ModSecurity2_Deployment.pdf

(814 KB) Pobierz
ModSecurity 2
Deployment
Installation
ModSecurity can be deployed in
embedded
mode,
when it is added directly into web
server.
Or it can function as a
network gateway,
combined with Apache (use 2.2.2 or better)
configured to work as reverse proxy.
ModSecurity does not actually care about the mode of
operation. It is only the Apache configuration that will
be different. In fact, you can have a
hybrid
installation
too.
ModSecurity 2 Deployment
2 / 25
Apache Reverse Proxy Installation (1)
Enable the modules you need.
Worker MPM
is slightly faster (on Linux) than Prefork.
Core modules needed:
mod_so
mod_unique_id
mod_proxy
mod_proxy_http
mod_proxy_balancer
Third-party modules
mod_proxy_html
http://apache.webthing.com/mod_proxy_html/
ModSecurity 2 Deployment
3 / 25
Apache Reverse Proxy Installation (2)
Useful modules:
mod_rewrite
mod_headers
mod_setenvif
mod_logio
mod_expires
Enablers:
mod_ssl
mod_deflate
mod_cache, mod_file_cache
ModSecurity 2 Deployment
4 / 25
Apache Reverse Proxy Installation (3)
Remove unused modules installed by
default.
For example:
mod_include (although this one might be useful)
mod_autoindex
mod_asis
mod_cgi(d)
mod_negotiation
mod_userdir
ModSecurity 2 Deployment
5 / 25

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin