Apache HTTP 服务器版本 2.4

指令快速索引显示指令的用法,默认值,状态和上下文。要获得更多信息,请参见 描述指令的术语。
第一列给出指令的名称与用法。第二列显示指令的默认值(如果有的话)。 如果因为默认值太长而被截断显示,会在最后一个字符之后显示字符 “+”。
第三列显示允许此指令的上下文,第四列显示指令的状态。
| A | B | C | D | E | F | G | H | I | K | L | M | N | O | P | Q | R | S | T | U | V | W | X |
|
|
| AcceptFilter protocol accept_filter | s | C | |
| Configures optimizations for a Protocol's Listener Sockets | |||
| AcceptPathInfo On|Off|Default | Default | svdh | C |
| Resources accept trailing pathname information | |||
| AccessFileName filename [filename] ... | .htaccess | sv | C |
| Name of the distributed configuration file | |||
| Action action-type cgi-script [virtual] | svdh | B | |
| Activates a CGI script for a particular handler or content-type | |||
| AddAlt string file [file] ... | svdh | B | |
| Alternate text to display for a file, instead of an icon selected by filename | |||
| AddAltByEncoding string MIME-encoding [MIME-encoding] ... | svdh | B | |
| Alternate text to display for a file instead of an icon selected by MIME-encoding | |||
| AddAltByType string MIME-type [MIME-type] ... | svdh | B | |
| Alternate text to display for a file, instead of an icon selected by MIME content-type | |||
| AddCharset charset extension [extension] ... | svdh | B | |
| Maps the given filename extensions to the specified content charset | |||
| AddDefaultCharset On|Off|charset | Off | svdh | C |
Default charset parameter to be added when a response
content-type is text/plain or text/html | |||
| AddDescription string file [file] ... | svdh | B | |
| Description to display for a file | |||
| AddEncoding encoding extension [extension] ... | svdh | B | |
| Maps the given filename extensions to the specified encoding type | |||
| AddHandler handler-name extension [extension] ... | svdh | B | |
| Maps the filename extensions to the specified handler | |||
| AddIcon icon name [name] ... | svdh | B | |
| Icon to display for a file selected by name | |||
| AddIconByEncoding icon MIME-encoding [MIME-encoding] ... | svdh | B | |
| Icon to display next to files selected by MIME content-encoding | |||
| AddIconByType icon MIME-type [MIME-type] ... | svdh | B | |
| Icon to display next to files selected by MIME content-type | |||
| AddInputFilter filter[;filter...] extension [extension] ... | svdh | B | |
| Maps filename extensions to the filters that will process client requests | |||
| AddLanguage language-tag extension [extension] ... | svdh | B | |
| Maps the given filename extension to the specified content language | |||
| AddModuleInfo module-name string | sv | E | |
| Adds additional information to the module information displayed by the server-info handler | |||
| AddOutputFilter filter[;filter...] extension [extension] ... | svdh | B | |
| Maps filename extensions to the filters that will process responses from the server | |||
| AddOutputFilterByType filter[;filter...] media-type [media-type] ... | svdh | B | |
| assigns an output filter to a particular media-type | |||
| AddType media-type extension [extension] ... | svdh | B | |
| Maps the given filename extensions onto the specified content type | |||
| Alias [URL-path] file-path|directory-path | svd | B | |
| Maps URLs to filesystem locations | |||
| AliasMatch regex file-path|directory-path | sv | B | |
| Maps URLs to filesystem locations using regular expressions | |||
| Allow from all|host|env=[!]env-variable [host|env=[!]env-variable] ... | dh | E | |
| Controls which hosts can access an area of the server | |||
| AllowCONNECT port[-port] [port[-port]] ... | 443 563 | sv | E |
Ports that are allowed to CONNECT through the
proxy | |||
| AllowEncodedSlashes On|Off|NoDecode | Off | sv | C |
| Determines whether encoded path separators in URLs are allowed to be passed through | |||
| AllowMethods reset|HTTP-method [HTTP-method]... | reset | d | X |
| Restrict access to the listed HTTP methods | |||
| AllowOverride All|None|directive-type [directive-type] ... | None (2.3.9 and lat + | d | C |
Types of directives that are allowed in
.htaccess files | |||
| AllowOverrideList None|directive [directive-type] ... | None | d | C |
Individual directives that are allowed in
.htaccess files | |||
| Anonymous user [user] ... | dh | E | |
| Specifies userIDs that are allowed access without password verification | |||
| Anonymous_LogEmail On|Off | On | dh | E |
| Sets whether the password entered will be logged in the error log | |||
| Anonymous_MustGiveEmail On|Off | On | dh | E |
| Specifies whether blank passwords are allowed | |||
| Anonymous_NoUserID On|Off | Off | dh | E |
| Sets whether the userID field may be empty | |||
| Anonymous_VerifyEmail On|Off | Off | dh | E |
| Sets whether to check the password field for a correctly formatted email address | |||
| AsyncRequestWorkerFactor factor | s | M | |
| Limit concurrent connections per process | |||
| AuthBasicAuthoritative On|Off | On | dh | B |
| Sets whether authorization and authentication are passed to lower level modules | |||
| AuthBasicFake off|username [password] | dh | B | |
| Fake basic authentication using the given expressions for username and password | |||
| AuthBasicProvider provider-name [provider-name] ... | file | dh | B |
| Sets the authentication provider(s) for this location | |||
| AuthBasicUseDigestAlgorithm MD5|Off | Off | dh | B |
| Check passwords against the authentication providers as if Digest Authentication was in force instead of Basic Authentication. | |||
| AuthDBDUserPWQuery query | d | E | |
| SQL query to look up a password for a user | |||
| AuthDBDUserRealmQuery query | d | E | |
| SQL query to look up a password hash for a user and realm. | |||
| AuthDBMGroupFile file-path | dh | E | |
| Sets the name of the database file containing the list of user groups for authorization | |||
| AuthDBMType default|SDBM|GDBM|NDBM|DB | default | dh | E |
| Sets the type of database file that is used to store passwords | |||
| AuthDBMUserFile file-path | dh | E | |
| Sets the name of a database file containing the list of users and passwords for authentication | |||
| AuthDigestAlgorithm MD5|MD5-sess | MD5 | dh | E |
| Selects the algorithm used to calculate the challenge and response hashes in digest authentication | |||
| AuthDigestDomain URI [URI] ... | dh | E | |
| URIs that are in the same protection space for digest authentication | |||
| AuthDigestNonceLifetime seconds | 300 | dh | E |
| How long the server nonce is valid | |||
| AuthDigestProvider provider-name [provider-name] ... | file | dh | E |
| Sets the authentication provider(s) for this location | |||
| AuthDigestQop none|auth|auth-int [auth|auth-int] | auth | dh | E |
| Determines the quality-of-protection to use in digest authentication | |||
| AuthDigestShmemSize size | 1000 | s | E |
| The amount of shared memory to allocate for keeping track of clients | |||
| AuthFormAuthoritative On|Off | On | dh | B |
| Sets whether authorization and authentication are passed to lower level modules | |||
| AuthFormBody fieldname | d | B | |
| The name of a form field carrying the body of the request to attempt on successful login | |||
| AuthFormDisableNoStore On|Off | Off | d | B |
| Disable the CacheControl no-store header on the login page | |||
| AuthFormFakeBasicAuth On|Off | Off | d | B |
| Fake a Basic Authentication header | |||
| AuthFormLocation fieldname | d | B | |
| The name of a form field carrying a URL to redirect to on successful login | |||
| AuthFormLoginRequiredLocation url | d | B | |
| The URL of the page to be redirected to should login be required | |||
| AuthFormLoginSuccessLocation url | d | B | |
| The URL of the page to be redirected to should login be successful | |||
| AuthFormLogoutLocation uri | d | B | |
| The URL to redirect to after a user has logged out | |||
| AuthFormMethod fieldname | d | B | |
| The name of a form field carrying the method of the request to attempt on successful login | |||
| AuthFormMimetype fieldname | d | B | |
| The name of a form field carrying the mimetype of the body of the request to attempt on successful login | |||
| AuthFormPassword fieldname | d | B | |
| The name of a form field carrying the login password | |||
| AuthFormProvider provider-name [provider-name] ... | file | dh | B |
| Sets the authentication provider(s) for this location | |||
| AuthFormSitePassphrase secret | d | B | |
| Bypass authentication checks for high traffic sites | |||
| AuthFormSize size | d | B | |
| The largest size of the form in bytes that will be parsed for the login details | |||
| AuthFormUsername fieldname | d | B | |
| The name of a form field carrying the login username | |||
| AuthGroupFile file-path | dh | B | |
| Sets the name of a text file containing the list of user groups for authorization | |||
| AuthLDAPAuthorizePrefix prefix | AUTHORIZE_ | dh | E |
| Specifies the prefix for environment variables set during authorization | |||
| AuthLDAPBindAuthoritative off|on | on | dh | E |
| Determines if other authentication providers are used when a user can be mapped to a DN but the server cannot successfully bind with the user's credentials. | |||
| AuthLDAPBindDN distinguished-name | dh | E | |
| Optional DN to use in binding to the LDAP server | |||
| AuthLDAPBindPassword password | dh | E | |
| Password used in conjunction with the bind DN | |||
| AuthLDAPCharsetConfig file-path | s | E | |
| Language to charset conversion configuration file | |||
| AuthLDAPCompareAsUser on|off | off | dh | E |
| Use the authenticated user's credentials to perform authorization comparisons | |||
| AuthLDAPCompareDNOnServer on|off | on | dh | E |
