« Previous 1 2 3 4
Harden your Apache web server
Batten the Hatches
Conclusions
Sophisticated configuration, timely updates, and well-thought-out security concepts cannot be implemented in the blink of an eye; instead, they require the admin's constant attention. If you follow all the tips in this article on securing your web server, you will not have to worry too much – the floodgates will be leak-tight.
Infos
- Announce mailing list: http://httpd.apache.org/lists.html#http-announce
- Apache Core functions: https://httpd.apache.org/docs/2.4/en/mod/core.html
- Upgrading to 2.4 from 2.2: https://httpd.apache.org/docs/2.4/upgrading.html
- Mozilla HTTP Observatory: https://observatory.mozilla.org/
- Mozilla SSL Configuration Generator: https://ssl-config.mozilla.org
- TLS Checklist Inspector: http://tls-check.de
- SSL Labs: https://www.ssllabs.com
- German cryptographic guidelines: https://www.bsi.bund.de/EN/Topics/Cryptography/CryptoGuidelines/crypto_guidelines_node.html
- Core Rules protections: https://github.com/SpiderLabs/ModSecurity/wiki/ModSecurity-Frequently-Asked-Questions-(FAQ)#what-attacks-do-the-core-rules-protect-against
« Previous 1 2 3 4
Buy this article as PDF
(incl. VAT)
Buy ADMIN Magazine
US / Canada
UK / Australia
Related content
-
Life cycle management with Foreman and Puppet
Virtual machines seem to be ideal for spare capacity. They are easy to create and remove – if only all those time-consuming administrative tasks like assigning IP addresses, setting up backups, and monitoring were more manageable. Having the right tools can help. -
Setting up HTTP/2 on the Apache HTTP Server with PHP compatibility
If you are running PHP applications, setting up HTTP/2 on the Apache HTTP Server can be a bit confusing because of some incompatibilities between the Apache HTTP/2 module and the Prefork multiprocessing module. -
Setting up SSL connections on Apache 2
To spoil the day for lurking data thieves, Apache administrators only need three additional directives – and a handful of commands. -
Lua for Apache
Lua is a small, lean, and fast scripting language – ideal for working with web servers. Version 2.4 of the Apache web server is the first to offer a matching module that has a few quirks – and pitfalls, if you dig more deeply.
-
Activate HTTP/2 on web servers
HTTP/2 offers reduced website load times and other performance benefits, along with the promise of server push.
Subscribe to our ADMIN Newsletters
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Most Popular
Support Our Work
ADMIN content is made possible with support from readers like you. Please consider contributing when you've found an article to be beneficial.
