I can hardly wait to get it FreeBSD 7.0 installed on it and setup a nice vhost system with Lighttpd + PostgreSQL. It’s gonna be awsome.
The server I’m currently using is ‘only’ Dual core XEON w/ 3.5Gb ram, and some random SATA drives, so the improvement should be huge

I’m quite excited, because its going to be my first server ever without Apache and MySQL installed. Or well, atleast until some stupid customer or what not (Biesbjerg?) demands it

If I can find the time, I will write a guide on how I’m going to configure my server (Lighttpd, PostgreSQL, Dovecot + sendmail, quota, fast-cgi php5), it might be useful for someone

Let me know if it has any interest to you guys

Specs

- Dell PE 1950 III
- PE1950 PCIE Riser (2 Slots) 1 S
- Quad Core Xeon E5410 (2.33GHz, 2x6MB, 1333MHz FSB) (SMP supported)
- 4GB (2x2GB Dual Rank DIMMs) 667MHz FBD (up to 32 GB)
- 3x 146GB SAS 10k 2.5″ HDPE1950 III 2.5″ HDD support chassis
- Perc 6i Integrated Controller
- 8X DVD-ROM Drive IDE
- PE1950 III Non-Redundant Power Supply No Power Cord
- TCP/IP Offload Engine 2P
- Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled
- PE1950 OpenManage kit and FI Driver
- CFI EMEA Service. (SV-Hi) OR PowerEdge, RAID/partition
- RAID 1 Single Container
- RAID 0 (1 HDD)
- Rack Rails Static Rapid 1 S
- PE1950 III – C2,MSSR0,ADD IN PERC5i/6i/SAS6iR, min 2 / max 2 or 4

/Jippi

I’m working on some security enhancements for my new website project, and in that progress, I have moved away from Apache2.2.3 and now using Lighttpd instead. Lighttpd does not use the same method of invoking php as apache does (mod_php vs. fast-cgi php).

In my eager to make the application as secure and locked down as possible, I went berserk in the php-cgi.ini file and turned on just about any security feature I could find (not safemode!), including the innocent looking switch called “open_basedir”.

That was rather late in the night, so when I resumed my work the following day, I have long forgotten about all the fancy security settings I had enabled in php.

A few hours ago I noticed that the complete render time for the front page suddenly was ~2seconds(!) – and comparing with apache’s load time for the same page (0.9s) I was quite disappointed at lighttpd and fastcgi, but refused to give up my new found love without a fair trial.

I attacked google with full force without finding any useful resources that might be able to explain my issue.. I was quite sure it was APC that did not function well in a fastcgi environment – and therefore my google madness was focused around the keywords “apc + fastcgi”

While chatting to PatrickDK in the #lighttpd channel @ freenode, it suddenly hit me – let’s try to disable everything I have “fixed” last night – starting with XDebug, some 3rd party php modules (syck, memcache, simplexml, fileinfo) – and then, open_basedir flag.

And with just one line commented out in my php-cgi.ini file, the render time went from 2.4 to 0.5 seconds !!(!!)

So just a little note to you guys out there, beware of the open_basedir setting in a setup where you include many files, it is a rather costly feature to use. And when running fastcgi php in chroot()ed setup, its not really required anyway

Its another +1 for lighty and fastcgi

And yes, I’m aware that open_basedir is slow because it has to validate EVERY file or path you work with inside php to check if its within the scope defined.

Preface

This time I have been busy playing with Lighttpd and mod_magnet. I found a blog post where darix mentions a post from sitepoint where they demostrate a technique to speed up the HTTP GET of javascript and CSS files.

Its quite simple really, instead of doing

<link href="/css/styles1.css" rel="stylesheet" type="text/css" />
<link href="/css/styles2.css" rel="stylesheet" type="text/css" />
<link href="/css/styles3.css" rel="stylesheet" type="text/css" />

you simply do

<link href="/css/styles1.css,styles2.css,styles3.css" rel="stylesheet" type="text/css" />

and then this script will automagic concat them together into one big file, and make lighty serve that one instead. (The same goes for javascript files, or anything really)

This could save ALOT of HTTP GET’s to your server, and increase the overall loadtime and performance of your site alot, especially if you use alot of Web2.0 stuff

However, the Lua source for their script was not made public, so nobody could benifit from their otherwise impressive speed gains.

