Apache的配置
Apache默认虚拟主机
在虚拟主机配置文件中第一个虚拟主机
vim vim /usr/local/apache2/conf/extra/httpd-vhosts.conf
# ServerAdmin webmaster@dummy-host.example.com
DocumentRoot "/tmp/123"
ServerName 111.com
保存后
mkdir /tmp/123
chmod 600 /tmp/123
Apache域名301跳转
在虚拟主机配置文件中加入
vim /usr/local/apache2/conf/extra/httpd-vhosts.conf
# RewriteEngine on
RewriteCond %{HTTP_HOST} ^bbb.com
RewriteRule ^/(.*)$ https://cache.yisu.com/upload/information/20200310/68/125221.jpg$" p_w_picpath-request
SetEnvIf Request_URI ".*\.jpg$" p_w_picpath-request
SetEnvIf Request_URI ".*\.png$" p_w_picpath-request
SetEnvIf Request_URI ".*\.bmp$" p_w_picpath-request
SetEnvIf Request_URI ".*\.swf$" p_w_picpath-request
SetEnvIf Request_URI ".*\.js$" p_w_picpath-request
SetEnvIf Request_URI ".*\.css$" p_w_picpath-request
CustomLog "|/usr/local/apache2/bin/rotatelogs -l /usr/local/apache2/logs/test.com__%Y%m%d_log 86400" combined env=!p_w_picpath-request
2.2 Apache 配置静态缓存
修改虚拟主机配置文件
vim /usr/local/apache2/conf/extra/httpd-vhosts.conf
ErrorLog "/usr/local/apache2/logs/tset.com-error_log"
SetEnvIf Request_URI ".*\.gif$" p_w_picpath-request
SetEnvIf Request_URI ".*\.jpg$" p_w_picpath-request
SetEnvIf Request_URI ".*\.png$" p_w_picpath-request
SetEnvIf Request_URI ".*\.bmp$" p_w_picpath-request
SetEnvIf Request_URI ".*\.swf$" p_w_picpath-request
SetEnvIf Request_URI ".*\.js$" p_w_picpath-request
SetEnvIf Request_URI ".*\.css$" p_w_picpath-request
CustomLog "|/usr/local/apache2/bin/rotatelogs -l /usr/local/apache2/logs/test.com__%Y%m%d_log 86400" combined env=!p_w_picpath-request
ExpiresActive on
ExpiresByType p_w_picpath/gif "access plus 1 days"
ExpiresByType p_w_picpath/jpeg "access plus 24 hours"
ExpiresByType p_w_picpath/png "access plus 24 hours"
ExpiresByType txt/ccs "now plus 2 hours"
ExpiresByType application/x-javascript "now plus 2 hours"
ExpiresByType application/javascript "now plus 2 hours"
ExpiresByType application/x-shockwave-flash "now plus 2 hours"
ExpiresDefault "now plus 0 min"
2.3 Apache配置防盗链
修改虚拟主机配置文件加上
vim /usr/local/apache2/conf/extra/httpd-vhosts.conf
SetEnvIfNoCase Referer "^http://.*\.aaa\.com" local_ref
SetEnvIfNoCase Referer ".*\.bbb\.com" local_ref
SetEnvIfNoCase Referer "^$" local_ref
Order Allow,Deny
Allow from env=local_ref
Apache访问控制
在虚拟主机配置文件加上
vim /usr/local/apache2/conf/extra/httpd-vhosts.conf
AllowOverride None
Order allow,deny
Allow from all
Deny from 1.1.1.1
Apache禁止解析php
在虚拟主机配置文件加上
vim /usr/local/apache2/conf/extra/httpd-vhosts.conf
php_admin_flag engine off
Order deny,allow
Deny from all
Apache 禁止指定user_agent
user_agent 搜索引擎
限制了curl 和chrome 浏览器访问
RewriteEngine on 相当于开关
RewriteCond %{HTTP_USER_AGENT} ^.*curl.* [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^.*chrome* [NC]
RewriteRule .* - [F]
Apache通过rewrite限制某个目录
RewriteEngine on 相当于开关
RewriteCond %{REQUEST_URI} ^.*/tmp/.* [NC]
RewriteRule .* - [F]
Apache--admin加密
在虚拟主机配置文件加上
vim /usr/local/apache2/conf/extra/httpd-vhosts.conf
AllowOverride AuthConfig
AuthName "aaaaa"
AuthType Basic
AuthUserFile /data/.htpasswd
require valid-user
保存后创建Apache的验证用户
/usr/local/apache2/bin/htpasswd -c /data/.htpasswd user
-----------------------------------------------------------------
总配置文件
# ServerAdmin webmaster@dummy-host.example.com
DocumentRoot "/tmp/123"
ServerName 111.com
# ServerAdmin webmaster@dummy-host.example.com
DocumentRoot "/data/www/"
ServerName aaa.com
ServerAlias bbb.com
# ErrorLog "logs/test2.com-error_log"
# CustomLog "logs/test2.com_log" combined
ErrorLog "/usr/local/apache2/logs/tset.com-error_log"
SetEnvIf Request_URI ".*\.gif$" p_w_picpath-request
SetEnvIf Request_URI ".*\.jpg$" p_w_picpath-request
SetEnvIf Request_URI ".*\.png$" p_w_picpath-request
SetEnvIf Request_URI ".*\.bmp$" p_w_picpath-request
SetEnvIf Request_URI ".*\.swf$" p_w_picpath-request
SetEnvIf Request_URI ".*\.js$" p_w_picpath-request
SetEnvIf Request_URI ".*\.css$" p_w_picpath-request
CustomLog "|/usr/local/apache2/bin/rotatelogs -l /usr/local/apache2/logs/test.com__%Y%m%d_log 86400" combined env=!p_w_picpath-request
ExpiresActive on
ExpiresByType p_w_picpath/gif "access plus 1 days"
ExpiresByType p_w_picpath/jpeg "access plus 24 hours"
ExpiresByType p_w_picpath/png "access plus 24 hours"
ExpiresByType txt/ccs "now plus 2 hours"
ExpiresByType application/x-javascript "now plus 2 hours"
ExpiresByType application/javascript "now plus 2 hours"
ExpiresByType application/x-shockwave-flash "now plus 2 hours"
ExpiresDefault "now plus 0 min"
SetEnvIfNoCase Referer "^http://.*\.aaa\.com" local_ref
SetEnvIfNoCase Referer ".*\.bbb\.com" local_ref
SetEnvIfNoCase Referer "^$" local_ref
Order Allow,Deny
Allow from env=local_ref
RewriteEngine on
RewriteCond %{HTTP_HOST} ^bbb.com
RewriteRule ^/(.*)$ http://aaa.com/$1 [R=301,L]
RewriteEngine on
RewriteCond %{REQUEST_URI} ^.*/tmp/.* [NC]
RewriteRule .* - [F]
AllowOverride AuthConfig
AuthName "aaaaa"
AuthType Basic
AuthUserFile /data/.htpasswd
require valid-user
AllowOverride None
Order allow,deny
Allow from all
Deny from 1.1.1.1
php_admin_flag engine off
Order deny,allow
Deny from all
AllowOverride AuthConfig
AuthName "aaaaa"
AuthType Basic
AuthUserFile /data/.htpasswd
require valid-user
RewriteEngine on
RewriteCond %{HTTP_USER_AGENT} ^.*curl.* [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^.*chrome* [NC]
RewriteRule .* - [F]
