SHARE-16928 IHS Apache for zOS-V1.2

53
IHS Apache for z/OS How to Implement and exploit Edward McCarthy [email protected] Insert Custom Session QR if Desired.

Transcript of SHARE-16928 IHS Apache for zOS-V1.2

Page 1: SHARE-16928 IHS Apache for zOS-V1.2

IHS

Ap

ach

e f

or

z/O

S

Ho

w t

o Im

ple

men

t an

d e

xp

loit

Edward McCarthy

[email protected]

Insert

Custo

mS

essio

nQ

R if

D

esired.

Page 2: SHARE-16928 IHS Apache for zOS-V1.2

Ag

en

da

•D

iscussin

g I

BM

HT

TP

Serv

er

pow

ere

d b

y A

pache o

n z

/OS

3/4

/20

15

3

Page 3: SHARE-16928 IHS Apache for zOS-V1.2

Wh

y i

s a

gu

y f

rom

Au

str

ali

a g

ivin

g t

his

se

ss

ion

?

•M

ain

ly b

ecause w

ork

ed o

n the r

edpaper

•A

nd h

ave

used IB

M H

TT

P S

erv

er

on d

istr

ibute

d a

nd z

/OS

to s

om

e e

xtent

•A

nd I w

as in the n

eig

hbourh

ood

–th

is c

on

fere

nce w

as o

n th

e w

ee

k a

fte

r th

e IB

M I

nte

rco

nn

ect co

nfe

ren

ce

3/4

/20

15

4

Page 4: SHARE-16928 IHS Apache for zOS-V1.2

54

-Ma

r- 15

IBM

Re

dp

ap

er

Info

rma

tio

n in

th

is p

res

en

tati

on

ba

se

d o

n IB

M R

ed

pap

er:

IBM

HT

TP

Se

rve

r o

n z

/OS

Mig

rati

ng

fro

m D

om

ino

-po

we

red

to

Ap

ac

he

-po

we

red

Ava

ila

ble

fro

m:

htt

p:/

/ww

w.r

ed

bo

ok

s.ib

m.c

om

/ab

str

acts

/sg

24

67

16

.htm

l

Th

e a

bo

ve

re

dp

ap

er

co

nta

ins

mo

re d

eta

il o

n t

he

in

form

ati

on

in

th

is

pre

se

nta

tio

n.

Up

da

ted

ve

rsio

n p

ub

lis

he

d D

ec

20

14

Page 5: SHARE-16928 IHS Apache for zOS-V1.2

64

-Ma

r- 15

His

tory

•IB

M H

TT

P S

erv

er

po

we

red

by

Do

min

o

–S

hip

pe

d w

ith

OS

/39

0 in

th

e e

arl

y 1

99

0’s

•S

tab

ilise

d fo

r a

lo

ng

tim

e

–A

lso

re

ferr

ed

to

as:

•D

om

ino

Go

We

bse

rve

r

•D

GW

•IH

S

•IB

M H

TT

P S

erv

er

po

we

red

by

Ap

ach

e

–S

hip

s w

ith

ea

ch

ve

rsio

n o

f th

e W

eb

Sp

he

re A

pp

lica

tio

n S

erv

er

pro

du

ct o

n a

ll su

pp

ort

ed

p

latf

orm

s

•W

hic

h IB

M d

eve

lop

ed

aro

un

d 2

00

0

Page 6: SHARE-16928 IHS Apache for zOS-V1.2

74

-Ma

r- 15

It’s

tim

e t

o m

igra

te•

IHS

po

we

red

by

Do

min

o

–F

un

ctio

na

lly s

tab

ilise

d

•N

o d

eve

lop

me

nt fo

r a

lo

ng

tim

e

–W

ill n

o lo

ng

er

be

pre

se

nt

in z

/OS

aft

er

V2

.1

–D

oe

s n

ot su

pp

ort

:•

IPv6

•6

4 b

it e

xecu

tio

n

•F

or

tho

se

clie

nts

wh

o a

re u

sin

g a

n IB

M p

rod

uct th

at u

se

s th

e D

om

ino

po

we

red

se

rve

r, y

ou

sh

ou

ld

be

aw

are

th

at IB

M is w

ork

ing

to

up

gra

de

th

ese

pro

du

cts

to

re

pla

ce th

e u

se

of IB

M H

TT

P S

erv

er

po

we

red

by

Do

min

o w

ith

IB

M H

TT

P S

erv

er

po

we

red

by

Ap

ach

e.

–L

oo

k fo

r d

ocu

me

nta

tio

n o

n e

ach

pro

du

ct a

s th

ose

ch

an

ge

s a

re m

ad

e o

r co

nta

ct th

at p

rod

uct

tea

m fo

r cu

rre

nt in

form

atio

n a

bo

ut H

TT

P S

erv

er

su

pp

ort

.

Page 7: SHARE-16928 IHS Apache for zOS-V1.2

Th

is i

s n

ot

ne

w n

ew

s ;

-)•

Fro

m t

he z

/OS

2.1

Info

cente

r–

htt

p:/

/ww

w-

01

.ib

m.c

om

/suppo

rt/k

no

wle

dgecen

ter/

SS

LTB

W_

2.1

.0/c

om

.ibm

.zo

s.v

2r1

.e0zm

100/ib

mhtt

pserv

ers

od.h

tm?cp=

SS

LT

BW

_2.1

.0%

2F

1-6

-4-1

1-0

-0&

lang=

en

3/4

/20

15

8

Page 8: SHARE-16928 IHS Apache for zOS-V1.2

z/O

S 2

.2 P

rev

iew

An

no

un

ce

me

nt

•D

eta

ils a

t:

–h

ttp

://w

ww

-01

.ib

m.c

om

/co

mm

on

/ssi/cg

i-b

in/s

sia

lias?

su

bty

pe

=ca

&in

foty

pe

=a

n&

su

pp

lier=

89

7&

lett

ern

um

=E

NU

S2

15

-00

6

–In

th

e f

ine

pri

ntE

–M

ea

ns t

ha

t p

lan

is t

ha

t IB

M H

TT

P S

erv

er

po

we

red

by

Ap

ach

e w

ill s

hip

with

z/O

S 2

.2

•N

o m

ore

IH

S P

ow

ere

d b

y D

om

ino

3/4

/20

15

9

Page 9: SHARE-16928 IHS Apache for zOS-V1.2

10

4-M

ar- 15

Wh

y I

HS

Ap

ac

he

?•

IHS

Po

we

red

by

Ap

ach

e–

Su

pp

ort

s:

