From: Mike Rumph ftp: or nntp:
The default protocol names are https for port 443
- and http for all other ports. To specify another protocol
- is being used with a listening port, add the protocol
+ and http for all other ports. To specify that another
+ protocol is being used with a listening port, add the protocol
argument to the
The default values on Linux are:
@@ -189,7 +189,7 @@ AcceptFilter https dataWhile processing a request the server looks for +
While processing a request, the server looks for
the first existing configuration file from this list of names in
every directory of the path to the document, if distributed
configuration files are enabled for that
@@ -199,11 +199,11 @@ AcceptFilter https data
AccessFileName .acl
- before returning the document
+ Before returning the document
/usr/local/web/index.html, the server will read
/.acl, /usr/.acl,
/usr/local/.acl and /usr/local/web/.acl
- for directives, unless they have been disabled with
The %2F for /
- and additionally %5C for \ on according systems)
+ and additionally %5C for \ on accordant systems)
to be used in the path info.
With the default value, When the server finds an When this directive is set to Note that a syntax error in a valid directive will still cause
an internal server error.Off, such URLs are refused
@@ -309,7 +309,7 @@ NoDecode option available in 2.3.12 and later.
.htaccess file (as
- specified by None and None .htaccess files are
+ None, .htaccess files are
completely ignored. In this case, the server will not even attempt
to read .htaccess files in the filesystem.
In the example above all directives that are neither in the group +
In the example above, all directives that are neither in the group
AuthConfig nor Indexes cause an internal
server error.
When the server finds an .htaccess file (as
- specified by
In the example above only the Redirect and
+
In the example above, only the Redirect and
RedirectMatch directives are allowed. All others will
cause an internal server error.
In the example above In the example above, AuthConfig
directive grouping and FileInfo directive
@@ -585,8 +585,8 @@ variables
Authorization, which is
required for scripts that implement HTTP Basic authentication.
- Normally these HTTP headers are hidden from scripts, as it allows
- scripts to see user ids and passwords used to access the server when
+ Normally these HTTP headers are hidden from scripts. This is to disallow
+ scripts from seeing user ids and passwords used to access the server when
HTTP Basic authentication is enabled in the web server. This directive
should be used when scripts are allowed to implement HTTP Basic
authentication.
Note:
ErrorDocument 401, the client will not
know to prompt the user for a password since it will not
receive the 401 status code. Therefore, if you use an
- ErrorDocument 401 directive then it must refer to a local
+ ErrorDocument 401 directive, then it must refer to a local
document.
Microsoft Internet Explorer (MSIE) will by default ignore @@ -1392,7 +1392,7 @@ ErrorLog syslog:user
Additional modules can provide their own ErrorLog providers. The syntax
- is similar to syslog example above.
syslog example above.
SECURITY: See the security tips
@@ -1585,7 +1585,7 @@ ErrorLogFormat "[%t] [%l] [pid %P] %F: %E: [client %a] %M"
or request. This can be used to correlate which log lines belong to the
same connection or request, which request happens on which connection.
A %L format string is also available in
-
This option tracks additional data per worker about the
- currently executing request, and a utilization summary; you
- can see these variables during runtime by configuring
+ currently executing request and creates a utilization summary.
+ You can see these variables during runtime by configuring
This setting applies to the entire server, and cannot be +
This setting applies to the entire server and cannot be
enabled or disabled on a virtualhost-by-virtualhost basis.
The collection of extended status information can slow down
the server. Also note that this setting cannot be changed
@@ -1650,7 +1650,7 @@ request
third party modules may do the same. Such modules rely on
collecting detailed information about the state of all workers.
The default is changed by
When a client uses a Keep-Alive connection it will be counted +
When a client uses a Keep-Alive connection, it will be counted
as a single "request" for the
PATCH, PROPFIND, PROPPATCH,
MKCOL, COPY, MOVE,
LOCK, and UNLOCK. The method name is
- case-sensitive. If GET is used it will also
+ case-sensitive. If GET is used, it will also
restrict HEAD requests. The TRACE method
cannot be limited (see The directive stores two different limits, which are evaluated on per-request basis. The first number is the maximum number of - internal redirects, that may follow each other. The second number - determines, how deep subrequests may be nested. If you specify only one + internal redirects that may follow each other. The second number + determines how deeply subrequests may be nested. If you specify only one number, it will be assigned to both limits.
If, for example, you are permitting file upload to a particular - location, and wish to limit the size of the uploaded file to 100K, + location and wish to limit the size of the uploaded file to 100K, you might use the following directive:
The example.com, you might use:
When logging to a regular file messages of the level +
When logging to a regular file, messages of the level
notice cannot be suppressed and thus are always
logged. However, this doesn't apply when logging is done
using syslog.
The default as
- the first argument to change the settings for all mutexes; specify
- a mutex name (see table below) as the first argument to override
+ the second argument to change the settings for all mutexes; specify
+ a mutex name (see table below) as the second argument to override
defaults only for that mutex.
The OmitPID keyword is specified, the process id of the httpd
- parent process will be appended to to make the file name unique, avoiding
+ parent process will be appended to make the file name unique, avoiding
conflicts when multiple httpd instances share a lock file directory. For
example, if the mutex name is mpm-accept and the lock file
directory is /var/httpd/locks, the lock file name for the
@@ -3582,7 +3582,7 @@ directory
Indexesindex.html) in that directory, then
Mixing + or
- - with those without is not valid syntax, and will be
+ - with those without is not valid syntax and will be
rejected during server startup by the syntax check with an abort.
This directive specifies the protocol used for a specific listening socket.
- The protocol is used to determine which module should handle a request, and
+ The protocol is used to determine which module should handle a request and
to apply protocol specific optimizations with the
You only need to set the protocol if you are running on non-standard ports, otherwise http is assumed for port 80 and https for port 443.
You only need to set the protocol if you are running on non-standard ports;
+ otherwise, http is assumed for port 80 and https
+ for port 443.
For example, if you are running https on a non-standard port, specify the protocol explicitly:
For example, if you are running https on a non-standard port,
+ specify the protocol explicitly:
max to indicate to the server that the limit should
be set to the maximum allowed by the operating system
configuration. Raising the maximum resource limit requires that
- the server is running as root, or in the initial startup
+ the server is running as root or in the initial startup
phase.
- This applies to processes forked off from Apache httpd children +
This applies to processes forked from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any - processes forked off from the Apache httpd parent such as piped + processes forked from the Apache httpd parent, such as piped logs.
CPU resource limits are expressed in seconds per
@@ -3757,13 +3760,13 @@ by Apache httpd children
or max to indicate to the server that the limit should
be set to the maximum allowed by the operating system
configuration. Raising the maximum resource limit requires that
- the server is running as root, or in the initial startup
+ the server is running as root or in the initial startup
phase.
This applies to processes forked off from Apache httpd children +
This applies to processes forked from Apache httpd children servicing requests, not the Apache httpd children themselves. This includes CGI scripts and SSI exec commands, but not any - processes forked off from the Apache httpd parent such as piped + processes forked from the Apache httpd parent, such as piped logs.
Memory resource limits are expressed in bytes per
@@ -3785,18 +3788,18 @@ processes launched by Apache httpd children
Takes 1 or 2 parameters. The first parameter sets the soft
- resource limit for all processes and the second parameter sets
+ resource limit for all processes, and the second parameter sets
the maximum resource limit. Either parameter can be a number,
or This applies to processes forked off from Apache httpd children
+ This applies to processes forked from Apache httpd children
servicing requests, not the Apache httpd children themselves. This
includes CGI scripts and SSI exec commands, but not any
- processes forked off from the Apache httpd parent such as piped
+ processes forked from the Apache httpd parent, such as piped
logs. Process limits control the number of processes per user. Despite claims to the contrary, max to indicate to the server that the limit
should be set to the maximum allowed by the operating system
configuration. Raising the maximum resource limit requires that
- the server is running as root, or in the initial startup
+ the server is running as root or in the initial startup
phase.minimal is not recommended because it makes it more
difficult to debug interoperational problems. Also note that
disabling the Server: header does nothing at all to make your
- server more secure; the idea of "security through obscurity"
+ server more secure. The idea of "security through obscurity"
is a myth and leads to a false sense of safety.