| Use the LDAP server to compare the DNs | |||
| AuthLDAPDereferenceAliases never|searching|finding|always | always | dh | E |
| When will the module de-reference aliases | |||
| AuthLDAPGroupAttribute attribute | member uniquemember + | dh | E |
| LDAP attributes used to identify the user members of groups. | |||
| AuthLDAPGroupAttributeIsDN on|off | on | dh | E |
| Use the DN of the client username when checking for group membership | |||
| AuthLDAPInitialBindAsUser off|on | off | dh | E |
| Determines if the server does the initial DN lookup using the basic authentication users' own username, instead of anonymously or with hard-coded credentials for the server | |||
| AuthLDAPInitialBindPattern regex substitution | (.*) $1 (remote use + | dh | E |
| Specifies the transformation of the basic authentication username to be used when binding to the LDAP server to perform a DN lookup | |||
| AuthLDAPMaxSubGroupDepth Number | 10 | dh | E |
| Specifies the maximum sub-group nesting depth that will be evaluated before the user search is discontinued. | |||
| AuthLDAPRemoteUserAttribute uid | dh | E | |
| Use the value of the attribute returned during the user query to set the REMOTE_USER environment variable | |||
| AuthLDAPRemoteUserIsDN on|off | off | dh | E |
| Use the DN of the client username to set the REMOTE_USER environment variable | |||
| AuthLDAPSearchAsUser on|off | off | dh | E |
| Use the authenticated user's credentials to perform authorization searches | |||
| AuthLDAPSubGroupAttribute attribute | dh | E | |
| Specifies the attribute labels, one value per directive line, used to distinguish the members of the current group that are groups. | |||
| AuthLDAPSubGroupClass LdapObjectClass | groupOfNames groupO + | dh | E |
| Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing. | |||
| AuthLDAPUrl url [NONE|SSL|TLS|STARTTLS] | dh | E | |
| URL specifying the LDAP search parameters | |||
| AuthMerging Off | And | Or | Off | dh | B |
| Controls the manner in which each configuration section's authorization logic is combined with that of preceding configuration sections. | |||
| AuthName auth-domain | dh | B | |
| Authorization realm for use in HTTP authentication | |||
| AuthnCacheContext directory|server|custom-string | d | B | |
| Specify a context string for use in the cache key | |||
| AuthnCacheEnable | s | B | |
| Enable Authn caching configured anywhere | |||
| AuthnCacheProvideFor authn-provider [...] | dh | B | |
| Specify which authn provider(s) to cache for | |||
| AuthnCacheSOCache provider-name[:provider-args] | s | B | |
| Select socache backend provider to use | |||
| AuthnCacheTimeout timeout (seconds) | dh | B | |
| Set a timeout for cache entries | |||
| <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias> | s | B | |
| Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias | |||
AuthnzFcgiCheckAuthnProvider provider-name|None
option ... | d | E | |
| Enables a FastCGI application to handle the check_authn authentication hook. | |||
| AuthnzFcgiDefineProvider type provider-name backend-address | s | E | |
| Defines a FastCGI application as a provider for authentication and/or authorization | |||
| AuthType None|Basic|Digest|Form | dh | B | |
| Type of user authentication | |||
| AuthUserFile file-path | dh | B | |
| Sets the name of a text file containing the list of users and passwords for authentication | |||
| AuthzDBDLoginToReferer On|Off | Off | d | E |
Determines whether to redirect the Client to the Referring
page on successful login or logout if a Referer request
header is present | |||
| AuthzDBDQuery query | d | E | |
| Specify the SQL Query for the required operation | |||
| AuthzDBDRedirectQuery query | d | E | |
| Specify a query to look up a login page for the user | |||
| AuthzDBMType default|SDBM|GDBM|NDBM|DB | default | dh | E |
| Sets the type of database file that is used to store list of user groups | |||
| <AuthzProviderAlias baseProvider Alias Require-Parameters> ... </AuthzProviderAlias> | s | B | |
| Enclose a group of directives that represent an extension of a base authorization provider and referenced by the specified alias | |||
| AuthzSendForbiddenOnFailure On|Off | Off | dh | B |
| Send '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authentication succeeds but authorization fails | |||
| BalancerGrowth # | 5 | sv | E |
| Number of additional Balancers that can be added Post-configuration | |||
| BalancerInherit On|Off | On | sv | E |
| Inherit ProxyPassed Balancers/Workers from the main server | |||
| BalancerMember [balancerurl] url [key=value [key=value ...]] | d | E | |
| Add a member to a load balancing group | |||
| BalancerPersist On|Off | Off | sv | E |
| Attempt to persist changes made by the Balancer Manager across restarts. | |||
| BrotliAlterETag AddSuffix|NoChange|Remove | AddSuffix | sv | E |
| How the outgoing ETag header should be modified during compression | |||
| BrotliCompressionMaxInputBlock value | sv | E | |
| Maximum input block size | |||
| BrotliCompressionQuality value | 5 | sv | E |
| Compression quality | |||
| BrotliCompressionWindow value | 18 | sv | E |
| Brotli sliding compression window size | |||
| BrotliFilterNote [type] notename | sv | E | |
| Places the compression ratio in a note for logging | |||
| BrowserMatch regex [!]env-variable[=value] [[!]env-variable[=value]] ... | svdh | B | |
| Sets environment variables conditional on HTTP User-Agent | |||
| BrowserMatchNoCase regex [!]env-variable[=value] [[!]env-variable[=value]] ... | svdh | B | |
| Sets environment variables conditional on User-Agent without respect to case | |||
| BufferedLogs On|Off | Off | s | B |
| Buffer log entries in memory before writing to disk | |||
| BufferSize integer | 131072 | svdh | E |
| Maximum size in bytes to buffer by the buffer filter | |||
| CacheDefaultExpire seconds | 3600 (one hour) | svdh | E |
| The default duration to cache a document when no expiry date is specified. | |||
| CacheDetailHeader on|off | off | svdh | E |
| Add an X-Cache-Detail header to the response. | |||
| CacheDirLength length | 2 | sv | E |
| The number of characters in subdirectory names | |||
| CacheDirLevels levels | 2 | sv | E |
| The number of levels of subdirectories in the cache. | |||
| CacheDisable url-string | on | svdh | E | |
| Disable caching of specified URLs | |||
| CacheEnable cache_type [url-string] | svd | E | |
| Enable caching of specified URLs using a specified storage manager | |||
| CacheFile file-path [file-path] ... | s | X | |
| Cache a list of file handles at startup time | |||
| CacheHeader on|off | off | svdh | E |
| Add an X-Cache header to the response. | |||
| CacheIgnoreCacheControl On|Off | Off | sv | E |
| Ignore request to not serve cached content to client | |||
| CacheIgnoreHeaders header-string [header-string] ... | None | sv | E |
| Do not store the given HTTP header(s) in the cache. | |||
| CacheIgnoreNoLastMod On|Off | Off | svdh | E |
| Ignore the fact that a response has no Last Modified header. | |||
| CacheIgnoreQueryString On|Off | Off | sv | E |
| Ignore query string when caching | |||
| CacheIgnoreURLSessionIdentifiers identifier [identifier] ... | None | sv | E |
| Ignore defined session identifiers encoded in the URL when caching | |||
| CacheKeyBaseURL URL | sv | E | |
| Override the base URL of reverse proxied cache keys. | |||
| CacheLastModifiedFactor float | 0.1 | svdh | E |
| The factor used to compute an expiry date based on the LastModified date. | |||
| CacheLock on|off | off | sv | E |
| Enable the thundering herd lock. | |||
| CacheLockMaxAge integer | 5 | sv | E |
| Set the maximum possible age of a cache lock. | |||
| CacheLockPath directory | /tmp/mod_cache-lock + | sv | E |
| Set the lock path directory. | |||
| CacheMaxExpire seconds | 86400 (one day) | svdh | E |
| The maximum time in seconds to cache a document | |||
| CacheMaxFileSize bytes | 1000000 | svdh | E |
| The maximum size (in bytes) of a document to be placed in the cache | |||
| CacheMinExpire seconds | 0 | svdh | E |
| The minimum time in seconds to cache a document | |||
| CacheMinFileSize bytes | 1 | svdh | E |
| The minimum size (in bytes) of a document to be placed in the cache | |||
| CacheNegotiatedDocs On|Off | Off | sv | B |
| Allows content-negotiated documents to be cached by proxy servers | |||
| CacheQuickHandler on|off | on | sv | E |
| Run the cache from the quick handler. | |||
| CacheReadSize bytes | 0 | svdh | E |
| The minimum size (in bytes) of the document to read and be cached before sending the data downstream | |||
| CacheReadTime milliseconds | 0 | svdh | E |
| The minimum time (in milliseconds) that should elapse while reading before data is sent downstream | |||
| CacheRoot directory | sv | E | |
| The directory root under which cache files are stored | |||
| CacheSocache type[:args] | sv | E | |
| The shared object cache implementation to use | |||
| CacheSocacheMaxSize bytes | 102400 | svdh | E |
| The maximum size (in bytes) of an entry to be placed in the cache | |||
| CacheSocacheMaxTime seconds | 86400 | svdh | E |
| The maximum time (in seconds) for a document to be placed in the cache | |||
| CacheSocacheMinTime seconds | 600 | svdh | E |
| The minimum time (in seconds) for a document to be placed in the cache | |||
| CacheSocacheReadSize bytes | 0 | svdh | E |
| The minimum size (in bytes) of the document to read and be cached before sending the data downstream | |||
| CacheSocacheReadTime milliseconds | 0 | svdh | E |
| The minimum time (in milliseconds) that should elapse while reading before data is sent downstream | |||
