Linux下Apache(HTTP)基础知识梳理-运维笔记

# 准备环境
[root@Server-01 ~]# cat /etc/redhat-release
CentOS Linux release 7.5.1804 (Core)　　　　
[root@Server-01 ~]# uname -r
3.10.0-862.el7.x86_64
[root@Server-01 ~]# uname -a
Linux Server-01 3.10.0-862.el7.x86_64 #1 SMP Fri Apr 20 16:44:24 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@Server-01 ~]# hostname -I
172.16.70.37

[root@Server-01 ~]# yum -y install apr apr-devel apr-util-devel gcc gcc-c++ pcre pcre-devel openssl-devel wget curl　　　# 安装依赖及所需软件
[root@Server-01 ~]# mkdir -p /data/apps /data/tmpdir
[root@Server-01 ~]# cd /data/tmpdir/
# 下载源码可用以下2种方式
[root@Server-01 tmpdir]# wget http://mirrors.sohu.com/apache/httpd-2.4.41.tar.gz
[root@Server-01 tmpdir]# curl -O http://mirrors.sohu.com/apache/httpd-2.4.41.tar.gz
[root@Server-01 tmpdir]# tar xf httpd-2.4.41.tar.gz
[root@Server-01 tmpdir]# ls
httpd-2.4.41  httpd-2.4.41.tar.gz

[root@Server-01 httpd-2.4.41]# cd /data/tmpdir/httpd-2.4.41
# 查看并选择适合的编译参数
[root@Server-01 httpd-2.4.41]# ./configure -h | less
`configure' configures this package to adapt to many kinds of systems.

Usage: ./configure [OPTION]... [VAR=VALUE]...

To assign environment variables (e.g., CC, CFLAGS...), specify them as
VAR=VALUE.  See below for descriptions of some of the useful variables.

Defaults for the options are specified in brackets.

Configuration:
  -h, --help              display this help and exit
      --help=short        display options specific to this package
      --help=recursive    display the short help of all the included packages
  -V, --version           display version information and exit
  -q, --quiet, --silent   do not print `checking ...' messages
      --cache-file=FILE   cache test results in FILE [disabled]
  -C, --config-cache      alias for `--cache-file=config.cache'
  -n, --no-create         do not create output files
      --srcdir=DIR        find the sources in DIR [configure dir or `..']

Installation directories:
  --prefix=PREFIX         install architecture-independent files in PREFIX
                          [/usr/local/apache2]
  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
                          [PREFIX]
.......此处省略无数.......

[root@Server-01 httpd-2.4.41]# ./configure --prefix=/data/apps/apache24/ --enable-so --enable-ssl \
--enable-cgi --enable-rewrite --with-zlib --with-pcre  --enable-mpms-shared=all --with-mpm=prefork
......
# 以下为正常编译完成输出
config.status: executing default commands
configure: summary of build options:

    Server Version: 2.4.41
    Install prefix: /usr/local/apache24
    C compiler:     gcc -std=gnu99
    CFLAGS:           -pthread
    CPPFLAGS:        -DLINUX -D_REENTRANT -D_GNU_SOURCE
    LDFLAGS:
    LIBS:
    C preprocessor: gcc -E

[root@Server-01 httpd-2.4.41]# echo $?　　　　# 完成编译后检查是否有报错
0

参数说明：
  --enable-so  启动模块动态装卸载
  --enable-ssl 编译ssl模块
  --enable-cgi 支持cgi机制（能够让静态web服务器能够解析动态请求的一个协议）
  --enable-rewrite  支持url重写     
  --with-zlib  支持zlib压缩     
  --with-pcre  支持正则表达式
  --enable-mpms-shared=all  以共享方式编译的模块
  --with-mpm=prefork   指明httpd的工作方式为prefork
  
