快速入门与安全配置：Lighttpd开发人员指南

4星 · 超过85%的资源需积分: 10 125 浏览量更新于2024-07-31 收藏 3.26MB PDF 举报

《Lighttpd By Andre Bogus》是一本专门为开发人员和系统管理员打造的轻量级Web服务器指南，重点关注快速部署、安全设置和优化。作者Andre Bogus以其开发者视角，深入浅出地介绍了如何安装、编译、配置、优化以及确保这款被称为“闪电快”的Lighttpd服务器的安全运行。这本书特别适合那些寻求高效web应用部署平台或希望替代Apache等重型服务器的用户。本书内容涵盖了从基础入门到高级实践的全面指导，包括但不限于以下几个关键知识点： 1. **快速入门**：书中首先会引导读者了解Lighttpd的基本概念和优势，强调其相对于Apache等服务器在性能上的提升，如更快的响应速度和更低的资源消耗。 2. **安装与配置**：详细介绍了如何在各种操作系统上安装Lighttpd，以及如何根据项目需求进行定制化配置，以适应不同的应用场景。 3. **优化技术**：涉及如何通过调整服务器参数、启用缓存机制、优化HTTP头信息等方式，提高服务器性能和用户体验。 4. **安全性考量**：书中着重强调了对Lighttpd服务器的防护，包括但不限于设置SSL/TLS、限制恶意请求、防范跨站脚本攻击（XSS）和SQL注入等，以保障网站的安全性。 5. **实战案例**：书中可能包含针对不同类型的web应用（如静态网站、PHP应用等）的实际配置示例，帮助读者理解和实践。 6. **比较分析**：虽然主要讨论Lighttpd，但也会提及与Apache的比较，突出Lighttpd作为轻量级服务器在性能和资源占用方面的优势。 7. **版权与法律声明**：最后部分包含了版权信息和免责声明，确保读者了解使用本书内容的许可范围，以及在何种情况下可以引用或复制内容。《Lighttpd By Andre Bogus》是一本实用的指南，不仅适合想要深入了解Lighttpd的开发者，也对系统管理员和寻求更高效部署策略的用户极具价值。通过阅读这本书，用户可以掌握Lighttpd的使用技巧，从而在实际工作中实现更高效的网站管理和运维。

Preface

Piracy

Piracy of copyright material on the Internet is an ongoing problem across all media.

At Packt, we take the protection of our copyright and licenses very seriously. If

you come across any illegal copies of our works in any form on the Internet, please

provide the location address or website name immediately so we can pursue

a remedy.

Please contact us at

pirated material.

We appreciate your help in protecting our authors, and our ability to bring you

valuable content.

Questions

You can contact us at questions@packtpub.com if you are having a problem with

some aspect of the book, and we will do our best to address it.

[ 6 ]

This material is copyright and is licensed for the sole use by Mauricio Esquenazi on 21st July 2009

10 Kenmare St. #4, , New York, , 10012

Download at Boykma.Com

Introduction to Lighttpd

The stable branch is very solid and changes at the most once every two months

(if bug xes are not counted, then about once a year), allowing the developers to

concentrate on bug xes. The development branch moves faster, with a new release

every four to six weeks. The development snapshots contain new shiny features, but

can also contain hidden bugs, break old features and can generally be less stable.

At the time of writing, version 1.4.19 is deemed to be the stable version, while

pre-releases of the upcoming 1.5.0 version are distributed for more testing before

the nal release. Some systems might have packages of older versions, but anything

older than the stable branch many contain known security holes.

For a live server, or if we want the latest versions, we usually compile Lighttpd

from sources. For a development server, we might take the easy route and install a

precompiled package to leave the worries about dependencies to whoever maintains

the package database.

The last question is, on which system we should use Lighttpd? My pragmatic

advice is to use what you have. For a development system, take the platform you

currently work on. For integration and production platforms, this advice needs to be

constrained a little—apart from Windows, which allows too little connections to be

open in parallel, most operating systems are suitable for production use—the

POSIX-implementing ones (Linux, every BSD, Solaris, Mac OS X, and so on) also

benet from numerous optimizations.