Until now.. or, well, almost – its not their script, but my own attempt to mimic what they did in pure Lua

I tried to keep the dependencies down to a minimum, however I decided to use one, md5.
You can find the source here (5.1, 5.0)

Config

charset (Line 42)

Set it so it matches the headers in your lighttpd.conf file. Must match your mod_compress settings aswell to utilize that feature

prefix (Line 43)

Could be anything really, its just a mean to “namespace” your cached files so you can run the script with multiple configs

rootPath (Line 44)

The path to look for the files to concat, default should be fine for most DOC_ROOT/js and DOC_ROOT/css

concatRoot (Line 45)

The folder to store the concated files, can be anywhere

Setup

• Put the source below somewhere on your disk, I asume you name it bundle.lua
• Enable mod_magnet in lighttpd.conf
• Add magnet.attract-physical-path-to = ( “YOUR_PATH/bundle.lua” ) to your config where needed
• Restart lighttpd
• Modify your css/js links to utilize the new feature:)

Optimal you can enable mod_compress aswell, bundle.lua works out of the box with any other lighttpd module you may have

Source

download source

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

--- get stat information on a path
-- @param path to stat
-- @param the ftype to return
-- @return false if ftype or path does not exist
function file_info(path, ftype)
    local attr = lighty.stat(path)
    if attr and attr[ftype] then
        return attr[ftype]
    end
    return false
end
 
--- Wrapper for reading a full file into a string
-- @param filename Full path to the file
-- @return a string with the content of the file
function read_file(filename) 
    local content = ""
    if file_info(filename, "is_file") then
        local file = io.open(filename, "r")
        content = file:read("*a")
        io.close(file)
    end
    return content
end
 
--- Wrapper for writeing content to a file
-- @param filename Full path to the destionation file
-- @param content The string to write
function write_cache(filename, content) 
    local file = io.open(filename, "w")
    file:write(content)
    io.close(file)
end
 
--- Concat multiple files into one file 
-- @param lighty lighty global variable passed to the method
-- @param match The files that will be concat into a file
-- @param fileExtension Do !NOT! include the dot ( . )
function combine_files(lighty, files, fileExtension)
    require "md5" 
 
    local charset       = "; charset=utf-8"
    local prefix        = "cache-"
    local rootPath      = lighty.env["physical.doc-root"] .. fileExtension .. "/"
    local concatRoot     = "/tmp/cache/"
    local lastModified  = 0
 
    for file in string.gmatch(files, "(.-\." .. fileExtension .. "),?") do
        local fullPath = rootPath .. file
        modTime = file_info(fullPath, "st_mtime")
        if type(modTime) == "number" then
            lastModified = math.max(lastModified, modTime)
        end            
     end
 
     local hash = lastModified .. "-" .. md5.sumhexa(files)
     lighty.header["Etag"] = '"' .. hash ..'"'
 
    local cacheFile = prefix .. hash .. '.' .. fileExtension
    if not file_info(concatRoot .. cacheFile, "is_file") then
        local content = ""
        for file in string.gmatch(match, "(.-\." .. fileExtension .. "),?") do
            content = content .. "\n"
            content = content .. "/**\n"
            content = content .. " *\n"
            content = content .. " *  " .. file .. "\n"
            content = content .. " *\n"
            content = content .. " */\n"
            content = content .. "\n"
            content = content .. read_file(rootPath .. file)
        end
        write_cache(concatRoot .. cacheFile, content )
    end
    lighty.env["physical.path"] = concatRoot .. cacheFile
end
 
if (not file_info(lighty.env["physical.path"], "is_file")) then
    css = string.match(lighty.env["physical.path"], "css/(.*\.css)")
	if css then
        return combine_files(lighty, css, "css")
    end
 
    js = string.match(lighty.env["physical.path"], "js/(.*\.js)")	    
	if js then
        return combine_files(lighty, js, "js")
	end 
end