Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
litespeed_wiki:config [2013/12/02 22:07] Michael |
litespeed_wiki:config [2015/10/26 20:12] Michael Alegre [Security] Removed mod_security tips and tricks as the page is now archived. |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Configuration How-Tos ====== | ====== Configuration How-Tos ====== | ||
| + | This section of the wiki provides articles on configuring LiteSpeed Web Server to achieve desired functionality, better performance, or security. These wikis do not cover what each LSWS setting does. That information can be found in our [[http://www.litespeedtech.com/docs/webserver/config|documentation]]. | ||
| - | |[[litespeed_wiki:license:Command Reference]]|Quick Reference for All Commands| | + | Also [[litespeed_wiki:cache:lscache|LiteSpeed Cache]], [[litespeed_wiki:cache:litemage|LiteMage Cache]] ,[[litespeed_wiki:php|PHP]], and [[litespeed_wiki:other-ext-apps|other external applications]] (Python, Ruby, etc.) are covered in their own sections of the wiki and are not included here. |
| - | ===== Virtual Hosting ===== | + | |[[litespeed_wiki:admin:command-reference|Command Reference]]|Quick Reference for All Commands| |
| + | |[[litespeed_wiki:config:Configuration list]]|LSWS Configuration list| | ||
| + | ===== Security ===== | ||
| - | |[[litespeed_wiki:how_can_i_set_up_name-based_virtual_hosting|Name-Based Virtual Hosting]]|How to set up name-based virtual hosting| | + | |[[http://www.litespeedtech.com/docs/webserver/security|Security Overview]]|LiteSpeed web server security overview| |
| - | |[[litespeed_wiki:how_can_i_set_up_ip-based_virtual_hosting|IP-Based Virtual Hosting]]|How to set up IP-based virtual hosting| | + | |[[litespeed_wiki:config:mitigating-ddos-attacks|Mitigating HTTP-level DDoS Attacks]]|How to mitigate DDoS attacks with LSWS's security features| |
| + | |[[litespeed_wiki:config:mitigating-syn-floods|Mitigating SYN Floods]]|How to harden your kernel against SYN floods| | ||
| + | |[[litespeed_wiki:config:shared-hosting-security|Shared Hosting Security]]|Access Permission isolation| | ||
| + | |[[litespeed_wiki:config:suexec-mode|suEXEC Mode]]|Process UID isolation: CGI/FCGI/LSAPI/PHP| | ||
| + | |[[litespeed_wiki:config:chroot]]|Process Execution isolation| | ||
| + | |[[litespeed_wiki:config:mod_security-compatibility|mod_security Compatibility]]|Apache mod_security 2.5+ compatibility| | ||
| + | |[[https://www.atomicorp.com/wiki/index.php/Litespeed|Atomicorp setup and support]]|Explanation of Atomicorp's support of LSWS and how to set it up| | ||
| + | |[[litespeed_wiki:cloudlinux:cagefs|CloudLinux CageFS How-To]]|Installation and Configurations| | ||
| + | |[[litespeed_wiki:config:hsts-setup|Setting up HSTS]]|How to set up HTTP Strict Transport Security| | ||
| + | |[[litespeed_wiki:config:vhost-level_bw_throttling|Virtual Host-Level Bandwidth Throttling]]|Set different bandwidth limits for different sites| | ||
| + | |[[litespeed_wiki:config:cloudflare-ips-or-subnets|CloudFlare IP/Subnet Connections]]|Anti-ddos blocking CloudFlare IP/subnet connections| | ||
| - | ==== Custom Templates ==== | + | ===== HTTPS/SSL Configuration ===== |
| - | Custom templates can be used to make LSWS virtual hosts that have been prepared for popular web applications and plugins. All templates use LiteSpeed native configurations. They are unnecessary if you are migrating an existing site with web applications from Apache. | + | |[[litespeed_wiki:config:ssl-private-key|Create an SSL private key]]|How to create a SSL private key| |
| + | |[[litespeed_wiki:config:ssl-self-signed-cert|Self Signed SSL Certificate]]|How to create a self signed SSL certificate | | ||
