Apache2 : comment bloquer ou autoriser certains pays ?
▻https://www.it-connect.fr/apache2-et-maxmind-bloquer-ou-autoriser-les-connexions-pour-certains-pays
Voir aussi :
– Code des pays : ▻https://www.geonames.org/countries
– Exemples de configuration : ▻https://www.developpez.net/forums/d2163167/webmasters-developpement-web/serveurs-apache-iis/apache/tuto-installer-geoip2-maxmind-apache2-debian-10-11-12-htaccess
#pyfory: #python implementation of #apache #fory™, offering high-performance object #serialization and advanced row-format capabilities for data processing tasks.
▻https://pypi.org/project/pyfory
— Permalink
How to Create Trusted SSL Certificates for Your Local Development | by Hicaro Adriano | Better Programming
▻https://betterprogramming.pub/how-to-create-trusted-ssl-certificates-for-your-local-development
Howto pour créer et utiliser des certificats SSL auto-signés pour le développement sur un serveur (Apache) local
Voir aussi :
– utilisation détaillée de OpenSSL : ▻https://docs.joshuatz.com/cheatsheets/security/self-signed-ssl-certs
– créer voir et convertir des certificats SSL : ▻https://www.baeldung.com/openssl-self-signed-cert
– approuver un certificat racine perso sur MacOS : ▻https://www.freecodecamp.org/news/how-to-get-https-working-on-your-local-development-environment-in-5-mi
– modifications de configuration de MAMP pour utiliser HTTPS : ▻https://stackoverflow.com/questions/54239362/how-to-set-up-ssl-for-localhost-and-virtual-hosts-with-mamp
PHP 8.0 (8.0.0alpha1) testing anyone ? | Laragon
▻https://forum.laragon.org/topic/2092/php-8-0-8-0-0alpha1-testing-anyone/8
Open the file: C:\laragon\etc\apache2\mod_php.conf
Change php8_module to php_module#laragon #php8 #apache #php_module
php - Laravel connection reset after any file changes - Stack Overflow
▻https://stackoverflow.com/questions/35706895/laravel-connection-reset-after-any-file-changes/35726608#35726608
Windows + Laragon + PHP 7.4 + https: la modification de configuration d’apache nécessaire pour ne pas se choper une erreur PR_CONNECT_RESET_ERROR sur les gros formulaires .
option de conf à mettre par exemple dans ...laragon/etc/apache2/httpd-ssl.conf
(symptôme type : l’erreur n’apparait pas en PHP 7.3 ou 7.2)
#apache #PR_CONNECT_RESET_ERROR #laragon #configuration #PHP_7.4
#Apache #redirect www to non-www and HTTP to HTTPS — Simone Carletti
▻https://simonecarletti.com/blog/2016/08/redirect-domain-http-https-www-apache
# Redirection https/www
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC]
RewriteRule ^ https://www.%1%{REQUEST_URI} [L,NE,R=301]
# Redirection https/non www
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} ^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC]
RewriteRule ^ https://%1%{REQUEST_URI} [L,NE,R=301]ping @jeanmarie je crois que j’ai retrouvé ta source :p
mod_rewrite cheat sheet | mod_rewrite reference with useful examples.
►https://mod-rewrite-cheatsheet.com
The mod_rewrite cheat sheet covers all major aspects with minimal detail. It is designed as a quick mod_rewrite reference with useful examples for practical use.
