RE: [users@httpd] SSL setup assistance

2024-09-18 Thread Marc
> > I am running Apache on a Windows server with at least close to latest > release. It host my personal website and a website for my home Christmas > light show. Just simple static web pages - nothing fancy at all. There > is absolutely nothing that needs any degree of security. As such I hav

RE: [users@httpd] Location of Web Site Pages

2024-08-20 Thread Marc
> I have been trying to find the location of the actual html pages that you > see on my website so I can edit them. But in my document root I only have > > 400.shtml > iew&p=/var/www/html&f=400.shtml#new> 229 28-Oct-2

RE: [users@httpd] temporary enable/disable access

2024-08-02 Thread Marc
> > > I have currently such virtual host config: > > > 1 > 2 AllowOverride All > 3 Require all granted > 4 > >45 >46 Order deny,allow >47 Deny from all >48 #Allow from all >

[users@httpd] temporary enable/disable access

2024-08-01 Thread Marc
I have currently such virtual host config: 1 2 AllowOverride All 3 Require all granted 4 45 46 Order deny,allow 47 Deny from all 48 #Allow from all 49 Allow from 1.1.1.1 50 #Allow from 2.2.2.2 51 # allow cron The ide

RE: [users@httpd] apache reverse proxy question -- i think

2024-07-13 Thread Marc
You can't do this with something like alias? Alias "/images/logo.svg" "/var/www/html/berat/public/logo.svg" > > I'd like something like:: > >ProxyPass /logo.svg http://1.2.3.4/berat/public/logo.svg >ProxyPassReverse /logo.svg http://1.2.3.4/berat/public/logo.svg > doesn't work >

RE: [users@httpd] reverse proxy setup

2024-07-11 Thread Marc
I am testing a bit with this: 32 33 # files are still loaded from default host 34 Define defaulthost "" 35 Define proxyhost "" 36 37 ProxyPreserveHost Off 38 ProxyAddHeaders On 39 SetOutputFilter proxy-html 40 Prox

RE: [users@httpd] Simulating rewrite rules?

2024-07-11 Thread Marc
> > RewriteCond %{HTTP_USER_AGENT} ^$ > [OR] > RewriteCond %{HTTP_USER_AGENT} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|%00).* > [NC,OR] > RewriteCond %{HTTP_USER_AGENT} > ^.*(HTTrack|clshttp|archiver|loader|email|nikto|miner|python).* [NC,OR] > RewriteCond %{HTTP_USER_AGENT} ^.*(winhttp|libwww\- > perl|curl|

[users@httpd] RE: output buffer php ProxySet

2024-06-22 Thread Marc
> I am experimenting a bit with output buffering with php-fpm[1]. In my > default setup I can't get this to work. Currently I am only getting this > to work when I add this to my virtualhost config: > > > ProxySet enablereuse=on flushpackets=on > > > I assume this will impact the rest of th

[users@httpd] output buffer php ProxySet

2024-06-20 Thread Marc
I am experimenting a bit with output buffering with php-fpm[1]. In my default setup I can't get this to work. Currently I am only getting this to work when I add this to my virtualhost config: ProxySet enablereuse=on flushpackets=on I assume this will impact the rest of the website. Is th

RE: [users@httpd] http ok, https Forbidden

2024-05-15 Thread Marc
> > we have a apache 2.4.59 running on windows for an internal page. > Now we would like to use https instead of http > > Opening the url via http works, > when I use https I get > > Forbidden > You don't have permission to access this resource. > > I activated the debug level and see this line

[users@httpd] RE: proxypass to next proxy

2024-05-06 Thread Marc
> > > On some production environment I am using this: > > > ProxyPass http://test.example.com/test > > ProxyRemote "http://test.example.com/test " "http://proxy.local.net:5000"; ProxyPass http://test.example.com/test

[users@httpd] proxypass to next proxy

2024-05-06 Thread Marc
On some production environment I am using this: ProxyPass http://test.example.com/test But on development I can't access test.example.com, traffic needs to be routed through another proxy on a different port. How should I rewrite this so requests for /test -> test.example.com go via pr

RE: [users@httpd] better configtest

2024-04-17 Thread Marc
> > > > 1. > > what is the point of having a apachectl configtest, when a restart can > still fail? It can't be to difficult to include cert checks here, can it? > This is now becoming a significant part. > > The bar is useful, not perfect. configtest checks for _syntax_ validity. > > > 2. > > A

