Apache | Nginx HTTPD Web Server Administration

Apache | NginX HTTPD - Web Services - Administration

• Apache - Introduction - Features
  • Identify key systems in topology
  • Discuss Key Apache Features
  • Enumerate and discuss other important features
  • Prepare systems for usage
  • Explore Apache Basics
•  
• Apache - URL | File-System Mappings
  • Consider applicable concepts
  • Explore defaults
  • Map URLs using a variety of methods
  • Compare and contrast mapping mechanisms
  • Evaluate accordingly
•  
• Apache - Content Redirection
  • Discuss features and benefits
  • Implement various Redirects
  • Trace behavior in appropriate logs
  • Contrast Redirects and other forms of URL Handling
•  
• Apache - HTTPD Server - Bindings
  • Examine defaults on various systems
  • Discuss applicability
  • Provision various listeners
  • Contrast Bindings of various types
  • Create sockets as needed
  • Bind Apache resources to available sockets
•  
• Apache - Virtual Hosts
  • Explain applicability
  • Discuss limitations
  • Explore default configuration
  • Implement available Virtual Hosts
  • Confirm accessibility from various clients
  • Evaluate Virtual Hosts configuration
•  
• Apache - HTACCESS - Files-Based Directives Control
  • Discuss applicabilitiy
  • Explore caveats and limitations
  • Implement .htaccess for appropriate content
  • Examine directory inheritence
  • Modify .htaccess from FTP client perspective
•  
• Apache - Content Negotiation
  • Discuss sample usage scenarios
  • Examine default provisions
  • Tweak configuration to handle various content types
  • Evaluate Apache behavior based on client requests
  • Modify configuration to suit current needs
  • Evaluate results
•  
• Apache - Content Restrictions - Filtration
  • Discuss features and benefits
  • Identify predefined restrictions
  • Test restrictions accordingly
  • Implement desirable filters
  • Examine access restraints from multiple perspectives
  • Confirm configurations
•  
• Apache - Mod Rewrite - Introduction
  • Discuss features and benefits
  • Contrast simple Rewrites with Redirects
  • Identify key opportunities for application
  • Configure sample Rewrite Rules
  • Evaluate results
•  
• Apache - Mod Rewrite - Backreferences
  • Explain applicability within context
  • Generate example Regular Expressions (RegExes)
  • Modify expressions to generate backreferences
  • Reference stored matches accordingly
  • Examine behavior based on matched references
  • Alter references to suit changing conditions
  • Confirm results
  • Contrast backreferences from multiple directives
  • Implement various applicable backreferences
•  
• Apache - Mod Rewrite - Rewrite Condition
  • Discuss features and benefits
  • Explore possibilities to stack logic
  • Generate stacks of conditions
  • Implement resulting RewriteRule accordingly
  • Evaluate results of stacked logic
  • Alter Rewrite logic to handle ORs
  • Examine application
  • Mix and match logic to handle common scenarios
  • Test Rewrites accordingly
•  
• Apache - Mod Rewrite - Query String
  • Discuss caveats and limitations
  • Identify possible usage scenarios
  • Trap Query String accordingly
  • Release Query String and test Rewrite processing
  • Sanitize Query String for interesting requests
  • Test sanitized rules on various URLs
  • Apply Query String modifications to suit needs
•  
• Apache - Mod Rewrite - Logging | Debugging
  • Discuss features and benefits
  • Explore Logging range and resulting data
  • Correlate Rewrite rules to Log entries to ensure sanity
  • Confirm appropriate Rewrite rules-handling
  • Evaluate results
•  
• Apache - Mod Rewrite - Force SSL
  • Pose applicability scenario
  • Force SSL for sensitive content area
  • Confirm application of Rewrite rules
  • Force SSL for all site operations
  • Discuss tactics regarding limited scope SSL Rewrites
  • Evaluate Rewrite Rules
•  
• NginX - Basics
  • Disable | Remove Apache
  • Identify various NginX Install Options
  • Install NginX
  • Explore key files | directories
  • Test Access
  • Bind to multiple ports
•  
• NginX - LOGs
  • Identify default LOGs
  • Explore LOG formats
  • Configure additional format
  • Generate traffic and track LOG data
  • Compare with Apache
•  
• NginX - Virtual Hosts
  • Discuss available mechanisms
  • Explore Default VHost configuration
  • Implement IP-based VHosts
  • Implement Host-Header-based VHosts
  • Explore configuration options
•  
• NginX - Important Directives
  • Discuss location{} directive
  • Identify default implementation
  • Alter sites with various location{} options
  • Discuss URL Rewriting
  • Define simple rewrites and test
  • Incorporate REGEXES into Rewrites
  • Tokenize Rewrites and use components as needed
  • Implement Directory Indexes at various levels
  • Enable | Disable index files and evaluate
  • Discuss NginX Access control options
  • Implement IP-based Access control
  • Implement Basic AUTH-based Access control
  • Enable both and evaluate client access
•  
• NginX - Reverse Proxy
  • Discuss use-cases
  • Proxy ALL requests to back-end Apache node
  • Perform client requests via reverse proxy
  • Note web logs post-config
  • Reverse proxy specific virtual directory
  • Resolve reverse proxy errors with content
  • Setup SSL | TLS environment on NginX
  • Reverse Proxy HTTPS requests
  • Test whether: Redirect || Reverse Proxy
•  
• NginX - SSL | TLS Termination
  • Clear-to-TLS reverse proxy
  • TLS-only front-end termination
  • End-to-end TLS reverse proxy
  • SSL Termination - back-end Clear
  • Server Name Indication (SNI) Implementation
•  
• NginX - Load Balancing
  • Discus features
  • Ensure identical back-end content
  • Implement Round Robin Load-Balancing
  • Vary content on back-end servers and test
  • Disable back-end node and test
  • Force back-end LB node into 'down' mode
  • Confirm NginX's subsequent connections
  • Apply Weights to back-end - upstream nodes
  • Confirm proper distribution of traffic
  • Provision Backup LB server
  • Down production LB nodes and confirm Backup
  • Apply Weights to Backup LB nodes and test
  • Apply Least Connections algo to LB group
  • Confirm appropriate distribution
  • Disable back-end nodes during request - confirm response
  • Implement IP Hash algo and confirm stickyness
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism