虛擬主機加密與網頁重寫 squit服務

{**虛擬主機加密和網頁重寫apache**}

做好https認證以後

hostnamectl set-hostname web1.example.com

logout

vim /etc/httpd/conf.d/ssl.conf

cd /etc/httpd/conf.d/

vim news.conf

<Virtualhost *:80>

        Servername news.westos.com

        Documentroot /var/www/virtual/news.westos.com/html

        Customlog logs/news.log       combined

</Virtualhost>

<Directory "/var/www/virtual/news.westos.com/html">

        Require all granted

</Directory>

<Virtualhost *:443>                    **可以訪問443端口(https端口)

        Servername news.westos.com      **主機名

        Documentroot /var/www/virtual/news.westos.com/html

        Customlog logs/news-443.log       combined    

        SSLEngine on

        SSLCertificateFile /etc/pki/tls/certs/www.westos.com.crt    **證書

            SSLCertificateKeyFile /etc/pki/tls/private/www.westos.com.key    **鑰匙

</Virtualhost>

 

systemctl restart httpd.service   重啓服務

在瀏覽器中訪問http://news.westos.com

 

 

訪問http://news.westos.com自動轉到https://news.westos.com

vim news.conf   修改如下:

<Virtualhost *:80>

        Servername news.westos.com

        RewriteEngine on

        RewriteRule ^(/.*)$ https://%{HTTP_HOST}$1 [redirect=301] **當訪問http時帶他訪問https

</Virtualhost>

<Directory "/var/www/virtual/news.westos.com/html">

        Require all granted

</Directory>

<Virtualhost *:443>

        Servername news.westos.com

        Documentroot /var/www/virtual/news.westos.com/html

        Customlog logs/news-443.log       combined

        SSLEngine on

        SSLCertificateFile /etc/pki/tls/certs/www.westos.com.crt

        SSLCertificateKeyFile /etc/pki/tls/private/www.westos.com.key

</Virtualhost>

 

systemctl restart httpd.service   重啓服務

此時在瀏覽器中訪問http://news.westos.com還是https://news.westos.com都自動轉到https://news.westos.com

 

 

[**php和cgi**]

cd /var/www/html/

ls

vim index.html

vim index.php

     1  <?php

     2 phpinfo ();

     3  ?>

vim /etc/httpd/conf/httpd.conf

    163 <IfModule dir_module>

    164     DirectoryIndex index.php index.html    優先讀取php 確認發佈目錄是/var/www/html/

systemctl restart httpd.service

 

yum install php -y      安裝

cd /etc/httpd/conf.d/

systemctl restart httpd.service  重啓服務

cd /var/www/html/

mkdir cgi        [先建立一個cgi目錄]

cd cgi/

yum install httpd-manual   安裝manual(查找cgi需要的命令)

vim index.cgi

     1 #!/usr/bin/perl

     2 print "Content-type: text/html\n\n";

     3 print `date`;

perl index.cgi        **測試cgi是否可用

chmod +x index.cgi    **[給一個執行權限,可以用 prel index.cgi]

cd /etc/httpd/conf.d/

vim default.conf

<Virtualhost _default_:80>

        Documentroot /var/www/html

        Customlog "logs/default.log" combined

</Virtualhost>

<Directory "/var/www/html/cgi">            讀取的文件

        Options +ExecCGI            有執行權限

        AddHandler cgi-script .cgi

</Directory>

systemctl restart httpd.service

ls -Zd cgi-bin/

semanage fcontext -a -t httpd_sys_script_exec_t '/var/www/html/cgi(/.*)?'  修改安全上下文

restorecon -FvvR /var/www/html/cgi/     

測試:http://172.25.254.149/cgi/index.cgi

 

yum install mariadb-server -y             **安裝服務

systemctl start mariadb                   **重啓服務

vim /etc/my.cnf                    **數據庫配置文件

        skip-networking=1            **關閉遠程連接

 

systemctl restart mariadb

mysql_secure_installation

cd /var/www/html/

ls

lftp 172.25.254.250             **下載Discuz_X3.2_SC_UTF8.zip軟件包

unzip Discuz_X3.2_SC_UTF8.zip   ** 解析

less readme/readme.txt

setenforce 0                    

chmod 777 upload/ -R

yum install php-mysql.x86_64   下載兩者關聯的服務

systemctl restart httpd.service

在瀏覽器中訪問http://172.25.254.149/upload/install     **進行設置 

 

[**squit**] 

squit正向解析:(效果:通過172.25.49.11瀏覽器可以訪問172.25.254.250)

yum install squid -y                安裝服務

vim /etc/squid/squid.conf

         56 http_access allow all            允許所有訪問

         62 cache dir ufs /var/spool/squid 100 16 256    

systemctl start squid                開啓服務

測試172.25.49.11

    打開 firefox  把Advanced——Network中的Settings,Manual ~ 中 寫入你所訪問的緩衝機(有兩塊網卡的那個)。

然後訪問172.25.254.250,就會成功。雖然 ping 不同 172.25.254.250,但是能訪問。

 

[2.緩存網站信息,並且輪詢顯示]

 

yum install squid。

vim /etc/squid/squid.conf

        56 http access_allow_all      **允許所有人訪問

        59 http_port 80 vhost vport   **使用80端口    

        60 cache_peer 172.25.254.60 parent 80 0no-query originserver round-robin name=   web1

      61 cache_peer 172.25.254.4 parent 80 0no-query originserver round-robin name=   web2

        62 cache_peer_domain web1web2 www.test.com

      63 cache_dir ufs /var/spool/squid 100 16 256   cache_peer_domain web1 web2www.test.com    **設置網站訪問域名

 

 

systemctl restart squid

並且在/etc/hosts 中添加 172.25.254.149 www.test.com

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章