目录
Apache的简介以及服务安装与启用
1.Apache的作用
在web被访问时通常使用http://的方式
http:// ##超文本传输协议
http:// 超文本传输协议提供软件：Apache nginx stgw jfe Tengine
?2.Apache的安装与启用?
| dnf install httpd.x86_64 -y | ##安装 |
| systemctl enable --now httpd | ##开启服务并设定服务位开机启动 |
| firewall-cmd --list-all firewall-cmd --permanent --add-service=http firewall-cmd --reload | ##查看火墙信息 ##在火墙中永久开启http访问 |
Apache服务的基本信息及信息优化
1.Apache的基本信息
服务名称：httpd
配置文件：
/etc/httpd/conf/httpd.conf????????##主配置文件
/etc/httpd/conf.d/*.conf????????##子配置文件
默认发布目录：/var/www/html
默认发布文件：index.html
默认端口：80
用户:apache
日志：/etc/httpd/logs
2.Apache的基本配置
#1.Apache端口修改#
vim /etc/httpd/conf/httpd.conf
Listen 8080
firewall-cmd --permanent --add-port=8080/tcp
firewall-cmd --reload
systemctl restart httpd
http://172.25.254.100:8080
#2.默认发布文件##
vim /etc/httpd/conf/httpd.conf
DirectoryIndex test.html index.html
systemctl restart httpd
#3.默认发布目录
mkdir /www/westos -p
vim /etc/httpd/conf/httpd.conf
DocumentRoot "/www/westos"
<Directory "/www/westos">
Require all granted
</Directory>
systemctl restart httpd
firefox http://172.25.254.100
Apache服务的访问控制
#实验素材#
mkdir /var/www/html/westos
vim /var/www/html/westos/index.html
firefox http://172.25.254.100/westos
?#1.基于客户端ip的访问控制#
#ip黑名单#
<Directory "/var/www/html/westos">
Order Allow,Deny
Allow from All
Deny from 172.25.254.34
</Directory>
#ip白名单#
<Directory "/var/www/html/westos">
Order Deny,Allow
Allow from 172.25.254.34
Deny from All
</Directory>
#2.基于用户认证#
vim /etc/httpd/conf/httpd.conf
<Directory "/var/www/html/westos">
| <Directory "/var/www/html/westos"> AuthUserFile "/etc/httpd/.htpasswd" | ##指定认证文件 ##认证提示语 ##认证类型 ##允许通过的认证用户 (2选1) ##允许所有用户通过认证(2选1) |
| htpasswd -cm /etc/httpd/htpasswdfile admin | ##生成认证文件 |
注意：当/etc/httpd/htpasswdfile存在那么在添加用户时不要加-c参数否则会覆盖源文件内容
Apache虚拟主机设定
mkdir -p /var/www/virtual/westos.org/{linux,luck}
echo? linux.westos.org?> /var/www/virtual/westos.org/linux/index.html
echo luck.westos.org > /var/www/virtual/westos.org/luck/index.html
vim /etc/httpd/conf.d/vhost.conf
<VirtualHost _default_:80>
DocumentRoot "/var/www/html"
CustomLog logs/default.log combined
</VirtualHost>
<VirtualHost *:80>
ServerName linux.westos.org?
DocumentRoot? /var/www/virtual/westos.org/linux
CustomLog logs/linux.log combined
</VirtualHost>
<VirtualHost *:80>
ServerName luck.westos.org?
DocumentRoot /var/www/virtual/westos.org/luck
CustomLog logs/luck.log combined
</VirtualHost>
测试：
在浏览器所在主机中
vim /etc/hosts
172.25.254.100 www.westos.org linux.westos.org luck.westos.org
firefox http://www.westos.org
firefox http://linux.westos.org
firefox http:// luck.westos.org
Apache对语言的支持
#php#
vim /var/www/html/index.php
<?php
????????phpinfo();
?>
dnf install php -y
systemctl restart httpd
firefox http://172.25.254.100/index.php
#cgi#
mkdir /var/www/html/cgidir
vim /var/www/html/cgidir/index.cgi
#!/usr/bin/perl
print "Content-type: text/html\n\n";
print `date`;
vim /etc/httpd/conf.d/vhost.conf
<Directory "/var/www/html/cgidir">
Options +ExecCGI
AddHandler cgi-script .cgi
</Directory>
firefox http://172.25.254.100/cgidir/index.cgi
#wsgi#
书写wsgi的测试文件
vim /var/www/html/wsgi/index.wsgi
def application(env, westos):
westos('200 ok',[('Content-Type', 'text/html')])
return [b'hello westos ahhahahahah!']
dnf install python3-mod_wsgi
systemctl restart httpd
vim /etc/httpd/conf.d/vhost
<VirtualHost *:80>
ServerName wsgi.westos.org
WSGIScriptAlias / /var/www/html/wsgi/index.wsgi
</VirtualHost>
firefox http://wsgi.westos.org
Apache的加密访问
##安装加密插件
dnf install mod_ssl -y
##生成证书
##command?
openssl req --newkey rsa:2048 \
-nodes -sha256 -keyout /etc/httpd/westos.org.key \
-x509 -days 365 -out /etc/httpd/westos.org.crt
vim /etc/httpd/conf.d/vhost.conf
<VirtualHost *:80>
ServerName login.westos.com
RewriteEngine on
RewriteRule ^(/.*)$ https://%{HTTP_HOST}$1
</VirtualHost>
<VirtualHost *:443>
ServerName login.westos.com
DocumentRoot "/www/westos.com/login"
CustomLog logs/login.log combined
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/www.westos.com.crt
SSLCertificateKeyFile /etc/pki/tls/private/www.westos.com.key
</VirtualHost>
systemctl restart httpd
| ^(/.*)$ %{HTTP_HOST} $1 | ##客户地址栏中输入的地址 ##客户主机 ##RewriteRule后面跟的第一串字符的值 |
?网页自动跳转加密
squid正向代理
实验环境:
单网卡主机设定ip不能上网
双网卡主机设定ip1可以连接单网卡主机，设定ip2可以上网
实验效果
让单网卡主机不能上网但浏览器可以访问互联网页
操作：
在双网卡主机中
dnf install squid -y
vim /etc/squid/squid.conf
59 http_access allow all
65 cache_dir ufs /var/spool/squid 100 16 256
systemctl restart squid
firewall-cmd --permanent --add-port=3128/tcp
firewall-cmd --reload
测试：
在单网卡主机中
ping www.baidu.com????????不通
在浏览器中访问www.baidu.com可以
在单网卡专辑中选择
NetWork Proxy?
172.25.254.?200? ? ? 3128
squid反向加速代理
实验环境:
172.25.254.100?##Apache服务器
172.25.254.200?##squid，没有数据负责缓存
vim /etc/squid/squid.conf
http_port 80 vhost vport????????##vhost 支持虚拟域名 vport 支持虚拟端口
#当172.25.254.30的80端口被访问会从172.25.254.100的80端口缓存数据
cache_peer 172.25.254.100?parent 80????????0????????proxy-only
systemctl restart squid
测试：
firefox http:/172.25.254.200
访问看到的时172.25.254.100上的数据