•IP

v6•

64

bit e

xecu

tio

n

–T

his

is

on

ly I

BM

HT

TP

Se

rve

r p

rod

uc

t th

at

IBM

is

in

ve

sti

ng

in

–B

ase

d o

n A

pa

ch

e H

TT

P S

erv

er

2.2

.8•

Op

en

so

urc

e c

om

mu

nity

•C

co

de

•W

idely

use

d o

n m

an

y o

pe

ratin

g s

yste

ms

•W

ide u

se

r co

mm

unity

•L

ots

of p

ub

lic in

form

ation, e

xam

ple

s, b

oo

ks

•E

asie

r to

ge

t p

eo

ple

with

Ap

ach

e s

kill

s

–If y

ou

do

no

t h

ave

WA

S fo

r z/O

S th

en

IH

S V

8.5

ava

ilab

le a

t n

o c

ha

rge a

s p

art

of IB

M

Po

rte

d T

oo

ls•

htt

p:/

/ww

w-0

3.ib

m.c

om

/sys

tem

s/z

/os/z

os/f

eatu

res/u

nix

/po

rted

/ihs/index.

htm

l

Page 10: SHARE-16928 IHS Apache for zOS-V1.2

Ap

ac

he

dir

ec

tiv

es

•A

pa

ch

e 2

.2–

Appro

xim

ate

ly 4

20 d

irectives

•htt

p:/

/htt

pd.a

pache.o

rg/d

ocs/2

.2/m

od/d

irectives.h

tml

•A

pa

ch

e 2

.4–

Over

600 d

irectives

•htt

p:/

/htt

pd.a

pache.o

rg/d

ocs/2

.4/m

od/d

irectives.h

tml

•IH

S P

ow

ere

d b

y A

pa

ch

e o

n z

/OS

2.1

an

d e

arl

ier

–C

urr

ently

based o

n A

pache 2

.2

–S

upport

s a

ppro

xim

ate

ly 3

80 d

irectives

•htt

p:/

/publib

.bould

er.

ibm

.com

/htt

pserv

/manual7

0/m

od/d

irectives.h

tml

3/4

/20

15

11

Page 11: SHARE-16928 IHS Apache for zOS-V1.2

12

4-M

ar- 15

Pe

rfo

rma

nc

e

•IB

M T

echdoc

from

2006 c

om

pare

d I

HS

Dom

ino a

nd A

pache p

erf

orm

ance

–htt

p:/

/ww

w-

03.ibm

.com

/support

/techdocs/a

tsm

astr

.nsf/

WebIn

dex/

WP

1011

70

•A

t th

at

tim

e,

IHS

Apache h

ad m

odera

te p

erf

orm

ance a

dvanta

ge

–S

ince I

BM

has b

een c

ontinually

investing in I

HS

Apache s

ince t

hen (

and

none in I

HS

Dom

ino )

, perf

orm

ance m

ay

be e

ven b

ett

er

now

with late

r vers

ions

Page 12: SHARE-16928 IHS Apache for zOS-V1.2

Ob

tain

ing

an

d i

ns

tall

ing

ov

erv

iew

3/4

/20

15

13

Do y

ou h

ave

an I

BM

pro

duct

that

supplie

s I

HS

Apache ?

e.g

. W

ebS

phere

Applic

ation

Serv

er

Does p

roduct

insta

ll docum

ent

sta

te n

eed t

o u

se S

MP

/E?

Use S

MP

/E t

o t

ransfo

rm IH

S

pro

duct

code t

o I

M r

epository

Use IM

to insta

ll IH

S p

roduct

code t

o a

targ

et

directo

ry in U

SS

(

backed b

y a z

FS

)

Logon t

o S

hopz

Ord

er

IHS

Does y

our

z/O

S L

PA

R h

ave

access to t

he I

nte

rnet?

Dow

nlo

ad o

rder

to a

PC

FT

P o

rder

to z

/OS

LP

AR

Run S

MP

/E jo

b t

o d

ow

nlo

ad

pro

duct

code

Sta

ndard

SM

P/E

pro

cess to

insta

ll IH

S p

roduct

code t

o a

ta

rget

directo

ry in U

SS

( b

acked

by

a z

FS

)

IHS

pro

du

ct

co

de

in

zF

S

mo

un

ted

Re

ad

On

ly a

t a

dir

ec

tory

in

th

e U

SS

pa

rt o

f

z/O

S

No

No

No

Ye

sY

es

IM =

In

sta

lla

tio

n M

an

ag

er

Ye

s

No

te:

cu

rre

nt

de

fau

lt p

roc

es

s

ma

y u

se

a H

FS

ra

the

r th

en

zF

S

Page 13: SHARE-16928 IHS Apache for zOS-V1.2

Sp

ac

e r

eq

uir

em

en

ts

•IH

S P

roduct

Ord

er

–A

bout

200M

B

•O

n z

/OS

need s

pace t

o s

tore

:

–T

he p

roduct

code

–S

MP

PT

S to s

tore

pro

duct

code w

hen d

o R

eceiv

e

–zF

Sto

sto

re t

he p

roduct

code

–E

ach o

f th

e a

bove a

bout

200M

B

3/4

/20

15

14

Page 14: SHARE-16928 IHS Apache for zOS-V1.2

15

4-M

ar- 15

Se

ttin

g u

p y

ou

r fi

rst

IBM

Ap

ac

he

•R

egard

less if

IH

S o

bta

ined a

s p

art

of W

AS

or

from

Port

ed T

ools

, end r

esult is

pro

duct code w

ill b

e fully

conta

ined in

a z

FS

file

–M

ounte

d a

t a d

irecto

ry

•R

ecom

mend this

is m

ounte

d a

s R

ead O

nly

–N

ote

: som

e in

sta

ll pro

cesses if

follo

wed e

xplic

itly

may

allo

cate

d a

HF

S r

ath

er

then a

zF

S

•R

ecom

mend y

ou r

epla

ce the s

tep that cre

ate

s H

FS

with e

quiv

ale

nt ste

p that cre

ate

s a

zF

S

•F

or

each IH

S A

pache s

erv

er

you w

ant

to c

reate

–Y

ou w

ill e

xecute

supplie

d in

sta

ll shell

pro

gra

m

–T

his

will

cre

ate

a n

ew

directo

ry s

tructu

re w

hic

h w

ill o

nly

be u

sed b

y th

at new

insta

nce o

f th

e IH

S

Apache s

erv

er

Page 15: SHARE-16928 IHS Apache for zOS-V1.2

16

4-M

ar- 15

Se

ttin

g u

p a

n I

HS

Ap

ac

he

se

rve

r e

xa

mp

le

cd

/ih

s/u

sr/

lpp

/IH

SA

/V8

R5

/bin

./in

sta

ll_

ihs

/ih

sc

on

fig

/ih

s/ih

sa

e0

01

82

30

Th

is c

om

ma

nd

?

