From: Vincent Deffontaines TCP_DEFER_ACCEPT, and Windows' optimized AcceptEx()
are currently supported.
Using none for an argument will disable any accept filters
+
Using none for an argument will disable any accept filters
for that protocol. This is useful for protocols that require a server
send data first, such as ftp: or nntp:
AcceptFilter nntp none
The httpready accept filter buffers entire HTTP requests at
- the kernel level. Once an entire request is received, the kernel then
- sends it to the server. See the
+ the kernel level. Once an entire request is received, the kernel then
+ sends it to the server. See the
- accf_http(9) man page for more details. Since HTTPS requests are
+ accf_http(9) man page for more details. Since HTTPS requests are
encrypted only the
accf_data(9) filter is used.
Linux's TCP_DEFER_ACCEPT does not support buffering http
- requests. Any value besides none will enable
+ requests. Any value besides none will enable
TCP_DEFER_ACCEPT on that listener. For more details
- see the Linux
+ see the Linux
tcp(7) man page.
For security and performance reasons, do not set
- AllowOverride to anything other than None
+ AllowOverride to anything other than None
in your <Directory /> block. Instead, find (or
create) the <Directory> block that refers to the
directory where you're actually planning to place a
@@ -618,7 +618,7 @@ named file-system directory, sub-directories, and their contents.
<Directory> and
</Directory> are used to enclose a group of
directives that will apply only to the named directory,
- sub-directories of that directory, and the files within the respective
+ sub-directories of that directory, and the files within the respective
directories. Any directive that is allowed
in a directory context may be used. Directory-path is
either the full path to a directory, or a wild-card string using
@@ -757,9 +757,9 @@ the contents of file-system directories matching a regular expression.
<DirectoryMatch> and
</DirectoryMatch> are used to enclose a group
- of directives which will apply only to the named directory (and the files within),
- the same as <Directory>.
- However, it takes as an argument a
+ of directives which will apply only to the named directory (and the files within),
+ the same as <Directory>.
+ However, it takes as an argument a
regular expression. For example:
@@ -778,8 +778,8 @@ the contents of file-system directories matching a regular expression.
then an access to
http://my.example.com/index.html refers to
- /usr/web/index.html. If the directory-path is
+ /usr/web/index.html. If the directory-path is
not absolute then it is assumed to be relative to the ServerRoot.
The DocumentRoot should be specified without
@@ -1067,7 +1067,7 @@ in case of an error
will be immediately halted and the internal error message returned.
This is necessary to guard against security problems caused by
bad requests.
If you are using mod_proxy, you may wish to enable
ProxyErrorOverride so that you can provide
custom error messages on behalf of your Origin servers. If you don't enable ProxyErrorOverride,
@@ -1091,7 +1091,7 @@ in case of an error
The ErrorLog directive sets the name of
the file to which the server will log any errors it encounters. If
- the file-path is not absolute then it is assumed to be
+ the file-path is not absolute then it is assumed to be
relative to the ServerRoot.
When entering a file path on non-Unix platforms, care should be taken
to make sure that only forward slashes are used even though the platform
- may allow the use of back slashes. In general it is a good idea to always
+ may allow the use of back slashes. In general it is a good idea to always
use forward slashes throughout the configuration files. This option tracks additional data per worker about the
- currently executing request, and a utilization summary; you
- can see these variables during runtime by configuring
+ currently executing request, and a utilization summary; you
+ can see these variables during runtime by configuring
Note that loading Note that loading The filename argument should include a filename, or
a wild-card string, where The This directive primarily overrides the content types generated for
- static files served out of the filesystem. For resources other than
- static files, where the generator of the response typically specifies
+ static files served out of the filesystem. For resources other than
+ static files, where the generator of the response typically specifies
a Content-Type, this directive has no effect. This directive currently only works with the This directive currently only works with the
@@ -1129,7 +1129,7 @@ in case of an error
Note
ExtendedStatus Directive
-
Description: Keep track of extended status information for each
+ Description: Keep track of extended status information for each
request Syntax: ExtendedStatus On|Off
@@ -1295,8 +1295,8 @@ request
Default: ExtendedStatus Off[*]Module: core mod_status. Note that other modules may
rely on this scoreboard.mod_status will change
+ mod_status will change
the default behavior to ExtendedStatus On, while other
third party modules may do the same. Such modules rely on
collecting detailed information about the state of all workers.
@@ -1375,8 +1375,8 @@ HTTP response header for static files
changed via FileETag.
