Apache Administration

In the course Apache Administration, participants learn to manage and monitor the latest version of the Apache Web Server.

Apache Configuration

The course Apache Administration starts with an explanation of the structure of the central configuration file, httpd.conf and the most important directives in it.

Apache Architecture

Next attention is payed to the architecture of Apache, in particular the way modules, filters and handlers cooperate. Virtual Hosting is discussed and the different varieties of it that exist.

Log Configuration

Also logging is treated in particular the handling and structure of log files. Web Application Security is covered with HTTP Authentication and the configuration of SSL.

Apache Security

And also securing the Apache Web Server itself and the use of mod_security to protect against common attacks like Cross Site Scripting and SQL Injection is on the course schedule. Attention is further payed to the way filters and handlers hook into the request processing cyclus and how they can be configured.

URL Rewriting

And also the manipulation of URL's with the powerful mod_rewrite module is covered. Other topics are the configuration of a Proxy Server with mod_proxy and how to integrate with the Tomcat Web Server for dynamic Java Web Applications.

Apache Performance

The measurement and improvement of the performance of applications through techniques like load balancing and caching is part of the course program as well. In the course attention is payed to both Apache under Linux as under Windows.

Audience Apache Administration Course

The course Apache Administration is intended for system administrators or developers on Unix, Linux or Windows who should learn how to administer and control the newest version of the Apache Web Server.

Prerequisites Course Apache Administration

Knowledge of modern operating systems like Unix, Linux or Windows, in particular knowing how to deal with the file system, is desirable.

Realization Training Apache Administration

The theory is covered using presentation slides. The concepts are further explained using demos. The theory is alternated with exercises.

Certification Apache Administration

Attendants receive a certificate of participation in Apache Administration after successful completion of the course.

Modules

Module 1 : Intro Apache

• Apache Web Server
• What is the ASF?
• Apache Name and Marketshare
• Apache Installation
• Apache Directory Structure
• Apache Directories
• Starting Apache
• Uniform Resource Locators (URL’s)
• Domain Name Service (DNS)
• Static HTML pages
• Styling with CSS
• Dynamic Content Generation

Module 2 : Apache Configuration

• Apache Configuration Files
• Server Configuration Directives
• Core Configuration Directives
• Authentication Directives
• Authorization Directives
• Three Pass Access Control
• Logging Directives
• Performance Related Directives
• Directive Containers
• Conditional Containers
• .htaccess Files
• AllowOverride Directive

Module 3 : Apache Architecture

• Apache Architecture Overview
• Two Phase Operation
• Apache Portable Runtime
• Multi Processing Module (MPM)
• Modules
• Important Apache Modules
• Two Phase Operation
• Content Generation
• Request Processing Phases
• Processing Hooks
• Apache Filters
• Apache Handlers

Module 4 : Virtual Hosting

• Processing of Configuration Files
• Configuration Contexts
• Virtual Hosting
• Virtual Host Directives
• Name-based Virtual Hosts
• Host File Name-based Virtual Hosting
• IP-based Virtual Hosts
• Host File IP-based Virtual Hosting
• Multiple IP Addresses per NIC
• Port-based Virtual Hosts

Module 5 : Logging

• Log File Types
• Error Logs
• Log Levels
• Access Logs
• Common Log Format
• Defining Custom Logs
• Log File Rotation
• Piped logs
• Log File Analyzers
• Server Log Reporting

Module 6 : Web Application Security

• HTTP Basic Authentication
• Configuring Authentication
• Managing Access Files
• Creating Passwords
• Secure Sockets Layer (SSL)
• SSL Encryption Types
• Asymmetric Encryption
• Symmetric Encryption
• Hash Encryption
• SSL Certificates

Module 7 : Hardening Apache

• Update Apache
• Enable Logging
• HTTP Request Methods
• Using SSL
• Set HTTP Limits
• Change Default User
• Block Directory Access
• Disable Directory Listing
• Hide Server Details
• Hide Etag Header
• Disable .htaccess Override
• Web Application Firewall
• Install mod_evasive

Module 8 : Mod Security

• Firewall Limitations
• Common Exploits
• Protection Measures
• Intrusion Detection Systems
• Web Application Firewalls
• Evasion Issues
• What is ModSecurity?
• ModSecurity Features
• Rule Examples
• Rule Syntax
• Core Rule Set
• Default and Chained Actions
• Regular Expressions

Module 9 : Handlers and Filters

• What are Filters?
• Standard Apache Filters
• Simple Filtering
• Dynamic Filtering
• What are Apache Handlers?
• Built-in Handlers
• Server-Info
• Server-Status
• Why mod_rewrite ?
• Rewrite Flags Flow Control
• Rewriting versus Redirection
• Transforming URLs
• Conditional Rewrites

Module 10 : Tomcat and Apache

• What is Tomcat?
• Tomcat Binary Distributions
• Tomcat Zip Installation
• Tomcat Directories
• Server Configuration Files
• Other Configuration Files
• Tomcat webapp’s Directory
• Tomcat Apache Communication
• Tomcat Workers
• Worker Properties
• Configuring AJP
• Mounting Tomcat Sites

Module 11 : Proxy with mod_proxy

• Forward Proxy
• Reverse Proxy / Gateway
• mod_proxy Support
• Proxy Modules And Related Modules
• Configuring a Forward Proxy
• Storage of Cached Pages
• Configuring a Reverse Proxy
• Basic Reverse Proxy Config
• mod_proxy_balancer
• Proxying by Rewriting
• Backend Optimisations
• Access to the Proxy Server

Module 12 : Performance

• Performance Considerations
• Server Monitoring
• Web Server Log Files
• Logging and Performance
• Load Testing
• Operating System Tuning
• SSL Performance
• Caching Dynamic Content
• Vertical Scaling
• Horizontal Scaling
• Load Balancing
• Using mod_proxy