L’anti-sèche complète pour les réécritures d’URLs d’apache avec mod_rewrite
(le complément parfait pour ►https://htaccess.madewithlove.be de ▻https://seenthis.net/messages/631898)
#mod_rewrite #RewriteRule #htaccess #réécriture_url #apache #outil #web-based
Apache RewriteRule and query string — Simone Carletti
▻https://simonecarletti.com/blog/2009/01/apache-rewriterule-and-query-string
utiliser les query string dans les RewriteRule d’apache
Voir aussi : ▻https://perishablepress.com/redirect-query-string-htaccess
#RewriteRule #apache #réécriture_url #mod_rewrite #htaccess #réécriture_url
Les drapeaux de réécriture - Serveur HTTP Apache Version 2.4
▻https://httpd.apache.org/docs/2.4/rewrite/flags.html
documentation des flags des RewriteRule d’apache
Vivre sans Google et cie ? La liste des alternatives aux GAFAM
▻https://mrmondialisation.org/vivre-sans-google-et-cie-la-liste-des-alternatives-aux-gafam
Les GAFAM – ces mastodontes du web – sont régulièrement sous le feu des critiques. Contrôle du marché de l’information et de la publicité en ligne, revente des données personnelles, pouvoir économique mondial hors norme, influence de la démocratie via des lobbies surpuissants, les motifs de se méfier de ces géants ne manquent pas. Difficile pourtant de s’en défaire une bonne fois pour toute tant ils sont partout dans notre univers numérique. Néanmoins, voici quelques pistes pour les remplacer au (...)
#Alphabet #Apple #Google #Microsoft #Mozilla #Amazon #Diaspora #DuckDuckGo #Ecosia #Facebook #Mastodon_ #ProtonMail #Qwant #Wikimedia #Wikipedia #Firefox #Linux #Windows #Brave #Android #Chrome #Apache #domination #Wikileaks #bénéfices #BigData (...)
Sur la plupart des serveurs, j’ai besoin d’allonger la durée indiquée de conservation en cache des éléments intégrés aux pages, pour faire plaisir à PageSpeed Insights.
Je me note le code ici :
ExpiresActive on
ExpiresByType text/css A31557600
ExpiresByType application/x-javascript A31557600
ExpiresByType application/javascript A31557600
ExpiresByType text/javascript A31557600
ExpiresByType image/webp A31557600
ExpiresByType image/jpeg A31557600
ExpiresByType image/png A31557600
ExpiresByType image/gif A31557600
ExpiresByType image/svg+xml A31557600
ExpiresByType application/x-shockwave-flash A31557600
AddType application/font-woff .woff
ExpiresByType application/font-woff A31557600
AddType application/font-woff2 .woff2
ExpiresByType application/font-woff2 A31557600Par rapport à ce qu’on trouve usuellement en ligne, il y a aussi le WebP et le woff/woff2, que j’utilisent désormais systématiquement.
Cadeau, un lien déjà cité ici mais toujours utile : ▻https://technique.arscenic.org/lamp-linux-apache-mysql-php/apache-le-serveur-http/optimisations/article/expire-headers
ping @kent1
Forcing a PDF or DOC to Open in Browser Rather Than Downloading | DeveloperSide.NET
▻http://www.devside.net/wamp-server/forcing-a-pdf-or-doc-to-open-in-browser-rather-than-downloading
Sur le problème du traitement des liens vers des fichiers PDF par les navigateurs, voir aussi : ▻https://www.askapache.com/htaccess/pdf-cookies-headers-rewrites
#PDF #téléchargement #.htacces #virtual_host #apache #PDF.js #header
@kent1 j’en ai profité pour le mentionner dans l’article que j’avais rédigé ici ►https://technique.arscenic.org/ssl-securisation-des-communications-serveur-client/article/installer-et-configurer-un-certificat-let-s-encrypt ;)
How to enable #HTTP/2 support in #Apache
Starting from Apache 2.4.27, the Apache MPM (Multi-Processing Module) prefork no longer supports HTTP/2.To fix this, select a different MPM: event or worker. We highly recommend you to use the event prefork.
If you are using PHP, it is likely that PHP is integrated to Apache via the mod_php module, which requires the prefork MPM. If you switch out from preform MPM, you will need to use PHP as FastCGI. To switch to php-fpm, you can do as folllwing.