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-17 Thread Marc
> > So, is this wrong forum for asking about openssl commands required > for generating certificates for enabling https on apache? > Mostly you will be notified. The only thing you need to add to your virtual host for https is this: SSLEngine on SSLCertificateFile SSLCertificateChainFil

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-17 Thread Marc
> I don't know what you are trying to prove by your points + you are > insulting people for no reason. I am insulting no one, mostly stating what is common. > If you insult people, they may insult you back. > > Russia attacked Ukraine and Ukraine/NATO hit Russia back. I think you are the only

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-17 Thread Marc
> > http is an insecure protocol. I don't want my website to run on > http. So, I am hardcoding https in links in my website that refer to > pages in my website. > > > Now, I know that you will write why not redirect http to https by > default. No because that is not relevant to me

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-16 Thread Marc
> > On Tuesday 16 April 2024 at 18:42:09, Marc wrote: > > > This is more about the ability to host an application regardless if it > is > > on http or https. How https is enforced/applied is up to the manager of > > the server, why would you even care as a devel

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-16 Thread Marc
ing people incorrectly to upgrade eg while distributions are > backporting security stuff. A developer should just do developing. A > dentist is also not telling an ophthalmologist what to do. Why do you > care if you are using http or https? Unless you are developing something > specific to

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-16 Thread Marc
> > Pardon me- have 443 redirect to 80 of the environment variable is true. > Alternatively, have a completely different 443 vhost declared for > development purposes > > On Tue, Apr 16, 2024 at 11:30 AM Will Fatherley > wrote: > > > > But should y

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-16 Thread Marc
> > > But should your development be not protocol independent? If your > code works on http it should also work on https. I am getting sick of > these wordpress idiots where they still have hardcoded links everywhere > and I can't even convert a website from http to https. > > > > Are yo

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-16 Thread Marc
> > Windows is my development environment. Later the website will be hosted > on linux and the linux hosting provider will provide SSL certificate. > But should your development be not protocol independent? If your code works on http it should also work on https. I am getting sick of these word

RE: [users@httpd] openssl comand(s) for https mode on apache 2.4 on windows.

2024-04-16 Thread Marc
> > I was looking for openssl command(s) to generate server side certificate > and key so that https start working on my apache 2.4 web server on > windows. > > I looked on Internet but found few commands but they all used different > arguments to openssl. > > Can someone please give me exact op

[users@httpd] better configtest

2024-04-16 Thread Marc
With the forced upon us 90 day certificate renewal crap, my httpd was down today although I have a 'restart procedure' that verifies a bit for errors with apachectl configtest. 1. what is the point of having a apachectl configtest, when a restart can still fail? It can't be to difficult to in

RE: [users@httpd] RE: pipe logs to somethings that resembles a curl post

2024-04-10 Thread Marc
> > > > [1] > > https://httpd.apache.org/docs/current/mod/mod_log_config.html > > > > [2] > > https://httpd.apache.org/docs/current/mod/mod_log_config.html#formats > > You could also use > https://httpd.apache.org/docs/current/mod/mod_lua.html#luahooklog to > split up your logs or discard/silence

[users@httpd] RE: pipe logs to somethings that resembles a curl post

2024-04-10 Thread Marc
%v sorry for polluting this list PS. If it is any consolation, I have registered myself at a retirement home > -Original Message- > From: Marc > Sent: Wednesday, 10 April 2024 14:22 > To: users@httpd.apache.org > Subject: [users@httpd] RE: pipe logs to somethings that r

[users@httpd] RE: pipe logs to somethings that resembles a curl post

2024-04-10 Thread Marc
Oops I was mislead by some old posts. GlobalLog[1] does this for everything. However I have not found what value[2] has the requested virtual host name. [1] https://httpd.apache.org/docs/current/mod/mod_log_config.html [2] https://httpd.apache.org/docs/current/mod/mod_log_config.html#formats

[users@httpd] RE: pipe logs to somethings that resembles a curl post

2024-04-10 Thread Marc
Currently I have modified some rust application that does this to satisfaction. But piping to a 60MB binary for quite a few virtual hosts does not really seem efficient to me. Is there not some apache module that can offer a "global" access to logging and 'clones' all logging to some tcp socket