| CacheStaleOnError on|off | on | svdh | E |
| Serve stale content in place of 5xx responses. | |||
| CacheStoreExpired On|Off | Off | svdh | E |
| Attempt to cache responses that the server reports as expired | |||
| CacheStoreNoStore On|Off | Off | svdh | E |
| Attempt to cache requests or responses that have been marked as no-store. | |||
| CacheStorePrivate On|Off | Off | svdh | E |
| Attempt to cache responses that the server has marked as private | |||
| CGIDScriptTimeout time[s|ms] | svdh | B | |
| The length of time to wait for more output from the CGI program | |||
| CGIMapExtension cgi-path .extension | dh | C | |
| Technique for locating the interpreter for CGI scripts | |||
| CGIPassAuth On|Off | Off | dh | C |
| Enables passing HTTP authorization headers to scripts as CGI variables | |||
| CGIVar variable rule | dh | C | |
| Controls how some CGI variables are set | |||
| CharsetDefault charset | svdh | E | |
| Charset to translate into | |||
| CharsetOptions option [option] ... | ImplicitAdd | svdh | E |
| Configures charset translation behavior | |||
| CharsetSourceEnc charset | svdh | E | |
| Source charset of files | |||
| CheckCaseOnly on|off | Off | svdh | E |
| Limits the action of the speling module to case corrections | |||
| CheckSpelling on|off | Off | svdh | E |
| Enables the spelling module | |||
| ChrootDir /path/to/directory | s | B | |
| Directory for apache to run chroot(8) after startup. | |||
| ContentDigest On|Off | Off | svdh | C |
Enables the generation of Content-MD5 HTTP Response
headers | |||
| CookieDomain domain | svdh | E | |
| The domain to which the tracking cookie applies | |||
| CookieExpires expiry-period | svdh | E | |
| Expiry time for the tracking cookie | |||
| CookieName token | Apache | svdh | E |
| Name of the tracking cookie | |||
| CookieStyle Netscape|Cookie|Cookie2|RFC2109|RFC2965 | Netscape | svdh | E |
| Format of the cookie header field | |||
| CookieTracking on|off | off | svdh | E |
| Enables tracking cookie | |||
| CoreDumpDirectory directory | s | M | |
| Directory where Apache HTTP Server attempts to switch before dumping core | |||
| CustomLog file|pipe format|nickname [env=[!]environment-variable| expr=expression] | sv | B | |
| Sets filename and format of log file | |||
| Dav On|Off|provider-name | Off | d | E |
| Enable WebDAV HTTP methods | |||
| DavDepthInfinity on|off | off | svd | E |
| Allow PROPFIND, Depth: Infinity requests | |||
| DavGenericLockDB file-path | svd | E | |
| Location of the DAV lock database | |||
| DavLockDB file-path | sv | E | |
| Location of the DAV lock database | |||
| DavMinTimeout seconds | 0 | svd | E |
| Minimum amount of time the server holds a lock on a DAV resource | |||
| DBDExptime time-in-seconds | 300 | sv | E |
| Keepalive time for idle connections | |||
| DBDInitSQL "SQL statement" | sv | E | |
| Execute an SQL statement after connecting to a database | |||
| DBDKeep number | 2 | sv | E |
| Maximum sustained number of connections | |||
| DBDMax number | 10 | sv | E |
| Maximum number of connections | |||
| DBDMin number | 1 | sv | E |
| Minimum number of connections | |||
| DBDParams param1=value1[,param2=value2] | sv | E | |
| Parameters for database connection | |||
| DBDPersist On|Off | sv | E | |
| Whether to use persistent connections | |||
| DBDPrepareSQL "SQL statement" label | sv | E | |
| Define an SQL prepared statement | |||
| DBDriver name | sv | E | |
| Specify an SQL driver | |||
| DefaultIcon url-path | svdh | B | |
| Icon to display for files when no specific icon is configured | |||
| DefaultLanguage language-tag | svdh | B | |
| Defines a default language-tag to be sent in the Content-Language header field for all resources in the current context that have not been assigned a language-tag by some other means. | |||
| DefaultRuntimeDir directory-path | DEFAULT_REL_RUNTIME + | s | C |
| Base directory for the server run-time files | |||
| DefaultType media-type|none | none | svdh | C |
This directive has no effect other than to emit warnings
if the value is not none. In prior versions, DefaultType
would specify a default media type to assign to response content for
which no other media type configuration could be found.
| |||
| Define parameter-name [parameter-value] | svd | C | |
| Define a variable | |||
| DeflateBufferSize value | 8096 | sv | E |
| Fragment size to be compressed at one time by zlib | |||
| DeflateCompressionLevel value | sv | E | |
| How much compression do we apply to the output | |||
| DeflateFilterNote [type] notename | sv | E | |
| Places the compression ratio in a note for logging | |||
| DeflateInflateLimitRequestBodyvalue | svdh | E | |
| Maximum size of inflated request bodies | |||
| DeflateInflateRatioBurst value | svdh | E | |
| Maximum number of times the inflation ratio for request bodies can be crossed | |||
| DeflateInflateRatioLimit value | svdh | E | |
| Maximum inflation ratio for request bodies | |||
| DeflateMemLevel value | 9 | sv | E |
| How much memory should be used by zlib for compression | |||
| DeflateWindowSize value | 15 | sv | E |
| Zlib compression window size | |||
| Deny from all|host|env=[!]env-variable [host|env=[!]env-variable] ... | dh | E | |
| Controls which hosts are denied access to the server | |||
| <Directory directory-path> ... </Directory> | sv | C | |
| Enclose a group of directives that apply only to the named file-system directory, sub-directories, and their contents. | |||
| DirectoryCheckHandler On|Off | Off | svdh | B |
| Toggle how this module responds when another handler is configured | |||
| DirectoryIndex disabled | local-url [local-url] ... | index.html | svdh | B |
| List of resources to look for when the client requests a directory | |||
| DirectoryIndexRedirect on | off | permanent | temp | seeother | 3xx-code | off | svdh | B |
| Configures an external redirect for directory indexes. | |||
| <DirectoryMatch regex> ... </DirectoryMatch> | sv | C | |
| Enclose directives that apply to the contents of file-system directories matching a regular expression. | |||
| DirectorySlash On|Off | On | svdh | B |
| Toggle trailing slash redirects on or off | |||
| DocumentRoot directory-path | "/usr/local/apache/ + | sv | C |
| Directory that forms the main document tree visible from the web | |||
| DTracePrivileges On|Off | Off | s | X |
| Determines whether the privileges required by dtrace are enabled. | |||
| DumpIOInput On|Off | Off | s | E |
| Dump all input data to the error log | |||
| DumpIOOutput On|Off | Off | s | E |
| Dump all output data to the error log | |||
| <Else> ... </Else> | svdh | C | |
Contains directives that apply only if the condition of a
previous <If> or
<ElseIf> section is not
satisfied by a request at runtime | |||
| <ElseIf expression> ... </ElseIf> | svdh | C | |
Contains directives that apply only if a condition is satisfied
by a request at runtime while the condition of a previous
<If> or
<ElseIf> section is not
satisfied | |||
| EnableExceptionHook On|Off | Off | s | M |
| Enables a hook that runs exception handlers after a crash | |||
| EnableMMAP On|Off | On | svdh | C |
| Use memory-mapping to read files during delivery | |||
| EnableSendfile On|Off | Off | svdh | C |
| Use the kernel sendfile support to deliver files to the client | |||
| Error message | svdh | C | |
| Abort configuration parsing with a custom error message | |||
| ErrorDocument error-code document | svdh | C | |
| What the server will return to the client in case of an error | |||
| ErrorLog file-path|syslog[:[facility][:tag]] | logs/error_log (Uni + | sv | C |
| Location where the server will log errors | |||
| ErrorLogFormat [connection|request] format | sv | C | |
| Format specification for error log entries | |||
| Example | svdh | X | |
| Demonstration directive to illustrate the Apache module API | |||
| ExpiresActive On|Off | Off | svdh | E |
Enables generation of Expires
headers | |||
| ExpiresByType MIME-type <code>seconds | svdh | E | |
Value of the Expires header configured
by MIME type | |||
| ExpiresDefault <code>seconds | svdh | E | |
| Default algorithm for calculating expiration time | |||
| ExtendedStatus On|Off | Off[*] | s | C |
| Keep track of extended status information for each request | |||
| ExtFilterDefine filtername parameters | s | E | |
| Define an external filter | |||
| ExtFilterOptions option [option] ... | NoLogStderr | d | E |
Configure mod_ext_filter options | |||
| FallbackResource disabled | local-url | svdh | B | |
| Define a default URL for requests that don't map to a file | |||
| FileETag component ... | MTime Size | svdh | C |
| File attributes used to create the ETag HTTP response header for static files | |||
| <Files filename> ... </Files> | svdh | C | |
| Contains directives that apply to matched filenames | |||
| <FilesMatch regex> ... </FilesMatch> | svdh | C | |
| Contains directives that apply to regular-expression matched filenames | |||
| FilterChain [+=-@!]filter-name ... | svdh | B | |
| Configure the filter chain | |||
| FilterDeclare filter-name [type] | svdh | B | |
| Declare a smart filter | |||
| FilterProtocol filter-name [provider-name] proto-flags | svdh | B | |
| Deal with correct HTTP protocol handling | |||
| FilterProvider filter-name provider-name expression | svdh | B | |
| Register a content filter | |||
| FilterTrace filter-name level | svd | B | |
Get debug/diagnostic information from
mod_filter | |||
| ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] | Prefer | svdh | B |
| Action to take if a single acceptable document is not found | |||
| ForceType media-type|None | dh | C | |
