, etc.  This would most likely require a bit of work.

Finally, you can carefully review the security of these applications, their
history of security incidents, etc. to determine if they are reliable enough
to be trusted with this sort of access.  If not, try to find one that is.

Sorry there are no simple answers there, but hopefully it is helpful.

--Scott.

Re: [users@httpd] Help with cache tuning

[Igor Galić]

- "--[ UxBoD ]--"  wrote:

> Hello all,
> 
> I have been trying to tune my Apache vhost config and hoping for some
> help to critique, flame and slap me with a wet fish for being so
> silly. So this is my config so far:
> 
> 
> ServerAdmin webmas...@somedomain.com
> DocumentRoot "/www/somedomain.com"
> 
> AllowOverride All
> 
>
>Header unset Etag
(This seems paranoid)

>FileETag None

(When you already have this... To me it would make sense on a proxy only.)

>Header set Cache-control "public, max-age=604800"

Just one week?

>
> 
>ExpiresActive On
> 
>ExpiresDefault "access plus 1 month"

And here you have a default of one month that doesn't fit together..

>ExpiresByType text/html "access plus 30 minutes"

now.. this is probably silly... Your content isn't *that* dynamic ;)

>ExpiresByType text/css "access plus 2 weeks"
>ExpiresByType text/javascript "access plus 2 weeks"

And so is this and

>ExpiresByType image/png "access plus 1 month"
>ExpiresByType image/gif "access plus 1 month"
>ExpiresByType image/jpg "access plus 1 month"

and this, again... you made this a default, remember?

My suggestion is: Set the Expires for CSS, JS and Images to be something like 
30 years.
When you actually have a new version, upload it under a new name.

For covering a good 80% of yslow, take a look at:
http://omniti.com/seeds/fast-by-default

for covering the other 20% see:
http://lethargy.org/~jesus/writes/web-performance-boot-camp


> 
> 
> ServerName www.somedomain.com
> ServerAlias somedomain.com
> 
> AddOutputFilterByType DEFLATE text/html text/css text/xml
> application/x-javascript application/javascript application/xml
> 
> # Deactivate compression for buggy browsers
> BrowserMatch ^Mozilla/4 gzip-only-text/html
> BrowserMatch ^Mozilla/4\.0[678] no-gzip
> BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
> 
> DeflateCompressionLevel 6
> 
> # Set header information for proxies
> Header append Vary User-Agent
> 
> ErrorLog "logs/www.somedomain.com-error.log"
> CustomLog "logs/www.somedomain.com-access.log" common
> 
> 
> When I check with Chrome or Firefox I get messages about:
> 
> "The following cacheable resources have a short freshness lifetime"
> "Consider adding a "Cache-Control: public" header to the following
> resources"
> 
> Yet I though from the above config I had added those.  I am using
> mod_deflate and mod_pagespeed which appear to be doing quite a good
> job but I feel my lack of Apache core workings is really letting
> performance down.
> 
> Any help from the experienced community would be very much appreciated
> by a n00b.
> -- 
> Thanks, Phil

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] mod_proxy_balancer - no way to name pool members by IP.

[dfw-apache]

I've hit a vexing impasse with mod_proxy_balancer.

I have a pool of backend boxes. They vhost many domains, so
need the specific Host: header in requests to them (the *same*
Host: header for all of them)

I proxy reqeusts to them potentially thousands of times a second,   
and their IP's are not going to be changing, so I name the
BalancerMembers by IP address, as the DNS lookup overhead is 
a fatal waste of CPU, especially if your DNS servers melt
and your site dies unnecessarily. (No, /etc/hosts is not possible.
The sitename has multiple A records, and I make the backends choose
individualiseable vhosts. Besides, my hosts file is vast!)

Unfortunately, when I try and use mod_headers to set the Host: header
for these backend connections, the balancer layer destroys the
result and replaces it with the IP.