Us

es

su

pp

lie

d f

ile

s in

the

pro

du

ct

so

urc

e?

To

cre

ate

a u

niq

ue

run

tim

e c

on

fig

ura

tio

n

for

the

ne

w s

erv

er.

Page 16: SHARE-16928 IHS Apache for zOS-V1.2

17

4-M

ar- 15

Op

era

tio

nS

et

up

JC

L in

a

PR

OC

LIB

?

Iss

ue

co

mm

an

d t

o s

tart

it:

S IH

SA

E0

01

Wh

at

yo

u s

ee

in

SD

SF

No

te:

no

rma

l R

AC

F r

ule

s r

eq

uir

ed

, s

ee

Re

dp

ap

er

sg

24

67

16

Iss

ue

UR

L t

o a

cc

es

s h

om

e p

ag

e:

htt

p:/

/wts

c5

5.its

o.ib

m.c

om

:82

30

Page 17: SHARE-16928 IHS Apache for zOS-V1.2

18

4-M

ar- 15

Op

era

tor

Co

mm

an

ds

•S

top

se

rve

r:–

s IH

SA

E001,a

ction=

'sto

p‘

•G

race

ful s

top

of se

rve

r, w

aits f

or

cu

rre

nt p

roce

ssin

g to

co

mp

lete

:–

s IH

SA

E001,a

ction=

‘gra

cefu

l-sto

p‘

•R

esta

rt s

erv

er

with

ou

t w

aitin

g f

or

cu

rre

nt p

roce

ssin

g to

co

mp

lete

:–

s IH

SA

E001,a

ction=

'resta

rt‘

•G

race

ful r

esta

rt o

f se

rve

r w

aits f

or

cu

rre

nt p

roce

ssin

g to

co

mp

lete

:–

s IH

SA

E001,a

ction=

‘gra

cefu

l‘

•M

od

ify

co

mm

and s

up

po

rt–

Can a

dd this

lin

e to the h

ttpd.c

onf

•L

oa

dM

od

ule

zos_

cm

ds_

mo

du

lem

od

ule

s/m

od

_zo

s_

cm

ds.

so

–A

nd c

an then u

se these m

odify

com

mands:

•P

IH

SA

E0

01

•F

IH

SA

E0

01

,ap

pl=

'gra

ce

ful-sto

p'

•F

IH

SA

E0

01

,ap

pl=

'gra

ce

ful'

•F

IH

SA

E0

01

,ap

pl=

're

sta

rt'

Page 18: SHARE-16928 IHS Apache for zOS-V1.2

19

4-M

ar- 15

Co

mm

an

d l

ine

op

era

tio

n•

Ca

n issu

e c

om

ma

nd

s fro

m a

te

lne

t o

r O

MV

S s

essio

n–

Co

mm

an

ds a

ct u

po

n th

e s

erv

er

of th

e d

ire

cto

ry y

ou

are

in

•S

tart

ing

a s

erv

er:

–./

ap

ach

ectl

-k s

tart

•S

top

pin

g a

se

rve

r–

./a

pa

ch

ectl

-k s

top

–./

ap

ach

ectl

-k g

race

ful-

sto

p•

Re

sta

rtin

g a

se

rve

r–

./a

pa

ch

ectl

-k r

esta

rt–

./a

pa

ch

ectl

-k g

race

ful

Page 19: SHARE-16928 IHS Apache for zOS-V1.2

20

4-M

ar- 15

Co

nfi

gu

rati

on

•IH

S A

pa

ch

e c

on

figu

ratio

n s

tore

d in

htt

pd

.co

nf

–Locate

d in c

onfsub-d

irecto

ry

–C

onfigura

tion a

chie

ved b

y usin

g:

•d

ire

ctive

s th

at a

re n

ative

to

th

e o

rig

ina

l Ap

ach

e•

an

d d

ire

ctive

s a

vaila

ble

du

e to

ad

ditio

na

l mo

du

les a

nd

fe

atu

res a

dd

ed

by

IBM

•S

om

e k

ey

dire

ctive

s:

–T

he T

CP

IP p

ort

the s

erv

er

liste

ns o

n:

•L

iste

n 8

23

7

–V

irtu

al H

osting

•<

Vir

tua

lHo

st*:

80

>•

Se

rve

rNa

me

ww

w.ib

mitso

site

1.c

om

•D

ocu

me

ntR

oo

t/w

ww

/ib

mitso

site

1•

Dir

ecto

ryIn

de

xin

de

x.h

tml i

nd

ex.h

tm•

Err

orD

ocu

me

nt4

04

/w

ww

/ib

mitso

site

1/e

rro

r40

4_

1.h

tml

•E

rro

rDo

cu

me

nt5

00

/w

ww

/ib

mitso

site

1/e

rro

r50

0_

1.h

tml

•E

rro

rLo

glo

gs/ib

mitso

site

1_

80_

err

or.