▻https://http2.pro/doc/Apache#prefork-http2
▻https://httpd.apache.org/docs/2.4/fr/howto/http2.html#mpm-config
Sur debian stretch ça donne ça (si on avait activé mpm_prefork alors que mpm_event est bien celui proposé par défaut) :
apt install php-fpm
a2enmod proxy_fcgi setenvif
a2enconf php7.0-fpm
a2dismod php7.0
a2dismod mpm_prefork
a2enmod mpm_event
service apache2 restart
apt purge libapache2-mod-php
a2enmod http2Dans la foulée, deux liens à propos de l’optimisation de #php-fpm :
Apache2 and php fpm performance optimization — Step-by-step guide
▻https://medium.com/@sbuckpesch/apache2-and-php-fpm-performance-optimization-step-by-step-guide-1bfecf161534
If you consistently see a large number of idle workers, you may want to lower your MinSpareServers (for the prefork MPM) or MinSpareThreads (for the worker and event MPMs) setting so that you are not sustaining a higher number of processes or threads than necessary to process your rate of traffic. Maintaining more processes or threads than you actually need will unncessarily exhaust system resources.
▻https://www.datadoghq.com/blog/monitoring-apache-web-server-performance
Toujours à propos de #php-fpm, et de l’intérêt de basculer le process manager de dynamic (valeur par défaut) vers autre ondemand ou static.
Certaines personnes recommandent d’utiliser ondemand pour ne pas avoir de process php en idle quand il n’y a pas de trafic :
Dans mon cas j’ai 10 processus qui tournent en permanence, même si aucun de mes sites n’est visité.
▻https://www.guillaume-leduc.fr/une-autre-facon-dutiliser-php-fpm.html
If you’re working on a high performance PHP setup, the ’ondemand’ PM may not be for you. In that case, it’s wise to pre-fork your PHP-FPM processes up to the maximum your server can handle. That way, all your processes are ready to serve your requests without needing to be spawned first. However, for 90% of the sites out there, the ondemand PHP-FPM configuration is better than either static or dynamic.
▻https://community.webcore.cloud/tutorials/php_fpm_ondemand_process_manager_vs_dynamic
Mais comme indiqué ci-dessus, ça n’est pas forcément mieux car le process manager va devoir spawner des process alors que des process en idle permettent une réaction plus rapide en cas de pic de trafic :
Idle process stay online waiting for traffic spikes and responding immediately, rather than having to wait on the pm to spawn children and then kill them off after x pm.process_idle_timeout expires...
The common advice is to use pm ondemand, as is the advice in this same support thread. However, that’s even worse, because ondemand will shutdown idle processes right down to 0 when there’s little to no traffic and then you’ll end up with just as much overhead issues as traffic fluctuates.
▻https://haydenjames.io/php-fpm-tuning-using-pm-static-max-performance
Mais...
PM dynamic and especially ondemand can be save you however, when you have multiple PHP-FPM pools. For example, hosting multiple cPanel accounts or multiple websites under different pools. I have a server for example with 100+ cpanel accounts and about 200+ domains and it would be impossible for pm.static or even dynamic to perform well. Only ondemand performs well since more than two third’s of the websites receive little to no traffic and with ondemand it means all children will be shutdown saving tons of server memory!
When it comes to PHP-FPM, once you start to serve serious traffic, ondemand and dynamic process managers for PHP-FPM can limit throughput because of the inherent overhead. Know your system and set your PHP-FPM processes to match your server’s max capacity. Start with pm.max_children set based on max usage of pm dynamic or ondemand and then increase to the point where memory and CPU can process without becoming overwhelmed. You will notice that with pm static, because you keep everything sitting in memory, traffic spikes over time cause less spikes to CPU and your server’s load and CPU averages will be smoother. The average size of your PHP-FPM process will vary per web server requiring manual tuning, thus why the more automated overhead process managers – dynamic and ondemand – are more popular recommendations.
