[B! apache] ori53ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ori53 id:ori53

apacheã«é–¢ã™ã‚‹ori53ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (51)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

HTTPã‚³ãƒ³ãƒ†ãƒ³ãƒ„åœ§ç¸®ã¨Plack - blog.nomadscafe.jp
ã€ŒHTTPã‚³ãƒ³ãƒ†ãƒ³ãƒ„åœ§ç¸®ã¯ã©ã®ãƒ¬ã‚¤ãƒ¤ãƒ¼ã§è¡Œã†ã®ãŒã„ã„ã‹ã€ã§æ›¸ã„ãŸã‚Šã—ã¾ã—ãŸãŒã€é«˜ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ç’°å¢ƒã§ã¯ã€ã‚µãƒ¼ãƒé–“ã®é€šä¿¡é‡ã‚‚å•é¡Œã¨ãªã‚‹ãŸã‚ã€Applicationã‚µãƒ¼ãƒã§ã‚‚HTTPåœ§ç¸®ã‚’ã‹ã‘ãŸã»ã†è‰¯ã•ã’ã§ã™ã€‚Plackã«ã¯æ—¢ã«Plack::Middleware::Deflaterã¨ã„ã†Apacheã®mod_deflateç›¸å½“ã®MiddlewareãŒã‚ã‚‹ã®ã§ã™ãŒã€ã¡ã‚‡ã„ã¡ã‚‡ã„å¼„ã£ã¦ã„ãŸã‚Šã™ã‚‹ã®ã§ãã®ç´¹ä»‹ã€‚ ãã®å‰ã«ã€HTTPã‚³ãƒ³ãƒ†ãƒ³ãƒ„åœ§ç¸®ã®ãŠã•ã‚‰ã„ã§ã™ã€‚HTTPåœ§ç¸®ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®Accept-Encodingã«gzipã‚„deflateãŒã‚ã£ãŸå ´åˆã«ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’gzipã€deflateãªã©ã§åœ§ç¸®ã—ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®Content-Encodingãƒ˜ãƒƒãƒ€ã«åœ§ç¸®ã«ç”¨ã„ãŸæ–¹å¼ã‚’è¡¨è¨˜ã™ã‚‹ã“ã¨ã§å®Ÿç¾ã•ã‚Œã¾ã™ã€‚ã•ã‚‰ã«ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µãƒ¼ãƒé–“ã«ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãŒå˜åœ¨ã—ãŸå ´åˆã«ã€Accept-Encodingã‚’é€ã£ã¦
ori53 2014/11/05
apache
ãƒªãƒ³ã‚¯
Slowloris HTTP DoS æ”»æ’ƒã«ã¤ã„ã¦
ã¡ã‚‡ã£ã¨å‰ã«ã€€Apacheã«æ–°ãŸãªè„†å¼±æ€§ç™ºè¦‹ - ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãƒ‰ãƒƒãƒˆãƒ»ã‚¸ãƒ£ãƒ‘ãƒ³ã€€ã§ç´¹ä»‹ã•ã‚Œã¦ã„ãŸè„†å¼±æ€§ãªã‚“ã§ã™ã‘ã©ãƒ»ãƒ»ãƒ»ä¼šç¤¾ã®ãŠé”ã—ã§å„ã‚µãƒ¼ãƒ“ã‚¹æ¯Žã«çŠ¶æ³å ±å‘Šã£ã¦ã‚¤ãƒ™ãƒ³ãƒˆãŒã‚ã£ãŸã®ã§ã€ã¡ã‚‡ã„ã¨è„†å¼±æ€§è©¦é¨“ã—ã¦ã¾ã—ãŸã€‚ãã®ã¾ã¨ã‚ã§ã™ã€‚ Apacheã«ã€DoSæ”»æ’ƒã«ç¹‹ãŒã‚‹è„†å¼±æ€§ãŒæ–°ãŸã«è¦‹ã¤ã‹ã£ãŸãã†ã ï¼ˆæœ¬å®¶/.è¨˜äº‹ã‚ˆã‚Šï¼‰ ã“ã®è„†å¼±æ€§ã¯ã€ã“ã‚Œã‚’åˆ©ç”¨ã—ãŸHTTP DoSãƒ„ãƒ¼ãƒ«ã€ŒSlowlorisã€ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã“ã¨ã‹ã‚‰æ˜Žã‚‰ã‹ã«ãªã£ãŸã¨ã®ã“ã¨ã€‚ã“ã®æ”»æ’ƒãƒ„ãƒ¼ãƒ«ã¯Apacheã«ä¸å®Œå…¨ãªãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ãƒ¼ã‚’é€ã‚Šç¶šã‘ã‚‹ã‚‚ã®ã§ã€ApacheãŒæœ€å¾Œã®ãƒ˜ãƒƒãƒ€ãŒé€ã‚‰ã‚Œã¦ãã‚‹ã®ã‚’å¾…ã¤é–“ã€å½ã®ãƒ˜ãƒƒãƒ€ã‚’é€ã‚‹ã“ã¨ã§æŽ¥ç¶šã‚’ã‚ªãƒ¼ãƒ—ãƒ³ã«ã—ç¶šã‘ã€Apacheã®ãƒ—ãƒã‚»ã‚¹ã‚’ä¸€æ¯ã«ã•ã›ã‚‹ã‚‚ã®ã ã¨ã„ã†ã€‚ è„†å¼±æ€§ã¯Apache 1.xã€ 2.xã€ dhttpdã€ GoAhead WebServerã€ãã—ã¦Squidã«ã¦ç¢ºèªã•ã‚Œã¦ã„ã‚‹ãŒã€IIS6
ori53 2014/10/14
apache
ãƒªãƒ³ã‚¯
Apache requests stuck in '..reading..' state
We've recently been hitting our maxclients (300) on our server and are noticing a lot of connections are stuck in the R reading state. Here's an excerpt from our server-status dump: Current Time: Monday, 29-Apr-2013 11:46:00 PDT Restart Time: Monday, 29-Apr-2013 11:03:48 PDT Parent Server Generation: 0 Server uptime: 42 minutes 12 seconds Total accesses: 144170 - Total Traffic: 29.8 MB CPU Usage:
ori53 2014/10/14
apache