log

•T

ran

sfe

rLo

glo

gs/ib

mitso

site

1_

80

_a

cce

ss.lo

g•

Lo

gle

vele

rro

r•

</V

irtu

alH

ost>

ED

MC

AR

@ S

C55:/

ihsconfig/ihs/ihsae65/c

onf>

pw

d

/ihsconfig/ihs/ihsae65/c

onf

ED

MC

AR

@ S

C55:/

ihsconfig/ihs/ihsae65/c

onf>

ls-lrt

| gre

phtt

pd.c

onf

-rw

-r--

r--

1 E

DM

CA

R S

YS

1

3

2683 D

ec 3

0 2

3:1

9 h

ttpd.c

onf

Page 20: SHARE-16928 IHS Apache for zOS-V1.2

Wh

en

co

nfi

gc

ha

ng

es

go

wro

ng

� ���•

You m

ake a

change to the c

onffile

•Y

ou issue s

tart

com

mand

–O

r re

sta

rt c

om

mand

•Y

our

serv

er

sta

rts a

nd term

inate

s

–O

r if a

lready

sta

rted, no c

hange h

appens

•Look in

the p

roc.e

rrors

file

in log s

ub-d

irecto

ry

3/4

/20

15

21

BROWSE /ihsconfig/ihs/ihsae65/logs/proc.errors

Line 00000000 Col 001 080

Command ===>

Scroll ===> CSR

********************************* Top of Data

*********************************

Syntax error on line 945 of

/ihsconfig/ihs/ihsae65/conf/httpd.conf:

Invalid command 'ThisIsBadDirective', perhaps

misspelled or defined by a module

EDIT /ihsconfig/ihs/ihsae65/conf/httpd.conf

Command ===>

000943 SetEnvIf

Request_URI

/bookmgr/(lookat/inde

000944

000945 ThisIsBadDirective

000946

Ad

din

g t

his

Pro

du

ces th

is

Do

sta

rt (

or

resta

rt )

?

Page 21: SHARE-16928 IHS Apache for zOS-V1.2

22

4-M

ar- 15

Ap

ac

he

Se

rve

r S

tatu

s p

ag

eh

ttp

://w

tsc5

5.its

o.ib

m.c

om

:82

65

/se

rve

r-sta

tus?

sh

ow

mo

du

lesta

te

Page 22: SHARE-16928 IHS Apache for zOS-V1.2

23

4-M

ar- 15

Mig

rati

on

Ad

vic

e•

Make a

pla

n !

–Id

entify

:

•W

hat needs to b

e d

one

•W

ho w

ill b

e in

volv

ed

•W

ho h

as r

esponsib

ility

for

the v

arious tasks

•H

ow

long it

will

take

Page 23: SHARE-16928 IHS Apache for zOS-V1.2

24

4-M

ar- 15

Mig

rati

on

–d

ete

rmin

e w

ha

t n

ee

ds

to

be

do

ne

•Id

en

tify

wh

at

you

r cu

rre

nt

IHS

Do

min

o is d

oin

g:

–Is

security

bein

g u

sed

–Is

multip

le h

ost support

bein

g u

sed

–Lis

tenin

g o

n m

ultip

le p

ort

s–

GW

AP

I m

odule

s b

ein

g u

sed

–S

MF

record

ing b

ein

g u

sed

–R

unnin

g in

scala

ble

mode

–W

hat busin

ess a

rea “

ow

ns”

the s

erv

er

–U

se o

f S

SL

•D

ete

rmin

e w

he

re I

HS

Ap

ach

e c

od

e w

ill b

e o

bta

ine

d f

rom

•F

ind

re

leva

nt

do

cu

me

nta

tio

n•

Pla

n in

sta

llatio

n a

nd

co

nfig

ura

tio

n o

f n

ew

se

rve

rs•

Pla

n h

ow

sw

itch

ove

r fr

om

old

to

ne

w s

erv

ers

will

be

do

ne

Page 24: SHARE-16928 IHS Apache for zOS-V1.2

25

4-M

ar- 15

Se

cu

rity

•IH

S A

pa

ch

e h

as c

om

pre

hensiv

e s

ecu

rity

su

pp

ort

–In

de

pend

ent se

cu

rity

en

viro

nm

ent ca

n b

e s

et

for

ea

ch

th

rea

d r

un

nin

g

un

de

r H

TT

P S

erv

er

•C

an

ru

n r

equ

est in

th

e IH

S S

erv

er

un

de

r th

e a

uth

ority

th

e u

se

r a

uth

enticate

d w

ith

–F

ull

su

pp

ort

fo

r S

SL

•In

clu

din

g c

lien

t ce

rtific

ate

au

the

ntication

–L

DA

P S

up

port

–C

an

be

ru

n a

s a

pro

xy

Ex

am

ple

us

e o

f s

ec

uri

ty r

ela

ted

dir

ec

tive

s

Page 25: SHARE-16928 IHS Apache for zOS-V1.2

26

4-M

ar- 15

Ne

w f

ea

ture

s i

n I

HS

Ap

ac

he

V8

.5.5

fo

r z/O

S•

Sca

lab

ility

Im

pro

vem

en

ts

–U

se

of E

ven

t M

PM

•In

teg

ratio

n w

ith

WL

M

•L

og

gin

g to

SM

F

•S

up

po

rt fo

r o

pe

rato

r co

mm

an

ds

•F

IPS

14

0-2

su

pp

ort

•M

VS

Da

tase

t su

pp

ort

•H

TT

P R

esp

on

se

tra

nsla

tio

n im

pro

vem

en

ts

•3

1-b

it r

un

tim

e s

up

po

rt

•S

up

po

rt fo

r zE

nte

rpri

se

Da

ta C

om

pre

ssio

n

Page 26: SHARE-16928 IHS Apache for zOS-V1.2

27

4-M

ar- 15

IHS

Do

min

o –

Sc

ala

ble

Mo

de

•P

rovid

ed

wa

y to

allo

w I

HS

Do

min

o t

o h

ave

mu

ltip

le s

tart

ed

ta

sks h

an

dle

la

rge

an

d

va

ria

ble

am

ou

nts

of

activity

–H

ea

vily

in

teg

rate

d w

ith

WL

M

Page 27: SHARE-16928 IHS Apache for zOS-V1.2

28

4-M

ar- 15

IHS

Ap

ac

he

an

d W

LM

–n

ew

in

V8

.5.5

•D

irective

to e

nable

support

:

–#LoadM

odule

rew

rite

_m

odule

module

s/m

od_re

write

.so

–#LoadM

odule

deflate

_m

odule

module

s/m

od_deflate

.so

–# W

LM

–LoadM

odule

wlm

_m

odule

module

s/m

od_w

lm.s

o

Ex

am

ple

of

ho

w t

o

cla

ss

ify r

eq

ue

sts

Co

rre

sp

on

din

g a

cti

vit

y

in R

MF

MO

N III

Page 28: SHARE-16928 IHS Apache for zOS-V1.2

29

4-M

ar- 15

IHS

Ap

ac

he

-s

ca

lab

ilit

y•

Sim

ple

r to

se

t u

p th

en

IH

S D

om

ino

–C

on

tro

lled b

y d

ire

ctive

s–

No

re

qu

ire

me

nt fo

r W

LM

–K

ey

dire

ctive

s:

•MaxClients

specifie

s the m

axi

mum

num

ber

of sim

ultaneous c

lient

connections a

llow

ed t

o the s

erv

er.