-
TRACE is not
- a security vulnerability and there is no viable reason for
+ a security vulnerability, and there is no viable reason for
it to be disabled. Doing so necessarily makes your server
- non-compliant.
-D arguments in any startup scripts.
While this directive is supported in virtual host context, the changes it makes are visible to any later configuration - directives, beyond any enclosing virtual host
+ directives, beyond any enclosing virtual host. @@ -4447,7 +4449,7 @@ port the client if any are supplied (otherwise it will use the canonical name, as defined above). These values are the same that are used to implement name-based virtual hosts, + href="../vhosts/name-based.html">name-based virtual hosts and are available with the same clients. The CGI variablesSERVER_NAME and SERVER_PORT will be
constructed from the client supplied values as well.
@@ -4455,9 +4457,9 @@ port
An example where this may be useful is on an intranet server
where you have users connecting to the machine using short
names such as www. You'll notice that if the users
- type a shortname, and a URL which is a directory, such as
+ type a shortname and a URL which is a directory, such as
http://www/splat, without the trailing
- slash then Apache httpd will redirect them to
+ slash, then Apache httpd will redirect them to
http://www.example.com/splat/. If you have
authentication enabled, this will cause the user to have to
authenticate twice (once for www and once again
@@ -4470,15 +4472,15 @@ port
There is a third option, UseCanonicalName DNS,
which is intended for use with mass IP-based virtual hosting to
support ancient clients that do not provide a
- Host: header. With this option Apache httpd does a
+ Host: header. With this option, Apache httpd does a
reverse DNS lookup on the server IP address that the client
connected to in order to work out self-referential URLs.
If CGIs make assumptions about the values of SERVER_NAME
+
If CGIs make assumptions about the values of SERVER_NAME,
they may be broken by this option. The client is essentially free
to give whatever value they want as a hostname. But if the CGI is
- only using SERVER_NAME to construct self-referential URLs
+ only using SERVER_NAME to construct self-referential URLs,
then it should be just fine.
In many situations Apache httpd must construct a self-referential
URL -- that is, a URL that refers back to the same server. With
- UseCanonicalPhysicalPort On Apache httpd will, when
+ UseCanonicalPhysicalPort On, Apache httpd will, when
constructing the canonical port for the server to honor
the UseCanonicalPhysicalPort Off
+ as a potential port. With UseCanonicalPhysicalPort Off,
Apache httpd will not ever use the actual physical port number, instead
relying on all configured information to construct a valid port number.
Each Virtual Host must correspond to a different IP address, - different port number or a different host name for the server, + different port number, or a different host name for the server, in the former case the server machine must be configured to accept IP packets for multiple addresses. (If the machine does not have multiple network interfaces, then this can be @@ -4629,7 +4631,7 @@ hostname or IP address requested hostname. If no matching name-based virtual host is found, then the first listed virtual host that matched the IP address will be used. As a consequence, the first listed virtual host for a given IP address - and port combination is default virtual host for that IP and port + and port combination is the default virtual host for that IP and port combination.
If an issue can be detected from within the configuration, this directive can be used to generate a custom warning message. The - configuration parsing is not halted. The typical use it to check + configuration parsing is not halted. The typical use is to check whether some user define options are set, and warn if not.
This directive controls whether HTTP trailers are copied into the - internal representation of HTTP headers. This mergeing occurs when the + internal representation of HTTP headers. This merging occurs when the request body has been completely consumed, long after most header processing would have a chance to examine or modify request headers.
-This option is provided for compatibility with releases prior to 2.4.10, +
This option is provided for compatibility with releases prior to 2.4.11, where trailers were always merged.