Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
litespeed_wiki:config [2013/12/03 15:29] Michael |
litespeed_wiki:config [2018/06/14 20:51] Eric Leu [Security] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Configuration How-Tos ====== | ====== Configuration How-Tos ====== | ||
| - | This section of the wiki provides articles on configuring LiteSpeed Web Server to achieve desired functionality, better performance, or security. These wikis do not cover what each LSWS setting does. That information can be found in our [[http://www.litespeedtech.com/docs/webserver|documentation]]. | + | This section of the wiki provides articles on configuring LiteSpeed Web Server to achieve desired functionality, better performance, or security. These wikis do not cover what each LSWS setting does. That information can be found in our [[https://www.litespeedtech.com/docs/webserver/config|documentation]]. |
| - | Also [[litespeed_wiki:cache|LiteSpeed Cache]], [[litespeed_wiki:php|PHP]], and [[litespeed_wiki:other_ext_app|other external applications]] (Python, Ruby, etc.) are covered in their own sections of the wiki and are not included here. | + | Also [[litespeed_wiki:cache:lscache|LiteSpeed Cache]], [[litespeed_wiki:cache:litemage|LiteMage Cache]], |
| + | [[litespeed_wiki:php|PHP]], and [[litespeed_wiki:other-ext-apps|other external applications]] (Python, Ruby, etc.) are covered in their own sections of the wiki and are not included here. | ||
| - | |[[litespeed_wiki:license:Command Reference]]|Quick Reference for All Commands| | + | |[[litespeed_wiki:admin:command-reference|Command Reference]]|Quick Reference for All Commands| |
| + | |[[https://www.litespeedtech.com/docs/webserver/config|LSWS Config]]|LSWS Configuration Items| | ||
| + | ===== Performance tips===== | ||
| + | |[[litespeed_wiki:php:improve-performance|My site running slow, how to make it faster?]]|How to improve my site performance?| | ||
| + | |[[litespeed_wiki:php:server-load-issue|My server load is high, how to resolve it?]]|How to resolve my server load issue?| | ||
| + | |[[litespeed_wiki:php:concurrency|Controlling PHP Concurrency]]|How to control how many connections your PHP engine can serve at once| | ||
| + | |[[litespeed_wiki:cloudlinux:cl_LVE_vs_lsws_PHP_suEXEC_Max_Conn|Understand LSWS "PHP suEXEC Max Conn" and Cloudlinux LVE]]|LSWS "PHP suEXEC Max Conn" should be always less than CL LVE EP | | ||
| - | ===== Security ===== | + | ===== QUIC ===== |
| + | |[[litespeed_wiki:config:Enable QUIC]]|How to Enable QUIC at the Server Level| | ||
| + | |[[litespeed_wiki:config:disable_quic|Disable QUIC]]|How to Disable/Enable QUIC at the VHost and Listener Levels| | ||
| + | |[[litespeed_wiki:config:Quic makes quicker]]|How QUIC makes the web quicker| | ||
| + | |[[litespeed_wiki:config:Supported Quic Versions]]|What Quic versions does LSWS support?| | ||
| + | ===== PageSpeed ===== | ||
| + | |[[litespeed_wiki:config:Enable PageSpeed]]|How to enable PageSpeed module| | ||
| + | |[[litespeed_wiki:config:Compare PageSpeed and lscache]]|Should I turn on both PageSpeed and lscache?| | ||
| + | ===== Proxy ===== | ||
| + | |[[litespeed_wiki:proxy:lsws-as-a-proxy|Proxy as a Context]]|How to setup LiteSpeed Web Server as a Proxy via Contexts| | ||
| + | |[[litespeed_wiki:proxy:lsws-as-a-proxy-rewrite|Proxy as a RewriteRule]]|How to setup LiteSpeed Web Server as a Proxy via Rewrite Rules| | ||
| - | |[[litespeed_wiki:how_can_i_mitigate_ddos_attacks|Mitigating HTTP-level DDoS Attacks]]|How to mitigate DDoS attacks with LSWS's security features| | + | ===== GeoLocation ===== |
| - | |[[litespeed_wiki:mitigating_syn_floods|Mitigating SYN Floods]]|How to harden your kernel against SYN floods| | + | |[[litespeed_wiki:config:GeoLocation]]|How to enable IP to GeoLocation| |
