Session Title:

Hardening Enterprise Apache Installations Against Attacks

Speaker:

Sander Temme

Speaker contact info:

sander at temme.net

Session Abstract:

Enterprise installations of Apache are particularly attractive targets for malicious attacks, including Denial of Service, defacement, theft of data or service and installation of zombies or viruses. Hardening your deployment against such attacks calls for some special techniques and tactics. Come to this session to learn about attack detection techniques, server protection, secure deployment of multiple servers, configuration of firewall “demilitarized zones”, and judicious use of SSL encryption. How do you deploy an off-the-shelf application that insists on writing to the file system? And what steps do you take to securely deploy Apache on Windows or UNIX? This presentation will explore solutions to these very real situations.

Speaker bio:

Sander Temme is an Sales Engineer for Thales E-Security, a security and cryptography company whose clients include Fortune 500 companies, financial services companies and government agencies. He is a member of the Apache Software Foundation and is active in the httpd, Infrastructure and Gump projects. Sander has spoken at numerous conferences like ApacheCon, CodeCon, LinuxWorld, and chapter meetings and conferences of the Information Systems Security Association (ISSA). Sander is owned by Murphy, the wonder cat.

Session Title:

Apache HTTP Server Logging

Speaker:

Rich Bowen

Speaker contact info:

rbowen at apache.org

Session Abstract:

When troubleshooting Apache HTTP Server problems, the first place you should look is the error log. Unfortunately, many folks are unaware that there is an error log, or where it's located. But beyond that, there are numerous other ways to get httpd to log all sorts of things, from what your rewrite rules are doing to whether a particular request finished in a reasonable amount of time. I'll show you all of the available logging and debug modules, and we'll also look at a few third-party modules and what additional information they can provide.

Speaker bio:

Rich has been involved with the Apache HTTP Server documentation project for a decade, and has written a few books on the subject. He's known on the #httpd IRC channel on Freenode for asking "What, exactly, does your error log say?", and even has a t-shirt that says it.

Session Title:

N Things You Didn't Know httpd Could Do

Speaker:

Rich Bowen

Speaker contact info:

rbowen at apache dot org

Session Abstract:

Sure, you've been using the Apache HTTP Server for years, but I'll bet you didn't know it could do this. In this talk you'll learn some of the overlooked and ... ahem ... poorly documented features of the server, and ways that you can reduce your effort in managing your server by leveraging some of these features.

Speaker bio:

Rich has written a number of books about the Apache HTTP Server, and been using it since 1995, and yet still uncovers new gems even now and then.

Session Title:

Using FastCGI with Apache HTTP Server

Speaker:

Jeff Trawick

Speaker contact info:

trawick at apache dot org

Session Abstract:

Review general differences between the popular CGI and FastCGI protocols, but concentrate on deployment differences between the different modules for httpd which implement these protocols. Attendees with a basic understanding of CGI and FastCGI can expect to learn 1. how typical CGI configurations can be converted directly to FastCGI; 2. when and how to utilize different configuration mechanisms provided by mod_fcgid and mod_fastcgi; 3. the special issues behind mod_cgid, and how those are addressed by mod_fcgid and mod_fastcgi; 4. pros and cons for mod_fcgid and mod_fastcgi; 5. the new FastCGI proxy capability in future httpd 2.4 and a long term perspective on these three FastCGI implementations.

Speaker bio:

Jeff Trawick has been involved with the Apache HTTP Server project for about ten years, contributing numerous fixes as well as several new modules to the server project. He has also been very involved with development of mod_fcgid since it joined the project.

Session Title:

mod_pagespeed: Speed up web pages with Page Speed rules

Speaker:

Libo Song

Speaker contact info:

lsong at google dot com

Session Abstract:

Page Speed is an open-source Firefox/Firebug Add-on. Webmasters and web developers can use Page Speed to evaluate the performance of their web pages and to get suggestions on how to improve them. The Page Speed rules are for improving client-side performance (e.g., optimizing images, combining resources, etc.) Many may find that manually modifying their web pages with Page Speed suggestions is tedious. Given that Apache HTTP web server is the most popular web server, we are developing an Apache module to automatically apply the Page Speed rules on the fly for web pages. We will discuss the implementation of the module, named mod_pagespeed, and explore various techniques available for Apache (such as mod_deflate, mod_expires) to improve client-side performance.

Speaker bio:

Libo Song is a Software Engineer at Google. He works on Page Speed.

Session Title:

The mod_proxy_balancer cookbook: A module overview with practical solutions to common problems

Speaker:

Daniel Ruggeri, Internet Engineer, MasterCard Worldwide

Speaker contact info:

DRuggeri at primary.net

Session Abstract:

The reworking of mod_proxy and the inclusion of mod_proxy_balancer has given HTTPD a degree of intelligence that rivals some hardware load balancers. In this session, the speaker will discuss how some of the features of different solutions line up and why mod_proxy/mod_proxy_balancer may be the better choice for you. A brief overview of configuration directives will be followed by several practical examples to help deal with common issues.

Speaker bio:

Daniel Ruggeri has been heavily involved in deployment, configuration and strategy initiatives inside MasterCard in relation to Apache HTTPD for over four years. He is responsible for identifying and leveraging new abilities and technologies added to HTTPD to better manage or deploy HTTPD. He is also a hobbyist as far as utilizing HTTPD who has contributed patches to mod_proxy and mod_proxy_balancer.