tcp
ãƒªãƒ³ã‚¯
[ãƒ¡ãƒ¢] Apache+mod_sslã§SIGBUSãŒç™ºç”Ÿã—ãŸä»¶
@hirose31ã•ã‚“ã¨ã€Apache HTTPDã‹ã‚‰HTTPSã§ãƒ•ã‚¡ã‚¤ãƒ«ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ä¸ã«ã‚µãƒ¼ãƒãƒ—ãƒã‚»ã‚¹ãŒSIGBUSã§æ»ã¬ã£ã¦ä»¶ã«ã¶ã¡ã‚ãŸã‚Šã€ ã€ŒOpenSSLã®ä¸ã§memcpyãŒSIGBUSã—ã¦ã¾ã™ã€ã€Œãªã€ãªã‚“ã ã£ã¦ãƒ¼ï¼ã€ ã£ã¦èª¿ã¹ãŸã®ã§ã™ãŒã€ç†ç”±ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã ã£ãŸã€‚ HTTPSã®å ´åˆã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆè¨å®šã ã¨ãƒ•ã‚¡ã‚¤ãƒ«èªè¾¼ã«mmap(2)ãŒä½¿ã‚ã‚Œã‚‹ mmapã•ã‚ŒãŸãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚µã‚¤ã‚ºãŒå¤‰æ›´ã•ã‚Œã¦ã‚‚Apacheã¯ãã‚Œã‚’æ¤œçŸ¥ã—ã‚ˆã†ãŒãªã„ ãã—ã¦ã€ãƒ•ã‚¡ã‚¤ãƒ«æœ«å°¾ä»¥é™ã®ãƒ‡ãƒ¼ã‚¿ã‚’èªã‚‚ã†ã¨ã™ã‚‹ã¨ã‚»ã‚°ãƒ¡ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã‚¨ãƒ©ãƒ¼(SIGBUS)ãŒç™ºç”Ÿã—ã€Apacheã®ã‚µãƒ¼ãƒãƒ—ãƒã‚»ã‚¹ã¯ç•°å¸¸çµ‚äº†ã™ã‚‹ HTTPã®å ´åˆã¯ã€ãƒãƒ¼ã‚«ãƒ«ãƒ•ã‚¡ã‚¤ãƒ«ã‚·ã‚¹ãƒ†ãƒ ã®å ´åˆsendfile(2)ãŒä½¿ã‚ã‚Œã‚‹ã®ã§ã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚µã‚¤ã‚ºãŒå¤‰æ›´ã«ãªã£ã¦ã‚‚Apacheã¯ç•°å¸¸çµ‚äº†ã—ãªã„ ãŸã ã—ã€mod_deflateã®ã‚ˆã†ãªå‡ºåŠ›ãƒ•ã‚£ãƒ«ã‚¿ã‚’ä½¿ã£ã¦ã„ã‚‹å ´åˆã¯ã€HTTP
ori53 2014/05/21
apache
ãƒªãƒ³ã‚¯
Apache HTTPD: `Options -FollowSymLinks` ã¯ä¸å®Œå…¨ - ãƒ€ãƒ¡å‡ºã— Blog
ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯æ”»æ’ƒã‚’é˜²ããŸã‚ã® Apache HTTPD ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è§£èª¬ã¯ã“ã¡ã‚‰: Apache HTTPD: mod_allowfileowner https://fumiyas.github.io/apache/mod-allowfileowner.html èƒŒæ™¯ ãƒãƒªãƒãƒƒãƒ—ã®å…±æœ‰ Web ã‚µãƒ¼ãƒ“ã‚¹ä¸‹ã®ã‚µã‚¤ãƒˆæ”¹ã–ã‚“äº‹ä»¶ã§ã€ æ”»æ’ƒæ‰‹æ³•ã®ä¸€ã¤ã¨ã—ã¦ ã€Œä»–ãƒ¦ãƒ¼ã‚¶ãƒ¼æ‰€æœ‰ã®ãƒ•ã‚¡ã‚¤ãƒ«ã¸ã®ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’è‡ªåˆ†ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªä¸‹ã«ä½œã‚Šã€Apache HTTPD çµŒç”±ã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã€æ‰‹é †ãŒåˆ©ç”¨ã•ã‚ŒãŸã‚‰ã—ã„ã€‚ å‚è€ƒ: http://blog.tokumaru.org/2013/09/symlink-attack.html å½“ç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã€Œãƒãƒªãƒãƒƒãƒ—ï¼ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚µã‚¤ãƒˆã¸ã®ç¬¬ä¸‰è€…ã«ã‚ˆã‚‹å¤§è¦æ¨¡æ”»æ’ƒã«ã¤ã„ã¦ http://lolipop.jp/info/news/4149/#090
ori53 2013/09/04
security