| - | |[[litespeed_wiki:security:Shared Hosting Securities]]|Access Permission isolation| | + | |
| - | |[[litespeed_wiki:CGI/FCGI/LSAPI/PHP suEXEC|suEXEC]]|Process UID isolation: CGI/FCGI/LSAPI/PHP| | + | |
| - | |[[litespeed_wiki:chroot]]|Process Execution isolation| | + | |
| - | |[[litespeed_wiki:mod_security_compatibility|mod_security compatibility]]|Apache mod_security 2.5+ compatibility| | + | |
| - | |[[litespeed_wiki:mod_security_tips_tricks|mod_security compatibility tips & tricks]]|Tips and tricks for mod_security 2.5+ compatibility| | + | |
| - | |[[litespeed_wiki:cagefs_how_to|CloudLinux CageFS How-To]]|Installation and Configurations| | + | |
| - | ===== HTTPS/SSL Configuration ===== | + | ===== IP2Location ===== |
| + | |[[litespeed_wiki:config:ip2location]]|How to enable IP2Location| | ||
| - | |[[litespeed_wiki:SSL_private_key|Create a SSL private key]]|How to create a SSL private key| | + | ===== Header Settings===== |
| - | |[[litespeed_wiki:SSL_self_signed_cert|Self signed SSL certificate]]|How to create a self signed SSL certificate | | + | |[[litespeed_wiki:config:CORS]]|How to enable CORS on LSWS| |
| - | |[[litespeed_wiki:SSL_cert_request|Create a certificate request]]|How to create a SSL certificate request for applying a trusted SSL certificate from CA issuer. | | + | |[[litespeed_wiki:config:Server Push]]|How to use Server Push on LSWS| |
| - | |[[litespeed_wiki:SSL_cert_install|Install a SSL certificate]]|How to install a SSL certificate| | + | |
| - | |[[litespeed_wiki:admin:SSL|Secure web admin console]]|How to secure web administration console with SSL| | + | |
| - | |[[litespeed_wiki:https_redirect|Redirect to https connection]]|How to redirect from plain http connection to secured https connection| | + | |
| - | |[[litespeed_wiki:ocsp_stapling|OCSP Stapling]]|How to set up OCSP stapling for faster SSL| | + | |
| - | ===== Logs/Monitoring ===== | + | ===== Security ===== |
| - | |[[litespeed_wiki:logging_syslog_splunk_centralized|Syslog/Splunk Logger]]|High performance logging of litespeed logs to syslog/splunk via udp.| | + | |[[https://www.litespeedtech.com/docs/webserver/security|Security Overview]]|LiteSpeed web server security overview| |
| - | |[[litespeed_wiki:snmp_cacti_monitoring|SNMP Monitoring + Cacti Graphing]]|Monitor LiteSpeed real-time metrics via SNMP client and full-Cacti log/graph integration| | + | |[[litespeed_wiki:config:mitigating-syn-floods|Mitigating SYN Floods]]|How to harden your kernel against SYN floods| |
| - | |[[litespeed_wiki:rrd_graph_monitoring|Server Status + RRD Graphing]]|Monitor LiteSpeed Server Status via RRD Graph| | + | |[[litespeed_wiki:config:shared-hosting-security|Shared Hosting Security]]|Access Permission isolation| |
| - | |[[litespeed_wiki:piped_logger|Piped Logger]]|Flexible logging with piped logger| | + | |[[litespeed_wiki:config:suexec-mode|suEXEC Mode]]|Process UID isolation: CGI/FCGI/LSAPI/PHP| |
| - | |[[litespeed:wiki:awstats|AWstats]]|How to use integrated AWstats log analyzer| | + | |[[litespeed_wiki:config:chroot]]|Process Execution isolation| |
| + | |[[litespeed_wiki:config:mod_security-compatibility|mod_security Compatibility]]|Apache mod_security 2.5+ compatibility| | ||
| + | |[[https://www.atomicorp.com/wiki/index.php/Litespeed|Atomicorp setup and support]]|Explanation of Atomicorp's support of LSWS and how to set it up| | ||
| + | |[[litespeed_wiki:cloudlinux:cagefs|CloudLinux CageFS How-To]]|Installation and Configurations| | ||
| + | |[[litespeed_wiki:config:hsts-setup|Setting up HSTS]]|How to set up HTTP Strict Transport Security| | ||