[users@httpd] pipe logs to somethings that resembles a curl post

2024-04-08 Thread Marc
I was wondering how I could use piped logs to redirect some logs, comparable to curl post requests. [1] https://httpd.apache.org/docs/current/logs.html

[users@httpd] RE: virtualhost environment setting for proxy

2024-03-26 Thread Marc
> I have currently this in my virtual host config > > SetEnvIf Host test\.example\.com CODE=123 > > > How should I change this line for when this website is being access via > ProxyPass and ProxyPassReverse? > SetEnvIf X-Forwarded-Server

[users@httpd] virtualhost environment setting for proxy

2024-03-26 Thread Marc
I have currently this in my virtual host config SetEnvIf Host test\.example\.com CODE=123 How should I change this line for when this website is being access via ProxyPass and ProxyPassReverse?

RE: [users@httpd] Measurements of htaccess processing penalty

2024-03-04 Thread Marc
> > The whole point of .htaccess files is that they aren't cached, it gives > users who are not able to control the server the ability to make > configuration changes. I have never ever modified these in application directories. You do this maybe once in the top level, maybe for some redirecti

RE: [users@httpd] Measurements of htaccess processing penalty

2024-03-04 Thread Marc
If you are testing, can you do it again with putting the .htaccess in cache? I am just curious :) https://hoytech.com/vmtouch/ > > The HTTPD documentation says "You should avoid using .htaccess files > completely if you have access to httpd main server config file. Using > .htaccess files slows

RE: [users@httpd] working with a reverse proxy

2024-02-28 Thread Marc
> > Should I for instance set headers, and in the proxied website should I > check on such headers? (Btw this is php). Or are there other things > available like HTTP_X_FORWARDED_FOR > > mod_proxy should add the "X-Forwarded-Host" header (i.e. > HTTP_X_FORWARDED_HOST in cgi/php) with the value o

RE: [users@httpd] working with a reverse proxy

2024-02-28 Thread Marc
> > > > > > > What would a best practice of 'informing' the proxyhost about that > it is > > being proxied and it should send the defaulthost hostname? > > > > can try > > > https://httpd.apache.org/docs/2.4/mod/mod_proxy.html#proxypreservehost > > Proxy

RE: [users@httpd] working with a reverse proxy

2024-02-27 Thread Marc
> > > What would a best practice of 'informing' the proxyhost about that it is > being proxied and it should send the defaulthost hostname? > > can try > https://httpd.apache.org/docs/2.4/mod/mod_proxy.html#proxypreservehost Proxy only works when I am having ProxyPreserveHost Off, I can't chang

[users@httpd] working with a reverse proxy

2024-02-27 Thread Marc
I am having a more or less default setup where I proxy a website with something like this ProxyPass"https://${proxyhost}/en_gb"; ProxyPassReverse "https://${proxyhost}/en_gb"; ProxyPassReverseCookieDomain "${proxyhost}" "${defaulthost}" ProxyHTMLURLMap ... ProxyHTMLURLMap .. Everythin

RE: [users@httpd] dynamic ssl cert/key selection

2023-10-20 Thread Marc
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -. F1 Outsourcing Development Sp. z o.o. Poland t: +48 (0)12 4207 835 e: m...@f1-outsourcing.eu > -Original Message- > From: Will Fatherley > Sent: Friday, 20 October 2023 16:04 > To: users@httpd.apache.org > Subjec

[users@httpd] dynamic ssl cert/key selection

2023-10-20 Thread Marc
Is there a way to chose what ssl certs/keys to load when you have something like ServerAlias test.*.* So when host test.example.com is serviced, that it will get SSLCertificateFile "/etc/pki/tls/certs/example.com.crt" So when host test.example.net is serviced, that it will get SSLCertifica

RE: [users@httpd] Is it true that Nginx is faster, more secure and better than Apache?

2023-10-04 Thread Marc
I know that with nginx you can't configure your chain certificate separately, super annoying. > > Hello, > Thanks again. > Why has Apache Foundation never tested Apache performance with Nginx? > > > > > On Sat, Sep 30, 2023 at 12:00 PM, Frank Gingras >wrote: > There might

RE: [users@httpd] proxying SSL -> SSL

2023-10-04 Thread Marc
> > Hi guys. > > I've sroogled & have found people suggesting working examples, I thought I > had some notes but now I'm thinking I read that it should not work.. > so I'm not sure what to think of this seemingly setup: > > > ServerAdmin web...@lemko.xyz > ServerNa

RE: [users@httpd] realtime protection against cloud scans

2023-09-16 Thread Marc
> > using the NTP firewall > > Sorry, using the NFT firewall. > I still need to get familiar with nft. Currently I am using ipset, adding ip's with scripts. But ipset is preconfigured for specific netmask /24 /X. So at some point your /24 is getting full with 65k entries. It would be nice if

RE: [users@httpd] realtime protection against cloud scans

2023-09-15 Thread Marc
erver performance? > > On Tue, Sep 12, 2023 at 10:33 AM Marc <mailto:m...@f1-outsourcing.eu> > wrote: > > > > Anyone having a suggestion on how to block cloud crawlers/bots? > Obviously I would like search engine bots to have access, but all the other > crap

RE: [users@httpd] where to change this "internal server error message"

2023-09-15 Thread Marc
> > What is returning the 500 response here? Is php/python/perl involved? No, I think this mod_security is generating this > As for the scrapers, you are absolutely wasting your time customizing the > response. I would just return a 403, actually. I think you might be right. I did not expect to

RE: [users@httpd] where to change this "internal server error message"

2023-09-15 Thread Marc
> See the ErrorDocument directive. It does not seem to work. It looks like this config is skipped and the error is loaded directly from the httpd binary. ErrorDocument 500 /406.html > Now, why is that response not suitable? And why would you respond with a > 200 for a blocked user agent? I t

[users@httpd] where to change this "internal server error message"

2023-09-15 Thread Marc
Where/how can I change this message? The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator at xxx to inform them of the time this error occurred, and the actions you performed just before this error. More inf

[users@httpd] realtime protection against cloud scans

2023-09-12 Thread Marc
Anyone having a suggestion on how to block cloud crawlers/bots? Obviously I would like search engine bots to have access, but all the other crap I want to lose. Only 'real users'. What is best practice for this? Just getting amazon, googleusercontent, digitalocean, azure ip ranges and put them

[users@httpd] allow general access after 1 auth

2023-08-12 Thread Marc
I was wondering if it is possible to allow general access to an url after some account authenticated for this url. Without the necessity to adapt the web application for this Say we have closed https://www.example.com/webapp with something like Require valid-user Order deny,allow Deny from all

RE: [users@httpd] loading shop.example.com in www.test.com/shop/

2023-08-04 Thread Marc
> > > I was wondering if it is even possible to publish an existing shop > hosted on the subdomain shop.example.com and > show it as a 'folder' in www.test.com/shop . > Will I have problems with browsers (cookies?). I don't want to resol

[users@httpd] loading shop.example.com in www.test.com/shop/

2023-08-03 Thread Marc
I was wondering if it is even possible to publish an existing shop hosted on the subdomain shop.example.com and show it as a 'folder' in www.test.com/shop. Will I have problems with browsers (cookies?). I don't want to resolve this on the file system because both have different uid/gids on files

[users@httpd] RE: *****SPAM***** [users@httpd] How can I force a server name header?

2023-08-02 Thread Marc
> > I'm trying to test a new server located at internal IP 192.168.1.5. The > production server lives at IP 192.168.1.7 on the same network. > > How can I force the browser to connect to the correct server? If I try > "http://192.168.1.5"; the redirect on the first (alphabetically) virtual > se

[users@httpd] RE: config - how are multiple VirtualHost directives for the same address handled?

2023-06-30 Thread Marc
> > > > How does apache httpd 2.4 handle multiple VirtualHost directives for > > the same address ? > > > > For example: > > > > > > SSLCertificateFile "${SRVROOT}/conf/server.crt" > ># ... > > > > > > > > DocumentRoot "/www/docs/host.example.com" > > # ... > > > > > > Are the setting

[users@httpd] RE: config - how are multiple VirtualHost directives for the same address handled?