  附：
  --with-apr= 指明依赖的apr所在目录
  --with-apr-util=  指明依赖的apr-util所在的目录

# 查看机器CPU核心数
[root@Server-01 httpd-2.4.41]# cat /proc/cpuinfo | grep "processor" | wc -l
4
[root@Server-01 httpd-2.4.41]# make -j 4 && make install
[root@Server-01 httpd-2.4.41]# cd /data/apps/apache24/
# apache目录结构
[root@Server-01 apache24]# tree -d ./
./
├── bin　　　　　　　　# 启动文件存放目录
├── build　　　　　　 #  apache的安装参数存放目录，包括版本号等
├── cgi-bin　　　　　　# 存放cgi的启动文件（cgi：连接数据库API的接口）
├── conf　　　　　　　　# 存放apache配置文件
│   ├── extra　　　　  # 一些额外的配置文件，虚拟主机等
│   └── original　　　 # 原始配置文件备份
│       └── extra
├── error　　　　　　　　# 存放错误日志
│   └── include
├── htdocs　　　　　　　 # 默认站点跟目录，存放主页文件
├── icons　　　　　　　　# 图标提示文件
│   └── small
├── include　　　　　　　# include目录
│   └── include
├── logs　　　　　　　　# 存放日志文件
├── man　　　　　　　　 # 手册
│   ├── man1
│   └── man8
├── manual　　　　　　　　# 其他工具手册
│   ├── developer
│   ├── faq
│   ├── howto
│   ├── images
│   ├── misc
│   ├── mod
│   ├── platform
│   ├── programs
│   ├── rewrite
│   ├── ssl
│   ├── style
│   │   ├── css
│   │   ├── lang
│   │   ├── latex
│   │   ├── scripts
│   │   └── xsl
│   │       └── util
│   └── vhosts
└── modules　　　　　　　　# 模块存放目录

说明：
bin目录为二进制程序存放位置，如启动脚本apachectl、httpd、htpasswd、ab（压力测试工具）等；
conf目录为配置文件存放位置
htdocs目录存放网页文件，默认里面有index.html；
logs目录存放了日志文件，除了日志文件，默认还有httpd运行的pid文件httpd.pid，这个建议修改到/var/run目录下(方便判断)；
man目录为帮助文档路径；
modules存放了编译后的模块；

[root@Server-01 apache24]# bin/apachectl start
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using fe80::20c:29ff:fe19:1ffb. Set the 'ServerName' directive globally to suppress this message

# 修改配置文件
[root@Server-01 apache24]# vim conf/httpd.conf　　　　
......
# 用户和组修改为apache
User apache
Group apache
......
#ServerName www.example.com:80
ServerName localhost:80　　　　# 添加此项，取消'ServerName'提示
......

# 检测配置文件语法
[root@Server-01 apache24]# apachectl -t
Syntax OK

# 设置环境变量
[root@Server-01 apache24]# echo 'PATH=/usr/local/src/apache24/bin:$PATH' > /etc/profile.d/apache24.sh
[root@Server-01 apache24]# source /etc/profile.d/apache24.sh
[root@Server-01 apache24]# echo $PATH
/data/apps/apache24/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin
[root@Server-01 apache24]# ln -s /usr/include /data/apps/apache24/include

# 新建用户并设置目录权限
[root@Server-01 apache24]# useradd -r -M apache -s /sbin/nologin
[root@Server-01 apache24]# grep apache /etc/passwd
apache:x:997:996::/home/apache:/sbin/nologin
[root@Server-01 apache24]# chown -R apache:apache /data/apps/apache24
[root@Server-01 apache24]# ls -ld /data/apps/apache24
drwxr-xr-x. 14 apache apache 164 Jul  8 15:57 /data/apps/apache24

[root@Server-01 apache24]# apachectl restart
# 查看进程及端口
[root@Server-01 apache24]# ps -ef | grep http
root       1423      1  0 11:21 ?        00:00:00 /data/apps/apache24//bin/httpd -k start
apache     1453   1423  0 11:34 ?        00:00:00 /data/apps/apache24//bin/httpd -k start
apache     1454   1423  0 11:34 ?        00:00:00 /data/apps/apache24//bin/httpd -k start
apache     1455   1423  0 11:34 ?        00:00:00 /data/apps/apache24//bin/httpd -k start
apache     1456   1423  0 11:34 ?        00:00:00 /data/apps/apache24//bin/httpd -k start
apache     1457   1423  0 11:34 ?        00:00:00 /data/apps/apache24//bin/httpd -k start
root       1459    983  0 11:35 pts/0    00:00:00 grep --color=auto http
[root@Server-01 apache24]# netstat -nutpl | grep http
tcp6       0      0 :::80                   :::*                    LISTEN      1423/httpd