| Forces all matching files to be served with the specified media type in the HTTP Content-Type header field | |||
| ForensicLog filename|pipe | sv | E | |
| Sets filename of the forensic log | |||
| GlobalLogfile|pipe format|nickname [env=[!]environment-variable| expr=expression] | s | B | |
| Sets filename and format of log file | |||
| GprofDir /tmp/gprof/|/tmp/gprof/% | sv | C | |
| Directory to write gmon.out profiling data to. | |||
| GracefulShutdownTimeout seconds | 0 | s | M |
| Specify a timeout after which a gracefully shutdown server will exit. | |||
| Group unix-group | #-1 | s | B |
| Group under which the server will answer requests | |||
| H2CopyFiles on|off | off | svdh | E |
| Determine file handling in responses | |||
| H2Direct on|off | on for h2c, off for + | sv | E |
| H2 Direct Protocol Switch | |||
| H2EarlyHints on|off | off | sv | E |
| Determine sending of 103 status codes | |||
| H2MaxSessionStreams n | 100 | sv | E |
| Maximum number of active streams per HTTP/2 session. | |||
| H2MaxWorkerIdleSeconds n | 600 | s | E |
| Maximum number of seconds h2 workers remain idle until shut down. | |||
| H2MaxWorkers n | s | E | |
| Maximum number of worker threads to use per child process. | |||
| H2MinWorkers n | s | E | |
| Minimal number of worker threads to use per child process. | |||
| H2ModernTLSOnly on|off | on | sv | E |
| Require HTTP/2 connections to be "modern TLS" only | |||
| H2Push on|off | on | sv | E |
| H2 Server Push Switch | |||
| H2PushDiarySize n | 256 | sv | E |
| H2 Server Push Diary Size | |||
| H2PushPriority mime-type [after|before|interleaved] [weight] | * After 16 | sv | E |
| H2 Server Push Priority | |||
| H2PushResource [add] path [critical] | svdh | E | |
| Declares resources for early pushing to the client | |||
| H2SerializeHeaders on|off | off | sv | E |
| Serialize Request/Response Processing Switch | |||
| H2StreamMaxMemSize bytes | 65536 | sv | E |
| Maximum amount of output data buffered per stream. | |||
| H2TLSCoolDownSecs seconds | 1 | sv | E |
| - | |||
| H2TLSWarmUpSize amount | 1048576 | sv | E |
| - | |||
| H2Upgrade on|off | on for h2c, off for + | sv | E |
| H2 Upgrade Protocol Switch | |||
| H2WindowSize bytes | 65535 | sv | E |
| Size of Stream Window for upstream data. | |||
| Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] | svdh | E | |
| Configure HTTP response headers | |||
| HeaderName filename | svdh | B | |
| Name of the file that will be inserted at the top of the index listing | |||
| HeartbeatAddress addr:port | s | X | |
| Multicast address for heartbeat packets | |||
| HeartbeatListen addr:port | s | X | |
| multicast address to listen for incoming heartbeat requests | |||
| HeartbeatMaxServers number-of-servers | 10 | s | X |
| Specifies the maximum number of servers that will be sending heartbeat requests to this server | |||
| HeartbeatStorage file-path | logs/hb.dat | s | X |
| Path to store heartbeat data | |||
| HeartbeatStorage file-path | logs/hb.dat | s | X |
| Path to read heartbeat data | |||
| HostnameLookups On|Off|Double | Off | svd | C |
| Enables DNS lookups on client IP addresses | |||
| HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] [Allow0.9|Require1.0] | Strict LenientMetho + | sv | C |
| Modify restrictions on HTTP Request Messages | |||
| IdentityCheck On|Off | Off | svd | E |
| Enables logging of the RFC 1413 identity of the remote user | |||
| IdentityCheckTimeout seconds | 30 | svd | E |
| Determines the timeout duration for ident requests | |||
| <If expression> ... </If> | svdh | C | |
| Contains directives that apply only if a condition is satisfied by a request at runtime | |||
| <IfDefine [!]parameter-name> ... </IfDefine> | svdh | C | |
| Encloses directives that will be processed only if a test is true at startup | |||
| <IfDirective [!]directive-name> ... </IfDirective> | svdh | C | |
| Encloses directives that are processed conditional on the presence or absence of a specific directive | |||
| <IfFile [!]filename> ... </IfFile> | svdh | C | |
| Encloses directives that will be processed only if file exists at startup | |||
| <IfModule [!]module-file|module-identifier> ... </IfModule> | svdh | C | |
| Encloses directives that are processed conditional on the presence or absence of a specific module | |||
| <IfSection [!]section-name> ... </IfSection> | svdh | C | |
| Encloses directives that are processed conditional on the presence or absence of a specific section directive | |||
| <IfVersion [[!]operator] version> ... </IfVersion> | svdh | E | |
| contains version dependent configuration | |||
| ImapBase map|referer|URL | http://servername/ | svdh | B |
Default base for imagemap files | |||
| ImapDefault error|nocontent|map|referer|URL | nocontent | svdh | B |
| Default action when an imagemap is called with coordinates that are not explicitly mapped | |||
| ImapMenu none|formatted|semiformatted|unformatted | formatted | svdh | B |
| Action if no coordinates are given when calling an imagemap | |||
| Include file-path|directory-path|wildcard | svd | C | |
| Includes other configuration files from within the server configuration files | |||
| IncludeOptional file-path|directory-path|wildcard | svd | C | |
| Includes other configuration files from within the server configuration files | |||
| IndexHeadInsert "markup ..." | svdh | B | |
| Inserts text in the HEAD section of an index page. | |||
| IndexIgnore file [file] ... | "." | svdh | B |
| Adds to the list of files to hide when listing a directory | |||
| IndexIgnoreReset ON|OFF | svdh | B | |
| Empties the list of files to hide when listing a directory | |||
| IndexOptions [+|-]option [[+|-]option] ... | svdh | B | |
| Various configuration settings for directory indexing | |||
| IndexOrderDefault Ascending|Descending Name|Date|Size|Description | Ascending Name | svdh | B |
| Sets the default ordering of the directory index | |||
| IndexStyleSheet url-path | svdh | B | |
| Adds a CSS stylesheet to the directory index | |||
| InputSed sed-command | dh | X | |
Sed command to filter request data (typically POST data) | |||
| ISAPIAppendLogToErrors on|off | off | svdh | B |
Record HSE_APPEND_LOG_PARAMETER requests from
ISAPI extensions to the error log | |||
| ISAPIAppendLogToQuery on|off | on | svdh | B |
Record HSE_APPEND_LOG_PARAMETER requests from
ISAPI extensions to the query field | |||
| ISAPICacheFile file-path [file-path] ... | sv | B | |
| ISAPI .dll files to be loaded at startup | |||
| ISAPIFakeAsync on|off | off | svdh | B |
| Fake asynchronous support for ISAPI callbacks | |||
| ISAPILogNotSupported on|off | off | svdh | B |
| Log unsupported feature requests from ISAPI extensions | |||
| ISAPIReadAheadBuffer size | 49152 | svdh | B |
| Size of the Read Ahead Buffer sent to ISAPI extensions | |||
| KeepAlive On|Off | On | sv | C |
| Enables HTTP persistent connections | |||
| KeepAliveTimeout num[ms] | 5 | sv | C |
| Amount of time the server will wait for subsequent requests on a persistent connection | |||
| KeptBodySize maximum size in bytes | 0 | d | B |
| Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include. | |||
| LanguagePriority MIME-lang [MIME-lang] ... | svdh | B | |
| The precedence of language variants for cases where the client does not express a preference | |||
| LDAPCacheEntries number | 1024 | s | E |
| Maximum number of entries in the primary LDAP cache | |||
| LDAPCacheTTL seconds | 600 | s | E |
| Time that cached items remain valid | |||
| LDAPConnectionPoolTTL n | -1 | sv | E |
| Discard backend connections that have been sitting in the connection pool too long | |||
| LDAPConnectionTimeout seconds | s | E | |
| Specifies the socket connection timeout in seconds | |||
| LDAPLibraryDebug 7 | s | E | |
| Enable debugging in the LDAP SDK | |||
| LDAPOpCacheEntries number | 1024 | s | E |
| Number of entries used to cache LDAP compare operations | |||
| LDAPOpCacheTTL seconds | 600 | s | E |
| Time that entries in the operation cache remain valid | |||
| LDAPReferralHopLimit number | dh | E | |
| The maximum number of referral hops to chase before terminating an LDAP query. | |||
| LDAPReferrals On|Off|default | On | dh | E |
| Enable referral chasing during queries to the LDAP server. | |||
| LDAPRetries number-of-retries | 3 | s | E |
| Configures the number of LDAP server retries. | |||
| LDAPRetryDelay seconds | 0 | s | E |
| Configures the delay between LDAP server retries. | |||
| LDAPSharedCacheFile directory-path/filename | s | E | |
| Sets the shared memory cache file | |||
| LDAPSharedCacheSize bytes | 500000 | s | E |
| Size in bytes of the shared-memory cache | |||
| LDAPTimeout seconds | 60 | s | E |
| Specifies the timeout for LDAP search and bind operations, in seconds | |||
| LDAPTrustedClientCert type directory-path/filename/nickname [password] | dh | E | |
| Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates. | |||
| LDAPTrustedGlobalCert type directory-path/filename [password] | s | E | |
| Sets the file or database containing global trusted Certificate Authority or global client certificates | |||
| LDAPTrustedMode type | sv | E | |
| Specifies the SSL/TLS mode to be used when connecting to an LDAP server. | |||
| LDAPVerifyServerCert On|Off | On | s | E |
| Force server certificate verification | |||
| <Limit method [method] ... > ... </Limit> | dh | C | |
| Restrict enclosed access controls to only certain HTTP methods | |||
| <LimitExcept method [method] ... > ... </LimitExcept> | dh | C | |
| Restrict access controls to all HTTP methods except the named ones | |||