apache
ãƒªãƒ³ã‚¯
æŸãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§ã®å¤§è¦æ¨¡æ”¹ã–ã‚“ã§èµ·ã“ã£ã¦ã„ãŸï¼ˆã¨æŽ¨æ¸¬ã•ã‚Œã‚‹ï¼‰çŠ¶æ…‹ã®æ•´ç†ã€‚ | æŠ€è¡“ç³»ãƒ¡ãƒ¢
2013/08/31 01:36 åˆç‰ˆ 2013/08/31 10:00 å‚è€ƒãƒªãƒ³ã‚¯è¿½åŠ 2013/08/31 18:45 ä½“è£å¤‰æ›´ã¨ã€Œå‘¨è¾ºæƒ…å ±ã¨ã“ã‚Œã‚‰ã‹ã‚‰ã®æŽ¨æ¸¬ã€ã¸è¿½è¨˜ã€€æ³¨æ„å–šèµ·è¿½è¨˜ 2013/09/02 11:55 å¾³ä¸¸ã•ã‚“ã®è§£èª¬è¨˜äº‹ã¸ã®ãƒªãƒ³ã‚¯ã‚’è¿½åŠ 2013/09/03 12:30 ã•ã¨ã†ãµã¿ã‚„ã™ã•ã‚“ã®è§£èª¬è¨˜äº‹ã¸ã®ãƒªãƒ³ã‚¯ã‚’è¿½åŠ ã€€æ³¨æ„å–šèµ·è¿½è¨˜ã€€ãŠé¡˜ã„è¿½è¨˜ 2013/09/09 22:15 å…¬å¼ãƒªãƒªãƒ¼ã‚¹[2013/09/09 20:42 è¿½è¨˜]ã«ã¤ã„ã¦ è¿½è¨˜ 2013/09/09 22:30 æŸã‚°ãƒ«ãƒ¼ãƒ—ä»£è¡¨ã®æŠ•ç¨¿ã«ã¤ã„ã¦å‚è€ƒãƒªãƒ³ã‚¯ã«è¿½è¨˜ http://lolipop.jp/info/news/4151/ http://lolipop.jp/info/news/4149/ [è¿½è¨˜ 2013.09.09. 22:15]â† ã“ã¡ã‚‰ã«[2013/09/09 20:42 è¿½è¨˜]ã¨ã—ã¦äº‹è±¡èª¬æ˜ŽãŒå‡ºã¾
ori53 2013/09/02
security