# 测试结果
[root@Server-01 apache24]# curl 172.16.70.37
<html><body><h1>It works!</h1></body></html>

注：或在浏览器输入http服务所在的IP

[root@Server-01 apache24]# pwd
/data/apps/apache24
[root@Server-01 apache24]# ls
bin  build  cgi-bin  conf  error  htdocs  icons  include  logs  man  manual  modules

# 创建网站目录内容
[root@Server-01 apache24]# for i in {1..3};do mkdir -pv /data/web/www$i; echo "www$i: Mysite $i" > /data/web/www$i/index.html;done
[root@Server-01 apache24]# tree /data/web/
/data/web/
├── www1
│   └── index.html
├── www2
│   └── index.html
└── www3
    └── index.html
[root@Server-01 apache24]# cat /data/web/www*/*
www1: Mysite 1
www2: Mysite 2
www3: Mysite 3

# 修改主配置文件
[root@Server-01 apache24]# vim conf/httpd.conf
......
Listen 80
Listen 81　　　　# 添加所需要的端口号
......
# Virtual hosts
Include conf/extra/httpd-vhosts.conf　　# 去掉注释'#'
....


[root@Server-01 apache24]# apachectl -t Syntax OK
[root@Server-01 apache24]# apachectl restart
[root@Server-01 apache24]# netstat -ntpul | grep http
tcp6       0      0 :::80                   :::*                    LISTEN      1423/httpd
tcp6       0      0 :::81                   :::*                    LISTEN      1423/httpd

# 查看配置加载过程
[root@Server-01 apache24]# apachectl -S
VirtualHost configuration:
172.16.70.37:80        www1.wencheng.com (/data/apps/apache24/conf/extra/httpd-vhosts.conf:25)
172.16.70.37:81        www2.wencheng.com (/data/apps/apache24/conf/extra/httpd-vhosts.conf:34)
ServerRoot: "/data/apps/apache24/"
Main DocumentRoot: "/data/apps/apache24/htdocs"
Main ErrorLog: "/data/apps/apache24/logs/error_log"
Mutex default: dir="/data/apps/apache24/logs/" mechanism=default
Mutex mpm-accept: using_defaults
PidFile: "/data/apps/apache24/logs/httpd.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="apache" id=997
Group: name="apache" id=996

# 修改虚拟主机配置文件
[root@Server-01 apache24]# vim conf/extra/httpd-vhosts.conf
......
# 末行添加以下内容
# PORT
<VirtualHost 172.16.70.37:80>
    DocumentRoot "/data/web/www1"
    ErrorLog "logs/www1-error_log"
    CustomLog "logs/www1-access_log" common
  <Directory "/data/web/www1">
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
  </Directory>
</VirtualHost>

<VirtualHost 172.16.70.37:81>
    DocumentRoot "/data/web/www2"
    ErrorLog "logs/www2-error_log"
    CustomLog "logs/www2-access_log" common
  <Directory "/data/web/www2">
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
  </Directory>
</VirtualHost>


[root@Server-01 apache24]# apachectl -t 
Syntax OK 
[root@Server-01 apache24]# apachectl restart

# 检测结果
[root@Server-01 apache24]# curl 172.16.70.37
www1: Mysite 1
[root@Server-01 apache24]# curl 172.16.70.37:80
www1: Mysite 1
[root@Server-01 apache24]# curl 172.16.70.37:81
www2: Mysite 2

[root@Server-01 apache24]# vim conf/extra/httpd-vhosts.conf
......
# 末行新增以下内容
# FQDN
<VirtualHost *:80>
    ServerName www1.wencheng.com
    DocumentRoot "/data/web/www1"
    ErrorLog "logs/www1-error_log"
    CustomLog "logs/www1-access_log" common
  <Directory "/data/web/www1">
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
  </Directory>
</VirtualHost>

<VirtualHost *:80>
    ServerName www3.wencheng.com
    DocumentRoot "/data/web/www3"
    ErrorLog "logs/www3-error_log"
    CustomLog "logs/www3-access_log" common
  <Directory "/data/web/www3">
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
  </Directory>
</VirtualHost>

# 添加域名解析
[root@Server-01 apache24]# echo '172.16.70.37 www1.wencheng.com www3.wencheng.com' >> /etc/hosts

[root@Server-01 apache24]# apachectl -t
Syntax OK
[root@Server-01 apache24]# apachectl restart