2023-06-30 Thread Marc
> > How does apache httpd 2.4 handle multiple VirtualHost directives for the > same address ? > > For example: > > > SSLCertificateFile "${SRVROOT}/conf/server.crt" ># ... > > > > DocumentRoot "/www/docs/host.example.com" > # ... > > > Are the settings merged, as if written like

RE: [users@httpd]

2023-05-15 Thread Marc
On Mon, May 15, 2023 at 3:48 AM Marc <mailto:m...@f1-outsourcing.eu> > wrote: > > > > > > > > > > How do I get that the file (docroot)/images/favicon.ico is not > loaded > > from the disk but instead from the /tmp/os-

RE: [users@httpd]

2023-05-15 Thread Marc
> > > > How do I get that the file (docroot)/images/favicon.ico is not loaded > from the disk but instead from the /tmp/os-favicon.ico? > > Use the Alias directive. > https://httpd.apache.org/docs/2.4/urlmapping.html > Hmmm, so I am ending up with somwthing like this. Is that really the best w

[users@httpd]

2023-05-13 Thread Marc
How do I get that the file (docroot)/images/favicon.ico is not loaded from the disk but instead from the /tmp/os-favicon.ico? "/tmp/os-favicon.ico" https://httpd.apache.org/docs/2.4/mod/core.html#files Is this te best manual?? "# Insert stuff that applies to cat.html here" is not ve

Re: [users@httpd] Help with mod_rewrite

2023-05-09 Thread Marc Serra
log entries, and then uncomment another rule. Repeat > until the loop appears. > > If you have a specific question about one log entry, do ask it. > > On Thu, Apr 20, 2023 at 2:18 AM Marc Serra wrote: >> >> Thank's for answer Frank, >> >> A simple https:

Re: [users@httpd] Apache VirtualHost Config Tool management

2023-04-27 Thread Marc Serra
I used ISPConfig for years and it's a great tool! If you have money for the license or your hosting provider has it for free, plesk web host edition it's a great option too. Missatge de Curtis del dia dj., 27 d’abr. 2023 a les 15:41: > > I might also suggest ispconfig > > https://ispconfig.org.

[users@httpd] Help with mod_rewrite

2023-04-18 Thread Marc Serra
guration error. Use 'LimitInternalRecursion' t o increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. Can anyone help me? Thank's -- Marc Serra -- <https://www.manxa.com> Manxa 1876, S.L. Ctra. Les Tries, 85.17800 Olot (Giron

[users@httpd] GeoIP module problem

2022-11-11 Thread Marc Serra
3.698490 2022] [access_compat:error] [pid 2668535:tid 140474346104576] [client 90.161.x.x:38306] AH01797: client denied by server configuration: /var/www/vhosts/mydomain.tld/httpdocs/ca [Fri Nov 11 13:40:33.860555 2022] [access_compat:error] [pid 2668535:tid 140474713110272] [client

RE: [users@httpd] Log to syslog?

2022-04-12 Thread Marc
> > i went through this issue the hard way > > Urgh - thanks for the comprehensive reply. > > > there does not seem to be anything at all as apache seems to be all file > > related > > I wonder why mod_syslog has not been made more generic? > > > redirecting to logger just does not work. > > >

RE: [users@httpd] Re: Getting XAMPP Apache on Windows 10 to work through local network!

2022-04-07 Thread Marc
Some client told me to never do business with companies/people that call themselves hero, master etc. Makes me wonder about people calling themselves good guy. > -Original Message- > From: 😉 Good Guy 😉 > Sent: Thursday, 7 April 2022 04:57 > To: users@httpd.apache.org > Subject: [users

Re: [users@httpd] Re: Are this option

2022-03-24 Thread Marc Serra
Please don't spend more time on this until I write another email. I found sometrhng strange on our PHP code. Missatge de Marc Serra del dia dj., 24 de març 2022 a les 12:42: > > > Pretty bad numbers actually, aren't you limited by the network > > bandwidth between ab an

Re: [users@httpd] Re: Are this option

2022-03-24 Thread Marc Serra
00% 48396 (longest request) > Sorry, more questions than answers, but results on my (poor) laptop look like: Oh, no! Thank's for all your answers, questions and time! > Or with a shorter resource (1KB) and 10x more requests to amortize the ramp > up: -- Marc Serra --

Re: [users@httpd] Re: Are this option

2022-03-24 Thread Marc Serra
Hi again, I tested the settings with Apache Bench ... ab -l -H 'Accept-Encoding: gzip,deflate' -k -n 1 -c 1000 https://www.DOMAIN1.TLD/index.html I'm not sure if the following are good numbers or bad numbers. Can anyone help me interpret this result please? This is ApacheBench, Version 2.