apache

wordpress
ãƒªãƒ³ã‚¯
ãƒãƒªãƒãƒƒãƒ—ã®ã‚µã‚¤ãƒˆæ”¹ã–ã‚“äº‹ä»¶ã«å¦ã¶ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯æ”»æ’ƒã®è„…å¨ã¨å¯¾ç–
æ—¢ã«å ±é“ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã«ã€ãƒãƒªãƒãƒƒãƒ—ï¼ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹æ”¹ã–ã‚“æ”»æ’ƒã«ã‚ˆã‚Šã€è¢«å®³ã‚’å—ã‘ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼æ•°ã¯8428ä»¶ã«ã®ã¼ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ã“ã“ã¾ã§å½±éŸ¿ãŒå¤§ãããªã£ãŸåŽŸå› ã¯ã€å ±é“ã«ã‚ˆã‚‹ã¨ã€(1)ã€ŒWordPressã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã‚„ãƒ†ãƒ¼ãƒžã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã€ã—ã€ä¸æ£ãªãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸã€(2)ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³è¨å®šã®ä¸å‚™ã‚’æ‚ªç”¨ã•ã‚Œã¦è¢«å®³ãŒæ‹¡å¤§ã—ãŸã€ã¨ã„ã†ã“ã¨ã®ã‚ˆã†ã§ã™ã€‚ 29æ—¥å¤œã®æ™‚ç‚¹ã§ã¯ã€æ”»æ’ƒè€…ã®æ”¹ã–ã‚“æ‰‹æ³•ã«ã¤ã„ã¦ã€ŒWordPressã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã‚„ãƒ†ãƒ¼ãƒžã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã€ã—ã€ä¸æ£ãªãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã•ã‚Œã¦ã€Œwp-config.phpã®ã€ã®è¨å®šæƒ…å ±ãŒæŠœãå‡ºã•ã‚ŒãŸã¨èª¬æ˜Žã—ã¦ã„ãŸãŒã€30æ—¥åˆå¾Œ7æ™‚éŽãŽã®èª¬æ˜Žã§ã€ã“ã®è„†å¼±æ€§ãŒä¾µå…¥çµŒè·¯ã¨ãªã£ã¦åŒç¤¾ã®ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³è¨å®šã®ä¸å‚™ã‚’æ‚ªç”¨ã•ã‚ŒãŸã“ã¨ãŒåŽŸå› ã ã£ãŸã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ ã€Œãƒãƒªãƒãƒƒãƒ—ã€ã®WordPressã‚µã‚¤ãƒˆæ”¹ã–ã‚“è¢«å®³ã€åŽŸå› ã¯ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³è¨å®šä¸å‚™
ori53 2013/09/02
security

php

apache
ãƒªãƒ³ã‚¯
http://whmscripts.net/misc/2013/apache-symlink-security-issue-fixpatch/
ori53 2013/08/30
apache

php
ãƒªãƒ³ã‚¯
mod_vhost_alias - Apache HTTP Server Version 2.2
Please note This document refers to the 2.2 version of Apache httpd, which is no longer maintained. The active release is documented here. If you have not already upgraded, please follow this link for more information. You may follow this link to go to the current version of this document.
ori53 2012/11/01
apache
ãƒªãƒ³ã‚¯
NameBasedSSLVHostsWithSNI - HTTPD - Apache Software Foundation
SSL with Virtual Hosts Using SNI Summary Using name-based virtual hosts with SSL adds another layer of complication. Without the SNI extension, it's not generally possible (though a subset of virtual host might work). With SNI, it's necessary to consider the configuration carefully to ensure security is maintained. (Note: this page is just about support that comes with the Apache web server. Alter
ori53 2012/09/27
å˜ä¸€IPã«è¤‡æ•°ã®SSLè¨¼æ˜Žæ›¸ãŒä½¿ãˆã‚‹ã®ã‹ï¼Ÿã¡ã‚‡ã£ã¨è©¦ã—ã¦ã¿ãŸã„