Now, without further ado, here is a list of binary packages per system:

System Download address or command

Debian GNU/Linux,

Ubuntu, Knoppix,

other Derivatives

Fedora / Red Hat

Novell / SuSE Linux

other RPM-based

distributions

Gentoo Linux

Windows

apt-get install libpcre3

apt-get install zlib1g

apt-get install mysql-common libmysqlclient12

apt-get install lighttpd lighttpd-doc

yum install pcre

yum install zlib

wget http://www.kevindustries.com/media/kw/files/

linux/lighttpd/RPMS/lighttpd-1.4.13-3.KWEL4.i386.

rpm rpm -Uhv lighttpd-1.4.13-3.KWEL4.i386.rpm

emerge lighttpd

http://www.kevinworthington.com:8181/?cat=20

[ 8 ]

This material is copyright and is licensed for the sole use by Mauricio Esquenazi on 21st July 2009

10 Kenmare St. #4, , New York, , 10012

Download at Boykma.Com

Chapter 1

To compile Lighttpd from source, download the latest source package from

http://lighttpd.net/download/. Between Lighttpd versions 1.4.19 and 1.5.0, the

build system has changed from Autotools to CMake. Before we can install it, we

need the following:

• A compiler and toolchain—most systems have gcc make and a libc (usually

glibc) providing the usual functions. For some embedded platforms, the

need to dene some constants by hand before cross-compiling has

been observed.

• PCRE—the libpcre package (

http://www.pcre.org) supplies

PERL-compatible regular expressions to Lighttpd. Lighttpd will run without

it, but won't do anything more complex than serving web pages directly

under only one hostname and path, without any rewriting or redirecting.

Apart from these, there are some optional packages that expand the capabilities

of Lighttpd:

• OpenSSL (

http://openssl.org) or any other SSL library (but OpenSSL is

the most-tested one) is needed for transport layer encryption, so our site can

be accessed via https.

• zlib (

http://www.zlib.org) is required for mod_compress to supply

on-the-y gzip compression for static content. As virtually every system has

zlib available, this should not concern us.

• bzip2 (

http://www.bzip.org) can also be used by mod_compress static

content for clients who allow bzip2 compression. It is a little slower than zlib,

but achieves higher compression rates.

• Lua (

http://www.lua.org) is a small, fast, powerful scripting language,

which is a perfect match for Lighttpd and can be embedded as mod_magnet.

• MySQL (

http://www.mysql.org) is a product by the company that employs

the author of Lighttpd. Therefore, it is no surprise that Lighttpd uses MySQL

for database-backed virtual hosting. Also, under Debian, a binary install

depends on MySQL.

• pkg-cong (

http://pkgconfig.freedesktop.org) is not strictly necessary,

but it will make the installation easier. Especially for Lua, the Lighttpd

installation process relies on it unless given explicit library paths.

Building Lighttpd using Autotools

Lighttpd was built using Autotools until version 1.5.0, in which the authors

experimented with CMake (and other build systems). The Autotools build system

has been around for some time. So, almost every system that has a sufcient

toolchain can build Lighttpd.

[ 9 ]

This material is copyright and is licensed for the sole use by Mauricio Esquenazi on 21st July 2009

10 Kenmare St. #4, , New York, , 10012

Download at Boykma.Com

剩余234页未读，继续阅读

allneed2007

粉丝: 4
资源: 13

快速入门与安全配置：Lighttpd开发人员指南

Lighttpd英文开发手册：安装配置与优化

快速入门与优化：Lighttpd Web服务器指南

Lighttpd：配置与优化快速Web服务器指南

lighttpd源码

lighttpd服务器

lighttpd分析

lighttpd fastcgi

最新lighttpd源码 lighttpd-1.4.22

lighttpd-1.4.45_lighttpd服务器_

chef-lighttpd:lighttpd的厨师食谱

最新资源