From: Nilgun Belma Buguner This directive enables operating system specific optimizations for a
- listening socket by the Protocol type. The basic premise is for the
- kernel to not send a socket to the server process until either data
+ This directive enables operating system specific optimizations for a
+ listening socket by the Protocol type. The basic premise is for the
+ kernel to not send a socket to the server process until either data
is received or an entire HTTP Request is buffered. Only
- FreeBSD's Accept Filters and Linux's more primitive
+ FreeBSD's Accept Filters and Linux's more primitive
The default values on FreeBSD are: The Linux's Using Using TCP_DEFER_ACCEPT
are currently supported.
AcceptFilter https dataready
-
+
httpready
accept filter buffers entire HTTP requests at
- the kernel level. Once an entire request is received, the kernel then
- sends it to the server. See the
+ the kernel level. Once an entire request is received, the kernel then
+ sends it to the server. See the
- accf_http(9) man page for more details. Since HTTPS requests are
+ accf_http(9) man page for more details. Since HTTPS requests are
encrypted only the
accf_data(9) filter is used.TCP_DEFER_ACCEPT
does not support buffering http
- requests. Any value besides none
will enable
+ requests. Any value besides none
will enable
TCP_DEFER_ACCEPT
on that listener. For more details
- see the Linux
+ see the Linux
tcp(7) man page.none
for an argument will disable any accept filters
+ none
for an argument will disable any accept filters
for that protocol. This is useful for protocols that require a server
send data first, such as nntp
:
For security and performance reasons, do not set
- AllowOverride
to anything other than None
+ AllowOverride
to anything other than None
in your <Directory />
block. Instead, find (or
create) the <Directory>
block that refers to the
directory where you're actually planning to place a
@@ -534,10 +534,10 @@ authentication
server must have an authentication-provider module such as
</Directory>
are used to enclose a group of
directives that will apply only to the named directory,
- sub-directories of that directory, and the files within the respective
+ sub-directories of that directory, and the files within the respective
directories. Any directive that is allowed
in a directory context may be used. Directory-path is
either the full path to a directory, or a wild-card string using
@@ -805,7 +805,7 @@ subdirectories
of directives which will apply only to the named directory and
sub-directories of that directory (and the files within), the same as
then an access to
http://www.my.host.com/index.html
refers to
- /usr/web/index.html
. If the directory-path is
- not absolute then it is assumed to be relative to the
The The When entering a file path on non-Unix platforms, care should be taken
to make sure that only forward slashes are used even though the platform
- may allow the use of back slashes. In general it is a good idea to always
+ may allow the use of back slashes. In general it is a good idea to always
use forward slashes throughout the configuration files.
The filename argument should include a filename, or
a wild-card string, where ?
matches any single character,
and *
matches any sequences of characters.
- ~
character. For example:
The
This directive currently only works with the
This directive currently only works with the
The file path specified may be an absolute path, or may be relative +
The file path specified may be an absolute path, or may be relative
to the
Examples:
@@ -1635,7 +1635,7 @@ requests on a persistent connection may cause performance problems in heavily loaded servers. The higher the timeout, the more server processes will be kept occupied waiting on connections with idle clients. - +In a name-based virtual host context, the value of the first
defined virtual host (the default host) in a set of
When name-based virtual hosting is used, the value for this +
When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
The
When name-based virtual hosting is used, the value for this +
When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
This directive sets the number of bytes that will be +
This directive sets the number of bytes that will be allowed on the HTTP request-line.
The When name-based virtual hosting is used, the value for this
+ When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
The enclosed directives will be applied to the request if the path component - of the URL meets any of the following criteria: + of the URL meets any of the following criteria:
In the example below, where no trailing slash is used, requests to /private1, /private1/ and /private1/file.txt will have the enclosed - directives applied, but /private1other would not. + directives applied, but /private1other would not.
In the example below, where a trailing slash is used, requests to /private2/ and /private2/file.txt will have the enclosed - directives applied, but /private2 and /private2other would not. + directives applied, but /private2 and /private2other would not.
Use <Location />
, which is an easy way to
+ <Location />
, which is an easy way to
apply a configuration to the entire server.
This directive selects which authenticated users can access a
resource. Multipe instances of this directive are combined with a logical
- "OR", such that a user matching any
If
If
-
+
Additionally,
For example, if the name of the
machine hosting the web server is simple.example.com
,
but the machine also has the DNS alias www.example.com
@@ -2988,7 +2987,7 @@ itself
https://
scheme and the port number to which the
clients connect in the
See the description of the
@@ -3039,7 +3038,7 @@ is accessed by an incompatible browser
subdirectories conf/
and logs/
. Relative
paths in other configuration directives (such as
Finally, for testing and diagnostic purposes only, request
- bodies may be allowed using the non-compliant With TraceEnable
+ bodies may be allowed using the non-compliant
TraceEnable
extended
directive. The core (as an origin server) will
restrict the request body to 64k (plus 8k for chunk headers if
Transfer-Encoding: chunked
is used). The core will
@@ -3417,7 +3416,7 @@ port
Servername
UseCanonicalPhysicalPort Off
, the
physical ports are removed from the ordering.
Les directives que contient cette section seront appliquées aux requêtes si la partie chemin de l'URL satisfait à l'un au moins de - ces critères : + ces critères :
Dans l'exemple ci-dessous, où aucun slash de fin n'est utilisé, les directives contenues dans la section s'appliqueront à /private1, - /private1/ et /private1/file.txt, mais pas à /private1other. + /private1/ et /private1/file.txt, mais pas à /private1other.
De même, dans l'exemple ci-dessous, où l'on utilise un slash de fin, les directives contenues dans la section s'appliqueront à /private2/ et - à /private2/file.txt, mais pas à /private2other. + à /private2/file.txt, mais pas à /private2other.