SouEasy

6、安装mod_gzip 对静态WEB页面进行压缩



#tar zxvf mod_gzip-2.1.0.tar.gz



# cd mod_gzip-2.1.0



#/usr/local/apache2/bin/apxs -cia mod_gzip.c

step 2:基本环境配置


配置：




1、配置apache







A．增加一个解析php 文件配置
AddType application/x-httpd-php .php
B.在DirectoryIndex 后增加一个 index.php
C.增加deflate 配置信息



代码:





# Insert filter
SetOutputFilter DEFLATE
 
# Netscape 4.x has some problems...
BrowserMatch ^Mozilla/4 gzip-only-text/html
 
# Netscape 4.06-4.08 have some more problems
BrowserMatch ^Mozilla/4.0[678] no-gzip
 
# MSIE masquerades as Netscape, but it is fine
# BrowserMatch bMSIE !no-gzip !gzip-only-text/html
 
# NOTE: Due to a bug in mod_setenvif up to Apache 2.0.48
# the above regex won't work. You can use the following
# workaround to get the desired effect:
BrowserMatch bMSI[E] !no-gzip !gzip-only-text/html
 
# Don't compress images
SetEnvIfNoCase Request_URI .(?:gif|jpe?g|png|ico)$ no-gzip dont-vary
 
# Make sure proxies don't deliver the wrong content
#Header append Vary User-Agent env=!dont-vary

 
DeflateFilterNote ratio
LogFormat '"%v %h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i"" (%{ratio}n)' deflate
 
CustomLog logs/deflate_log deflate








D.检查一下配置文件中是否有一下模块, 如没有则加上去



LoadModule evasive20_module   modules/mod_evasive20.so



LoadModule gzip_module        modules/mod_gzip.so



LoadModule security_module        modules/mod_security.so




E.添加一段mod_security的配置文件



代码:





SecFilterEngine On
SecFilterCheckURLEncoding On
SecFilterDefaultAction "deny,log,status:500"
#SecFilterForceByteRange 32 126
#SecFilterScanPOST On
SecAuditLog logs/audit_log
###
SecFilter "../"
#####
SecFilter /etc/*passwd
SecFilter /bin/*sh

#for css attack
SecFilter "<( | )*script"
SecFilter "<(.| )+>"
#for sql attack
SecFilter "delete[ ]+from"
SecFilter "insert[ ]+into"
SecFilter "select.+from"
SecFilter "union[ ]+from"
SecFilter "drop[ ]"



F.添加一段mod_evasive20的配置文件



代码:





   DOSHashTableSize    3097
   DOSPageCount        2
   DOSSiteCount        50
   DOSPageInterval     1
   DOSSiteInterval     1
   DOSBlockingPeriod   10



G. 添加一段mod_gzip.c的配置文件



代码:




mod_gzip_on Yes



mod_gzip_minimum_file_size 1002



mod_gzip_maximum_file_size 0



mod_gzip_maximum_inmem_size 60000



mod_gzip_item_include mime "application/x-httpd-php"



mod_gzip_item_include mime "text/*"



# 压缩 Zope 的内容：



mod_gzip_item_include file "[^.]*$"



mod_gzip_item_include mime "httpd/unix-directory"



mod_gzip_dechunk Yes



mod_gzip_temp_dir "/tmp"



mod_gzip_keep_workfiles No



mod_gzip_item_include file ".php$"



mod_gzip_item_include file ".txt$"



mod_gzip_item_include file ".html$"



mod_gzip_item_exclude file ".css$"



mod_gzip_item_exclude file ".js$"


H.加个VirtualHost



NameVirtualHost *:80







   ServerName www.irunnet.com



   DocumentRoot /usr/local/apps/www/cacti



   ErrorLog /dev/null



   CustomLog /dev/null common






2、测试PHP

在/usr/local/apps/www/cacti 创建文件phpinfo.php 内容为：



代码:



echo phpinfo();
?>


在浏览器中打开 http://www.irunnet.com/******/phpinfo.php 如果你能看到 phpinfo 界面那么ok。
这里对PHP.ini配置文件根据开发需求简单改改



memory_limit = 50M



display_errors = Off



log_errors = Off



log_errors_max_len = 10240



error_log = /usr/local/apps/www/log



post_max_size = 30M



upload_max_filesize = 50M