Apparently, if I switch ProxyPreserveHost on, I may get further,
but since that's a site-wide setting a side effect would mean all
of my other proxied directories would now get the wrong Host: header.
All the RewriteRule [P]'s would break and I would have to catch and
replace the Host in every single one of them in individual  blocks.
That deluge of perpetual kludgery does not appeal.

What I need is a way to tell a ProxyPass or BalancerMember, that
they should use a certain Host: header in its communications
with this backend. e.g.
BalancerMember http://10.0.0.1/foo/ host=foobar.com

The logical alternative would have been to be able to specify a
certain target IP to connect to instead of a certain Host name
to use e.g.
BalancerMember http://foobar.com/foo/ address=10.0.0.1

but I suspect apache would then be unable to set  block
rules for individual balancer members since they'd all declare
the same URL and you'd be unable to match them individually

So, I currently can't use my backends in mod_proxy_balancer

Does anyone have any suggestions?

DFW


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] mod_fcgid with php hangs when downloads are interrupted

[Liam O'Boyle]

Hi there,

I tried to send this through with a different account, but not sure
that it made it, so sending from another; apologies if this is a
double post.

I'm having an issue with downloads through PHP when using mod_fcgid;
if the download is interrupted before it's complete, the php-cgi
process seems to block until the execution timeout is reached, rather
than aborting immediately.  Further requests to the server by the same
user that interrupted the download hang until the process aborts and
the php-cgi process starts serving more requests, but requests by
other users do not appear to be affected.

It doesn't appear to be a PHP problem, as the same code, when run
using mod_php, executes correctly.

Does anyone have any suggestions that I could look into to fix this?

A full explanation is up on ServerFault -
http://serverfault.com/questions/226464/php-fcgid-hangs-if-download-interrupted

Thanks for any help,

Liam

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] mod_proxy_balancer - no way to name pool members by IP.

[Igor Galić]

- dfw-apa...@white.u-net.com wrote:

> I've hit a vexing impasse with mod_proxy_balancer.
> 
> I have a pool of backend boxes. They vhost many domains, so
> need the specific Host: header in requests to them (the *same*
> Host: header for all of them)
> 
> I proxy reqeusts to them potentially thousands of times a second,   
> and their IP's are not going to be changing, so I name the
> BalancerMembers by IP address, as the DNS lookup overhead is 
> a fatal waste of CPU, especially if your DNS servers melt
> and your site dies unnecessarily. (No, /etc/hosts is not possible.

http://httpd.apache.org/docs/current/mod/mod_proxy.html#startup

> The sitename has multiple A records, and I make the backends choose
> individualiseable vhosts. Besides, my hosts file is vast!)
> 
> Unfortunately, when I try and use mod_headers to set the Host: header
> for these backend connections, the balancer layer destroys the
> result and replaces it with the IP.
> 
> Apparently, if I switch ProxyPreserveHost on, I may get further,
> but since that's a site-wide setting a side effect would mean all

Not quite sure what you mean by site-wide, but:
http://httpd.apache.org/docs/current/mod/mod_proxy.html#proxypreservehost
says: Context:  server config, virtual host


> of my other proxied directories would now get the wrong Host: header.
> All the RewriteRule [P]'s would break and I would have to catch and

Wit a sec.
You're using mod_rewrite for proxying?
Why? (http://bash.org/?866112)

> replace the Host in every single one of them in individual 
> blocks.
> That deluge of perpetual kludgery does not appeal.
> 
> What I need is a way to tell a ProxyPass or BalancerMember, that
> they should use a certain Host: header in its communications
> with this backend. e.g.
> BalancerMember http://10.0.0.1/foo/ host=foobar.com

Now I'm confused. How do your configs actually look like?

> The logical alternative would have been to be able to specify a
> certain target IP to connect to instead of a certain Host name
> to use e.g.
> BalancerMember http://foobar.com/foo/ address=10.0.0.1
> 
> but I suspect apache would then be unable to set  block
> rules for individual balancer members since they'd all declare
> the same URL and you'd be unable to match them individually

You can use ProxySet
http://httpd.apache.org/docs/current/mod/mod_proxy.html#proxyset
in  and 

But ProxySet only allows you to set the same Variables as
ProxyPass does. host is none of them.