| + | |[[litespeed_wiki:config:vhost-level_bw_throttling|Virtual Host-Level Bandwidth Throttling]]|Set different bandwidth limits for different sites| | ||
| + | |[[litespeed_wiki:config:cloudflare-ips-or-subnets|Void CloudFlare IP/Subnet blocking]]|How to avoid LSWS Anti-ddos blocking CloudFlare IP/subnet connections| | ||
| + | |[[litespeed_wiki:config:disable-cgi|How to disable CGI script]]|Disable all CGI scripts| | ||
| + | |[[litespeed_wiki:config:wordpress-protection |WordPress Protection ]] | How WordPress Brute Force Protection works | | ||
| + | |[[litespeed_wiki:config:authenticate|Realm and .htaccess]]|How to setup authentication| | ||
| + | ===== How to mitigate DDoS attacks with LSWS's built-in security features ===== | ||
| + | |[[litespeed_wiki:config:mitigating-ddos-attacks|Mitigating HTTP-level DDoS Attacks]]|How to mitigate DDoS attacks with LSWS's security features| | ||
| + | |[[https://store.litespeedtech.com/store/knowledgebase.php?action=displayarticle&id=125|Understanding LiteSpeed Advanced Anti-DDos Setup Service]]|Fine tune anti-DDoS configurations and set up a script using iptables to automatically block attacking IPs detected by web server.| | ||
| + | ===== HTTPS/SSL Configuration ===== | ||
| - | ==== Debugging ==== | + | |[[litespeed_wiki:config:ssl-private-key|Create an SSL private key]]|How to create a SSL private key| |
| + | |[[litespeed_wiki:config:ssl-self-signed-cert|Self Signed SSL Certificate]]|How to create a self signed SSL certificate | | ||
| + | |[[litespeed_wiki:config:ssl-cert-request|Create a certificate request]]|How to create a SSL certificate request for applying a trusted SSL certificate from CA issuer. | | ||
| + | |[[litespeed_wiki:config:ssl-cert-install|Install a SSL certificate]]|How to install a SSL certificate| | ||
| + | |[[litespeed_wiki:config:admin-SSL|Secure web admin console]]|How to secure web administration console with SSL| | ||
| + | |[[litespeed_wiki:config:https-redirect|Redirect to https connection]]|How to redirect from plain http connection to secured https connection| | ||
| + | |[[litespeed_wiki:config:ocsp-stapling|OCSP Stapling]]|How to set up OCSP stapling for faster SSL| | ||
| + | |[[litespeed_wiki:faq:disabling-http2|Disabling HTTP/2]]|Disabling HTTP/2 per virtual host| | ||
| - | |[[litespeed_wiki:howto:bug_report|Bug Reporting]]|How to file a LiteSpeed bug report| | + | ===== Logs/Monitoring ===== |
| - | |[[litespeed_wiki:toggle_debug_logging|Toggle Debug Logging]]|A feature for quickly switching between normal and very detailed log levels| | + | |
| - | |[[litespeed_wiki:rewrite_logs|How to Enable Rewrite Logging]]|The first step in debugging rewrite rules| | + | |
| + | |[[litespeed_wiki:config:centralized-syslog-or-splunk-logging|Syslog/Splunk Logger]]|High performance logging of litespeed logs to syslog/splunk via udp.| | ||
| + | |[[litespeed_wiki:config:snmp-cacti-monitoring|SNMP Monitoring + Cacti Graphing]]|Monitor LiteSpeed real-time metrics via SNMP client and full-Cacti log/graph integration| | ||
| + | |[[litespeed_wiki:config:rrd-graph-monitoring|Server Status + RRD Graphing]]|Monitor LiteSpeed Server Status via RRD Graph| | ||
| + | |[[litespeed_wiki:config:piped-logger|Piped Logger]]|Flexible logging with piped logger| | ||
| + | |[[litespeed_wiki:config:awstats|AWstats]]|How to use integrated AWstats log analyzer| | ||
| + | |[[litespeed_wiki:php:new_relic|New Relic Installation Guide]]|How to get New Relic to work with LSWS| | ||
| + | |[[litespeed_wiki:config:real-time-stats|Real-Time Statistics]]|Real-Time Statistics in Admin Console| | ||
| + | |[[litespeed_wiki:config:error-messages|Child process killed, is that normal?]]|How to deal with "Child Process Killed" message in stderr.log| | ||