apache
ãƒªãƒ³ã‚¯
Apacheã®SNIã«ã¤ã„ã¦ [ãŒã‚‰ããŸãƒãƒƒãƒˆ]
SNIã¨ã¯Server Name Indicationã®ç•¥ã§SSLãƒ—ãƒãƒˆã‚³ãƒ«ã®æ‹¡å¼µæ©Ÿèƒ½ã€‚ä½•ãŒï¼Ÿã¨ã„ã†ã¨åå‰ãƒ™ãƒ¼ã‚¹ã®SSLã‚µã‚¤ãƒˆãŒè¨å®šã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚ã¤ã¾ã‚Šã€1IPä¸Šã«è¤‡æ•°ã®SSLã‚µã‚¤ãƒˆã‚’æ§‹ç¯‰ã§ãã‚‹ã“ã¨ã«ãªã‚‹ã€‚ ä»Šã¾ã§ã¯SSLã‚µã‚¤ãƒˆã‚’ä½œæˆã™ã‚‹ã«ã‚ãŸã‚Šã€å¿…ãš1IPã‚’æ¶ˆè²»ã—ã¦ã„ãŸã€‚ SNIã§ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒã‚µãƒ¼ãƒã«å¯¾ã—ã¦ã‚µãƒ¼ãƒã®ãƒ›ã‚¹ãƒˆåã‚’ä¼ãˆã‚‹äº‹ãŒå®šç¾©ã•ã‚Œã¦ã„ã‚‹ã€‚ ä»Šã¾ã§ã¯ã‚µãƒ¼ãƒã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã—ã¦SSLè¨¼æ˜Žæ›¸ã®ã‚„ã‚Šå–ã‚Šã®ãŸã‚ã«é€šä¿¡ã—ã¦ã„ãŸéƒ¨åˆ†ã ã€‚ åˆ©ç”¨æ¡ä»¶
ori53 2012/09/27
apache
ãƒªãƒ³ã‚¯
æœ€æ–°ã®ãƒã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã«ãƒªãƒ³ã‚¯ãŒä½œã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸ Apache 2.4.1 ã® rotatelogs ã‚’è©¦ã™ - blog.nomadscafe.jp
ã“ã®æ©Ÿèƒ½æ¬²ã—ã‹ã£ãŸã‚“ã ã‚ˆããƒ¼ã€‚ CustomLogã§ã€pipeã—ã¦rotatelogsã‚’ä½¿ã£ã¦ãƒã‚°åˆ†å‰²ã‚’è¡Œã†å ´åˆã€ CustomLog "|/path/to/rotatelogs /path/to/log/access_log.%Y%m%d%H 7200 540" ãƒã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã¯ã€ $ ls -1 access_log.2012030116 access_log.2012030118 ã®æ§˜ã«æœ€æ–°ã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒå¤‰æ›´ã«ãªã‚Šã¾ã™ã€‚tail -f ã§è¿½ã„ã‹ã‘ã¦ã„ãŸå ´åˆã¯ã€é€”ä¸ã§ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ‰‹å‹•ã§åˆ‡ã‚Šæ›¿ãˆãªã„ã¨ãªã‚‰ãªã„ã®ã§ã¨ã¦ã‚‚ä¸ä¾¿ã§ã™ã€‚ã¾ãŸã€fluentdã®tail pluginã‚‚åˆ©ç”¨ã§ãã¾ã›ã‚“ã€‚ Apache 2.4.1 ã®rotatelogsã§ã¯ã€æœ€æ–°ã®ãƒ•ã‚¡ã‚¤ãƒ«ã«å¯¾ã—ã¦ãƒãƒ¼ãƒ‰ãƒªãƒ³ã‚¯ã‚’å¼µã‚‹æ©Ÿèƒ½ãŒè¿½åŠ ã•ã‚ŒãŸã®ã§ã€ã¨ã‚Šã‚ãˆãšè©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ $ wget http://ftp.riken.jp/net/
ori53 2012/08/16
fluentd

apache

rotatelogs
ãƒªãƒ³ã‚¯
mod_proxyã®ProxyPassReverseã®æ„å‘³ãŒã‚ˆã†ã‚„ãç†è§£ã§ããŸ - ã†ã¾ã„ã¼ã†ã¶ã‚ã
æ°—ãŒã™ã‚‹ï¼ ãªãœProxyPassReverseã«balancer://~~ ã‚’è¨å®šã§ããªã„ã®ã‹ *1 ãªãœProxyPassReverseã«ajp://~~ ã‚’è¨å®šã§ããªã„ã®ã‹ ãªãœbackendãŒhttpã¨ajpã®å ´åˆã§ã€ProxyPassReverseã«è¨å®šã™ã‚‹URLãŒç•°ãªã‚‹ã®ã‹ ãªã©ãªã©ã€‚ä»Šã¾ã§ã¯mod_proxyã™ã‚‹æ©Ÿä¼šãŒã»ã¨ã‚“ã©ãªãé©å½“ã«ãŠèŒ¶ã‚’æ¿ã—ã¦ã„ãŸã®ã§ã€ä¸–é–“ã®äººã‹ã‚‰ç›¸å½“é…ã‚Œã¦ã„ã‚‹ã¨ã¯æ€ã„ã¾ã™ãŒã€ã›ã£ã‹ããªã®ã§è‡ªåˆ†ç”¨ã¾ã¨ã‚ã€‚æ€ã„ã¤ã„ãŸã“ã¨ã‚’ã¤ã‚‰ã¤ã‚‰ã¨ãƒ¡ãƒ¢ã£ã¦ã„ã‚‹ã‹ã‚‰ã‹ãªã‚Šå†—é•·ã§ã™ãŒã€‚ è¿½è¨˜ 20100907 http://ftp.riken.jp/net/apache//httpd/CHANGES_2.2 apache 2.2.12 ã‹ã‚‰ã€balancer:// ã®URLã«ã‚‚ProxyPassReverseãŒä½¿ãˆã‚‹ã‚ˆã†ã«mod_proxyãŒãƒ‘ãƒ¯ãƒ¼ã‚¢ãƒƒãƒ—ã—ã¦ã„ã¾ã—ãŸã€‚ *)
ori53 2012/06/06
apache