Grosso merdo, il semble que dynamic peut faire le job quand on ne veut pas trop se prendre la tête, ondemand quand on sait à quoi s’attendre et qu’on est juste en mémoire (ou pour du dev), et static quand on veut faire du tuning précis.
Un bon résumé :
In dynamic type, the number of child processes is set dynamically based on the PHP-FPM parameters in conf file. But it is a bit memory-intensive type.
In static type, the number of child processes is fixed by pm.max_children parameter, but this type is not flexible for a server with changing web traffic. It also consumes too much memory.
In ondemand type, the PHP-FPM processes are spawned only on demand, based on the traffic. This type helps to manage varying traffic in memory restrained servers. But the overhead increases when there is so much traffic fluctuation.
▻https://bobcares.com/blog/php-fpm-tuning-high-load
Bref, comme souvent il n’y a pas de recette unique/magique :p
Et vous les gens, vous utilisez quoi ?
merci pour la sélection :)
Sur la question ThreadPerChild vs ServerLimit : ▻https://www.liquidweb.com/kb/apache-performance-tuning-mpm-directives
La doc apache : ▻http://httpd.apache.org/docs/2.4/mod/mpm_common.html#threadsperchild et ▻http://httpd.apache.org/docs/current/mod/mpm_common.html#maxrequestworkers
(NB : ThreadPerChild ne peut être supérieur à ThreadLimit)
Pour la configuration de Munin spécifique FPM + logs des requêtes lentes : ▻https://www.malekal.com/optimiser-php-fpm
https://community.webcore.cloud/tutorials/how_to_solve_php_fpm_server_reached_max_children
pour le calcul du max_children
#max_children
Et si on obtient l’erreur [proxy_fcgi:error] The timeout specified has expired ça n’est pas sur la conf PHP max_execution_time qu’il faut jouer, mais sur ProxyTimeout au niveau de la conf apache cf ▻http://wiki.centos-webpanel.com/apache-proxy-timeout-with-php-fpm & ▻https://www.theshell.guru/proxy_fcgierror-the-timeout-specified-has-expired-apache-2-4
pour regrouper tous les outils en rapport avec les optimisation de configuration d’un serveur apache + PHP FPM, il y a aussi ►https://seenthis.net/messages/955121
Better to Give and to Receive: Alibaba’s #open-source Contributions to Flink
▻https://hackernoon.com/better-to-give-and-to-receive-alibabas-open-source-contributions-to-flin
Between its #sql and Runtime layers, Alibaba has helped optimize Apache Flink for large-scale production environments like its ownThis article is part of Alibaba’s Flink series.As an open-source framework for big data #computing, Apache Flink has undergone extensive optimization to meet a range of users’ demands for enhancement. For Alibaba Group, where the framework is deployed in a large-scale production environment, the need for these changes has motivated its real-time computing team to contribute many of Flink’s most valuable optimizations, benefiting the Flink community and Alibaba alike.In this article, we look at Alibaba’s contributions in two key aspects of the framework’s architecture, tracing developments including Flink’s Query Processor, BinaryRow, and AsyncOperator (...)
Performance Testing of a Single-node Server and a Two-node Cluster with #apache #jmeter
▻https://hackernoon.com/performance-testing-of-a-single-node-server-and-a-two-node-cluster-with-
Photo by Samuel Zeller on UnsplashAbout Performance TestingPerformance testing is a method of identifying whether software (a web application) is capable to handle a high load, among other possible performance issues. Therefore, the ultimate goal of a performance test is to analyze the overall performance against heavy loads. Apache JMeter is an open-source tool that can be used exactly for this purpose.What is a Single-node Server?This is the case when a server runs on a single machine only. If the server crashes due to some issue, there will be a downtime until the issue is fixed.What is a Two-node Cluster?A two-node cluster is a setup where two servers are configured with high availability. If clustering is used, there won’t be downtime due to a server crash. The advantage of having (...)