Server Side Includes
- An ETag is not generated for responses parsed by mod_include,
- since the response entity can change without a change of the INode, MTime, or Size
+ An ETag is not generated for responses parsed by mod_include,
+ since the response entity can change without a change of the INode, MTime, or Size
of the static file with embedded SSI directives.
? matches any single character,
and * matches any sequences of characters.
- Regular expressions
+ Regular expressions
can also be used, with the addition of the
~ character. For example:<FilesMatch> directive
limits the scope of the enclosed directives by filename, just as the
<Files> directive
- does. However, it accepts a regular
+ does. However, it accepts a regular
expression. For example:
@@ -1515,8 +1515,8 @@ media type in the HTTP Content-Type header field
prefork
+ prefork
MPM.Include directive will fail with an
error saying the file or directory cannot be found.
The file path specified may be an absolute path, or may be relative +
The file path specified may be an absolute path, or may be relative
to the ServerRoot directory.
Examples:
@@ -1817,7 +1817,7 @@ wildcard matching available in 2.3.6 and later path. In the following example, the server will fail to load if no directories match conf/vhosts/*, but will load successfully if no files match *.conf. - +In this example, the server load successfully if either conf/vhosts/*
matches no directories, or if *.conf matches no files: The number of seconds Apache httpd will wait for a subsequent
@@ -1905,7 +1905,7 @@ Apache httpd 2.3.2 and later
may cause performance problems in heavily loaded servers. The
higher the timeout, the more server processes will be kept
occupied waiting on connections with idle clients. In a name-based virtual host context, the value of the first
defined virtual host (the default host) in a set of
Include conf/vhosts/*/vhost.conf
Include conf/vhosts/*/*.conf
@@ -1829,7 +1829,7 @@ wildcard matching available in 2.3.6 and later
Include strict conf/vhosts/*/*.conf
Context: server config, virtual host Status: Core
-Module: core Compatibility: Specifying a value in milliseconds is available in
+ Compatibility: Specifying a value in milliseconds is available in
Apache httpd 2.3.2 and later NameVirtualHost will be used.
The other values will be ignored.
<Limit POST>
Require group editors
-
+
</Limit>
LimitRequestBody 102400
For a full description of how this directive is interpreted by + +
For a full description of how this directive is interpreted by
proxy requests, see the mod_proxy documentation.
When name-based virtual hosting is used, the value for this +
When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
NameVirtualHost the connection was mapped to.
The LimitRequestFieldSize directive
- allows the server administrator to reduce or increase the limit
+ allows the server administrator to reduce or increase the limit
on the allowed size of an HTTP request header field. A server
- needs this value to be large enough to hold any one header field
- from a normal client request. The size of a normal request header
- field will vary greatly among different client implementations,
+ needs this value to be large enough to hold any one header field
+ from a normal client request. The size of a normal request header
+ field will vary greatly among different client implementations,
often depending upon the extent to which a user has configured
their browser to support detailed content negotiation. SPNEGO
authentication headers can be up to 12392 bytes.
When name-based virtual hosting is used, the value for this +
When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
NameVirtualHost the connection was mapped to.
This directive sets the number of bytes that will be +
This directive sets the number of bytes that will be allowed on the HTTP request-line.
The LimitRequestLine directive allows
@@ -2239,7 +2239,7 @@ from the client
the default.
When name-based virtual hosting is used, the value for this +
When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
NameVirtualHost the connection was mapped to.
- In the example below, where no trailing slash is used, requests to + In the example below, where no trailing slash is used, requests to /private1, /private1/ and /private1/file.txt will have the enclosed - directives applied, but /private1other would not. + directives applied, but /private1other would not.
<Location /private1>
...
- In the example below, where a trailing slash is used, requests to + In the example below, where a trailing slash is used, requests to /private2/ and /private2/file.txt will have the enclosed - directives applied, but /private2 and /private2other would not. + directives applied, but /private2 and /private2other would not.
Use
<Location /private2/>
@@ -2331,7 +2331,7 @@ URLs
<Location> to apply
directives to content that lives outside the filesystem. For
content that lives in the filesystem, use <Directory> and <Files>. An exception is
- <Location />, which is an easy way to
+ <Location />, which is an easy way to
apply a configuration to the entire server.