| LimitInternalRecursion number [number] | 10 | sv | C |
| Determine maximum number of internal redirects and nested subrequests | |||
| LimitRequestBody bytes | 0 | svdh | C |
| Restricts the total size of the HTTP request body sent from the client | |||
| LimitRequestFields number | 100 | sv | C |
| Limits the number of HTTP request header fields that will be accepted from the client | |||
| LimitRequestFieldSize bytes | 8190 | sv | C |
| Limits the size of the HTTP request header allowed from the client | |||
| LimitRequestLine bytes | 8190 | sv | C |
| Limit the size of the HTTP request line that will be accepted from the client | |||
| LimitXMLRequestBody bytes | 1000000 | svdh | C |
| Limits the size of an XML-based request body | |||
| Listen [IP-address:]portnumber [protocol] | s | M | |
| IP addresses and ports that the server listens to | |||
| ListenBacklog backlog | s | M | |
| Maximum length of the queue of pending connections | |||
| ListenCoresBucketsRatio ratio | 0 (disabled) | s | M |
| Ratio between the number of CPU cores (online) and the number of listeners' buckets | |||
| LoadFile filename [filename] ... | sv | E | |
| Link in the named object file or library | |||
| LoadModule module filename | sv | E | |
| Links in the object file or library, and adds to the list of active modules | |||
| <Location URL-path|URL> ... </Location> | sv | C | |
| Applies the enclosed directives only to matching URLs | |||
| <LocationMatch regex> ... </LocationMatch> | sv | C | |
| Applies the enclosed directives only to regular-expression matching URLs | |||
| LogFormat format|nickname [nickname] | "%h %l %u %t \"%r\" + | sv | B |
| Describes a format for use in a log file | |||
| LogIOTrackTTFB ON|OFF | OFF | svdh | E |
| Enable tracking of time to first byte (TTFB) | |||
| LogLevel [module:]level [module:level] ... | warn | svd | C |
| Controls the verbosity of the ErrorLog | |||
| LogMessage message [hook=hook] [expr=expression] | d | X | |
| Log user-defined message to error log | |||
| LuaAuthzProvider provider_name /path/to/lua/script.lua function_name | s | E | |
Plug an authorization provider function into mod_authz_core
| |||
| LuaCodeCache stat|forever|never | stat | svdh | E |
| Configure the compiled code cache. | |||
| LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late] | svdh | E | |
| Provide a hook for the access_checker phase of request processing | |||
| LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late] | svdh | E | |
| Provide a hook for the auth_checker phase of request processing | |||
| LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late] | svdh | E | |
| Provide a hook for the check_user_id phase of request processing | |||
| LuaHookFixups /path/to/lua/script.lua hook_function_name | svdh | E | |
| Provide a hook for the fixups phase of a request processing | |||
| LuaHookInsertFilter /path/to/lua/script.lua hook_function_name | svdh | E | |
| Provide a hook for the insert_filter phase of request processing | |||
| LuaHookLog /path/to/lua/script.lua log_function_name | svdh | E | |
| Provide a hook for the access log phase of a request processing | |||
| LuaHookMapToStorage /path/to/lua/script.lua hook_function_name | svdh | E | |
| Provide a hook for the map_to_storage phase of request processing | |||
| LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late] | sv | E | |
| Provide a hook for the translate name phase of request processing | |||
| LuaHookTypeChecker /path/to/lua/script.lua hook_function_name | svdh | E | |
| Provide a hook for the type_checker phase of request processing | |||
| LuaInherit none|parent-first|parent-last | parent-first | svdh | E |
| Controls how parent configuration sections are merged into children | |||
| LuaInputFilter filter_name /path/to/lua/script.lua function_name | s | E | |
| Provide a Lua function for content input filtering | |||
| LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name] | svdh | E | |
| Map a path to a lua handler | |||
| LuaOutputFilter filter_name /path/to/lua/script.lua function_name | s | E | |
| Provide a Lua function for content output filtering | |||
| LuaPackageCPath /path/to/include/?.soa | svdh | E | |
| Add a directory to lua's package.cpath | |||
| LuaPackagePath /path/to/include/?.lua | svdh | E | |
| Add a directory to lua's package.path | |||
| LuaQuickHandler /path/to/script.lua hook_function_name | sv | E | |
| Provide a hook for the quick handler of request processing | |||
| LuaRoot /path/to/a/directory | svdh | E | |
| Specify the base path for resolving relative paths for mod_lua directives | |||
| LuaScope once|request|conn|thread|server [min] [max] | once | svdh | E |
| One of once, request, conn, thread -- default is once | |||
| <Macro name [par1 .. parN]> ... </Macro> | svd | B | |
| Define a configuration file macro | |||
| MaxConnectionsPerChild number | 0 | s | M |
| Limit on the number of connections that an individual child server will handle during its life | |||
| MaxKeepAliveRequests number | 100 | sv | C |
| Number of requests allowed on a persistent connection | |||
| MaxMemFree KBytes | 2048 | s | M |
Maximum amount of memory that the main allocator is allowed
to hold without calling free() | |||
| MaxRangeOverlaps default | unlimited | none | number-of-ranges | 20 | svd | C |
Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete
resource | |||
| MaxRangeReversals default | unlimited | none | number-of-ranges | 20 | svd | C |
Number of range reversals (eg: 100-200,50-70) allowed before returning the complete
resource | |||
| MaxRanges default | unlimited | none | number-of-ranges | 200 | svd | C |
| Number of ranges allowed before returning the complete resource | |||
| MaxRequestWorkers number | s | M | |
| Maximum number of connections that will be processed simultaneously | |||
| MaxSpareServers number | 10 | s | M |
| Maximum number of idle child server processes | |||
| MaxSpareThreads number | s | M | |
| Maximum number of idle threads | |||
| MaxThreads number | 2048 | s | M |
| Set the maximum number of worker threads | |||
| MDBaseServer on|off | off | s | E |
| Control if base server may be managed or only virtual hosts. | |||
| MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
| Type of ACME challenge used to prove domain ownership. | |||
| MDCertificateAgreement url-of-terms-of-service | s | E | |
| The URL of the Terms-of-Service document, that the CA server requires you to accept. | |||
| MDCertificateAuthority url | https://acme-v01.ap + | s | E |
| The URL of the ACME Certificate Authority service. | |||
| MDCertificateProtocol protocol | ACME | s | E |
| The protocol to use with the Certificate Authority. | |||
| MDDriveMode always|auto|manual | auto | s | E |
| Control when it is allowed to obtain/renew certificates. | |||
| MDHttpProxy url | s | E | |
| Define a proxy for outgoing connections. | |||
| MDMember hostname | s | E | |
| Additional hostname for the managed domain. | |||
| MDMembers auto|manual | auto | s | E |
| Control if the alias domain names are automatically added. | |||
| MDMustStaple on|off | off | s | E |
| Control if new certificates carry the OCSP Must Staple flag. | |||
| MDNotifyCmd path [ args ] | s | E | |
| Run a program when Managed Domain are ready. | |||
| MDomain dns-name [ other-dns-name... ] [auto|manual] | s | E | |
| Define list of domain names that belong to one group. | |||
| <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | s | E | |
| Container for directives applied to the same managed domains. | |||
| MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
| Map external to internal ports for domain ownership verification. | |||
| MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
| Set type and size of the private keys generated. | |||
| MDRenewWindow duration | 33% | s | E |
| Control when a certificate will be renewed. | |||
| MDRequireHttps off|temporary|permanent | off | s | E |
| Redirects http: traffic to https: for Managed Domains. | |||
| MDStoreDir path | md | s | E |
| Path on the local file system to store the Managed Domains data. | |||
| MemcacheConnTTL num[units] | 15s | sv | E |
| Keepalive time for idle connections | |||
| MergeTrailers [on|off] | off | sv | C |
| Determines whether trailers are merged into headers | |||
| MetaDir directory | .web | svdh | E |
| Name of the directory to find CERN-style meta information files | |||
| MetaFiles on|off | off | svdh | E |
| Activates CERN meta-file processing | |||
| MetaSuffix suffix | .meta | svdh | E |
| File name suffix for the file containing CERN-style meta information | |||
| MimeMagicFile file-path | sv | E | |
| Enable MIME-type determination based on file contents using the specified magic file | |||
| MinSpareServers number | 5 | s | M |
| Minimum number of idle child server processes | |||
| MinSpareThreads number | s | M | |
| Minimum number of idle threads available to handle request spikes | |||
| MMapFile file-path [file-path] ... | s | X | |
| Map a list of files into memory at startup time | |||
| ModemStandard V.21|V.26bis|V.32|V.34|V.92 | d | X | |
| Modem standard to simulate | |||
| ModMimeUsePathInfo On|Off | Off | d | B |
Tells mod_mime to treat path_info
components as part of the filename | |||
| MultiviewsMatch Any|NegotiatedOnly|Filters|Handlers [Handlers|Filters] | NegotiatedOnly | svdh | B |
| The types of files that will be included when searching for a matching file with MultiViews | |||
| Mutex mechanism [default|mutex-name] ... [OmitPID] | default | s | C |
| Configures mutex mechanism and lock file directory for all or specified mutexes | |||