| + | ===== Debugging ===== | ||
| + | |||
| + | |[[litespeed_wiki:config:bug-reporting|Bug Reporting]]|How to file a LiteSpeed bug report| | ||
| + | |[[litespeed_wiki:config:toggle-debug-logging|Toggle Debug Logging]]|A feature for quickly switching between normal and very detailed log levels| | ||
| + | |[[litespeed_wiki:config:rewrite-logs|How to Enable Rewrite Logging]]|The first step in debugging rewrite rules| | ||
| + | |[[litespeed_wiki:config:rewrite-rule-troubleshooting|How to Debug my Rewrite Rule]]|The steps to check the failed rewrite rule| | ||
| ===== Streaming Media ===== | ===== Streaming Media ===== | ||
| - | |[[litespeed:wiki:feature:flv_streaming|FLV streaming]]|Flash Video (FLV) Streaming (random seek)| | + | |[[litespeed_wiki:config:flv-streaming|FLV streaming]]|Flash Video (FLV) Streaming (random seek)| |
| - | |[[litespeed:wiki:feature:mp4_streaming|MP4 streaming]]|MP4/H264/F4V Video Streaming| | + | |[[litespeed_wiki:config:mp4-streaming|MP4 streaming]]|MP4/H264/F4V Video Streaming| |
| ===== Tuning ===== | ===== Tuning ===== | ||
| - | |[[litespeed_wiki:how_can_i_use_gzip_compression|gzip Compression]]|How can I use gzip compression to save bandwidth?| | + | |[[litespeed_wiki:config:brotli:disable-per|Disable Brotli Per Account/Domain]]|How to disable Brotli on a per Account/Domain basis| |
| - | |[[litespeed:wiki:linux_kernel_tune|Linux OS Tuning]]|How to tune Linux OS for maximum performance for LiteSpeed.| | + | |[[litespeed_wiki:config:brotli:disable-server|Disable Brotli Per Server Wide]]|How to disable Brotli Server Wide| |
| - | |[[litespeed_wiki:how_can_i_increase_the_operating_system_file_descriptor_limit|File Descriptor Limit]]|How to increase the file descriptor limit| | + | |[[litespeed_wiki:config:gzip-compression|gzip Compression]]|How can I use gzip compression to save bandwidth?| |
| - | |[[litespeed:wiki:feature:internal_redirect|Internal Redirect]]|For those seeking x-sendfile or x-accel-redirect feature. We show you how with LiteSpeed.| | + | |[[litespeed_wiki:config:linux-kernel-tune|Linux OS Tuning]]|How to tune Linux OS for maximum performance for LiteSpeed.| |
| + | |[[litespeed_wiki:config:increasing-os-file-descriptor-limit|File Descriptor Limit]]|How to increase the file descriptor limit| | ||
| + | |[[litespeed_wiki:config:internal-redirect|Internal Redirect]]|For those seeking x-sendfile or x-accel-redirect feature. We show you how with LiteSpeed.| | ||
| + | |[[litespeed_wiki:config:nf-conntrack-table-full|nf_conntrack table]]|"nf_conntrack: table full, dropping packet." issue| | ||
| + | |[[litespeed_wiki:config:vhost-level_bw_throttling|Virtual Host-Level Bandwidth Throttling]]|Set different bandwidth limits for different sites| | ||
| + | |[[litespeed_wiki:config:ram_disk_path|Understanding RAM Disk Path Setting]]|Will RAM disk setting help with I/O load issue| | ||
| + | |[[litespeed_wiki:config:keep_alive|Understanding keep alive setting]]|How to set "keep alive" for my site| | ||
| ===== Miscellaneous Customization ===== | ===== Miscellaneous Customization ===== | ||
| - | |[[litespeed:wiki:AutoIndex|Auto Index Customization]]|How to customize auto index script| | + | |[[litespeed_wiki:config:AutoIndex|Auto Index Customization]]|How to customize auto index script| |
| - | |[[litespeed_wiki:install_microsoft_frontpage_server_extensions_2002|Microsoft FrontPage Server Extensions 2002]]|How to install Microsoft FrontPage Server Extensions 2002| | + | |[[litespeed_wiki:config:microsoft-frontpage-server-extensions-2002-installation|Microsoft FrontPage Server Extensions 2002]]|How to install Microsoft FrontPage Server Extensions 2002| |