Regular expressions
- can also be used, with the addition of the ~
+ can also be used, with the addition of the ~
character. For example:
This selects the default locking implementation, as determined by
APR. The default locking implementation can
- be displayed by running This is a mutex variant based on a SystemV IPC semaphore. It is possible to "leak" SysV semaphores if processes crash
+ It is possible to "leak" SysV semaphores if processes crash
before the semaphore is removed. This is a mutex variant where a physical (lock-)file and the
+ This is a mutex variant where a physical (lock-)file and the
Most mechanisms are only available on selected platforms, where the
+ Most mechanisms are only available on selected platforms, where the
underlying platform and APR support it. Mechanisms
which aren't available on all platforms are posixsem,
- sysvsem, sem, pthread, fcntl,
+ sysvsem, sem, pthread, fcntl,
flock, and file. With the file-based mechanisms fcntl and flock,
@@ -2800,12 +2800,12 @@ or specified mutexes
filesystem for A single A single This directive, and the corresponding Although addr can be a hostname, it is recommended
@@ -2912,16 +2912,16 @@ that you always use an IP address or a wildcard. A wildcard
NameVirtualHost matches only virtualhosts that also have a literal wildcard
as their argument. In cases where a firewall or other proxy receives the requests and
+ In cases where a firewall or other proxy receives the requests and
forwards them on a different IP address to the server, you must specify the
IP address of the physical interface on the machine which will be
servicing the requests. In the example below, requests received on interface 192.0.2.1 and port 80
+ In the example below, requests received on interface 192.0.2.1 and port 80
will only select among the first two virtual hosts. Requests received on
port 80 on any other interface will only select among the third and fourth
-virtual hosts. In the common case where the interface isn't important
-to the mapping, only the "*:80" NameVirtualHost and VirtualHost directives
+virtual hosts. In the common case where the interface isn't important
+to the mapping, only the "*:80" NameVirtualHost and VirtualHost directives
are necessary. mod_status with Additionally, For example, if the name of the
machine hosting the web server is The See the description of the
@@ -3569,7 +3569,7 @@ is accessed by an incompatible browser
The After version 2.0.44, this directive also controls the
information presented by the Finally, for testing and diagnostic purposes only, request
- bodies may be allowed using the non-compliant With Using Using The Linux's For security and performance reasons, do not set
- then an access to
The If you are using mod_proxy, you may wish to enable
The When entering a file path on non-Unix platforms, care should be taken
to make sure that only forward slashes are used even though the platform
- may allow the use of back slashes. In general it is a good idea to always
+ may allow the use of back slashes. In general it is a good idea to always
use forward slashes throughout the configuration files. This option tracks additional data per worker about the
- currently executing request, and a utilization summary; you
- can see these variables during runtime by configuring
+ currently executing request, and a utilization summary; you
+ can see these variables during runtime by configuring
Note that loading Note that loading The filename argument should include a filename, or
a wild-card string, where The This directive primarily overrides the content types generated for
- static files served out of the filesystem. For resources other than
- static files, where the generator of the response typically specifies
+ static files served out of the filesystem. For resources other than
+ static files, where the generator of the response typically specifies
a Content-Type, this directive has no effect. This directive currently only works with the This directive currently only works with the The file path specified may be an absolute path, or may be relative
+ The file path specified may be an absolute path, or may be relative
to the Examples: In this example, the server load successfully if either conf/vhosts/*
matches no directories, or if *.conf matches no files: In a name-based virtual host context, the value of the first
defined virtual host (the default host) in a set of For a full description of how this directive is interpreted by
+
+ For a full description of how this directive is interpreted by
proxy requests, see the When name-based virtual hosting is used, the value for this
+ When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
The When name-based virtual hosting is used, the value for this
+ When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
This directive sets the number of bytes that will be
+ This directive sets the number of bytes that will be
allowed on the HTTP request-line. The When name-based virtual hosting is used, the value for this
+ When name-based virtual hosting is used, the value for this
directive is taken from the default (first-listed) virtual host for the
- In the example below, where no trailing slash is used, requests to
+ In the example below, where no trailing slash is used, requests to
/private1, /private1/ and /private1/file.txt will have the enclosed
- directives applied, but /private1other would not.
+ directives applied, but /private1other would not.
- In the example below, where a trailing slash is used, requests to
+ In the example below, where a trailing slash is used, requests to
/private2/ and /private2/file.txt will have the enclosed
- directives applied, but /private2 and /private2other would not.
+ directives applied, but /private2 and /private2other would not.
