Apache Webserver Security and Optimization Tips

Question

I'm going to deal with managing and running my first Internet-connected Apache server, and I was wondering if there are sys administrators and developers who would like to share some of their knowledge regarding security and optimization tips for starting Apache web server.

Perhaps you can share your fifth (or ten) list of things that you immediately after installing the Apache web server (in the Linux box).

Any help is greatly appreciated.

Answer 1

The main

• , ​​ . Apache .
• , . , -, Apache .
• Apache root. .
• . , , ; logrotate .
• Apache . monit, setuo, . .
• Apache - (.. PHP, Perl, Rails) , , .
• 404 500. .
• Apache, , , .
• mod_security

• Apache DOS.
• .
• , , - .

• Apache , MPM (Multi-Processing Modules).
• .
• MaxClients, , .
• mod_deflate, DEFLATE, .

Answer 2

• , Apache root.
• .
• , , ssh.
• , . (. Iptables).
• , .
• Apache, .

Answer 3

• Chroot -
• ,
• mod_security
• -
• ,
• , nmap Metasploit

Answer 4

" Apache " " ", , , SCM .

, , . , , . :

• MaxClients . , prefork (, mod_perl, PHP ..). . , , .
• , Keepalives. . , - , .
• HTTPS, HTTPS .
• "Last-modified" "Expires" , ( ). .
• , HTTPS , , ( , HTTPS ).

Answer 5

LAMP (Linux, Apache, MySQL, PHP/PEARL/PYTHON): MySQL , Apache. (- ), .

Answer 6

Make sure you configure it to detect DOS attacks (denial of service).