# 检测结果
[root@Server-01 apache24]# curl www1.wencheng.com
www1: Mysite 1
[root@Server-01 apache24]# curl www3.wencheng.com
www3: Mysite 3

# 添加另一个IP地址
[root@Server-01 apache24]# ip addr add 172.16.70.38/24 dev ens33
[root@Server-01 apache24]# ip addr | grep ens33
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 172.16.70.37/24 brd 172.16.70.255 scope global noprefixroute dynamic ens33
    inet 172.16.70.38/24 scope global secondary ens33　　　　# 添加的IP

[root@Server-01 apache24]# ping 172.16.70.38 -c4　　　　# 通讯正常
PING 172.16.70.38 (172.16.70.38) 56(84) bytes of data.
64 bytes from 172.16.70.38: icmp_seq=1 ttl=64 time=0.034 ms
64 bytes from 172.16.70.38: icmp_seq=2 ttl=64 time=0.050 ms

[root@Server-01 apache24]# vim conf/extra/httpd-vhosts.conf
......
# 末行新增
# IP
<VirtualHost 172.16.70.37:80>
    ServerName www2.wencheng.com
    DocumentRoot "/data/web/www2"
    ErrorLog "logs/www2-error_log"
    CustomLog "logs/www2-access_log" common
  <Directory "/data/web/www2">
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
  </Directory>
</VirtualHost>

<VirtualHost 172.16.70.38:80>
    ServerName www3.wencheng.com
    DocumentRoot "/data/web/www3"
    ErrorLog "logs/www3-error_log"
    CustomLog "logs/www3-access_log" common
  <Directory "/data/web/www3">
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
  </Directory>
</VirtualHost>


[root@Server-01 apache24]# apachectl -t
Syntax OK
[root@Server-01 apache24]# apachectl restart

# 检测结果
[root@Server-01 apache24]# curl 172.16.70.37
www2: Mysite 2
[root@Server-01 apache24]# curl 172.16.70.38
www3: Mysite 3

[root@Server-01 apache24]# pwd
/data/apps/apache24

# 创建认证用户账号文件，并添加用户
[root@Server-01 apache24]# htpasswd -cb /data/apps/apache24/conf/.htpasswd user1 user1
Adding password for user user1
[root@Server-01 apache24]# htpasswd -b /data/apps/apache24/conf/.htpasswd user2 user2
Adding password for user user2
[root@Server-01 apache24]# cat /data/apps/apache24/conf/.htpasswd
user1:$apr1$670zn8qW$R6BsrSdUZGYIKzYRl2opd.
user2:$apr1$k3FCnqKK$qzm4fqkIXINWX43kKAToA/

# 创建测试网页
[root@Server-01 apache24]# echo "<h1>User authentication</h1>" > /data/web/www1/admin.html

# 虚拟主机配置文件
[root@Server-01 apache24]# vim conf/extra/httpd-vhosts.conf
......
# FQDN
<VirtualHost *:80>
    ServerName www1.wencheng.com
    DocumentRoot "/data/web/www1"
    ErrorLog "logs/www1-error_log"
    CustomLog "logs/www1-access_log" combined
  <Directory "/data/web/www1">
    Options None
    AllowOverride None
    Require all granted
  </Directory>
  <Directory "/data/web/www1">
    Options None
    AllowOverride None
    AuthType Basic
    AuthName "Please enter your name & passwd"
    AuthUserFile "/data/apps/apache24/conf/.htpasswd"
    Require valid-user
  </Directory>
</VirtualHost>


[root@Server-01 apache24]# apachectl -t
Syntax OK
[root@Server-01 apache24]# apachectl graceful

# 接用户认证配置基础，再添加user3，uer4用户
[root@Server-01 apache24]# htpasswd -b /data/apps/apache24/conf/.htpasswd user3 user3
Adding password for user user3
[root@Server-01 apache24]# htpasswd -b /data/apps/apache24/conf/.htpasswd user4 user4
Adding password for user user4
[root@Server-01 apache24]#
[root@Server-01 apache24]# cat /data/apps/apache24/conf/.htpasswd
user1:$apr1$670zn8qW$R6BsrSdUZGYIKzYRl2opd.
user2:$apr1$k3FCnqKK$qzm4fqkIXINWX43kKAToA/
user3:$apr1$x6J3/DAj$XMP3eMjDC83Yk3aT4Yp.u0
user4:$apr1$CV4vuoTu$KN.Ha.IB41Aq0AGZVfw6E0