| NameVirtualHost addr[:port] | s | C | |
| DEPRECATED: Designates an IP address for name-virtual hosting | |||
| NoProxy host [host] ... | sv | E | |
| Hosts, domains, or networks that will be connected to directly | |||
| NWSSLTrustedCerts filename [filename] ... | s | B | |
| List of additional client certificates | |||
| NWSSLUpgradeable [IP-address:]portnumber | s | B | |
| Allows a connection to be upgraded to an SSL connection upon request | |||
| Options [+|-]option [[+|-]option] ... | FollowSymlinks | svdh | C |
| Configures what features are available in a particular directory | |||
| Order ordering | Deny,Allow | dh | E |
Controls the default access state and the order in which
Allow and Deny are
evaluated. | |||
| OutputSed sed-command | dh | X | |
| Sed command for filtering response content | |||
| PassEnv env-variable [env-variable] ... | svdh | B | |
| Passes environment variables from the shell | |||
| PidFile filename | logs/httpd.pid | s | M |
| File where the server records the process ID of the daemon | |||
| PrivilegesMode FAST|SECURE|SELECTIVE | FAST | svd | X |
| Trade off processing speed and efficiency vs security against malicious privileges-aware code. | |||
| Protocol protocol | sv | C | |
| Protocol for a listening socket | |||
| ProtocolEcho On|Off | Off | sv | X |
| Turn the echo server on or off | |||
| Protocols protocol ... | http/1.1 | sv | C |
| Protocols available for a server/virtual host | |||
| ProtocolsHonorOrder On|Off | On | sv | C |
| Determines if order of Protocols determines precedence during negotiation | |||
| <Proxy wildcard-url> ...</Proxy> | sv | E | |
| Container for directives applied to proxied resources | |||
| ProxyAddHeaders Off|On | On | svd | E |
| Add proxy information in X-Forwarded-* headers | |||
| ProxyBadHeader IsError|Ignore|StartBody | IsError | sv | E |
| Determines how to handle bad header lines in a response | |||
| ProxyBlock *|word|host|domain [word|host|domain] ... | sv | E | |
| Words, hosts, or domains that are banned from being proxied | |||
| ProxyDomain Domain | sv | E | |
| Default domain name for proxied requests | |||
| ProxyErrorOverride On|Off | Off | svd | E |
| Override error pages for proxied content | |||
| ProxyExpressDBMFile <pathname> | sv | E | |
| Pathname to DBM file. | |||
| ProxyExpressDBMFile <type> | sv | E | |
| DBM type of file. | |||
| ProxyExpressEnable [on|off] | sv | E | |
| Enable the module functionality. | |||
| ProxyFCGIBackendType FPM|GENERIC | FPM | svdh | E |
| Specify the type of backend FastCGI application | |||
| ProxyFCGISetEnvIf conditional-expression [!]environment-variable-name [value-expression] | svdh | E | |
| Allow variables sent to FastCGI servers to be fixed up | |||
| ProxyFtpDirCharset character_set | ISO-8859-1 | svd | E |
| Define the character set for proxied FTP listings | |||
| ProxyFtpEscapeWildcards on|off | on | svd | E |
| Whether wildcards in requested filenames are escaped when sent to the FTP server | |||
| ProxyFtpListOnWildcard on|off | on | svd | E |
| Whether wildcards in requested filenames trigger a file listing | |||
| ProxyHCExpr name {ap_expr expression} | sv | E | |
| Creates a named condition expression to use to determine health of the backend based on its response | |||
| ProxyHCTemplate name parameter=setting [...] | sv | E | |
| Creates a named template for setting various health check parameters | |||
| ProxyHCTPsize size | 16 | s | E |
| Sets the total server-wide size of the threadpool used for the health check workers | |||
| ProxyHTMLBufSize bytes | 8192 | svd | B |
| Sets the buffer size increment for buffering inline scripts and stylesheets. | |||
| ProxyHTMLCharsetOut Charset | * | svd | B | |
| Specify a charset for mod_proxy_html output. | |||
| ProxyHTMLDocType HTML|XHTML [Legacy] OR ProxyHTMLDocType fpi [SGML|XML] | svd | B | |
| Sets an HTML or XHTML document type declaration. | |||
| ProxyHTMLEnable On|Off | Off | svd | B |
| Turns the proxy_html filter on or off. | |||
| ProxyHTMLEvents attribute [attribute ...] | svd | B | |
| Specify attributes to treat as scripting events. | |||
| ProxyHTMLExtended On|Off | Off | svd | B |
| Determines whether to fix links in inline scripts, stylesheets, and scripting events. | |||
| ProxyHTMLFixups [lowercase] [dospath] [reset] | svd | B | |
| Fixes for simple HTML errors. | |||
| ProxyHTMLInterp On|Off | Off | svd | B |
Enables per-request interpolation of
ProxyHTMLURLMap rules. | |||
| ProxyHTMLLinks element attribute [attribute2 ...] | svd | B | |
| Specify HTML elements that have URL attributes to be rewritten. | |||
| ProxyHTMLMeta On|Off | Off | svd | B |
Turns on or off extra pre-parsing of metadata in HTML
<head> sections. | |||
| ProxyHTMLStripComments On|Off | Off | svd | B |
| Determines whether to strip HTML comments. | |||
| ProxyHTMLURLMap from-pattern to-pattern [flags] [cond] | svd | B | |
| Defines a rule to rewrite HTML links | |||
| ProxyIOBufferSize bytes | 8192 | sv | E |
| Determine size of internal data throughput buffer | |||
| <ProxyMatch regex> ...</ProxyMatch> | sv | E | |
| Container for directives applied to regular-expression-matched proxied resources | |||
| ProxyMaxForwards number | -1 | sv | E |
| Maximium number of proxies that a request can be forwarded through | |||
| ProxyPass [path] !|url [key=value [key=value ...]] [nocanon] [interpolate] [noquery] | svd | E | |
| Maps remote servers into the local server URL-space | |||
| ProxyPassInherit On|Off | On | sv | E |
| Inherit ProxyPass directives defined from the main server | |||
| ProxyPassInterpolateEnv On|Off | Off | svd | E |
| Enable Environment Variable interpolation in Reverse Proxy configurations | |||
| ProxyPassMatch [regex] !|url [key=value [key=value ...]] | svd | E | |
| Maps remote servers into the local server URL-space using regular expressions | |||
| ProxyPassReverse [path] url [interpolate] | svd | E | |
| Adjusts the URL in HTTP response headers sent from a reverse proxied server | |||
| ProxyPassReverseCookieDomain internal-domain public-domain [interpolate] | svd | E | |
| Adjusts the Domain string in Set-Cookie headers from a reverse- proxied server | |||
| ProxyPassReverseCookiePath internal-path public-path [interpolate] | svd | E | |
| Adjusts the Path string in Set-Cookie headers from a reverse- proxied server | |||
| ProxyPreserveHost On|Off | Off | svd | E |
| Use incoming Host HTTP request header for proxy request | |||
| ProxyReceiveBufferSize bytes | 0 | sv | E |
| Network buffer size for proxied HTTP and FTP connections | |||
| ProxyRemote match remote-server | sv | E | |
| Remote proxy used to handle certain requests | |||
| ProxyRemoteMatch regex remote-server | sv | E | |
| Remote proxy used to handle requests matched by regular expressions | |||
| ProxyRequests On|Off | Off | sv | E |
| Enables forward (standard) proxy requests | |||
| ProxySCGIInternalRedirect On|Off|Headername | On | svd | E |
| Enable or disable internal redirect responses from the backend | |||
| ProxySCGISendfile On|Off|Headername | Off | svd | E |
| Enable evaluation of X-Sendfile pseudo response header | |||
| ProxySet url key=value [key=value ...] | svd | E | |
| Set various Proxy balancer or member parameters | |||
| ProxySourceAddress address | sv | E | |
| Set local IP address for outgoing proxy connections | |||
| ProxyStatus Off|On|Full | Off | sv | E |
| Show Proxy LoadBalancer status in mod_status | |||
| ProxyTimeout seconds | sv | E | |
| Network timeout for proxied requests | |||
| ProxyVia On|Off|Full|Block | Off | sv | E |
Information provided in the Via HTTP response
header for proxied requests | |||
| QualifyRedirectURL ON|OFF | OFF | svd | C |
| Controls whether the REDIRECT_URL environment variable is fully qualified | |||
| ReadmeName filename | svdh | B | |
| Name of the file that will be inserted at the end of the index listing | |||
| ReceiveBufferSize bytes | 0 | s | M |
| TCP receive buffer size | |||
| Redirect [status] [URL-path] URL | svdh | B | |
| Sends an external redirect asking the client to fetch a different URL | |||
| RedirectMatch [status] regex URL | svdh | B | |
| Sends an external redirect based on a regular expression match of the current URL | |||
| RedirectPermanent URL-path URL | svdh | B | |
| Sends an external permanent redirect asking the client to fetch a different URL | |||
| RedirectTemp URL-path URL | svdh | B | |
| Sends an external temporary redirect asking the client to fetch a different URL | |||
| ReflectorHeader inputheader [outputheader] | svdh | B | |
| Reflect an input header to the output headers | |||
| RegexDefaultOptions [none] [+|-]option [[+|-]option] ... | DOLLAR_ENDONLY | s | C |
| Allow to configure global/default options for regexes | |||
| RegisterHttpMethod method [method [...]] | s | C | |
| Register non-standard HTTP methods | |||
| RemoteIPHeader header-field | sv | B | |
| Declare the header field which should be parsed for useragent IP addresses | |||
| RemoteIPInternalProxy proxy-ip|proxy-ip/subnet|hostname ... | sv | B | |
| Declare client intranet IP addresses trusted to present the RemoteIPHeader value | |||
| RemoteIPInternalProxyList filename | sv | B | |
| Declare client intranet IP addresses trusted to present the RemoteIPHeader value | |||
| RemoteIPProxiesHeader HeaderFieldName | sv | B | |
| Declare the header field which will record all intermediate IP addresses | |||
| RemoteIPProxyProtocol On|Off | sv | B | |
| Enable or disable PROXY protocol handling | |||
| RemoteIPProxyProtocolExceptions host|range [host|range] [host|range] | sv | B | |