Siege Manual
▻https://www.joedog.org/siege-manual
Un outil (linux uniquement) de test de montée en charge d’un site/serveur web :
Siege is an open source regression test and benchmark utility. It can stress test a single URL with a user defined number of simulated users, or it can read many URLs into memory and stress them simultaneously. The program reports the total number of hits recorded, bytes transferred, response time, concurrency, and return status.
Le repo Git : ▻https://github.com/JoeDog/siege
Commande type :siege -c10 -t10S http://exemple.com
NB : paquet debian disponible
#siege #testeur #stress #serveur_web #charge #benchmark #apache #performance
A Brief History of Flink: Tracing the Big Data Engine’s #open-source Development
▻https://hackernoon.com/a-brief-history-of-flink-tracing-the-big-data-engines-open-source-develo
From version 1.1.0 to 1.6.0, Apache Flink’s relentless improvement exemplifies open-source development.Open-source big data computing engine Apache Flink, or Flink for short, has gained popularity in recent years as a powerful framework for both batch processing and stream processing that can be used to create a number of event-based applications.Flink is first of all a pure stream computing engine with a data stream basic data model. A stream can be infinite and borderless, which describes stream processing in the general sense, or can be a finite stream with boundaries, as in the case of batch processing. Flink thus uses a single architecture to support both stream and batch processing.As conveyed by its slogan “Stateful Computations Over Streams”, Flink has the additional strength of (...)
#apache-flink #big-data-engine #alibaba-open-source #big-data
#mapr-DB Spark Connector with Secondary Indexes
▻https://hackernoon.com/mapr-db-spark-connector-with-secondary-indexes-df41909f28ea?source=rss--
MapR Data Platform offers significant advantages over any other tool on the big data space. MapR-DB is one of the core components of the platform and it offers state of the art capabilities that blow away most of the NoSQL databases out there.An important add-on to MapR-DB is the ability to use, for writing and querying, Apache Spark through the Connector for Apache Spark. Using this connector comes very handy since it can read and write from spark to MapR-DB using the different Spark APIs such as RDDs, DataFrames, and Streams.Using the connector we can issue queries like the following one.▻https://medium.com/media/eaf9aff1c6b796823d99a0b32e11c030/hrefThe resulting type is a Dataframethat we can use as any other Dataframe from any other source, as we normally do in Spark.If we then filter (...)
Principal Component Analysis — Unsupervised Learning Model
▻https://hackernoon.com/principal-component-analysis-unsupervised-learning-model-8f18c7683262?so
Principal Component Analysis — Unsupervised Learning ModelLearn how to train and evaluate an unsupervised machine learning model — principal component analysis in this article by Jillur Quddus, a lead technical architect, polyglot software engineer and data scientist.There are numerous real-world use cases, where the number of features available, which may potentially be used to train a model, is very large. A common example is economic data and using its constituents, stock price data, employment data, banking data, industrial data, and housing data together to predict the gross domestic product (GDP). Such types of data are said to have high dimensionality. Though they offer numerous features that can be used to model a given use case, high-dimensional datasets increase the computational (...)
#machine-learning #apache-spark #component-analysis #principal-component #unsupervised-learning
Apache #spark — Tips and Tricks for better #performance
▻https://hackernoon.com/apache-spark-tips-and-tricks-for-better-performance-cf2397cac11?source=r
Apache Spark — Tips and Tricks for better performanceApache Spark is quickly gaining steam both in the headlines and real-world adoption. Top use cases are Streaming Data, Machine Learning, Interactive Analysis and more. Many known companies uses it like Uber, Pinterest and more. So after working with Spark for more then 3 years in production, I’m happy to share my tips and tricks for better performance.Lets start :)1 - Avoid using Custom UDFs:UDF (user defined function) :Column-based functions that extend the vocabulary of Spark SQL’s DSL.Why we should avoid them?From the Spark Apache docs:“Use the higher-level standard Column-based functions withDataset operators whenever possible before reverting tousing your own custom UDF functions since UDFs are ablackbox for Spark and so it does not even (...)