•ThreadsPerChild

specifie

s h

ow

many

thre

ads e

xist in

each c

hild

pro

cess (

serv

er)

.

Page 29: SHARE-16928 IHS Apache for zOS-V1.2

Siz

ing

yo

ur

se

rve

r•

MaxC

lients

–F

irst d

ecid

e o

n th

e m

axi

mu

m n

um

be

r o

f clie

nts

th

at yo

u e

xpe

ct to

co

nn

ect a

t a

ny

po

int in

tim

e

–U

se

mo

d_

mp

msta

tso

r m

od

_sta

tus

–E

xam

ple

: a

ssu

me

th

e m

axi

mu

m n

ee

d to

su

pp

ort

is 6

00

. C

od

e d

ire

ctive

as:

•M

axC

lien

ts6

00

•T

hre

adsP

erC

hild

–N

ext

, d

ete

rmin

e th

e m

axi

mu

m n

um

be

r o

f th

rea

ds th

at e

ach

se

rve

r p

roce

ss c

an

ha

nd

le.

–T

his

ma

y va

ry d

ep

en

din

g o

n y

ou

r sys

tem

ca

pa

city

–L

et u

s a

ssu

me

th

at a

ma

xim

um

va

lue

of 1

00

is r

ea

so

na

ble

. C

od

e d

ire

ctive

as:

•T

hre

ad

sP

erC

hild

10

0

•M

axS

pare

Thre

ads

–S

pecifie

s the m

axi

mum

num

ber

of

spare

thre

ads

–T

hese a

re t

hre

ads w

aitin

g t

o h

andle

new

requests

–If

set

to low

, and g

et

a lot

of

new

requests

, th

en g

et

dela

y w

hile

new

thre

ads c

reate

d

–S

et

to s

om

e m

ultip

le o

f T

hre

adsP

erC

hild

valu

e,

e.g

.:

•M

axS

pare

Thre

ads

300

•M

inS

pare

Thre

ads

–A

valu

e e

qual to

10%

of MaxClients

is r

ecom

mended

–In

this

exa

mple

, w

e w

ould

chose a

valu

e o

f 60 a

nd w

ould

code t

he d

irective

as f

ollo

ws:

•M

inS

pare

Thre

ads

60

•T

unin

g a

dvi

ce a

t:–

htt

p:/

/publib

.bould

er.

ibm

.com

/htt

pserv

/ihsdia

g/ihs_perf

orm

ance.h

tml

3/4

/20

15

30

No

te: M

axC

lien

tsd

ivid

ed

by

Th

rea

dsP

erC

hild

= M

ax

nu

mb

er

of ch

ild p

roce

sse

s

tha

t ca

n b

e s

tart

ed

Page 30: SHARE-16928 IHS Apache for zOS-V1.2

Dyn

am

ica

lly c

ha

ng

e c

on

fig

to h

an

dle

in

cre

as

ed

de

ma

nd

3/4

/20

15

31

Up

da

te v

alu

es

in

htt

pd

.co

nf

fro

m

to

Cu

rre

nt

se

ttin

gs

?

? b

ut

po

or

res

po

ns

e t

ime

Up

da

ted

se

ttin

gs

?

? g

oo

d r

es

po

ns

e t

ime

☺ ☺☺☺

Iss

ue

mo

dif

y c

om

ma

nd

to

dyn

am

ica

lly r

efr

es

h s

ett

ing

s

Page 31: SHARE-16928 IHS Apache for zOS-V1.2

32

4-M

ar- 15

SM

F•

IHS

Dom

ino

–w

rite

s S

MF

re

co

rds o

f ty

pe

10

3, tw

o a

vaila

ble

su

bty

pe

s:

•S

ub

typ

e 1

co

nta

ins c

on

figu

ratio

n in

form

ation

•S

ub

typ

e 2

co

nta

ins p

erf

orm

ance in

form

ation

•IH

S A

pache

–N

ew

in

V8

.5.5

, ca

n n

ow

write

SM

F r

eco

rds o

f ty

pe

10

3, tw

o n

ew

a

vaila

ble

su

bty

pe

s:

•S

ub

typ

e 1

3 c

on

tain

ing th

rea

d s

tatistics

•S

ub

typ

e 1

4 c

on

tain

ing in

form

ation o

n e

ach

re

qu

est

Su

bty

pe

14

co

nte

nt:

Page 32: SHARE-16928 IHS Apache for zOS-V1.2

Su

pp

ort

fo

r zE

nte

rpri

se

Data

Co

mp

ressio

n (

zE

DC

)

•zE

DC

–H

ard

wa

re a

nd

so

ftw

are

ch

arg

ea

ble

fe

atu

re t

ha

t p

rovid

es v

ery

effic

ien

t co

mp

ressio

n

ca

pa

bili

ty

•A

pa

ch

e

–S

up

plie

s a

de

fau

lt m

od

ule

th

at

do

es s

oft

wa

re c

om

pre

ssio

n

•A

PA

R P

I24

42

4

–S

up

plie

s m

od_

de

fla

te_

z.s

o

•E

xa

mp

le u

sa

ge

–S

end la

rge text

file

s to e

nd u

sers

in c

om

pre

ssed fo

rmat

•S

ma

ll sca

le te

stin

g d

on

e f

or

Re

db

oo

k u

pd

ate

sh

ow

ed

CP

U s

avin

gs o

f 8

5%

3/4

/20

15

33

Page 33: SHARE-16928 IHS Apache for zOS-V1.2

Pre

vie

w z

/OS

He

alt

h C

he

ck

•IB

M h

as d

eve

lop

ed

pro

toty

pe

Re

xx

pro

gra

m

–U

pdate

your

HZ

SP

AR

M t

o e

nable

exe

cution o

f th

is R

exx

•R

exx

ch

ecks if

an

y ru

nn

ing

ST

C’s

a

re I

HS

Se

rve

rs p

ow

ere

d b

y D

om

ino

–W

rite

s m

essage to s

yslo

g

3/4

/20

15

34

Page 34: SHARE-16928 IHS Apache for zOS-V1.2

35

4-M

ar- 15

Mo

du

les

•U

se m

odule

s t

o a

dd r

equired f

unctionalit

y to

the I

HS

Serv

er

•In

IH

S D

om

ino

–C

ould

use G

o W

ebserv

er

Applic

ation P

rogra

mm

ing I

nte

rfa

ce (

GW

AP

I)•

C C

ode o

r R

exx

•In

IH

S A

pache

–C

code

–M

any

open s

ourc

e m

odule

s t

hat

can b

e u

sed w

ith I

HS

Apache

on z

/OS

–O

pen s

ourc

e c

om

munity

where

you c

an g

et

help

and a

dvi

ce

•R

edpaper

sg246716

–E

xam

ple

s:

