store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Wed Apr 16, 2014 8:48 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 25 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Fri Mar 11, 2011 12:05 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7774
Location: earth
httpd 2.2.17 has been in the atomic-testing repo for over 6 months now, and except for a few module issues I havent heard any show stoppers. I would like to propose standardizing atomic on the 2.2.17 branch of apache, so now is the time for public comment. (And for php 5.3, that will probably go up today)

Please voice your opinions & observations on this change, I'd like to have a decision by the end of the month.


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Fri Mar 11, 2011 4:04 pm 
Offline
Forum User
Forum User

Joined: Sat Dec 09, 2006 7:05 am
Posts: 20
Is there an upgrade guide on the wiki like with PHP and MySQL? Or is "yum upgrade httpd" all you need to know? :)

Has anyone some experiences about the performance of 2.2.17 compared to the default 2.2.3?
Or any other changes worth knowing about?

For reference: http://www.apache.org/dist/httpd/CHANGES_2.2


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Fri Mar 11, 2011 4:22 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7774
Location: earth
We'll do the same thing for apache. There will be a wiki page just like the PHP and Mysql ones with any extra steps (there are some deprecated modules for example) you'll have to do.


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Sat Mar 12, 2011 4:12 am 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Sat Aug 20, 2005 9:30 am
Posts: 2812
Location: The Netherlands
What are the features for which we would want to have 2.2.17? I like to use vendor supplied packages as much as possible, since I feel they are more thoroughly tested and I like that they aren't moving so fast. For PHP I see the use of upgrading (clients asking for more recent versions because they want to use features only available in later versions), but I'd even rather stick with the vendor supplied MySQL packages for instance. I haven't felt the need to try Apache 2.2.17 from atomic-testing yet.

If upgrading Apache is optional, I'm not against putting it into atomic, but I probably will stick with the vendor packages. If other packages are going to depend on the newer Apache, well, I'll just have to play along.

_________________
Lemonbit Internet Dedicated Server Management


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Sat Mar 12, 2011 3:16 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3545
Location: Chantilly, VA
One thing we've seen with the Apache 2.2.17 is that the segfaults caused by a bug in APR go away. So theres that.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Sat Mar 12, 2011 4:00 pm 
Offline
Forum User
Forum User

Joined: Sat Dec 09, 2006 7:05 am
Posts: 20
scott wrote:
We'll do the same thing for apache. There will be a wiki page just like the PHP and Mysql ones with any extra steps (there are some deprecated modules for example) you'll have to do.


The deprecated modules should normally give a clear error when restarting Apache :)
Are there any other important things? Anything about Plesk? According to http://kb.parallels.com/762, it should recognise the upgrade automatically.

breun wrote:
What are the features for which we would want to have 2.2.17? I like to use vendor supplied packages as much as possible, since I feel they are more thoroughly tested and I like that they aren't moving so fast. For PHP I see the use of upgrading (clients asking for more recent versions because they want to use features only available in later versions), but I'd even rather stick with the vendor supplied MySQL packages for instance. I haven't felt the need to try Apache 2.2.17 from atomic-testing yet.

If upgrading Apache is optional, I'm not against putting it into atomic, but I probably will stick with the vendor packages. If other packages are going to depend on the newer Apache, well, I'll just have to play along.


MySQL 5.1 and 5.5 are adding a lot of features too. Though small users won't use them yet. And there are also a lot of performance improvements, as there's the competition of Drizzle, MariaDB and Percona.

Apache is getting competition from Litespeed, lighttpd and nginx which are faster, more lightweight solutions. And the first beta of Apache 2.3 was released a couple of days ago.


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Sat Mar 12, 2011 4:48 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7774
Location: earth
The only major plesk collision I can think of would be on CentOS/RHEL 4. But we cant do apache 2.2 for that environment anyway (Plesks configs dont work with 2.2) so its a non issue.


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Sat Mar 12, 2011 10:13 pm 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Sat Aug 20, 2005 9:30 am
Posts: 2812
Location: The Netherlands
mikeshinn wrote:
One thing we've seen with the Apache 2.2.17 is that the segfaults caused by a bug in APR go away. So theres that.


Sounds to me like something that should be reported to and fixed by the OS vendor. I haven't experienced that problem myself by the way, so it wouldn't be a reason for me to upgrade.

_________________
Lemonbit Internet Dedicated Server Management


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Sun Mar 13, 2011 1:18 pm 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Thu Dec 09, 2004 11:19 am
Posts: 2005
breun wrote:
mikeshinn wrote:
One thing we've seen with the Apache 2.2.17 is that the segfaults caused by a bug in APR go away. So theres that.


Sounds to me like something that should be reported to and fixed by the OS vendor. I haven't experienced that problem myself by the way, so it wouldn't be a reason for me to upgrade.


Is this the bug that's been hitting me? Has it been identified at long last as being caused by APR then? Or it is just one known bug and my problem could still be being caused by almost anything?

_________________
--------------------------------
<advert>
If you want to rent a UK-based VPS that comes with friendly advice and support from a fellow ART fan, please get in touch.
</advert>


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Mon Mar 14, 2011 2:49 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3545
Location: Chantilly, VA
I'd assume it is APR, so far every backtrace I've seen the cause was APR, and you can always rollback to an older Apache if that doesnt solve the problem for you. I suggest you give it a shot, you should be fine with the newer Apache.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Tue Mar 15, 2011 9:31 am 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Thu Dec 09, 2004 11:19 am
Posts: 2005
Unfortunately all our affected systems are RH4.

The move to RH5 (or even 6) will be painful as we'll have to Migrate 300+ plesk accounts from 8.6 to 10. It won't be fun so although it is on the cards it isn't scheduled for anytime soon.

Faris.

_________________
--------------------------------
<advert>
If you want to rent a UK-based VPS that comes with friendly advice and support from a fellow ART fan, please get in touch.
</advert>


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Tue Mar 15, 2011 10:01 am 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 10, 2006 12:55 pm
Posts: 669
I tinkered some with the ITK module that was built in. Never got it working satisfactory for production so we dropped it. Saw no performance gains or anything under 2.2.17 (and I thought that it was dead since Scott said mod_sed was replacing ITK).

I am neutral in making it the default.

_________________
"Its not a mac. I run linux... I'm actually cool." - scott


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Tue Mar 15, 2011 12:07 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3545
Location: Chantilly, VA
Quote:
Unfortunately all our affected systems are RH4.


Yeah, in that case given the age of the code in RH4 APR is almost certainly the cause of your segfaults. A lot of bugs have been fixed in Apache since 2.0, and we know of segfault issues in APR.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Tue Mar 15, 2011 12:51 pm 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Sat Aug 20, 2005 9:30 am
Posts: 2812
Location: The Netherlands
EL4 is still supported, so if these are reproducable issues then reporting them would make sense, right? Or has this already happened?

_________________
Lemonbit Internet Dedicated Server Management


Top
 Profile  
 
 Post subject: Re: Apache 2.2.17 - Call for atomic adoption
Unread postPosted: Tue Mar 15, 2011 12:57 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7774
Location: earth
mod_ruid2 would be the module equivalent of ITK.

breun- its not a bug so much as a design limitation of 2.0. The only way to get past it is to use the 2.2 architecture.

Anyway, this thread is about apache 2.2.17 and adopting it in the repo. So lets keep the discussion on this topic.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 25 posts ]  Go to page 1, 2  Next

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group