How To Tune Apache on Ubuntu 14.04 Server - Server Fault
▻https://serverfault.com/questions/684424/how-to-tune-apache-on-ubuntu-14-04-server/684512#684512
Une méthode pour le calcul de la valeur de MaxRequestWorkers du module mpm-prefork de apache 2.4
#MaxRequestWorkers #apache #configuration #tuning #mpm-prefork
Les piratages avec fuite massive de #données_personnelles, on va finir par s’y habituer. Avant, c’était une fois par semaine, maintenant trois en une journée. Bref, répétons-le une nouvelle fois : VOTRE BASE DE DONNÉES AVEC DES INFORMATIONS PERSONNELLES SERA PIRATÉE. Il est donc crucial de minimiser les données en récoltant moins voire, idéalement, pas du tout. Si vous collectez des donées personnelles, vous êtes responsable de la mauvaise utilisation qui en sera faite.
Donc, hier :
1) Piratage de la base #ARIANE du Ministère des Affaires Étrangères français (données sur les contacts des voyageurs) ▻https://www.diplomatie.gouv.fr/fr/salle-de-presse/communiques-techniques/article/ariane-piratage-de-donnees-communique-f-a-q-13-12-18 ▻https://twitter.com/francediplo/status/1073157281217417216 et l’article de Libération : ▻https://www.liberation.fr/planete/2018/12/13/piratage-au-quai-d-orsay-les-coordonnees-de-540-000-personnes-derobees_16
2) Piratage d’un fichier du syndicat de policiers #Alliance ▻https://www.lexpress.fr/actualite/societe/enquete/l-inquietante-fuite-des-coordonnees-de-500-policiers_2052828.html
3) Piratage de la base nationale des citoyens au Brésil (après la Turquie et l’Inde, répétons que c’est une folie que d’avoir une base centralisée de tous les citoyens d’un pays, même si ça fait moderne, e-Gouvernement et tout). ▻https://www.infosecurity-magazine.com/news/apache-misconfig-leaks-data-120
La prochaine fois que vous entendrez un monsieur sérieux dire avec assurance « il n’y a rien à craindre, la base de données est sécurisée [ou autres éléments de langage comme « anonymisée » ou « cryptée »] », méfiez-vous.
Sur le piratage du syndicat policier, « la DGSI enquête » (ce sont les Anonymous, on vous le dit) ▻https://www.lemonde.fr/pixels/article/2018/12/13/gilets-jaunes-la-dgsi-enquete-sur-des-attaques-informatiques-et-des-fuites-r
ah ah ah... Anonymous Anarchist Agency
La DGSI enquête sur la fin du porno sur Tumblr, cet espace où « les gilets jaunes » exploraient différentes fuites.
Des attaques informatiques et des sexualités revendiquées par des jeunes anonymous.
#de_la_dyslexie_créative by bitmap screen
Apache Cassandra — The minimum internals you need to know
▻https://hackernoon.com/apache-cassandra-the-minimum-internals-you-need-to-know-89724603abb2?sou
Apache Cassandra — The minimum internals you need to knowFor effective data modeling and comparison with other DB’sWe will discuss two parts here; first, the #database design internals that may help you compare between database’s, and second the main intuition behind auto-sharding/auto-scaling in Cassandra, and how to model your data to be aligned to that model for the best performance.Part 1: Database Architecture — Master-Slave and Masterless and its impact on HA and ScalabilityThere are two broad types of HA Architectures Master -slave and Masterless or master-master architecture.Here is an interesting Stack Overflow QA that sums up quite easily one main trade-off with these two type of architectures.Q. -I’ve heard about two kind of database architectures.master-master and master-slaveIsn’t (...)