•how

a s

imple

Hello

World

module

is c

oded a

nd d

eplo

yed

•R

unnin

g t

he s

upplie

d s

am

ple

Apache m

odule

•U

sin

g a

n o

pen s

ourc

e m

odule

with I

HS

Apache o

n z

/OS

•IB

M T

echdocs:

–E

xtendin

g t

he I

BM

HT

TP

Serv

er

for

z/O

S P

ow

ere

d b

y A

pache w

ith c

usto

m m

odule

s•

http://w

ww

-03.ib

m.c

om

/sup

po

rt/t

ech

docs/a

tsm

astr

.nsf/

WebIn

dex/

WP

101225

–C

lassify

UR

L r

equests

in A

pache I

HS

usin

g W

LM

on z

/OS

•http://w

ww

-03.ib

m.c

om

/sup

po

rt/t

ech

docs/a

tsm

astr

.nsf/

WebIn

dex/

WP

101858

Page 35: SHARE-16928 IHS Apache for zOS-V1.2

36

4-M

ar- 15

CG

I•

Com

mon G

ate

way

Inte

rface (

CG

I) p

rovi

des a

sta

ndard

meth

od to a

llow

HT

TP

Serv

ers

to in

voke a

pro

gra

m w

hic

h w

ill p

rocess the r

eceiv

ed r

equest and

genera

te a

reply

•In

IH

S A

pache C

GI pro

gra

ms c

an b

e w

ritt

en in

:–

C, perl, php, and R

exx

.•

In IH

S D

om

ino

, R

exx

used to w

rite

CG

I (

and G

WA

PI )

pro

gra

ms

–U

sed s

upplie

d r

outines s

uch a

s c

giu

tils

, cgip

ars

e•

Redpaper

sg246716 p

rovi

des s

om

e s

imple

exa

mple

s a

nd a

dvi

ce o

n h

ow

to m

igra

te c

ode

Page 36: SHARE-16928 IHS Apache for zOS-V1.2

37

4-M

ar- 15

CG

I –

ad

dit

ion

al

mo

du

les

AP

AR

PI0

76

65

–h

ttp

://w

ww

-01

.ib

m.c

om

/su

pp

ort

/do

cvi

ew

.wss?

uid

=sw

g1

PI0

76

65

–P

rovi

de

s c

giu

tils

an

d c

gip

ars

em

od

ule

s

•C

om

pa

tib

le to

DG

W v

ers

ion

s

–S

ho

uld

me

an

no

ne

ed

to

up

da

ted

exi

stin

g C

GI p

rog

ram

s th

at u

se

th

ese

mo

du

les to

wo

rk

in IB

M H

TT

P S

erv

er

po

we

red

by

Ap

ach

e

–B

eca

me

ava

ilab

le in

V8

.5.5

.2

•A

bo

ut M

ar

20

14

Page 37: SHARE-16928 IHS Apache for zOS-V1.2

Ne

w f

ea

ture

s i

n I

HS

pla

nn

ed

fo

r z/O

S 2

.2

•z/O

S 2

.2 p

lanned t

o b

e a

vaila

ble

in S

ept

2015

•pla

nned t

o b

e c

alle

d:

–IB

M H

TT

P S

erv

er

V9

•N

ote

: nam

e m

ay

change ☺

–B

ased o

n A

pache H

TT

P S

ever

2.4

•N

ew

featu

res t

hat

are

pla

nned a

reE

3/4

/20

15

38

Page 38: SHARE-16928 IHS Apache for zOS-V1.2

Co

mp

lex

Au

tho

riza

tio

n L

og

ic

•C

an

co

mb

ine

au

tho

riza

tio

n d

ire

ctive

s to

exp

ress c

om

ple

x lo

gic

–h

ttp

://h

ttp

d.a

pa

ch

e.o

rg/d

ocs/2

.4/m

od

/mo

d_

au

thz_

co

re.h

tml#

log

ic

•E

xa

mp

le:

3/4

/20

15

39

Page 39: SHARE-16928 IHS Apache for zOS-V1.2

Su

pp

ort

fo

r L

UA

•Y

ou

ma

y b

e a

skin

g w

ha

t is

LU

A ?

•R

ea

d a

ll a

bo

ut

it a

t:–

htt

p:/

/ww

w.lu

a.o

rg–

htt

p:/

/ww

w.m

od

lua

.org

•L

UA

is a

po

we

rfu

l, f

ast, lig

htw

eig

ht, e

mb

ed

da

ble

scri

ptin

g la

ng

ua

ge

–A

bit C

lik

e–

Use

d in

ma

ny

diff

ere

nt w

ays

:•

Po

pu

lar

for

ga

me

s c

od

ing

–W

orld o

f W

arc

raft, A

ngry

Birds, W

ireshark

•B

ette

r w

ay

to d

o C

GI

–C

GI p

rog

ram

s s

pa

wn

ed

off b

y A

pa

ch

e to

ru

n o

n o

wn

th

rea

d–

Ca

n u

se

LU

A t

o in

effe

ct ru

n C

GI ty

pe

pro

ce

ssin

g o

n th

rea

d A

pa

ch

e is u

sin

g to

pro

ce

ss

the

re

qu

est

•M

ore

effic

ien

t

3/4

/20

15

40

Page 40: SHARE-16928 IHS Apache for zOS-V1.2

Co

nd

itio

na

l c

on

tro

l

•N

ew

directives t

o p

rovid

e w

ay

to s

upport

conditio

nal contr

ol

–If

, els

eif,

els

e,

exp

ressio

ns

•E

xam

ple

s a

t:

–htt

p:/

/htt

pd.a

pache.o

rg/d

ocs/2

.4/e

xpr.

htm

l#exa

mple

s

•B

ett

er

appro

ach t

hen R

ew

rite

directive

3/4

/20

15

41

Page 41: SHARE-16928 IHS Apache for zOS-V1.2

Ba

sic

SN

I s

up

po

rt•

Wh

at

is S

NI

?–

Se

rve

r N

am

es In

dic

atio

n–

An

ext

en

sio

n to

th

e T

ran

sp

ort

La

yer

Se

cu

rity

( T

LS

) a

nd

it’s

pre

de

ce

sso

r S

SL

•W

ha

t p

rob

lem

is it so

lvin

g?