| + | |[[litespeed_wiki:config:ssl-cert-request|Create a certificate request]]|How to create a SSL certificate request for applying a trusted SSL certificate from CA issuer. | | ||
| + | |[[litespeed_wiki:config:ssl-cert-install|Install a SSL certificate]]|How to install a SSL certificate| | ||
| + | |[[litespeed_wiki:config:admin-SSL|Secure web admin console]]|How to secure web administration console with SSL| | ||
| + | |[[litespeed_wiki:config:https-redirect|Redirect to https connection]]|How to redirect from plain http connection to secured https connection| | ||
| + | |[[litespeed_wiki:config:ocsp-stapling|OCSP Stapling]]|How to set up OCSP stapling for faster SSL| | ||
| - | |[[litespeed_wiki:template|Virtual Host Templates]]|How to use a template to configure a group of virtual hosts with similar configurations| | + | ===== Logs/Monitoring ===== |
| - | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_WP_Super_Cache_With_Template|WP Super Cache]]|Template and tutorial for quick and easy set up of LSWS with WordPress and WP Super Cache| | + | |
| - | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_W3_Total_Cache_With_Template|W3 Total Cache]]|How to use a template to set up LSWS with WordPress and W3 Total Cache| | + | |
| - | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_Reverse_Proxy_With_Template|Reverse Proxy]]|Use a template to set up LSWS as a reverse proxy in under seven minutes| | + | |
| - | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_Mediawiki_With_Template|MediaWiki]]|Setting up MediaWiki with LSWS is faster and easier with a template| | + | |
| - | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_PHPBB_With_Template|phpBB]]|Set up this popular open source bulletin board application with a template| | + | |
| - | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_PHPList_With_Template|phpList]]|A tutorial and template for setting up phpList with LSWS| | + | |
| - | ===== HTTPS/SSL Configuration ===== | + | |[[litespeed_wiki:config:centralized-syslog-or-splunk-logging|Syslog/Splunk Logger]]|High performance logging of litespeed logs to syslog/splunk via udp.| |
| + | |[[litespeed_wiki:config:snmp-cacti-monitoring|SNMP Monitoring + Cacti Graphing]]|Monitor LiteSpeed real-time metrics via SNMP client and full-Cacti log/graph integration| | ||
| + | |[[litespeed_wiki:config:rrd-graph-monitoring|Server Status + RRD Graphing]]|Monitor LiteSpeed Server Status via RRD Graph| | ||
| + | |[[litespeed_wiki:config:piped-logger|Piped Logger]]|Flexible logging with piped logger| | ||
| + | |[[litespeed_wiki:config:awstats|AWstats]]|How to use integrated AWstats log analyzer| | ||
| + | |[[litespeed_wiki:php:new_relic|New Relic Installation Guide]]|How to get New Relic to work with LSWS| | ||
| + | |[[litespeed_wiki:config:real-time-stats|Real-Time Statistics]]|Real-Time Statistics in Admin Console| | ||
| + | |[[litespeed_wiki:config:error-messages|Child process killed, is that normal?]]|How to deal with "Child Process Killed" message in stderr.log| | ||
| + | ===== Debugging ===== | ||
| - | |[[litespeed_wiki:SSL_private_key|Create a SSL private key]]|How to create a SSL private key| | + | |[[litespeed_wiki:config:bug-reporting|Bug Reporting]]|How to file a LiteSpeed bug report| |
| - | |[[litespeed_wiki:SSL_self_signed_cert|Self signed SSL certificate]]|How to create a self signed SSL certificate | | + | |[[litespeed_wiki:config:toggle-debug-logging|Toggle Debug Logging]]|A feature for quickly switching between normal and very detailed log levels| |
| - | |[[litespeed_wiki:SSL_cert_request|Create a certificate request]]|How to create a SSL certificate request for applying a trusted SSL certificate from CA issuer. | | + | |[[litespeed_wiki:config:rewrite-logs|How to Enable Rewrite Logging]]|The first step in debugging rewrite rules| |
