Apache

1.Apache作用

在web被访问时通常使用http://的方式

http:// 超文本传输协议

http:// 超文本传输协议提供软件：

Apache

nginx

stgw

jfe

Tengine

2. Apache的安装与启用

dnf install httpd.x86_64 -y

systemctl enable --now httpd 开启服务并设定服务位开机启动

firewall-cmd --list-all 查看火墙信息

firewall-cmd --permanent --add-service=http 在火墙中永久开启http访问

firewall-cmd --permanent --add-service=https 在火墙中永久开启https访问

firewall-cmd --reload 刷新火墙使设定生效

3.Apache的基本信息

服务名称：httpd

配置文件：

/etc/httpd/conf/httpd.conf 主配置文件

/etc/httpd/conf.d/*.conf 子配置文件

默认发布目录： /var/www/html

默认发布文件： index.html

默认端口：80 http

                       443 https

用户: apache

日志： /etc/httpd/logs

 4.Apache的基本配置

Apache端口修改

vim /etc/httpd/conf/httpd.conf

Listen 8080

firewall-cmd --permanent --add-port=8080/tcp

firewall-cmd --reload

systemctl restart httpd

http://172.25.254.100:8080

默认发布文件

vim /etc/httpd/conf/httpd.conf

DirectoryIndex westos.html index.html

systemctl restart httpd

默认发布目录

mkdir /westos/html 

vim /etc/httpd/conf/httpd.conf

DocumentRoot "/westos/html"

<Directory "/westos/html">

Require all granted

</Directory>

systemctl restart httpd

firefox http://192.168.0.101

5.Apache的访问控制

实验素材

mkdir /var/www/html/westos

vim /var/www/html/westos/index.html

<h1>westosdir's page</h1>

firefox http://192.168.0.11/westos

基于客户端ip的访问控制

ip白名单

<Directory "/var/www/html/westos">

Order Deny,Allow

Allow from 192.168.0.10

Deny from All

</Directory>

ip黑名单

<Directory "/var/www/html/westos">

Order Allow,Deny

Allow from All

Deny from 192.168.0.10

</Directory

基于用户认证

vim /etc/httpd/conf/httpd.conf

<Directory "/var/www/html/westos">

AuthUserfile /etc/httpd/htpasswdfile 指定认证文件

AuthName "Please input your name and password" 认证提示语

AuthType basic 认证类型

Require user admin 允许通过的认证用户 2选1

Require valid-user 允许所有用户通过认证 2选1

</Directory>

htpasswd -cm /etc/httpd/htpasswdfile admin 生成认证文件

 

 

6.Apache的虚拟主机 

mkdir -p /var/www/westos.com/{news,wenku}

echo "wenku's page" >/var/www/westos.com/wenku/index.html

echo "news's page" > /var/www/westos.com/news/index.html

echo "default's page" > /var/www/html/index.html

vim /etc/httpd/Vhost.conf

<VirtualHost _default_:80>

DocumentRoot "/var/www/html"

CustomLog logs/default.log combined

</VirtualHost>

<VirtualHost *:80>

ServerName wenku.westos.com

DocumentRoot "/var/www/westos.com/wenku"

CustomLog logs/wenku.log combined

</VirtualHost>

 

7.Apache的语言支持

php

vim /var/www/html/index.php

<?php

phpinfo();

?>

dnf install php -y

systemctl restart httpd

firefox http://192.168.0.11/index.php

cgi

mkdir /var/www/html/cgi

vim /var/www/html/cgidir/index.cgi

#!/usr/bin/perl

print "Content-type: text/html\n\n";

print `date`;

 vim /etc/httpd/conf.d/vhost.conf

<Directory "/var/www/html/cgidir">

Options +ExecCGI

AddHandler cgi-script .cgi

</Directory>

firefox http://192.168.0.11/cgidir/index.cgi

 

 

wsgi

书写wsgi的测试文件

vim /var/www/html/wsgi/index.wsgi

def application(env, westos):

westos('200 ok',[('Content-Type', 'text/html')])

return [b'hello westos ahhahahahah!']

dnf install python3-mod_wsgi

systemctl restart httpd

 

vim /etc/httpd/conf.d/vhost

<VirtualHost *:80>

ServerName wsgi.westos.org

WSGIScriptAlias / /var/www/html/wsgi/index.wsgi

</VirtualHost>

 8.Apache的加密访问

安装加密插件

dnf install mod_ssl -y生成证书

 生成证书

mkdir /etc/httpd/certs

openssl req --newkey rsa:2048 -nodes -sha256 -keyout /etc/httpd/certs/westos.org.key 

-x509 -days 365 -out /etc/httpd/westos.org.crt

修改文件 vim /etc/httpd/conf.d/ssl.conf

修改后重启httpd服务

systemctl restart httpd

mkdir 

 

  修改 vim /etc/httpd/conf.d/vhost.conf

<VirtualHost *:80>

ServerName login.westos.com

RewriteEngine on

RewriteRule ^(/.*)$ https://%{HTTP_HOST}$1

</VirtualHost>

<VirtualHost *:443>

ServerName login.westos.com

DocumentRoot "/www/westos.com/login"

CustomLog logs/login.log combined

SSLEngine on

SSLCertificateFile /etc/pki/tls/certs/www.westos.com.crt

SSLCertificateKeyFile /etc/pki/tls/private/www.westos.com.key

</VirtualHost>

 systemctl restart httpd

9.Squid+Apache  

在双网卡主机中

dnf install squid -y

vim /etc/squid/squid.conf

 http_access allow all

 cache_dir ufs /var/spool/squid 100 16 256

systemctl restart squid

firewall-cmd --permanent --add-port=3128/tcp

firewall-cmd --reload

 

测试：

firefox http:/172.25.254.30

访问看到的时172.25.254.20上的数据