tomcat

mod_proxy
ãƒªãƒ³ã‚¯
Apache 2.4.1ã¾ã¨ã‚ â€“ ãƒªãƒªãƒ¼ã‚¹å¾Œ2é€±é–“ã‚’è¿Žãˆã¦ | äººé–“ã¨ã‚¦ã‚§ãƒ–ã®æœªæ¥
Apache2.4.1ãŒãƒªãƒªãƒ¼ã‚¹ã—ã¦ã‹ã‚‰ã€ç´„2é€±é–“ãŸã£ãŸã€‚ è‡ªåˆ†ãŒæ€ã£ã¦ã„ãŸä»¥ä¸Šã«ã€ä¸–ã®ä¸ã®äººã¯Apacheã‚„Webã‚µãƒ¼ãƒã«é–¢å¿ƒãŒã‚ã‚‹ã‚ˆã†ã§ã€ã“ã®2é€±é–“ã§ã‚‚ã‹ãªã‚Šã®æ¤œè¨¼ã‚„èª¿æŸ»ãŒè¡Œã‚ã‚Œã¦ã„ãŸã€‚åƒ•è‡ªèº«ã‚‚ã€è‡ªåˆ†ã®è¨˜äº‹ã‚’ã“ã“ã¾ã§è¦‹ã¦é ‚ã‘ã¦å…‰æ „ã§ã‚ã‚‹ã€‚ ã¨ã„ã†ã“ã¨ã§ã€2é€±é–“ãŸã£ãŸã®ã§Apache2.4.1ã«é–¢ã—ã¦æ³¨ç›®ã•ã‚ŒãŸï¼ˆå€‹äººçš„ã«ï¼‰9ã¤ã®è¨˜äº‹ã‚’ã¾ã¨ã‚ã¦ãŠããŸã„ã¨æ€ã†ã€‚
ori53 2012/03/27
ã¾ã¨ã‚

apache
ãƒªãƒ³ã‚¯
Apache httpd 2.4.1ã‚’è©¦ã—ã¦ã¿ãŸ
æŽ¥ç¶šæ•°ã¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆ/ç§’ã¯server-statusãƒãƒ³ãƒ‰ãƒ©ãƒ¼ã§å–å¾—ã—ãŸã‚‚ã®ã§ã™ã€‚ä½¿ç”¨å¸¯åŸŸã«ã¤ã„ã¦ã¯ã€2.2ã®server-statusã¯æ£ç¢ºãªå€¤ã‚’è¿”ã•ãªã„ã®ã§2.4.1ã¨ã¯æ¯”è¼ƒã§ãã¾ã›ã‚“ã€‚ãã“ã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ã‚¤ã‚¹ã®å‡ºåŠ›å¸¯åŸŸã®ç›´è¿‘ã®5åˆ†å¹³å‡ã‚’æŽ¡ã‚Šã¾ã—ãŸã€‚ãƒ¡ãƒ¢ãƒªãƒ¼ã®ä½¿ç”¨é‡ã¨CPUã®ä½¿ç”¨çŽ‡ã¯ã€httpdã®ãƒ—ãƒã‚»ã‚¹ã®åˆè¨ˆã®å€¤ã‚’prstat -aã§èª¿ã¹ã¾ã—ãŸã€‚ å‡ºåŠ›å¸¯åŸŸã‚’è¦‹ã‚‹é™ã‚Šã€ã©ã¡ã‚‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚‚åŒæ§˜ãªè² è·çŠ¶æ³ã«ã‚ã‚Šã¾ã™ã€‚å‡ºåŠ›å¸¯åŸŸã«ã¯FTPã‚„rsyncã‚‚å«ã¾ã‚Œã¦ã„ã¾ã™ãŒã€HTTPãŒã»ã¨ã‚“ã©ã ã‹ã‚‰ã§ã™ã€‚ã—ã‹ã—ã€æŽ¥ç¶šæ•°ã‚„ãƒªã‚¯ã‚¨ã‚¹ãƒˆ/ç§’ã¯2.2.22ã‚ˆã‚Š2.4.1ã®ã»ã†ãŒãšã£ã¨å°ã•ã„ã§ã™ã€‚ã¾ã ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’èªã‚“ã§ã„ãªã„ã®ã§æ£ç¢ºãªã“ã¨ã¯ã‚ã‹ã‚Šã¾ã›ã‚“ãŒã€è¨ˆæ¸¬æ–¹æ³•ãŒç•°ãªã£ã¦ã„ã‚‹ãŸã‚ã§ã¯ãªã„ã‹ã¨æ€ã„ã¾ã™ã€‚å•é¡Œã®ãƒ¡ãƒ¢ãƒªãƒ¼ã¨CPUã®ä½¿ç”¨çŠ¶æ³ã§ã™ãŒã€2.2.22ã‚ˆã‚Šã‚‚2.4.1ã®ã»ã†ãŒ2å€ä»¥ä¸Šå¤§ãããªã£ã¦
ori53 2012/03/27
worker MPMã«ãŠã„ã¦ã¯2.2ç³»ã®ã»ã†ãŒãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãŒè‰¯ã„ã¨ãªã€‚