| - | |[[litespeed_wiki:SSL_cert_install|Install a SSL certificate]]|How to install a SSL certificate| | + | |[[litespeed_wiki:config:rewrite-rule-troubleshooting|How to Debug my Rewrite Rule]]|The steps to check the failed rewrite rule| |
| - | |[[litespeed_wiki:admin:SSL|Secure web admin console]]|How to secure web administration console with SSL| | + | ===== Streaming Media ===== |
| - | |[[litespeed_wiki:https_redirect|Redirect to https connection]]|How to redirect from plain http connection to secured https connection| | + | |
| - | |[[litespeed_wiki:ocsp_stapling|OCSP Stapling]]|How to set up OCSP stapling for faster SSL| | + | |
| - | ===== Security ===== | + | |[[litespeed_wiki:config:flv-streaming|FLV streaming]]|Flash Video (FLV) Streaming (random seek)| |
| + | |[[litespeed_wiki:config:mp4-streaming|MP4 streaming]]|MP4/H264/F4V Video Streaming| | ||
| - | |[[litespeed_wiki:how_can_i_mitigate_ddos_attacks|Mitigating HTTP-level DDoS Attacks]]|How to mitigate DDoS attacks with LSWS's security features| | + | ===== Tuning ===== |
| - | |[[litespeed_wiki:mitigating_syn_floods|Mitigating SYN Floods]]|How to harden your kernel against SYN floods| | + | |
| - | |[[litespeed_wiki:security:Shared Hosting Securities]]|Access Permission isolation| | + | |
| - | |[[litespeed_wiki:CGI/FCGI/LSAPI/PHP suEXEC|suEXEC]]|Process UID isolation: CGI/FCGI/LSAPI/PHP| | + | |
| - | |[[litespeed_wiki:chroot]]|Process Execution isolation| | + | |
| - | |[[litespeed_wiki:mod_security_compatibility|mod_security compatibility]]|Apache mod_security 2.5+ compatibility| | + | |
| - | |[[litespeed_wiki:mod_security_tips_tricks|mod_security compatibility tips & tricks]]|Tips and tricks for mod_security 2.5+ compatibility| | + | |
| - | |[[litespeed_wiki:cagefs_how_to|CloudLinux CageFS How-To]]|Installation and Configurations| | + | |
| - | ===== Logs/Monitoring ===== | + | |[[litespeed_wiki:config:gzip-compression|gzip Compression]]|How can I use gzip compression to save bandwidth?| |
| + | |[[litespeed_wiki:config:linux-kernel-tune|Linux OS Tuning]]|How to tune Linux OS for maximum performance for LiteSpeed.| | ||
| + | |[[litespeed_wiki:config:increasing-os-file-descriptor-limit|File Descriptor Limit]]|How to increase the file descriptor limit| | ||
| + | |[[litespeed_wiki:config:internal-redirect|Internal Redirect]]|For those seeking x-sendfile or x-accel-redirect feature. We show you how with LiteSpeed.| | ||
| + | |[[litespeed_wiki:config:nf-conntrack-table-full|nf_conntrack table]]|"nf_conntrack: table full, dropping packet." issue| | ||
| + | |[[litespeed_wiki:config:vhost-level_bw_throttling|Virtual Host-Level Bandwidth Throttling]]|Set different bandwidth limits for different sites| | ||
| + | |[[litespeed_wiki:config:ram_disk_path|Understanding RAM Disk Path Setting]]|Will RAM disk setting help with I/O load issue| | ||
| - | |[[litespeed_wiki:logging_syslog_splunk_centralized|Syslog/Splunk Logger]]|High performance logging of litespeed logs to syslog/splunk via udp.| | + | ===== Miscellaneous Customization ===== |
| - | |[[litespeed_wiki:snmp_cacti_monitoring|SNMP Monitoring + Cacti Graphing]]|Monitor LiteSpeed real-time metrics via SNMP client and full-Cacti log/graph integration| | + | |
| - | |[[litespeed_wiki:rrd_graph_monitoring|Server Status + RRD Graphing]]|Monitor LiteSpeed Server Status via RRD Graph| | + | |
| - | |[[litespeed_wiki:piped_logger|Piped Logger]]|Flexible logging with piped logger| | + | |
| - | |[[litespeed:wiki:awstats|AWstats]]|How to use integrated AWstats log analyzer| | + | |
| - | ==== Debugging ==== | + | |[[litespeed_wiki:config:AutoIndex|Auto Index Customization]]|How to customize auto index script| |