> So, I currently can't use my backends in mod_proxy_balancer
> 
> Does anyone have any suggestions?

Paste(bin) youur config or enough of it, that we can deduce
what you're trying to do and how.
 
> DFW

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Missing static contents on 1st page hit with Apache+mod_jk

[Nick Kew]

On Mon, 31 Jan 2011 17:40:08 -0800 (PST)
Setya  wrote:

> 
> Hi,
> 
> From the logs, on 1st page hit requests are appended with jsessionid &
> jsessionidversion, while the 2nd hit are not, maybe this is what causes the
> static contents are not rendered on 1st page hit ? Could somebody explain
> about this ?

The jsession stuff is what your browser requested, and presumably
come from your application on the glassfish.

The server has returned a bunch of redirects (302s).  This may
be intentional.  If so, you need to figure out where the redirects
are going (your browser can tell you that), and fix it.

The tutorial at http://www.apachetutor.org/admin/reverseproxies
may help to understand why it's not working, although not all
the techniques described there are applicable with mod_jk.

The fact that you're getting session stuff and redirects
associated with static contents probably indicates a
poorly-implemented application running on the glassfish.


-- 
Nick Kew

Available for work, contract or permanent.
http://www.webthing.com/~nick/cv.html

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] Event MPM in httpd 2.2.x

[David Dabbs]

Hello.

 

I'm considering changing over to the event MPM, but as of 2.1.17 it is still
marked with an "Experimental" warning in the MPM docs.

Does anyone know why the experimental warning was dropped in the 2.3 (trunk)
documentation? 
Was it somehow stabilized/made ready-for-primetime?

 

If you're using a 2.2.x event MPM in a production environment, would you
mind reporting your experiences with it?

 

 

Thank you,

 

David

Re: [users@httpd] Event MPM in httpd 2.2.x

[Igor Galić]

- "David Dabbs"  wrote:

> Hello.
> 
> 
> 
> I’m considering changing over to the event MPM, but as of 2.1.17 it is
> still marked with an “Experimental” warning in the MPM docs.

In the last couple of weeks (months?) there's been some fixes regarding
performance and one regarding SSL thread safety. At least the performance fix
should be easily back-portable.
http://svn.apache.org/viewvc?view=revision&revision=1064269

> Does anyone know why the experimental warning was dropped in the 2.3
> (trunk) documentation?

Not only that, it's also the default mpm.

> Was it somehow stabilized/made ready-for-primetime?
> 
> 
> 
> If you’re using a 2.2.x event MPM in a production environment, would
> you mind reporting your experiences with it?

>From my experience it's absolutely as stable as MPM worker.
As for the documentation and the ``Experimental'': I think we should drop
it - it's been long enough. Instead we should just state that in SSL mode,
event MPM defaults to the behaviour of worker. A warning regarding thread
safety might be due, as I'm affraid this:
http://svn.apache.org/viewvc?view=revision&revision=1002824
won't be backportable.

> Thank you,
> 
> 
> 
> David

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

RE: [users@httpd] Event MPM in httpd 2.2.x

[David Dabbs]

-Original Message-
From: Igor Galić [mailto:i.ga...@brainsware.org] 
Sent: Thursday, February 03, 2011 6:16 PM
To: users@httpd.apache.org
Cc: dev
Subject: Re: [users@httpd] Event MPM in httpd 2.2.x


- "David Dabbs"  wrote:

> Hello.
> 
> I’m considering changing over to the event MPM, but as of 2.1.17 it is
> still marked with an “Experimental” warning in the MPM docs.

In the last couple of weeks (months?) there's been some fixes regarding
performance and one regarding SSL thread safety. At least the performance fix
should be easily back-portable.
http://svn.apache.org/viewvc?view=revision&revision=1064269

> Does anyone know why the experimental warning was dropped in the 2.3
> (trunk) documentation?