Re: [users@httpd] Re: Are this option

2022-03-18 Thread Marc Serra
ge de Yann Ylavic del dia dv., 18 de març 2022 a les 11:19: > > On Fri, Mar 18, 2022 at 8:27 AM Marc Serra wrote: > > > > Thank's for your comments Frank, > > > > Reading the Apache documentation > > (https://httpd.apache.org/docs/2.4/en/mod/mpm_common.

Re: [users@httpd] Re: Are this option

2022-03-18 Thread Marc Serra
hreadsPerChild seems very low. Depending on your content, > you could likely ramp up to a much higher value, which means that you would > need less parent processes. > > > > On Wed, 16 Mar 2022 at 08:14, Marc Serra wrote: >> >> I'm sorry to insist ... if th

[users@httpd] Re: Are this option

2022-03-16 Thread Marc Serra
I'm sorry to insist ... if this list is not the right place to ask that question, could anyone tell me where to do it? Thank's Missatge de Marc Serra del dia dc., 9 de març 2022 a les 18:01: > Hi, I want to configure an apache server to support a high load site. Are > these

Re: [users@httpd] mod_evasive [OT?]

2022-03-10 Thread Marc Serra
> > Distributed Application Platform Services > > *Northwestern University* > > 4th Floor > > 2020 Ridge Avenue > > Evanston, IL 60208-0801 > > *darryl.ba...@northwestern.edu * > > (847) 467-6674 <+18474676674> > > > -- Marc Serra Organització i S

[users@httpd] Are this option

2022-03-09 Thread Marc Serra
Hi, I want to configure an apache server to support a high load site. Are these settings correct? /etc/apache2/mods-enabled/mpm_event.conf StartServers 2 MinSpareThreads 75 MaxSpareThreads 250 ThreadLimit

RE: [users@httpd] How to get someone to look at a Apache bug report on Red Hat's Bugzilla?

2022-02-24 Thread Marc
> > Since you don't have paid support from RedHat, there is absolutely no > reason to not install your own version of httpd. > I agree. The days of relying on a lts distribution are coming to an end. I have the impression that RedHat is not the place to be anymore. Moving packages from the lts

Re: [users@httpd] Dynamic authentication rules

2022-02-12 Thread Marc SCHAEFER
On Fri, Feb 11, 2022 at 06:21:50PM -0500, stormy wrote: > Maybe I'm missing something that you refer to as "tricks" and "presumably"? > Proof of concept? Context? If the dynamic way does not work, I will simply generate about 100 different configurations and merge them in Apache, it's not complic

[users@httpd] Dynamic authentication rules

2022-02-11 Thread Marc SCHAEFER
Hello, In general, I would handle that kind of authentification tricks in a perl script, however in this case I would need to protect a script directly in Apache. What presumably would work: AuthType Basic AuthName "Login Required for testing" AuthUserFile /shared/testing/h

RE: [users@httpd] Is it possible to install/configure SSL certificates on a server behind a reverse proxy?

2022-01-12 Thread Marc
You can just do that. I have also certs behind a reverse proxy. My whole 'virtual/internal' applications in containers is running with my own CA certificates and on the reverse proxy I have some certs from known CA's Specific for this setup is a proxy protocol, that informs the public ip address

RE: [users@httpd] Re: Choosing Windows platfrorm

2021-10-23 Thread Marc
> > With over 1.4 billion devices now running Windows 10/11, customer > satisfaction is higher than any previous version of windows. > > WTF WTF I @#$@#$@#$ hate windows 10. Customer statisfaction with Microsoft is 0 https://www.reddit.com/r/aargh_Microsoft/ ---

RE: [users@httpd] How to display the True-Client-IP header in the access log

2021-10-19 Thread Marc
With haproxy you have an option to enable a proxy protocol, this transmits the client ip. I guess something similar must exist in your case. > > When Apache is accessed via a CDN (Akamai), I would like to record the > IP of the accessing client in the Apache logs. > In order to display the True-

RE: [users@httpd] Local css/js files take 5 seconds to load

2021-10-12 Thread Marc
> Httpd with default settings. Opening a local html document with cleared > cache in any browser takes very long to load. The Chrome network tab > shows that the "Content Download" from included local css/js files take > 5 seconds to load. No matter how many or which files. Issue appeared > after u