apache
ãƒªãƒ³ã‚¯
hashdosæ”»æ’ƒã‚’mod_securityã§é˜²å¾¡ã™ã‚‹(CentOS+yumç·¨)
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€hashdoså¯¾ç–ã¨ã—ã¦ã®mod_securityã®å°Žå…¥ã¨è¨å®šã®æ–¹æ³•ã‚’èª¬æ˜Žã—ã¾ã™ã€‚CentOSç’°å¢ƒã§yumã«ã‚ˆã‚ŠApacheã‚’å°Žå…¥ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã«å¯¾ã—ã¦ã€yumã«ã‚ˆã‚Šmod_securityã‚’å°Žå…¥ã™ã‚‹ã¨ã„ã†ã‚·ãƒŠãƒªã‚ªã§èª¬æ˜Žã—ã¾ã™ã€‚ ã¯ã˜ã‚ã«æ—¢ã«å½“ãƒ–ãƒã‚°ã§å ±å‘Šã®é€šã‚Šã€hashdosã¨å‘¼ã°ã‚Œã‚‹æ”»æ’ƒæ‰‹æ³•ãŒå…¬è¡¨ã•ã‚Œã¦ã„ã¾ã™ã€‚HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿åã«å¯¾ã™ã‚‹ãƒãƒƒã‚·ãƒ¥å€¤ã‚’æ•…æ„ã«åŒä¸€ã«ã—ãŸ(è¡çªã•ã›ãŸ)ã‚‚ã®ã‚’å¤šæ•°ï¼ˆæ•°ä¸‡ç¨‹åº¦ï¼‰é€ä¿¡ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€Webã‚µãƒ¼ãƒãƒ¼ã‚’æ•°åˆ†ç¨‹åº¦éŽè² è·ã«ã§ãã‚‹ã¨ã„ã†DoSæ”»æ’ƒæ‰‹æ³•ã§ã™ã€‚ã¾ã hashdosã«ã‚ˆã‚‹æ”»æ’ƒäº‹ä¾‹ã¯å ±å‘Šã•ã‚Œã¦ã„ãªã„ã‚ˆã†ã§ã™ãŒã€æ—¢ã«æ”»æ’ƒã‚³ãƒ¼ãƒ‰ï¼ˆPoCï¼‰ãŒå…¬è¡¨ã•ã‚Œã¦ã„ã‚‹ãŸã‚ã€ã„ã¤æ”»æ’ƒãŒèµ·ã“ã£ã¦ã‚‚ä¸æ€è°ã§ã¯ãªã„çŠ¶æ³ã§ã™ã€‚ PHPã‚‚å½±éŸ¿ã‚’å—ã‘ã‚‹ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã§ã‚ã‚Šã€PHP5.3.9ã§å¯¾å‡¦äºˆå®šã¨ãªã£ã¦ã„ã¾ã™ãŒã€ã¾ã PHP5.3.9ã¯ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦
ori53 2012/01/04
epelã§mod_securityå…¥ã‚Œã¦ãŸãªã€‚æœ‰åŠ¹ã«ã—ã¦ãªã„ã‘ã©ã€‚

