You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Polonkai Gergely <po...@w00d5t0ck.info> on 2007/06/01 21:50:04 UTC
[users@httpd] MPM suggestion
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello,
could you please suggest me which MPM module to use?
I have about 10-15 active production sites, all with effectively low
traffic. Some of them use php, others use perl for generating dynamic
content. For PHP I'm currently using mod_php, but using PHP as CGI is
an option if needed.
In the future, I want to make this system a bit more secure, and so I
decided to use different UIDs and GIDs for the different sites, so
they cannot touch each others' files. Which MPM should I use to
achieve this? I also thought it would be nice if the separate sites
would use different chroots, but this is not necessary for me (or is it?).
Thanks in advance,
Gergely POLONKAI
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkZgeGsACgkQDmtpjMiCcGhzrQCfXDS8JcqJgSCSz4fBiyJ/wjyE
0UsAn1fd7WusAYcAD/7edN9XMFUUutOY
=RRKh
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] MPM suggestion
Posted by Polonkai Gergely <po...@w00d5t0ck.info>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Joshua Slive írta:
> On 6/1/07, Polonkai Gergely <po...@w00d5t0ck.info> wrote:
>
>> could you please suggest me which MPM module to use?
>>
>> I have about 10-15 active production sites, all with effectively
>> low traffic. Some of them use php, others use perl for generating
>> dynamic content. For PHP I'm currently using mod_php, but using
>> PHP as CGI is an option if needed.
>>
>> In the future, I want to make this system a bit more secure, and
>> so I decided to use different UIDs and GIDs for the different
>> sites, so they cannot touch each others' files. Which MPM should
>> I use to achieve this? I also thought it would be nice if the
>> separate sites would use different chroots, but this is not
>> necessary for me (or is it?).
>
> No particular MPM supports this.
>
> If you only want to isolate cgi scripts, then you can simply use
> suexec.
>
> If you want complete isolation, you need to use multiple apache
> instances, as described here:
> http://wiki.apache.org/httpd/Recipes/Different_UserIDs_Using_Reverse_Proxy
>
>
>
> In either case, any MPM will do. The highest performance with the
> lowest resource use likely comes from worker or event. The best
> stability (in terms of resilience in the face of crashing scripts
> and avoidance of thread safety problems) comes from prefork.
>
> Joshua.
Thank you, this is more than helpful!
Gergely
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkZggO4ACgkQDmtpjMiCcGjyrACeOwWLl/eiHGIhiWJyvXbdLraz
+GUAnAtKRQEYCV4QVZs1nzKpmIA1fyBf
=rbcq
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] MPM suggestion
Posted by Joshua Slive <jo...@slive.ca>.
On 6/1/07, Polonkai Gergely <po...@w00d5t0ck.info> wrote:
> could you please suggest me which MPM module to use?
>
> I have about 10-15 active production sites, all with effectively low
> traffic. Some of them use php, others use perl for generating dynamic
> content. For PHP I'm currently using mod_php, but using PHP as CGI is
> an option if needed.
>
> In the future, I want to make this system a bit more secure, and so I
> decided to use different UIDs and GIDs for the different sites, so
> they cannot touch each others' files. Which MPM should I use to
> achieve this? I also thought it would be nice if the separate sites
> would use different chroots, but this is not necessary for me (or is it?).
No particular MPM supports this.
If you only want to isolate cgi scripts, then you can simply use suexec.
If you want complete isolation, you need to use multiple apache
instances, as described here:
http://wiki.apache.org/httpd/Recipes/Different_UserIDs_Using_Reverse_Proxy
In either case, any MPM will do. The highest performance with the
lowest resource use likely comes from worker or event. The best
stability (in terms of resilience in the face of crashing scripts and
avoidance of thread safety problems) comes from prefork.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org