# 创建组文件
[root@Server-01 apache24]# echo "admins:user3 user4" > /data/apps/apache24/conf/.htgroup
[root@Server-01 apache24]# cat /data/apps/apache24/conf/.htgroup
admins:user3 user4

# 创建测试网页
[root@Server-01 apache24]# echo '<h1>Group user authentication</h1>' > /data/web/www1/admin.html

# 虚拟主机配置文件
[root@Server-01 apache24]# vim conf/extra/httpd-vhosts.conf
# FQDN
<VirtualHost *:80>
    ServerName www1.wencheng.com
    DocumentRoot "/data/web/www1"
    ErrorLog "logs/www1-error_log"
    CustomLog "logs/www1-access_log" combined
  <Directory "/data/web/www1">
    Options None
    AllowOverride None
    Require all granted
  </Directory>
  <Directory "/data/web/www1">
    Options None
    AllowOverride None
    AuthType Basic
    AuthName "Please enter your name & passwd"
    AuthUserFile "/data/apps/apache24/conf/.htpasswd"
    AuthGroupFile "/data/apps/apache24/conf/.htgroup"
    Require valid-user
    Require group admins
  </Directory>
</VirtualHost>

[root@Server-01 apache24]# apachectl -t
Syntax OK
[root@Server-01 apache24]# apachectl graceful

[root@Server-01 apache24]# grep -Ev '#|^$' conf/httpd.conf
# 服务安装路径
ServerRoot "/data/apps/apache24/"

# 监听端口
Listen 80

# 启动的模块
LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule access_compat_module modules/mod_access_compat.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule reqtimeout_module modules/mod_reqtimeout.so
LoadModule filter_module modules/mod_filter.so
LoadModule mime_module modules/mod_mime.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule env_module modules/mod_env.so
LoadModule headers_module modules/mod_headers.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule version_module modules/mod_version.so
LoadModule unixd_module modules/mod_unixd.so
LoadModule status_module modules/mod_status.so
LoadModule autoindex_module modules/mod_autoindex.so
<IfModule !mpm_prefork_module>
</IfModule>
<IfModule mpm_prefork_module>
</IfModule>
LoadModule dir_module modules/mod_dir.so
LoadModule alias_module modules/mod_alias.so

# 运行httpd的用户和组
<IfModule unixd_module>
User daemon
Group daemon
</IfModule>

# 管理员邮箱（若服务出来问题，会给管理员发邮件，提前是服务能发邮件）
ServerAdmin you@example.com

# 根目录权限
<Directory />
    AllowOverride none
    Require all denied
</Directory>

# 网页文件存放目录
DocumentRoot "/data/apps/apache24//htdocs" 

# 目录权限
<Directory "/data/apps/apache24//htdocs">
    Options Indexes FollowSymLinks
    AllowOverride None
    Require all granted
</Directory>

# 默认访问主页
<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>

# 控制不让web用户查看.htpasswd和.haccess两文件访问权限
<Files ".ht*">
    Require all denied
</Files>

# 错误日志存放位置
ErrorLog "logs/error_log"

# 日志级别
LogLevel warn

# 定义日志格式
<IfModule log_config_module>
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    <IfModule logio_module>
      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>
    CustomLog "logs/access_log" common
</IfModule>

# CGI模块别名管理
<IfModule alias_module>
    ScriptAlias /cgi-bin/ "/data/apps/apache24//cgi-bin/"
</IfModule>

# CGI模块别名
<Directory "/data/apps/apache24//cgi-bin">
    AllowOverride None
    Options None
    Require all granted
</Directory>

# 取消旧代理模块
<IfModule headers_module>
    RequestHeader unset Proxy early
</IfModule>

# 支持的文件
<IfModule mime_module>
    TypesConfig conf/mime.types
    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz
</IfModule>

# 启用的代理模块
<IfModule proxy_html_module>
Include conf/extra/proxy-html.conf
</IfModule>

# ssl模块
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>