5.2
Table Of Contents
- vFabric Web Server Installation and Configuration
- Table of Contents
- 1. About vFabric Web Server Installation and Configuration
- 2. Overview of vFabric Web Server
- 3. Installing vFabric Web Server
- Installation Note for vFabric Suite Customers
- Available Distribution Packages
- RHEL: Install vFabric Web Server from an RPM
- Unix: Install vFabric Web Server from a Self-Extracting ZIP
- Windows: Install vFabric Web Server from a ZIP File
- Activate a vFabric Web Server Local License
- Description of the vFabric Web Server Installation
- 4. Upgrading vFabric Web Server
- 5. Creating and Using vFabric Web Server Instances
- 6. Configuring vFabric Web Server Instances
- Using Sample Configuration Files to Enable Features and Modify Configuration
- Configure Load Balancing Between Two or More tc Runtime Instances
- Configure SSL Between vFabric Web Server and vFabric tc Server
- Configure tc Runtime Instances to Use SSL
- Configure the vFabric Web Server Instance to Use SSL
- Restrict Communication With tc Runtime Instances to Known Clients
- Update the Web Server Configuration for HTTPS Connections to tc Runtime Instances
- Configure vFabric Web Server to Authenticate Itself Using a Specific Client Certificate
- Configure BMX for Monitoring vFabric Web Server Instances
- 7. Security Information
- 8. Managing Planned and Unplanned Outages
- 9. Additional Documentation
40 vFabric Web Server
40 Security Information
• access_log: Contains information about all Web Server requests.
• ssl_request_log: Applies only if you enabled SSL. Contains information about requests that came over HTTPS.
These log files are specific to a Web Server instance and are stored by default in the INSTANCE-DIR/logs directory, where
INSTANCE-DIR refers to the directory in which the Web Server instance is located, such as /opt/vmware/vfabric-web-
server/myserver.
The preceding log files should be readable and writeable only by the root (Unix) or Administrator (Windows) user.
The logs directory also contains other log files associated with BMX and the vFabric License server.
User Accounts Created at Installation
If you install vFabric Web Server on Red Hat Enterprise Linux (RHEL) using the RPM, a user with the following characteristics
is automatically created:
• ID: vfhttpd
• Group: vfhttpd
• Non-interactive, which means that you cannot directly log in to the RHEL computer as this user. Rather, you must log in as
root or user with appropriate sudo privileges and su - vfhttpd.
When installing from RPM on RHEL, the installation directory will be owned by the root user, with group root.
When installing Web Server on Windows or Unix from a self-extracting *.zip file, a user account is not automatically created
for you. Rather, you should install as root on Unix and Administrator on Windows.
Obtaining and Installing Security Updates
vFabric Web Server an HTTPD server based on open-source Apache HTTPD. A particular version of vFabric Web Server
includes a particular version of Apache HTTPD, such as httpd-2.2.22.1. New versions of vFabric Web Server typically
include an updated version of Apache HTTPD, some of which might fix important security vulnerabilities. To install these
security updates, you install the new version of vFabric Web Server and then upgrade your existing instances.
To download the latest *.zip distributions of the vFabric Web Server, go to the VMware Download Center.
When using RPMs on RHEL, use the yum upgrade command to upgrade to the latest vFabric Web Server version.
See Upgrading vFabric Web Server for details.