| + | |[[litespeed_wiki:config:microsoft-frontpage-server-extensions-2002-installation|Microsoft FrontPage Server Extensions 2002]]|How to install Microsoft FrontPage Server Extensions 2002| | ||
| + | |[[litespeed_wiki:config:multiviews|MultiViews]]|How to handle MultiViews| | ||
| + | |[[litespeed_wiki:config:enable-http2|Enable HTTP2]]|How to enable HTTP2| | ||
| + | |[[litespeed_wiki:config:disable-tls1|Disable TLS1.0]]|How to disable TLS1.0 while enable TLS1.2 and TLS1.3| | ||
| + | ===== Virtual Hosting ===== | ||
| - | |[[litespeed_wiki:howto:bug_report|Bug Reporting]]|How to file a LiteSpeed bug report| | + | |[[litespeed_wiki:config:name-based-virtual-hosting-setup|Name-Based Virtual Hosting]]|How to set up name-based virtual hosting| |
| - | |[[litespeed_wiki:toggle_debug_logging|Toggle Debug Logging]]|A feature for quickly switching between normal and very detailed log levels| | + | |[[litespeed_wiki:config:ip-based-virtual-hosting-setup|IP-Based Virtual Hosting]]|How to set up IP-based virtual hosting| |
| - | |[[litespeed_wiki:rewrite_logs|How to Enable Rewrite Logging]]|The first step in debugging rewrite rules| | + | |
| - | ===== Streaming Media ===== | + | ==== Custom Templates ==== |
| - | |[[litespeed:wiki:feature:flv_streaming|FLV streaming]]|Flash Video (FLV) Streaming (random seek)| | + | Custom templates can be used to make LSWS virtual hosts that have been prepared for popular web applications and plugins. All templates use LiteSpeed native configurations. They are unnecessary if you are migrating an existing site with web applications from Apache. |
| - | |[[litespeed:wiki:feature:mp4_streaming|MP4 streaming]]|MP4/H264/F4V Video Streaming| | + | |
| - | ===== Tuning ===== | + | |[[litespeed_wiki:config:virtual-host-template|Virtual Host Templates]]|How to use a template to configure a group of virtual hosts with similar configurations| |
| - | + | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_WP_Super_Cache_With_Template|WP Super Cache]]|Template and tutorial for quick and easy set up of LSWS with WordPress and WP Super Cache| | |
| - | |[[litespeed_wiki:how_can_i_use_gzip_compression|gzip Compression]]|How can I use gzip compression to save bandwidth?| | + | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_W3_Total_Cache_With_Template|W3 Total Cache]]|How to use a template to set up LSWS with WordPress and W3 Total Cache| |
| - | |[[litespeed:wiki:linux_kernel_tune|Linux OS Tuning]]|How to tune Linux OS for maximum performance for LiteSpeed.| | + | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_Reverse_Proxy_With_Template|Reverse Proxy]]|Use a template to set up LSWS as a reverse proxy in under seven minutes| |
| - | |[[litespeed_wiki:how_can_i_increase_the_operating_system_file_descriptor_limit|File Descriptor Limit]]|How to increase the file descriptor limit| | + | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_Mediawiki_With_Template|MediaWiki]]|Setting up MediaWiki with LSWS is faster and easier with a template| |
| - | |[[litespeed:wiki:feature:internal_redirect|Internal Redirect]]|For those seeking x-sendfile or x-accel-redirect feature. We show you how with LiteSpeed.| | + | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_PHPBB_With_Template|phpBB]]|Set up this popular open source bulletin board application with a template| |
| - | + | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_PHPList_With_Template|phpList]]|A tutorial and template for setting up phpList with LSWS| | |
| - | ===== Miscellaneous Customization ===== | + | |
| - | |[[litespeed:wiki:AutoIndex|Auto Index Customization]]|How to customize auto index script| | ||
| - | |[[litespeed_wiki:install_microsoft_frontpage_server_extensions_2002|Microsoft FrontPage Server Extensions 2002]]|How to install Microsoft FrontPage Server Extensions 2002| | ||