Overview
Apache HTTP Server, commonly referred to simply as Apache, is the world's most widely used open-source web server software, powering over 30% of all active websites globally. First released in 1995, Apache has evolved into a robust, production-grade server that handles millions of websites across all scales, from personal blogs to enterprise applications serving billions of requests daily.
As a cross-platform web server, Apache runs on Unix-like systems (Linux, BSD, macOS) and Windows, providing consistent behavior across environments. The server's modular architecture allows administrators to enable only the features they need, from basic static file serving to advanced capabilities like dynamic content processing, reverse proxying, load balancing, and SSL/TLS termination.
Apache's strength lies in its maturity, extensive documentation, and massive ecosystem of modules. Over 60 official modules extend functionality for authentication, compression, caching, rewriting URLs, proxying requests, and integrating with programming languages. Third-party modules add even more capabilities, making Apache adaptable to virtually any web serving scenario.
For VPS hosting, Apache offers exceptional flexibility and reliability. The .htaccess configuration system enables per-directory customization without restarting the server, ideal for shared hosting environments. Apache's process/thread-based architecture handles concurrent connections efficiently while maintaining stability under varying loads. Virtual host support allows hosting multiple websites on a single VPS instance, maximizing resource utilization.
Key Features
Modular Architecture
Load only needed modules to optimize memory and performance. Choose from authentication, compression, proxying, caching, and 50+ other modules to build your ideal configuration.
.htaccess Configuration
Per-directory configuration files enable URL rewriting, access control, and custom settings without server restart. Perfect for shared hosting and dynamic environments.
Virtual Host Support
Host unlimited websites on a single VPS with name-based or IP-based virtual hosts. Each site has isolated configuration, logs, and document roots.
Reverse Proxy & Load Balancing
Distribute traffic across backend application servers with mod_proxy. Includes session affinity, health checks, and failover for high-availability deployments.
Multi-Language Support
Native support for PHP, Python (mod_wsgi), Perl, and CGI scripts. FastCGI and SCGI modules enable integration with any programming language.
Enterprise-Grade Security
SSL/TLS with mod_ssl, authentication modules (Basic, Digest, LDAP), ModSecurity WAF integration, and granular access controls based on IP, user agent, or custom rules.
Esetek használata
- **PHP Web Applications**: Host WordPress, Drupal, Joomla, and custom PHP apps with mod_php for optimal PHP integration and performance
- **Static Website Hosting**: Serve HTML, CSS, JavaScript, and media files with efficient caching, compression, and CDN-ready headers
- **Reverse Proxy for Node/Python Apps**: Front-end Express.js, Django, Flask apps with Apache for SSL termination and static file handling
- **Multi-Site Hosting**: Run dozens of client websites on a single VPS with virtual hosts, each with isolated configurations and logs
- **Development Environments**: Match production Apache configurations locally with identical module setups and .htaccess rules
- **Legacy Application Support**: Maintain older web apps requiring specific Apache versions or deprecated modules unavailable in modern servers
Installation Guide
Install Apache on Ubuntu VPS using the system package manager: apt install apache2. This provides a production-ready configuration with systemd service integration, automatic startup on boot, and logrotate for log management.
Enable required modules with a2enmod (ssl, rewrite, headers, proxy are commonly needed) and disable unnecessary modules with a2dismod to reduce memory footprint. Configure virtual hosts in /etc/apache2/sites-available/ and enable them with a2ensite.
Set up SSL certificates using Let's Encrypt with Certbot, which automatically configures mod_ssl and handles certificate renewal. For multiple sites, Certbot can manage separate certificates per domain with automatic HTTPS redirect configuration.
Configure MPM (Multi-Processing Module) based on workload - use mpm_event for high concurrency with low memory, mpm_worker for moderate loads, or mpm_prefork for maximum PHP compatibility. Tune MaxRequestWorkers, ServerLimit, and KeepAlive settings based on available RAM and expected traffic.
Implement security best practices including ServerTokens Prod to hide version information, disable directory listing with Options -Indexes, configure ModSecurity WAF for attack prevention, and use fail2ban to block brute-force attempts on authentication endpoints.
Configuration Tips
Apache configuration is managed through /etc/apache2/apache2.conf (global settings) and virtual host files in sites-available/. Use .htaccess files for per-directory rules when needed, but prefer vhost configuration for better performance.
Configure virtual hosts with ServerName, ServerAlias for domain mapping, DocumentRoot for content location, and custom ErrorLog/CustomLog paths per site. Enable SSL with SSLEngine on and specify certificate paths with SSLCertificateFile and SSLCertificateKeyFile directives.
Set up URL rewriting with RewriteEngine and RewriteRule directives for clean URLs, redirects, and routing. Common patterns include forcing HTTPS, www canonicalization, and front-controller routing for frameworks.
Configure caching with mod_cache and mod_expires to reduce backend load and improve response times. Set cache headers for static assets and implement browser caching policies with ExpiresActive and ExpiresByType directives.
Best practices include testing configuration changes with apachectl configtest before reload, monitoring error logs for issues, enabling mod_status for performance metrics, implementing log rotation to prevent disk fills, using IncludeOptional for modular configurations, and documenting custom rules for future maintenance.