| Disable processing of PROXY header for certain hosts or networks | |||
| RemoteIPTrustedProxy proxy-ip|proxy-ip/subnet|hostname ... | sv | B | |
| Declare client intranet IP addresses trusted to present the RemoteIPHeader value | |||
| RemoteIPTrustedProxyList filename | sv | B | |
| Declare client intranet IP addresses trusted to present the RemoteIPHeader value | |||
| RemoveCharset extension [extension] ... | vdh | B | |
| Removes any character set associations for a set of file extensions | |||
| RemoveEncoding extension [extension] ... | vdh | B | |
| Removes any content encoding associations for a set of file extensions | |||
| RemoveHandler extension [extension] ... | vdh | B | |
| Removes any handler associations for a set of file extensions | |||
| RemoveInputFilter extension [extension] ... | vdh | B | |
| Removes any input filter associations for a set of file extensions | |||
| RemoveLanguage extension [extension] ... | vdh | B | |
| Removes any language associations for a set of file extensions | |||
| RemoveOutputFilter extension [extension] ... | vdh | B | |
| Removes any output filter associations for a set of file extensions | |||
| RemoveType extension [extension] ... | vdh | B | |
| Removes any content type associations for a set of file extensions | |||
| RequestHeader add|append|edit|edit*|merge|set|setifempty|unset header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] | svdh | E | |
| Configure HTTP request headers | |||
| RequestReadTimeout [header=timeout[-maxtimeout][,MinRate=rate] [body=timeout[-maxtimeout][,MinRate=rate] | sv | E | |
| Set timeout values for receiving request headers and body from client. | |||
| Require [not] entity-name [entity-name] ... | dh | B | |
| Tests whether an authenticated user is authorized by an authorization provider. | |||
| <RequireAll> ... </RequireAll> | dh | B | |
| Enclose a group of authorization directives of which none must fail and at least one must succeed for the enclosing directive to succeed. | |||
| <RequireAny> ... </RequireAny> | dh | B | |
| Enclose a group of authorization directives of which one must succeed for the enclosing directive to succeed. | |||
| <RequireNone> ... </RequireNone> | dh | B | |
| Enclose a group of authorization directives of which none must succeed for the enclosing directive to not fail. | |||
| RewriteBase URL-path | dh | E | |
| Sets the base URL for per-directory rewrites | |||
| RewriteCond TestString CondPattern [flags] | svdh | E | |
| Defines a condition under which rewriting will take place | |||
| RewriteEngine on|off | off | svdh | E |
| Enables or disables runtime rewriting engine | |||
| RewriteMap MapName MapType:MapSource [MapTypeOptions] | sv | E | |
| Defines a mapping function for key-lookup | |||
| RewriteOptions Options | svdh | E | |
| Sets some special options for the rewrite engine | |||
| RewriteRule Pattern Substitution [flags] | svdh | E | |
| Defines rules for the rewriting engine | |||
| RLimitCPU seconds|max [seconds|max] | svdh | C | |
| Limits the CPU consumption of processes launched by Apache httpd children | |||
| RLimitMEM bytes|max [bytes|max] | svdh | C | |
| Limits the memory consumption of processes launched by Apache httpd children | |||
| RLimitNPROC number|max [number|max] | svdh | C | |
| Limits the number of processes that can be launched by processes launched by Apache httpd children | |||
| Satisfy Any|All | All | dh | E |
| Interaction between host-level access control and user authentication | |||
| ScoreBoardFile file-path | logs/apache_runtime + | s | M |
| Location of the file used to store coordination data for the child processes | |||
| Script method cgi-script | svd | B | |
| Activates a CGI script for a particular request method. | |||
| ScriptAlias [URL-path] file-path|directory-path | svd | B | |
| Maps a URL to a filesystem location and designates the target as a CGI script | |||
| ScriptAliasMatch regex file-path|directory-path | sv | B | |
| Maps a URL to a filesystem location using a regular expression and designates the target as a CGI script | |||
| ScriptInterpreterSource Registry|Registry-Strict|Script | Script | svdh | C |
| Technique for locating the interpreter for CGI scripts | |||
| ScriptLog file-path | sv | B | |
| Location of the CGI script error logfile | |||
| ScriptLogBuffer bytes | 1024 | sv | B |
| Maximum amount of PUT or POST requests that will be recorded in the scriptlog | |||
| ScriptLogLength bytes | 10385760 | sv | B |
| Size limit of the CGI script logfile | |||
| ScriptSock file-path | cgisock | s | B |
| The filename prefix of the socket to use for communication with the cgi daemon | |||
| SecureListen [IP-address:]portnumber Certificate-Name [MUTUAL] | s | B | |
| Enables SSL encryption for the specified port | |||
| SeeRequestTail On|Off | Off | s | C |
| Determine if mod_status displays the first 63 characters of a request or the last 63, assuming the request itself is greater than 63 chars. | |||
| SendBufferSize bytes | 0 | s | M |
| TCP buffer size | |||
| ServerAdmin email-address|URL | sv | C | |
| Email address that the server includes in error messages sent to the client | |||
| ServerAlias hostname [hostname] ... | v | C | |
| Alternate names for a host used when matching requests to name-virtual hosts | |||
| ServerLimit number | s | M | |
| Upper limit on configurable number of processes | |||
| ServerName [scheme://]domain-name|ip-address[:port] | sv | C | |
| Hostname and port that the server uses to identify itself | |||
| ServerPath URL-path | v | C | |
| Legacy URL pathname for a name-based virtual host that is accessed by an incompatible browser | |||
| ServerRoot directory-path | /usr/local/apache | s | C |
| Base directory for the server installation | |||
| ServerSignature On|Off|EMail | Off | svdh | C |
| Configures the footer on server-generated documents | |||
| ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full | Full | s | C |
Configures the Server HTTP response
header | |||
| Session On|Off | Off | svdh | E |
| Enables a session for the current directory or location | |||
| SessionCookieName name attributes | svdh | E | |
| Name and attributes for the RFC2109 cookie storing the session | |||
| SessionCookieName2 name attributes | svdh | E | |
| Name and attributes for the RFC2965 cookie storing the session | |||
| SessionCookieRemove On|Off | Off | svdh | E |
| Control for whether session cookies should be removed from incoming HTTP headers | |||
| SessionCryptoCipher name | svdh | X | |
| The crypto cipher to be used to encrypt the session | |||
| SessionCryptoDriver name [param[=value]] | s | X | |
| The crypto driver to be used to encrypt the session | |||
| SessionCryptoPassphrase secret [ secret ... ] | svdh | X | |
| The key used to encrypt the session | |||
| SessionCryptoPassphraseFile filename | svd | X | |
| File containing keys used to encrypt the session | |||
| SessionDBDCookieName name attributes | svdh | E | |
| Name and attributes for the RFC2109 cookie storing the session ID | |||
| SessionDBDCookieName2 name attributes | svdh | E | |
| Name and attributes for the RFC2965 cookie storing the session ID | |||
| SessionDBDCookieRemove On|Off | On | svdh | E |
| Control for whether session ID cookies should be removed from incoming HTTP headers | |||
| SessionDBDDeleteLabel label | deletesession | svdh | E |
| The SQL query to use to remove sessions from the database | |||
| SessionDBDInsertLabel label | insertsession | svdh | E |
| The SQL query to use to insert sessions into the database | |||
| SessionDBDPerUser On|Off | Off | svdh | E |
| Enable a per user session | |||
| SessionDBDSelectLabel label | selectsession | svdh | E |
| The SQL query to use to select sessions from the database | |||
| SessionDBDUpdateLabel label | updatesession | svdh | E |
| The SQL query to use to update existing sessions in the database | |||
| SessionEnv On|Off | Off | svdh | E |
| Control whether the contents of the session are written to the HTTP_SESSION environment variable | |||
| SessionExclude path | svdh | E | |
| Define URL prefixes for which a session is ignored | |||
| SessionHeader header | svdh | E | |
| Import session updates from a given HTTP response header | |||
| SessionInclude path | svdh | E | |
| Define URL prefixes for which a session is valid | |||
| SessionMaxAge maxage | 0 | svdh | E |
| Define a maximum age in seconds for a session | |||
| SetEnv env-variable [value] | svdh | B | |
| Sets environment variables | |||
| SetEnvIf attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ... | svdh | B | |
| Sets environment variables based on attributes of the request | |||
| SetEnvIfExpr expr [!]env-variable[=value] [[!]env-variable[=value]] ... | svdh | B | |
| Sets environment variables based on an ap_expr expression | |||
| SetEnvIfNoCase attribute regex [!]env-variable[=value] [[!]env-variable[=value]] ... | svdh | B | |
| Sets environment variables based on attributes of the request without respect to case | |||
| SetHandler handler-name|none|expression | svdh | C | |
| Forces all matching files to be processed by a handler | |||
| SetInputFilter filter[;filter...] | svdh | C | |
| Sets the filters that will process client requests and POST input | |||
| SetOutputFilter filter[;filter...] | svdh | C | |
| Sets the filters that will process responses from the server | |||
| SSIEndTag tag | "-->" | sv | B |
| String that ends an include element | |||
| SSIErrorMsg message | "[an error occurred + | svdh | B |
| Error message displayed when there is an SSI error | |||
| SSIETag on|off | off | dh | B |