–W

he

n d

o S

SL t

o a

site

•T

he

se

rve

r ca

n o

nly

pro

vid

e o

ne

SS

L s

erv

er

sid

e c

ert

ific

ate

–P

rob

lem

is th

at if try

ing

to

ho

st m

ultip

le s

ite

s w

ith

diff

ere

nt D

SN

na

me

s o

n th

e o

ne

TC

PIP

a

dd

ress

•T

he

en

d u

se

r g

ets

th

e s

am

e c

ert

ific

ate

fo

r a

ll o

f th

em

•W

ith

SN

I–

Du

rin

g in

itia

l S

SL h

an

dsh

akin

g th

e c

lien

t se

nd

s th

e D

NS

na

me

–A

llow

s s

erv

er

to s

en

d a

ce

rtific

ate

th

at m

atc

he

s th

at D

NS

na

me

–M

ore

fle

xib

le a

pp

roa

ch

•E

asie

r to

ad

d n

ew

DN

S n

am

es

3/4

/20

15

42

Page 42: SHARE-16928 IHS Apache for zOS-V1.2

Su

pp

ort

fo

r M

ac

ros

•M

od_m

acro

–S

upport

ed t

hird p

art

y m

odule

–A

llow

s y

ou t

o s

et

up m

acro

s in y

our

htt

pd.c

onf

file

–To s

implif

y conf

file

3/4

/20

15

43

Page 43: SHARE-16928 IHS Apache for zOS-V1.2

Ne

w T

rac

e c

ap

ab

ilit

y

•IH

S S

erv

er

po

we

red

by

Do

min

o

–A

ble

to is

sue c

om

mand that enable

d tra

cin

g

•W

hic

h s

how

ed h

ow

a r

equest w

as p

rocessed

•V

ery

handy

•T

ill n

ow

, IH

S P

ow

ere

d b

y A

pa

ch

e o

n z

/OS

ha

d n

o e

qu

iva

len

t

•V

ers

ion

to

be

sh

ipp

ed

with

pla

nn

ed

z/O

S 2

.2 w

ill h

ave

ne

w t

race

ca

pa

bili

ty

–P

rovi

ded b

y A

pache 2

.4

–htt

p://h

ttpd.a

pache.o

rg/d

ocs/c

urr

ent/m

od/c

ore

.htm

l#lo

gle

vel

•D

eta

iled

dis

cu

ssio

n in

:

–htt

p://p

eople

.apache.o

rg/~

traw

ick/A

C2014-D

ebug.p

df

3/4

/20

15

44

Page 44: SHARE-16928 IHS Apache for zOS-V1.2

Tra

ce

le

ve

l s

ett

ing

s

•T

race

le

ve

l co

ntr

olle

d b

y va

lue

on

Lo

gL

eve

ld

ire

ctive

–tr

ace

* va

lue

s a

re th

e n

ew

on

es

3/4

/20

15

45

Page 45: SHARE-16928 IHS Apache for zOS-V1.2

Tra

cin

g e

xa

mp

les

•N

ote

: need to s

top/s

tart

serv

er

to p

ick u

p c

hanges to L

ogLeve

ldirective

3/4

/20

15

46

Log

Leve

lw

arn

# M

axi

mum

tra

ce for

this

UR

I<

Location /m

isbehavi

ng

Applic

ation/>

Log

Leve

ltra

ce8

</L

ocation>

# M

axi

mum

tra

ce fro

m a

specific

clie

nt

<if "

%{R

EM

OT

E_A

DD

R}

==

'10.1

.2.3

'>Log

Leve

ltra

ce8

</if>

# W

e're d

ebug

gin

g m

od_re

write

here

, but w

e d

on't

nee

d a

ll m

odule

s

tracin

g:

<LocationM

atc

h^/

app2/c

ontr

olle

r.do$>

Log

Leve

lrew

rite

:tra

ce8

</L

ocation>

Page 46: SHARE-16928 IHS Apache for zOS-V1.2

Lo

g h

an

dli

ng

im

pro

ve

me

nts

•A

pache s

upplie

s p

rogra

m c

alle

d:

rota

telo

gs

–U

se

d t

o p

rovid

e w

ay

to h

an

dle

lo

gs file

s c

rea

ted

by

Ap

ach

e

•In

Apache 2

.4,

new

options

–D

escri

be

d h

ere

:

•h

ttp

://h

ttp

d.a

pa

ch

e.o

rg/d

ocs/c

urr

en

t/p

rog

ram

s/r

ota

telo

gs.h

tml

–C

an

sp

aw

n p

rog

ram

with

na

me

of

old

lo

g w

he

n n

ew

on

e c

rea

ted

•W

hic

h c

ou

ld c

om

pre

ss it

–U

se

a c

ircu

lar

list o

f o

utp

ut

file

s

–C

au

se

ne

w lo

g f

ile to

be

cre

ate

d a

s s

oo

n a

s r

ota

tio

n h

ap

pe

ns

3/4

/20

15

47

Page 47: SHARE-16928 IHS Apache for zOS-V1.2

48

4-M

ar- 15

WA

S P

lug

in

•If

yo

u a

re u

sin

g IH

S D

om

ino

an

d th

e W

AS

Plu

gin

–T

hen y

ou c

an u

se IH

S A

pache a

nd W

AS

Plu

gin

•In

IH

S D

om

ino

Have to a

dd n

um

ero

us S

erv

ice d

irective f

or

requests

to b

e p

rocessed b

y plu

gin

–M

eant

could

have m

any

Serv

ice d

irectives

•In

IH

S A

pa

ch

e–

WA

S p

lugin

calle

d first fo

r all

requests

–A

ny

requests

it does n

ot pro

cessed t

hen p

assed b

ack to IH

S A

pache to b

e p

rocessed

WA

S P

lug

in c

on

fig

ura

tio

n in

IHS

Do

min

o

WA

S P

lug

in c

on

fig

ura

tio

n in

IHS

Ap

ac

he

Page 48: SHARE-16928 IHS Apache for zOS-V1.2

Did

yo

u k

no

w?