[users@httpd] duplicate logging into one global access/error log

2021-10-06 Thread Marc
Currently I have virtualhost configuration files that configure logging like this[1] (in a local dir). How can I add something to eg /etc/httpd/conf/httpd.conf that logs everything of all configured virtual hosts ALSO into some global log file? [1] .. .. CustomLog "|/usr/sbin/rotatelogs -L

Re: [users@httpd] Issues with accessing web page using DNS URL

2021-08-18 Thread Marc Serra
If you ping (or dig, or nslookup, or ...) your www.mywebpage.com (the noip name) from outside your home is resolved to you public IP address? I think it's not an apache related issue. El dc., 18 d’ag. 2021, 20:41, va escriure: > I set up my router to port forward. I was using NOIP with my pre

Re: [users@httpd] Can't get the list of loaded modules with apache2 -M

2021-07-26 Thread Marc Serra
Try to source your envvars by running it like this source /etc/apache2/envvars and then /usr/sbin/apache2 -M El dl., 26 de jul. 2021, 19:18, Andrea Croci va escriure: > Hi, I have Apache 2.4.48 installed in Ubuntu 20.04 by adding the > ondrej-ppa. When I do > > sudo apache2 -M > > (and other

Re: [users@httpd] blacklisting

2021-06-16 Thread Marc Serra
--- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > -- Marc Serra Organització i Sistemes -- Manxa 1876,

Re: [users@httpd] Improve memory use [EXT]

2021-06-14 Thread Marc Serra
wrappers for >PHP {mileage may vary on this if you have a large number of PHP code >basese}; > > > > *From:* Marc Serra > *Sent:* 14 June 2021 10:08 > *To:* users@httpd.apache.org > *Subject:* [users@httpd] Improve memory use [EXT] > > > > Hi again,

[users@httpd] Improve memory use

2021-06-14 Thread Marc Serra
ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D DYNAMIC_MODULE_LIMIT=256 -D HTTPD_ROOT="/etc/apache2" -D SUEXEC_BIN="/usr/lib/apache2/suexec" -D DEFAULT_PIDLOG="/var/run/apache2.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D

Re: [users@httpd] Is ServerLimit 256 in prefork mode somehow hardcoded?

2021-06-01 Thread Marc Serra
o mod_mpm_event, but before I go that way, I > would like to know why I cannot more than 256 servers in prefork mode. > > > - To > unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional > commands, e-mail: users-h...@httpd.apache.org -- Marc Serra Organ

Re: [users@httpd] Poor Load Balancer performance

2021-05-27 Thread Marc Serra
Thank's for your reply Eric. if you have thousands of connections you need to have more servers and > then a balancer will help spreading the load (not increasing performance) > among all the servers, or add bigger figures to your mpm settings in your > single server (if the hardware will be able

Re: [users@httpd] Poor Load Balancer performance

2021-05-27 Thread Marc Serra
MinSpareServers 200 MaxSpareServers 400 MaxRequestsWorkers 800 MaxConnectionsPerChild 1 Missatge de Eric Covener del dia dj., 27 de maig 2021 a les 13:15: > On Thu, May 27, 2021 at 7:06 AM Marc Serra wrote: > > I has inverted the results! I'm sorry! > > I see -- I think this is a cas

Re: [users@httpd] Poor Load Balancer performance

2021-05-27 Thread Marc Serra
1 requests Missatge de Eric Covener del dia dj., 27 de maig 2021 a les 12:51: > On Thu, May 27, 2021 at 6:22 AM Marc Serra wrote: > >> I got better performance without the load balancer. >> > > >> Results when I run 'ab -k -n 1 -c 1000 >> htt

[users@httpd] Poor Load Balancer performance

2021-05-27 Thread Marc Serra
ProxyPreserveHost On ProxyPass / balancer://mycluster/ ProxyPassReverse / balancer://mycluster/ The index.html file is a 90KB plain text file for both node1 and node2 I'm missing something? The problem is the way virtualbox handles this network configuration and in a real world the result

Re: [users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Marc Serra
Thank's Daniel, > The list of modules is different. I don't think you can compare event and prefork servers as if they should behave the same, even more if you have a different list of modules. Consider in prefork each process is a worker, while on event processes are not workers, but threads of

Re: [users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Marc Serra
Thank's for answer Yann, > MPM prefork is single threaded, while MPM event uses multiple threads, > and each thread "consumes" 8MB of rss (for its stack) on a typical > linux system. > The default thread stack size can be changed with "ulimit -s" (or > LimitSTACK= on systemd), depending on the loa

