Ltning

@ltning@weirdr.net

He/him. This is one of my alter egos in the retro world. Read about this instance on front page. My goal is to be able to post here from a 286* running DOS. Might be a while..

and enthusiast with a craving for retro (mostly PC) hardware. Four kids and a wonderful patchwork family.

*Speaking of 286es: http://floppy.museum/

11 following 15 followers

0 ★ 0 ↺
in reply to »

Ltning »
@ltning@weirdr.net

How much memory does Apache use then? It sounds like unnecessary bloat even with modules disabled. But maybe that's just me still clinging to 20+ year old impressions of Apache being bloated by definition.

Do you do TLS in Apache too? On a K6-II?

...

theothertom »
@tom@epsom.social

@ltning I've managed to add more memory since I first installed the system, so it's not quite as tight as it was (and now there's meaningful disk cache, which seems to help loads).
Looking at the stats on it, snac is using 13.5MB (resident), Apache is using 10.5MB.
I think the perception of Apache as a resource hog may have come from the "prefork" MPM there's other, lighter MPMs you can use instead.
Yeah - it's doing TLS in apache. social.cobaltqu.be/theothertom if you want a sense of how quick it is.

Screenshot of htop, showing the resource usage on a snac server. The relevant parts are mentioned in the body of the original message.

Alt...Screenshot of htop, showing the resource usage on a snac server. The relevant parts are mentioned in the body of the original message.

...
0 ★ 0 ↺

Ltning »
@ltning@weirdr.net

@tom@epsom.social Mind sharing the tls config? Key lengths, curves, ciphers and protocols?

...

theothertom »
@tom@epsom.social

@ltning Sure. I've got this, which I'm pretty sure is just the defaults from the distro package (at least, I don't remember tuning it):
SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
SSLHonorCipherOrder on
SSLProtocol all -SSLv3
SSLProxyProtocol all -SSLv3
SSLPassPhraseDialog builtin
SSLSessionCache "shmcb:/var/run/ssl_scache(512000)"
SSLSessionCacheTimeout 300

History