php

security

apache
ãƒªãƒ³ã‚¯
Apacheã‚µãƒ¼ãƒã‚’é‹ç”¨ã™ã‚‹æ™‚ã«ä½œæ¥åŠ¹çŽ‡ã‚’100å€ã«ã™ã‚‹æ–¹æ³•ï¼ˆè¿½è¨˜ã‚ã‚Šï¼‰ - oranie's blog
.bashrcã« alias htvi='vi /etc/httpd/conf/httpd.conf 'ã‚’è¿½è¨˜ã—ã¦ãŠãï¼ sudoã‚’ã¡ã‚ƒã‚“ã¨ã‚„ã£ã¦ã„ã‚‹ãªã‚‰ 9/20è¿½è¨˜ï¼šä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã¯å±é™ºã§ã™ï¼ç†ç”±ãªã©ã¯æ¬¡ã®ã‚¨ãƒ³ãƒˆãƒªã§ã€‚ alias htvi='sudo vi /etc/httpd/conf/httpd.conf 'ã§ã™ãï¼ ä»¥ä¸Šï¼ ã¨ã„ã†ã—ã‚‡ã£ã¡ã‚…ã†ã„ã˜ã‚‹å¯èƒ½æ€§ãŒã‚ã£ã¦ã€ãƒ‘ã‚¹ãŒæ·±ã„æ‰€ã«ã‚ã‚‹configã¨ã‹ã„ã˜ã‚‹ã‚³ãƒžãƒ³ãƒ‰ã¯ aliasåˆ‡ã£ã¦ãŠãã¨æ¥½ã¨ã„ã†ã€å¤šåˆ†ç¸„æ–‡æ™‚ä»£ã‹ã‚‰ã‚ã‚‹ãƒã‚¿ã§ã™ã€‚
ori53 2011/09/21
apache
ãƒªãƒ³ã‚¯
Apacheã®è² è·ã®çŠ¶æ³ã‚’ç›£è¦–ã§ãã‚‹ã€apachetop - UNIXçš„ãªã‚¢ãƒ¬
Unix/Linuxç³»OSã®å ´åˆã§ã€è² è·ç›£è¦–ã®ãƒ„ãƒ¼ãƒ«ã¨ã„ãˆã°topãŒæœ‰åã§ã™ãŒã€apacheã®è©³ç´°ã¾ã§ã¯ç›£è¦–ã™ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã€‚ ã¨ãã«ã€ã‚ã‚‹ç¨‹åº¦ã®ã‚¢ã‚¯ã‚»ã‚¹æ•°ã®ã‚ã‚‹Webã‚µã‚¤ãƒˆã‚’é‹ç”¨ã—ãŸã“ã¨ã®ã‚ã‚‹æ–¹ãªã‚‰ã‚ã‹ã‚‹ã¨æ€ã„ã¾ã™ãŒã€æ”»æ’ƒã¨æ€ã‚ã‚Œã‚‹ã‚ˆã†ãªè² è·ã«å‡ºãã‚ã™ã“ã¨ã¯ã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚ ãã‚“ãªã¨ãã«ã€ç°¡å˜ã«apacheã®çŠ¶æ³ã‚’èª¿ã¹ã‚‹ã“ã¨ãŒã§ãã‚‹ã®ãŒapachetopã§ã™ã€‚ ã©ã‚“ãªã¨ãã«ä½¿ã†ï¼Ÿ apachetopã¨ã„ã†ã“ã¨ã§ã€ä½¿ç”¨ã™ã‚‹ã®ã¯WebServerã§ã™ã€‚ã‚¢ã‚¯ã‚»ã‚¹ãŒå¤šãã§ã‚µãƒ¼ãƒãƒ¼ãŒé«˜è² è·ã«ãªã£ã¦ã„ã‚‹ãªãƒ¼ã¨ã‚ã‚‹ç¨‹åº¦è‡ªåˆ†ãªã‚Šã«åˆ¤æ–ã§ããŸã¨ãã«ä½¿ã„ã¾ã™ã€‚ Debian/Ubuntuã§ã‚ã‚Œã°ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã¯ç°¡å˜ã€‚ # sudo apt-get update # sudo apt-get install apachetop ç°¡å˜ã«ä½¿ã£ã¦ã¿ã‚ˆã† ä½¿ç”¨æ–¹æ³•ã‚‚ç°¡å˜ã§ã™ã€‚ apachetopã¯apacheã®ã‚¢ã‚¯
ori53 2011/09/06
apache

ç›£è¦–
ãƒªãƒ³ã‚¯
Apache Tomcat Configuration Reference - The HTTP Connector
Links Docs HomeConfig Ref. HomeTop Level Elements ServerServiceConnectors HTTPAJPContainers ContextEngineHostNested Components Global ResourcesLoaderManagerRealmResourcesValveOther FilterSystem properties The HTTP Connector element represents a Connector component that supports the HTTP/1.1 protocol. It enables Catalina to function as a stand-alone web server, in addition to its ability to execute
ori53 2011/08/11
tomcat

apache
ãƒªãƒ³ã‚¯
ApacheStats 0.8.2 (multiple RRD, Low hdd, Script Server) - Cacti
RCK Cacti User Posts: 54 Joined: Fri Jan 26, 2007 12:38 pm Dear community, I released a new version of ApacheStats with one goal in mind: reduce disk usage. The previous versions were using only one "Data Template", the results was each graph was using one 733K RRD file with same data inside. In order to change that, I have updated the php script to filter each graph data, and rebuild the whole te
ori53 2011/06/21
ç›£è¦–

cacti

apache
ãƒªãƒ³ã‚¯
1 2 3 æ¬¡ã®ãƒšãƒ¼ã‚¸