Re: [users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Marc Serra
d_security, it's a module that use enough memory. > Also on server2 there are modules not loaded on server1. BTW what's your problem? Your server is plenty of ram and RSS memory is not creating any problem. Right? > > > 17 maggio 2021 13:34, "Marc Serra" wrote: &g

[users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Marc Serra
Hi to all, I already posted this question to stackoverflow.com but no answer after 9 days: https://stackoverflow.com/questions/67439771/why-so-much-difference-in-memory-used-per-process-in-apache2-between-two-differe I hope the apache gurus in this list can help me :) I have a pair of Ubuntu ded

Re: [users@httpd] Re: RemoteIPProxyProtocolExceptions with negated IP list

2020-05-13 Thread Marc Haber
On Sun, May 10, 2020 at 01:57:31PM -0400, Eric Covener wrote: > On Sun, May 10, 2020 at 12:55 PM Marc Haber > wrote: > > > > On Fri, May 08, 2020 at 01:16:28PM +0200, Marc Haber wrote: > > > Is it possible to have a negated IP address list in > > > RemoteIPPro

[users@httpd] Re: RemoteIPProxyProtocolExceptions with negated IP list

2020-05-10 Thread Marc Haber
On Fri, May 08, 2020 at 01:16:28PM +0200, Marc Haber wrote: > Is it possible to have a negated IP address list in > RemoteIPProxyProtocolExceptions? I think that I cannot use SetEnvIf at > this point because the ProxyProtocol processing happens way before any > http processing be

Re: [users@httpd] RemoteIPProxyProtocolExceptions with negated IP list

2020-05-08 Thread Marc Haber
On Fri, May 08, 2020 at 03:15:23PM +0200, Antony Stone wrote: > On Friday 08 May 2020 at 15:00:07, Marc Haber wrote: > > On Fri, May 08, 2020 at 02:01:03PM +0200, Antony Stone wrote: > > > On Friday 08 May 2020 at 13:16:28, Marc Haber wrote: > > > > I have a vhost i

Re: [users@httpd] RemoteIPProxyProtocolExceptions with negated IP list

2020-05-08 Thread Marc Haber
On Fri, May 08, 2020 at 02:01:03PM +0200, Antony Stone wrote: > On Friday 08 May 2020 at 13:16:28, Marc Haber wrote: > > I have a vhost in a https-only IPv6-only setup and would like to make > > the web site hosted there reachable from the IPv4 Internet. > > Is the vhost ca

[users@httpd] RemoteIPProxyProtocolExceptions with negated IP list

2020-05-08 Thread Marc Haber
void defining a dedicated listener for the sniproxy mechanism. Any ideas? Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany| lose things."

[users@httpd] Need help getting php7 working..

2019-04-16 Thread Marc Chamberlin
ex.php file, I get a listing of the directory. When I try to access a .php file directly the vhost log file displays this error message - > mydomain.com-error_log > [Tue Apr 16 15:21:28.961374 2019] [proxy_fcgi:error] [pid 6651] > [client 192.168.10.10:39940] AH01071: Got error

[users@httpd] Virtual hosts, include php.conf, DirectoryIndex failure

2017-04-19 Thread Marc Chamberlin
tatement to a global configuration file, then everything works OK. Any kind guru got an explanation, I don't grok this one... Perhaps this is a bug? Thanks in advance... Marc.. -- "The Truth is out there" - Spooky - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Weird connection issues with mod_proxy_wstunnel

2015-04-17 Thread Marc Hörsken
WebSocket-server. Hope this helps in case anyone else runs into the same problem. You have to make sure that ws:// or was:// forwarding is only configured for the actual WebSocket-URL and does not affect any other requests. Thanks for pointing me into the right direction. Best regards, Marc

Re: [users@httpd] Weird connection issues with mod_proxy_wstunnel

2015-04-15 Thread Marc Hörsken
Hello Eric, > Am 15.04.2015 um 19:47 schrieb Eric Covener : > > On Wed, Apr 15, 2015 at 12:18 PM, Marc Hörsken wrote: >> Hello Eric, >> >>> Am 15.04.2015 um 14:05 schrieb Eric Covener : >>> >>> On Wed, Apr 15, 2015 at 7:16 AM, Marc Hörs

  1   2   3   >