Use This selects the default locking implementation, as determined by
This is a mutex variant based on a SystemV IPC semaphore. It is possible to "leak" SysV semaphores if processes crash
+ It is possible to "leak" SysV semaphores if processes crash
before the semaphore is removed. This is a mutex variant where a physical (lock-)file and the
+ This is a mutex variant where a physical (lock-)file and the
Most mechanisms are only available on selected platforms, where the
+ Most mechanisms are only available on selected platforms, where the
underlying platform and With the file-based mechanisms fcntl and flock,
@@ -2796,12 +2796,12 @@ or specified mutexes
filesystem for A single A single This directive, and the corresponding Although addr can be a hostname, it is recommended
@@ -2908,16 +2908,16 @@ that you always use an IP address or a wildcard. A wildcard
NameVirtualHost matches only virtualhosts that also have a literal wildcard
as their argument. In cases where a firewall or other proxy receives the requests and
+ In cases where a firewall or other proxy receives the requests and
forwards them on a different IP address to the server, you must specify the
IP address of the physical interface on the machine which will be
servicing the requests. In the example below, requests received on interface 192.0.2.1 and port 80
+ In the example below, requests received on interface 192.0.2.1 and port 80
will only select among the first two virtual hosts. Requests received on
port 80 on any other interface will only select among the third and fourth
-virtual hosts. In the common case where the interface isn't important
-to the mapping, only the "*:80" NameVirtualHost and VirtualHost directives
+virtual hosts. In the common case where the interface isn't important
+to the mapping, only the "*:80" NameVirtualHost and VirtualHost directives
are necessary. mod_status with For example, if the name of the
machine hosting the web server is The See the description of the
@@ -3556,7 +3556,7 @@ is accessed by an incompatible browser
subdirectories After version 2.0.44, this directive also controls the
information presented by the Finally, for testing and diagnostic purposes only, request
- bodies may be allowed using the non-compliant With
@@ -2709,7 +2709,7 @@ or specified mutexes
default | yes
httpd with the
+ be displayed by running httpd with the
-V option.none | no
@@ -2730,7 +2730,7 @@ or specified mutexes
Warning
- fcntl:/path/to/mutex
- fcntl() function are used as the mutex.Warning
@@ -2787,10 +2787,10 @@ or specified mutexes
order.
- /path/to/mutex and never a directory residing
on a NFS- or AFS-filesystem. The basename of the file will be the mutex
type, an optional instance string provided by the module, and unless the
- OmitPID keyword is specified, the process id of the httpd
+ OmitPID keyword is specified, the process id of the httpd
parent process will be appended to to make the file name unique, avoiding
conflicts when multiple httpd instances share a lock file directory. For
example, if the mutex name is mpm-accept and the lock file
directory is /var/httpd/locks, the lock file name for the
- httpd instance with parent process id 12345 would be
+ httpd instance with parent process id 12345 would be
/var/httpd/locks/mpm-accept.12345.Security
@@ -2896,15 +2896,15 @@ hosting
-Module: core NameVirtualHost directive
-identifies a set of identical virtual hosts on which the server will
-further select from on the basis of the hostname
+NameVirtualHost directive
+identifies a set of identical virtual hosts on which the server will
+further select from on the basis of the hostname
requested by the client. The NameVirtualHost
-directive is a required directive if you want to configure
+directive is a required directive if you want to configure
name-based virtual hosts.VirtualHost,
-must be qualified with a port number if the server supports both HTTP
+must be qualified with a port number if the server supports both HTTP
and HTTPS connections.
@@ -3365,7 +3365,7 @@ of a request or the last 63, assuming the request itself is greater than
Compatibility: Available in Apache httpd 2.2.7 and later. ExtendedStatus On
- displays the actual request being handled.
+ displays the actual request being handled.
For historical purposes, only 63 characters of the request
are actually stored for display purposes. This directive
controls whether the 1st 63 characters are stored (the previous
@@ -3467,7 +3467,7 @@ itself
ServerName is used (possibly
in conjunction with ServerAlias) to uniquely
identify a virtual host, when using name-based virtual hosts.simple.example.com,
but the machine also has the DNS alias www.example.com
@@ -3475,7 +3475,7 @@ itself
directive should be used:
- ServerName www.example.com:80
+ ServerName www.example.com
ServerName directive
@@ -3503,7 +3503,7 @@ itself
https:// scheme and the port number to which the
clients connect in the ServerName directive
to make sure that the server generates the correct
- self-referential URLs.
+ self-referential URLs.
ServerRoot directive sets the
directory in which the server lives. Typically it will contain the
subdirectories conf/ and logs/. Relative
- paths in other configuration directives (such as Include or LoadModule, for example) are taken as
+ paths in other configuration directives (such as Include or LoadModule, for example) are taken as
relative to this directory.Example
@@ -3676,7 +3676,7 @@ header
ServerSignature directive.ServerTokens to less than
minimal is not recommended because it makes it more
difficult to debug interoperational problems. Also note that
@@ -3862,7 +3862,7 @@ certain events before failing a request
allowed) error to the client.