| + | |[[litespeed_wiki:config:multiviews|MultiViews]]|How to handle MultiViews| | ||
| + | |[[litespeed_wiki:config:enable-http2|Enable HTTP2]]|How to enable HTTP2| | ||
| + | |[[litespeed_wiki:config:disable-tls1|Disable TLS1.0]]|How to disable TLS1.0 while enable TLS1.2 and TLS1.3| | ||
| + | |[[litespeed_wiki:config:add-mime-type| Add MIME type]]|How to add MIME type if not exist| | ||
| + | |[[litespeed_wiki:config:show-real-ip-behind-a-proxy| Show real IP behind a proxy]]|How to restore real visitor IP instead of proxy?| | ||
| + | |[[litespeed_wiki:config:special-rewrite-rule-directive| Special Rewrite Rule Directives]]|Using special directives in rewrite rules| | ||
| + | |[[litespeed_wiki:config:redirect_cgi-bin_no_exist_404| Why my redirect from /cgi-bin/script working with apache but 404 on LSWS?]]|How to fix the 404 error when redirecting /cgi-bin/script?| | ||
| ===== Virtual Hosting ===== | ===== Virtual Hosting ===== | ||
| - | |[[litespeed_wiki:how_can_i_set_up_name-based_virtual_hosting|Name-Based Virtual Hosting]]|How to set up name-based virtual hosting| | + | |[[litespeed_wiki:config:name-based-virtual-hosting-setup|Name-Based Virtual Hosting]]|How to set up name-based virtual hosting| |
| - | |[[litespeed_wiki:how_can_i_set_up_ip-based_virtual_hosting|IP-Based Virtual Hosting]]|How to set up IP-based virtual hosting| | + | |[[litespeed_wiki:config:ip-based-virtual-hosting-setup|IP-Based Virtual Hosting]]|How to set up IP-based virtual hosting| |
| + | |||
| + | |||
| + | ===== Troubleshooting errors ===== | ||
| + | |||
| + | |[[litespeed_wiki:config:understanding_500|Understanding 500 error]]|What is 500 internal server error and how to fix it?| | ||
| + | |[[litespeed_wiki:config:understanding_404|Understanding 404 error]]|What is 404 Not Found error and how to fix it?| | ||
| + | |||
| + | ===== Setup LSWS as load balancer ===== | ||
| + | |[[litespeed_wiki:proxy:lsws-as-a-load-balancer|Setup LSWS as load balancer]]|How to setup LSWS as load balancer?| | ||
| ==== Custom Templates ==== | ==== Custom Templates ==== | ||
| Line 68: | Line 128: | ||
| Custom templates can be used to make LSWS virtual hosts that have been prepared for popular web applications and plugins. All templates use LiteSpeed native configurations. They are unnecessary if you are migrating an existing site with web applications from Apache. | Custom templates can be used to make LSWS virtual hosts that have been prepared for popular web applications and plugins. All templates use LiteSpeed native configurations. They are unnecessary if you are migrating an existing site with web applications from Apache. | ||
| - | |[[litespeed_wiki:template|Virtual Host Templates]]|How to use a template to configure a group of virtual hosts with similar configurations| | + | |[[litespeed_wiki:config:virtual-host-template|Virtual Host Templates]]|How to use a template to configure a group of virtual hosts with similar configurations| |
| |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_WP_Super_Cache_With_Template|WP Super Cache]]|Template and tutorial for quick and easy set up of LSWS with WordPress and WP Super Cache| | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_WP_Super_Cache_With_Template|WP Super Cache]]|Template and tutorial for quick and easy set up of LSWS with WordPress and WP Super Cache| | ||
| |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_W3_Total_Cache_With_Template|W3 Total Cache]]|How to use a template to set up LSWS with WordPress and W3 Total Cache| | |[[http://open.litespeedtech.com/mediawiki/index.php/Help:How_To_Set_Up_W3_Total_Cache_With_Template|W3 Total Cache]]|How to use a template to set up LSWS with WordPress and W3 Total Cache| | ||