•z/O

S

–O

nly

op

era

tin

g s

yste

m t

ha

t cu

sto

me

rs c

an

use

IB

M H

TT

P S

erv

er

for

wh

ate

ve

r th

ey

wa

nt

to

–W

ith

fu

ll IB

M s

up

po

rt

•O

n o

the

r o

pe

rati

ng

sys

tem

s

–A

va

ilab

le in

tw

o f

orm

s:

•L

ice

nse

d a

nd

su

pp

ort

ed

wh

en

bu

nd

led

with

an

IB

M p

rod

uct

an

d u

se

d d

ire

ctly

with

it

–Typ

ically

WebS

phere

Applic

ation S

erv

er

–W

ith W

AS

, support

ed u

sage li

mited to a

pro

xy t

o W

AS

serv

ers

via

the W

AS

plu

gin

•U

nw

arr

an

ted

/un

su

pp

ort

ed

“tr

ial”

( f

ree

to

ol/d

ow

nlo

ad

)

3/4

/20

15

49

Page 49: SHARE-16928 IHS Apache for zOS-V1.2

50

4-M

ar- 15

Re

fere

nc

es

•D

ocu

me

nta

tio

n fo

r th

e IH

S p

ow

ere

d b

y D

om

ino

sh

ipp

ed w

ith

z/O

S V

1R

13

ca

n b

e fo

un

d h

ere

:

–h

ttp

://p

ub

lib.b

ou

lde

r.ib

m.c

om

/info

ce

nte

r/zo

s/v

1r1

3/in

dex.

jsp

?to

pic

=%

2F

co

m.ibm

.zos.r

13.d

gw

%2

Fdg

w.h

tm

•D

ocu

me

nta

tio

n fo

r th

e IH

S p

ow

ere

d b

y A

pa

ch

e d

ocu

me

nta

tio

n a

t th

e V

8.5

le

vel ca

n b

e fo

un

d h

ere

:

–h

ttp

://p

ic.d

he

.ib

m.c

om

/in

focen

ter/

wa

sin

fo/v

8r5

/ind

ex.

jsp

?to

pic

=%

2F

com

.ib

m.w

eb

sp

he

re.ihs.d

oc%

2F

ih

s%

2F

we

lcom

e_ih

s.h

tml

•A

dd

itio

na

l do

cu

me

nta

tio

n o

n m

igra

tio

n c

an

be

fo

un

d h

ere

:

–h

ttp

://p

ic.d

he

.ib

m.c

om

/in

focen

ter/

wa

sin

fo/v

8r5

/ind

ex.

jsp

?to

pic

=%

2F

com

.ib

m.w

eb

sp

he

re.ihs.d

oc%

2F

ih

s%

2F

we

lc6to

p_m

ig_ih

szo

s53

_ih

s_con

tain

er.h

tml

Page 50: SHARE-16928 IHS Apache for zOS-V1.2

51

4-M

ar- 15

Oth

er

ite

ms

th

at

ma

y b

e o

f in

tere

st

•U

sin

g IB

M H

TT

P S

erv

er

an

d R

ex

x t

o v

iew

z/O

S S

TC

ou

tpu

t via

SD

SF

–h

ttp

://w

ww

-03

.ib

m.c

om

/su

pp

ort

/te

ch

do

cs/a

tsm

astr

.nsf/W

ebIn

dex/

TD

10

60

87

•W

eb

Sp

he

re A

pp

lic

ati

on

Se

rve

r o

n z

/OS

Co

mm

an

d G

UI

–h

ttp

://w

ww

-03

.ib

m.c

om

/su

pp

ort

/te

ch

do

cs/a

tsm

astr

.nsf/W

ebIn

dex/

WP

10

23

56

•Te

ch

do

cs L

ibra

ry>

Wh

ite

pa

pe

rs>

•R

ex

x a

nd

th

e W

eb

Sp

he

re O

pti

miz

ed

Lo

ca

l A

da

pte

r A

PIs

–h

ttp

://w

ww

-03

.ib

m.c

om

/su

pp

ort

/te

ch

do

cs/a

tsm

astr

.nsf/W

ebIn

dex/

WP

10

23

48

Page 51: SHARE-16928 IHS Apache for zOS-V1.2

Qu

es

tio

ns

??

?

3/4

/20

15

52

Page 52: SHARE-16928 IHS Apache for zOS-V1.2

Ad

vic

e f

or

tho

se

fa

ce

d w

ith

mig

rati

on

•R

em

em

ber:

–D

on

’t p

an

ic ;-)

•A

pache H

TT

P S

erv

er

has lots

of

advic

e,

poin

ters

, exa

mple

s o

n t

he inte

rnet

–U

se

th

at

to a

ssis

t w

ith

mig

ratio

n

•Y

our

org

anis

ation m

ay

have p

eople

already

exp

erienced w

ith I

BM

HT

TP

Serv

er

pow

ere

d b

y A

pache o

n d

istr

ibute

d

–F

ind

th

em

,

–B

uy

the

m a

co

ffe

e,

do

nu

t e

tc

–G

et

the

ir h

elp

!

3/4

/20

15

53

Page 53: SHARE-16928 IHS Apache for zOS-V1.2

Ta

ke

ho

me

me

ss

ag

e

•IH

S P

ow

ere

d b

y D

om

ino is leavin

g t

he b

uild

ing

–z/O

S 2

.1 is la

st re

lea

se

th

at

will

ha

ve

it

•IH

S P

ow

ere

d b

y A

pache

–A

va

ilab

le fo

r fr

ee

do

wn

loa

d f

rom

Sh

op

z

•P

lanned z

/OS

2.2

rele

ase

–W

ill in

clu

de

IH

S P

ow

ere

d b

y A

pa

ch

e

•IH

S P

ow

ere

d b

y A

pache

–V

ery

po

we

rfu

l a

nd

fle

xib

le H

TT

P S

erv

er

for

z/O

S

3/4

/20

15

54