TraceEnable
+ bodies may be allowed using the non-compliant TraceEnable
extended directive. The core (as an origin server) will
restrict the request body to 64k (plus 8k for chunk headers if
Transfer-Encoding: chunked is used). The core will
@@ -3985,7 +3985,7 @@ port
ServernameUseCanonicalPhysicalPort Off, the
physical ports are removed from the ordering.TCP_DEFER_ACCEPT, and Windows' optimized AcceptEx()
are currently supported.none for an argument will disable any accept filters
+ none for an argument will disable any accept filters
for that protocol. This is useful for protocols that require a server
send data first, such as ftp: or nntp:
AcceptFilter https dataready
-
+
httpready accept filter buffers entire HTTP requests at
- the kernel level. Once an entire request is received, the kernel then
- sends it to the server. See the
+ the kernel level. Once an entire request is received, the kernel then
+ sends it to the server. See the
- accf_http(9) man page for more details. Since HTTPS requests are
+ accf_http(9) man page for more details. Since HTTPS requests are
encrypted only the
accf_data(9) filter is used.TCP_DEFER_ACCEPT does not support buffering http
- requests. Any value besides none will enable
+ requests. Any value besides none will enable
TCP_DEFER_ACCEPT on that listener. For more details
- see the Linux
+ see the Linux
tcp(7) man page.AllowOverride to anything other than None
+ AllowOverride to anything other than None
in your <Directory /> block. Instead, find (or
create) the <Directory> block that refers to the
directory where you're actually planning to place a
@@ -564,7 +564,7 @@ named file-system directory, sub-directories, and their contents.
</Directory> are used to enclose a group of
directives that will apply only to the named directory,
- sub-directories of that directory, and the files within the respective
+ sub-directories of that directory, and the files within the respective
directories. Any directive that is allowed
in a directory context may be used. Directory-path is
either the full path to a directory, or a wild-card string using
@@ -705,9 +705,9 @@ the contents of file-system directories matching a regular expression.
</DirectoryMatch> are used to enclose a group
- of directives which will apply only to the named directory (and the files within),
- the same as http://my.example.com/index.html refers to
- /usr/web/index.html. If the directory-path is
- not absolute then it is assumed to be relative to the ? matches any single character,
and * matches any sequences of characters.
- ~ character. For example:
Include conf/vhosts/*/*.conf
@@ -1813,7 +1813,7 @@ wildcard matching available in 2.3.6 and later
<Limit POST>
<Location />, which is an easy way to
+ <Location />, which is an easy way to
apply a configuration to the entire server.~
+ can also be used, with the addition of the ~
character. For example:default | yes
-V option.none | no
@@ -2726,7 +2726,7 @@ or specified mutexes
fcntl:/path/to/mutex
- fcntl() function are used as the mutex./path/to/mutex and never a directory residing
on a NFS- or AFS-filesystem. The basename of the file will be the mutex
type, an optional instance string provided by the module, and unless the
- OmitPID keyword is specified, the process id of the httpd
+ OmitPID keyword is specified, the process id of the httpd
parent process will be appended to to make the file name unique, avoiding
conflicts when multiple httpd instances share a lock file directory. For
example, if the mutex name is mpm-accept and the lock file
directory is /var/httpd/locks, the lock file name for the
- httpd instance with parent process id 12345 would be
+ httpd instance with parent process id 12345 would be
/var/httpd/locks/mpm-accept.12345.ExtendedStatus On
- displays the actual request being handled.
+ displays the actual request being handled.
For historical purposes, only 63 characters of the request
are actually stored for display purposes. This directive
controls whether the 1st 63 characters are stored (the previous
@@ -3457,7 +3457,7 @@ itself
in conjunction with simple.example.com,
but the machine also has the DNS alias www.example.com
@@ -3465,7 +3465,7 @@ itself
directive should be used:https:// scheme and the port number to which the
clients connect in the conf/ and logs/. Relative
paths in other configuration directives (such as minimal is not recommended because it makes it more
difficult to debug interoperational problems. Also note that
@@ -3838,7 +3838,7 @@ certain events before failing a request
allowed) error to the client.
TraceEnable
+ bodies may be allowed using the non-compliant TraceEnable
extended directive. The core (as an origin server) will
restrict the request body to 64k (plus 8k for chunk headers if
Transfer-Encoding: chunked is used). The core will
@@ -3960,7 +3960,7 @@ port
ServernameUseCanonicalPhysicalPort Off, the
physical ports are removed from the ordering.