From owner-freebsd-isp Wed Aug 7 9:42:38 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 12FF937B400 for ; Wed, 7 Aug 2002 09:42:35 -0700 (PDT) Received: from cobra.acceleratedweb.net (cobra-gw.acceleratedweb.net [207.99.79.37]) by mx1.FreeBSD.org (Postfix) with SMTP id 6A91F43E42 for ; Wed, 7 Aug 2002 09:42:34 -0700 (PDT) (envelope-from simon@optinet.com) Received: (qmail 13589 invoked by uid 106); 7 Aug 2002 16:35:28 -0000 Received: from 24-90-121-13.nyc.rr.com (HELO station1) (24.90.121.13) by cobra.acceleratedweb.net with SMTP; 7 Aug 2002 16:35:28 -0000 From: "Simon" To: "Christian Kratzer" , "Gabriel Ambuehl" Cc: "isp@freebsd.org" Date: Wed, 07 Aug 2002 12:44:06 -0400 Reply-To: "Simon" X-Mailer: PMMail 2000 Professional (2.10.2010) For Windows 2000 (5.0.2195;2) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Re: Porting Apache 2 MPM perchild to FreeBSD. Raising funds? Message-Id: <20020807164234.6A91F43E42@mx1.FreeBSD.org> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Jail is just too much work, doesn't work with quotas right, takes up more space, etc... Something like MPM for those few clients would rock. -Simon On Wed, 7 Aug 2002 18:35:01 +0200 (CEST), Christian Kratzer wrote: >Hi, > >On Wed, 7 Aug 2002, Gabriel Ambuehl wrote: > >> Hello, >> I'm kinda annoyed that MPM perchild, the by far coolest feature of >> Apache 2, doesn't work on FreeBSD. Basically, perchild would allow it >> to have Virtualhosts running under different UIDs than the mainserver >> which, how I understand the docs, would mean that we'd finally be able >> to run PHP and other DSOs under the UID of the user the Vhost belongs >> to meaning the safe_mode/open_basedir hacks in PHP would be obsolote. >> I think most of the ISPs who use vhosts on this list would have a big >> interest in getting this feature to work ASAP because it results in >> *greatly* increased security for shared webhosting environments. >[snipped] > >even with the Apache MPM functionality setting the userid for a >virtualhost with AssignUserID and ChildPerUserID configuration options > > http://httpd.apache.org/docs-2.0/mod/perchild.html#assignuserid > http://httpd.apache.org/docs-2.0/mod/perchild.html#childperuserid > >would preallocate a certain amount of worker threads for a certain >userid. This would not be of any use for masshosting environments >with hundreds of vhosts per server. > >With hundreds of vhosts per server all served by common server >processes you can share the perhaps 10-20 servers for all vhosts. > >With MPM you would have to preallocate the servers. Not good. > >Of course for a a handfull of customers who all want to run the php >module instead of the cgi this would be doable. For these kind of >numbers of customers a jail setup is already an option today. > >Anyway I would think that the threading support in upcoming FreeBSD >5.0 should take care of the mpm stuff. > >just my 0.02$ > >Greetings >Christian > >-- >CK Software GmbH >Christian Kratzer, Schwarzwaldstr. 31, 71131 Jettingen >Email: ck@cksoft.de >Phone: +49 7452 889-135 Open Software Solutions, Network Security >Fax: +49 7452 889-136 FreeBSD spoken here! > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message