Not only that, it's also the default mpm.

> Was it somehow stabilized/made ready-for-primetime?
> 
> If you’re using a 2.2.x event MPM in a production environment, would
> you mind reporting your experiences with it?

>From my experience it's absolutely as stable as MPM worker.
As for the documentation and the ``Experimental'': I think we should drop
it - it's been long enough. Instead we should just state that in SSL mode,
event MPM defaults to the behaviour of worker. A warning regarding thread
safety might be due, as I'm affraid this:
http://svn.apache.org/viewvc?view=revision&revision=1002824
won't be backportable.

> Thank you,
> David

i



Thank you, Igor.

Since under SSL it falls back to worker, there shouldn’t be an SSL thread 
safety issue then, correct?
Just trying to follow you. . .

David




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

[users@httpd] URI with European characters‏

[NLR REDDY]

Hi,

We are implementing a German language website but our servers
 are located in USA. We have created files and folders for the site in 
german characters (like schließen.html). Now, the problem is apache is 
unable to decode when the user clicks a link which has uri with german 
characters. I see 404 status message even though I can see the file in 
the folder. Can anyone help me resolve the issue.

version of apache being used: 2.0.52.

Thanks

[users@httpd] block proxy GET access

[NLR REDDY]

Hi,

Is there a way to block proxy GET access using mod_rewrite rules? I have read 
in security journals that this is one of the security vulnerabilities.

Thanks
  

Re: [users@httpd] Missing static contents on 1st page hit with Apache+mod_jk

[Setya]

Thank you for your response,

I've found the cause of the problem, it seems that Apache doesn't like URL
that contains jsessionid. The solution is to use Rewrite to strip down
jsessionid.

Regards,

Setya


Nick Kew wrote:
> 
> On Mon, 31 Jan 2011 17:40:08 -0800 (PST)
> Setya  wrote:
> 
>> 
>> Hi,
>> 
>> From the logs, on 1st page hit requests are appended with jsessionid &
>> jsessionidversion, while the 2nd hit are not, maybe this is what causes
>> the
>> static contents are not rendered on 1st page hit ? Could somebody explain
>> about this ?
> 
> The jsession stuff is what your browser requested, and presumably
> come from your application on the glassfish.
> 
> The server has returned a bunch of redirects (302s).  This may
> be intentional.  If so, you need to figure out where the redirects
> are going (your browser can tell you that), and fix it.
> 
> The tutorial at http://www.apachetutor.org/admin/reverseproxies
> may help to understand why it's not working, although not all
> the techniques described there are applicable with mod_jk.
> 
> The fact that you're getting session stuff and redirects
> associated with static contents probably indicates a
> poorly-implemented application running on the glassfish.
> 
> 
> -- 
> Nick Kew
> 
> Available for work, contract or permanent.
> http://www.webthing.com/~nick/cv.html
> 
> -
> The official User-To-User support forum of the Apache HTTP Server Project.
> See http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>"   from the digest: users-digest-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 
> 
> 

-- 
View this message in context: 
http://old.nabble.com/Missing-static-contents-on-1st-page-hit-with-Apache%2Bmod_jk-tp30785418p30842447.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] URI with European characters‏

[Igor Galić]

- "NLR REDDY"  wrote:

> Hi,
> 
> We are implementing a German language website but our servers are
> located in USA. We have created files and folders for the site in
> german characters (like schließen.html). Now, the problem is apache is

What's your filesystem's locale?
What's the locale you're starting httpd with?


> unable to decode when the user clicks a link which has uri with german
> characters. I see 404 status message even though I can see the file in
> the folder. Can anyone help me resolve the issue.

What's your DefaultCharset?
http://httpd.apache.org/docs/current/mod/core.html#adddefaultcharset

> version of apache being used: 2.0.52.

That release is, at a rough estimate, 734 years old, but we'll assume
it's not at fault for this issue.

> Thanks

i

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.ga...@brainsware.org
URL: http://brainsware.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org