#1391

[How-To] HTTPD & Apache

Olivier | How-To | 13

Install HTTPD

yum install httpd

Check Proxy mod is installed/enabled :

vi /etc/httpd/conf/httpd.conf

and look for “proxy_balancer” module

To add a reverse proxy settings, create a new .conf file un /etc/httpd/conf.d/ like :

<Location "/artifactory">
    ProxyPass http://myhost:8081/artifactory
    ProxyPassReverse http://myhost:8081/artifactory
</Location>

In case of error like :

Permission denied: proxy: HTTP: attempt to connect to

You must disable SELinux :

vi /etc/selinux/config

=> SELINUX=disabled

apache, CentOS, httpd

[CentOS] Disable firewall [Centos] Yum download RPM package

13 thoughts on “[How-To] HTTPD & Apache”

Olivier says:

24/08/2016 at 09:49

http://www.serveridol.com/2014/02/26/apache-proxy-http-disabled-connection-forpermission-denied-proxy-http-attempt-to-connect-to/

Reply
Olivier says:

24/08/2016 at 09:49

http://blog.zwiegnet.com/linux-server/install-mod_proxy-plugin-to-apache-centos/

Reply

Olivier says:

15/03/2019 at 08:34

Apache as a reverse proxy with HTTPS backend :
https://www.vincentliefooghe.net/content/apache-reverse-proxy-https

ProxyRequests Off

<VirtualHost *:443>
# Production
  ServerName webmail.domaine.fr
  DocumentRoot /var/www/html
  CustomLog /var/log/httpd/ssl_reverse.log combined
  
#   SSL Engine Switch , certificate configuration paths:
#   Enable/Disable SSL for this virtual host.
  SSLEngine on
  SSLCertificateFile    "/etc/ssl/certs/https/webmail.pem"
  SSLCertificateKeyFile "/etc/ssl/certs/https/webmail.key"
  SSLStrictSNIVHostCheck Off
  SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5

# On fait du proxy vers un autre serveur en https
  SSLProxyEngine On
# Disable SSLProxyCheck
  SSLProxyCheckPeerCN Off
  SSLProxyCheckPeerName Off
  SSLProxyVerify none
# On transmet notre certificat au serveur distant (crt + key combiné)
#  SSLProxyMachineCertificateFile "/etc/ssl/certs/https/client.pem"
  ProxyPass / https://10.1.2.3/
  ProxyPassReverse / https://10.1.2.3/
  ProxyPreserveHost On

</VirtualHost>

Olivier says:

15/03/2019 at 08:36

see also : https://serverfault.com/questions/412206/apache-ssl-proxy-cant-find-client-certificate

and for error “incomplete client cert configured for SSL proxy (missing or encrypted private key?)” see : https://serverfault.com/questions/660691/sslproxycacertificatefile-fails-incomplete-client-cert-configured-for-ssl-proxy

Reply

Olivier says:

23/04/2020 at 14:58

Enable DumpIO plugin (https://httpd.apache.org/docs/2.4/mod/mod_dumpio.html)
```
LogLevel dumpio:trace7
DumpIOInput On
DumpIOOutput On
```
Reply
OLIVIER COMBE says:

05/10/2020 at 16:54

Error
```
No space left on device: AH00023: Couldn’t create the rewrite-map mutex
```
This is almost always caused by the semaphore limit of the OS, and Apache not properly cleaning up after itself. Luckily this is a simple problem to fix. Simply execute the following command via SSH or console:
```
ipcs -s | awk -v user=apache '$3==user {system("ipcrm -s "$2)}'
```
See : https://portal.cloudunboxed.net/knowledgebase/37/No-space-left-on-device-AH00023-Couldnt-create-the-rewrite-map-mutex.html

Reply
OLIVIER COMBE says:

06/10/2020 at 10:16

Enable Apache Status module :
https://www.tecmint.com/monitor-apache-web-server-load-and-page-statistics/

Reply
OLIVIER COMBE says:

18/01/2021 at 10:20

List installed modules :
```
apachectl -t -D DUMP_MODULES  
```
or
```
httpd -M
```
or
```
 apache2ctl -M
```
Reply
OLIVIER COMBE says:

26/02/2021 at 14:33

Error :
```
[error] (13)Permission denied: proxy: HTTP: attempt to connect to 192.168.1.1:7990 (bitbucket.example.com) failed
```
By default, SELinux prevents Apache from initiating outbound connections, so it is unable to proxy requests to Bitbucket Server.
```
/usr/sbin/setsebool -P httpd_can_network_connect 1
```
https://confluence.atlassian.com/bitbucketserverkb/permission-denied-in-apache-logs-when-used-as-a-reverse-proxy-790957647.html

Reply

OLIVIER COMBE says:

26/02/2021 at 14:34

Install latest HTTPD/Apache on RHEL/CentOS :

https://crosp.net/blog/administration/install-latest-apache-server-centos-7/

yum install -y epel-release

cd /etc/yum.repos.d

wget https://repo.codeit.guru/codeit.el`rpm -q --qf "%{VERSION}" $(rpm -q --whatprovides redhat-release)`.repo

yum install -y httpd

/usr/sbin/httpd -version

OLIVIER COMBE says:

31/05/2021 at 10:12

Apache/HTTPD as HTTP / HTTPS proxy

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

#Proxy: internal to internet
<VirtualHost *:80>
  ProxyRequests On
  RewriteEngine on
  SSLProxyEngine On
  ProxyVia On
  SSLVerifyCLient optional_no_ca

  <Proxy *>
    Order Deny,Allow
        Allow from all
  </Proxy>

  # Define backend allowed ports
  AllowCONNECT 443 80 8080 8111 8445 7002 9200 5601 5000
</VirtualHost>

OLIVIER COMBE says:

20/10/2021 at 15:10

RHEL/CentOS 7.x
Install old version of httpd

rpm -ivh http://repo.okay.com.mx/centos/7/x86_64/release/okay-release-1-5.el7.noarch.rpm?
yum install httpd-2.4.35* -y

OLIVIER COMBE says:

18/12/2023 at 13:57

Error: AH00959: ap_proxy_connect_backend disabling worker
Fix: /usr/sbin/setsebool -P httpd_can_network_connect 1

Reply

[How-To] HTTPD & Apache

Related Links :

13 thoughts on “[How-To] HTTPD & Apache”

Leave a Reply Cancel reply