| Controls whether ETags are generated by the server. | |||
| SSILastModified on|off | off | dh | B |
Controls whether Last-Modified headers are generated by the
server. | |||
| SSILegacyExprParser on|off | off | dh | B |
| Enable compatibility mode for conditional expressions. | |||
| SSIStartTag tag | "<!--#" | sv | B |
| String that starts an include element | |||
| SSITimeFormat formatstring | "%A, %d-%b-%Y %H:%M + | svdh | B |
| Configures the format in which date strings are displayed | |||
| SSIUndefinedEcho string | "(none)" | svdh | B |
| String displayed when an unset variable is echoed | |||
| SSLCACertificateFile file-path | sv | E | |
| File of concatenated PEM-encoded CA Certificates for Client Auth | |||
| SSLCACertificatePath directory-path | sv | E | |
| Directory of PEM-encoded CA Certificates for Client Auth | |||
| SSLCADNRequestFile file-path | sv | E | |
| File of concatenated PEM-encoded CA Certificates for defining acceptable CA names | |||
| SSLCADNRequestPath directory-path | sv | E | |
| Directory of PEM-encoded CA Certificates for defining acceptable CA names | |||
| SSLCARevocationCheck chain|leaf|none flags | none | sv | E |
| Enable CRL-based revocation checking | |||
| SSLCARevocationFile file-path | sv | E | |
| File of concatenated PEM-encoded CA CRLs for Client Auth | |||
| SSLCARevocationPath directory-path | sv | E | |
| Directory of PEM-encoded CA CRLs for Client Auth | |||
| SSLCertificateChainFile file-path | sv | E | |
| File of PEM-encoded Server CA Certificates | |||
| SSLCertificateFile file-path | sv | E | |
| Server PEM-encoded X.509 certificate data file | |||
| SSLCertificateKeyFile file-path | sv | E | |
| Server PEM-encoded private key file | |||
| SSLCipherSuite [protocol] cipher-spec | DEFAULT (depends on + | svdh | E |
| Cipher Suite available for negotiation in SSL handshake | |||
| SSLCompression on|off | off | sv | E |
| Enable compression on the SSL level | |||
| SSLCryptoDevice engine | builtin | s | E |
| Enable use of a cryptographic hardware accelerator | |||
| SSLEngine on|off|optional | off | sv | E |
| SSL Engine Operation Switch | |||
| SSLFIPS on|off | off | s | E |
| SSL FIPS mode Switch | |||
| SSLHonorCipherOrder on|off | off | sv | E |
| Option to prefer the server's cipher preference order | |||
| SSLInsecureRenegotiation on|off | off | sv | E |
| Option to enable support for insecure renegotiation | |||
| SSLOCSDefaultResponder uri | sv | E | |
| Set the default responder URI for OCSP validation | |||
| SSLOCSPEnable on|leaf|off | off | sv | E |
| Enable OCSP validation of the client certificate chain | |||
| SSLOCSPNoverify On/Off | Off | sv | E |
| skip the OCSP responder certificates verification | |||
| SSLOCSPOverrideResponder on|off | off | sv | E |
| Force use of the default responder URI for OCSP validation | |||
| SSLOCSPProxyURL url | sv | E | |
| Proxy URL to use for OCSP requests | |||
| SSLOCSPResponderCertificateFile file | sv | E | |
| Set of trusted PEM encoded OCSP responder certificates | |||
| SSLOCSPResponderTimeout seconds | 10 | sv | E |
| Timeout for OCSP queries | |||
| SSLOCSPResponseMaxAge seconds | -1 | sv | E |
| Maximum allowable age for OCSP responses | |||
| SSLOCSPResponseTimeSkew seconds | 300 | sv | E |
| Maximum allowable time skew for OCSP response validation | |||
| SSLOCSPUseRequestNonce on|off | on | sv | E |
| Use a nonce within OCSP queries | |||
| SSLOpenSSLConfCmd command-name command-value | sv | E | |
| Configure OpenSSL parameters through its SSL_CONF API | |||
| SSLOptions [+|-]option ... | svdh | E | |
| Configure various SSL engine run-time options | |||
| SSLPassPhraseDialog type | builtin | s | E |
| Type of pass phrase dialog for encrypted private keys | |||
| SSLProtocol [+|-]protocol ... | all -SSLv3 (up to 2 + | sv | E |
| Configure usable SSL/TLS protocol versions | |||
| SSLProxyCACertificateFile file-path | sv | E | |
| File of concatenated PEM-encoded CA Certificates for Remote Server Auth | |||
| SSLProxyCACertificatePath directory-path | sv | E | |
| Directory of PEM-encoded CA Certificates for Remote Server Auth | |||
| SSLProxyCARevocationCheck chain|leaf|none | none | sv | E |
| Enable CRL-based revocation checking for Remote Server Auth | |||
| SSLProxyCARevocationFile file-path | sv | E | |
| File of concatenated PEM-encoded CA CRLs for Remote Server Auth | |||
| SSLProxyCARevocationPath directory-path | sv | E | |
| Directory of PEM-encoded CA CRLs for Remote Server Auth | |||
| SSLProxyCheckPeerCN on|off | on | sv | E |
| Whether to check the remote server certificate's CN field | |||
| SSLProxyCheckPeerExpire on|off | on | sv | E |
| Whether to check if remote server certificate is expired | |||
| SSLProxyCheckPeerName on|off | on | sv | E |
| Configure host name checking for remote server certificates | |||
| SSLProxyCipherSuite [protocol] cipher-spec | ALL:!ADH:RC4+RSA:+H + | sv | E |
| Cipher Suite available for negotiation in SSL proxy handshake | |||
| SSLProxyEngine on|off | off | sv | E |
| SSL Proxy Engine Operation Switch | |||
| SSLProxyMachineCertificateChainFile filename | sv | E | |
| File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate | |||
| SSLProxyMachineCertificateFile filename | sv | E | |
| File of concatenated PEM-encoded client certificates and keys to be used by the proxy | |||
| SSLProxyMachineCertificatePath directory | sv | E | |
| Directory of PEM-encoded client certificates and keys to be used by the proxy | |||
| SSLProxyProtocol [+|-]protocol ... | all -SSLv3 (up to 2 + | sv | E |
| Configure usable SSL protocol flavors for proxy usage | |||
| SSLProxyVerify level | none | sv | E |
| Type of remote server Certificate verification | |||
| SSLProxyVerifyDepth number | 1 | sv | E |
| Maximum depth of CA Certificates in Remote Server Certificate verification | |||
| SSLRandomSeed context source [bytes] | s | E | |
| Pseudo Random Number Generator (PRNG) seeding source | |||
| SSLRenegBufferSize bytes | 131072 | dh | E |
| Set the size for the SSL renegotiation buffer | |||
| SSLRequire expression | dh | E | |
| Allow access only when an arbitrarily complex boolean expression is true | |||
| SSLRequireSSL | dh | E | |
| Deny access when SSL is not used for the HTTP request | |||
| SSLSessionCache type | none | s | E |
| Type of the global/inter-process SSL Session Cache | |||
| SSLSessionCacheTimeout seconds | 300 | sv | E |
| Number of seconds before an SSL session expires in the Session Cache | |||
| SSLSessionTicketKeyFile file-path | sv | E | |
| Persistent encryption/decryption key for TLS session tickets | |||
| SSLSessionTickets on|off | on | sv | E |
| Enable or disable use of TLS session tickets | |||
| SSLSRPUnknownUserSeed secret-string | sv | E | |
| SRP unknown user seed | |||
| SSLSRPVerifierFile file-path | sv | E | |
| Path to SRP verifier file | |||
| SSLStaplingCache type | s | E | |
| Configures the OCSP stapling cache | |||
| SSLStaplingErrorCacheTimeout seconds | 600 | sv | E |
| Number of seconds before expiring invalid responses in the OCSP stapling cache | |||
| SSLStaplingFakeTryLater on|off | on | sv | E |
| Synthesize "tryLater" responses for failed OCSP stapling queries | |||
| SSLStaplingForceURL uri | sv | E | |
| Override the OCSP responder URI specified in the certificate's AIA extension | |||
| SSLStaplingResponderTimeout seconds | 10 | sv | E |
| Timeout for OCSP stapling queries | |||
| SSLStaplingResponseMaxAge seconds | -1 | sv | E |
| Maximum allowable age for OCSP stapling responses | |||
| SSLStaplingResponseTimeSkew seconds | 300 | sv | E |
| Maximum allowable time skew for OCSP stapling response validation | |||
| SSLStaplingReturnResponderErrors on|off | on | sv | E |
| Pass stapling related OCSP errors on to client | |||
| SSLStaplingStandardCacheTimeout seconds | 3600 | sv | E |
| Number of seconds before expiring responses in the OCSP stapling cache | |||
| SSLStrictSNIVHostCheck on|off | off | sv | E |
| Whether to allow non-SNI clients to access a name-based virtual host. | |||
| SSLUserName varname | sdh | E | |
| Variable name to determine user name | |||
| SSLUseStapling on|off | off | sv | E |
| Enable stapling of OCSP responses in the TLS handshake | |||
| SSLVerifyClient level | none | svdh | E |
| Type of Client Certificate verification | |||
| SSLVerifyDepth number | 1 | svdh | E |
| Maximum depth of CA Certificates in Client Certificate verification | |||
| StartServers number | s | M | |
| Number of child server processes created at startup | |||
| StartThreads number | s | M | |
| Number of threads created on startup | |||
| Substitute s/pattern/substitution/[infq] | dh | E | |
| Pattern to filter the response content | |||
| SubstituteInheritBefore on|off | off | dh | E |
| Change the merge order of inherited patterns | |||
| SubstituteMaxLineLength bytes(b|B|k|K|m|M|g|G) | 1m | dh | E |
| Set the maximum line size | |||
| Suexec On|Off | s | B | |
| Enable or disable the suEXEC feature | |||
| SuexecUserGroup User Group | sv | E | |
| User and group for CGI programs to run as | |||
| ThreadLimit number | s | M | |
| Sets the upper limit on the configurable number of threads per child process | |||
| ThreadsPerChild number | s | M | |
| Number of threads created by each child process | |||
| ThreadStackSize size | s | M | |
| The size in bytes of the stack used by threads handling client connections | |||
| TimeOut seconds | 60 | sv | C |
| Amount of time the server will wait for certain events before failing a request | |||
| TraceEnable [on|off|extended] | on | sv | C |
Determines the behavior on TRACE requests | |||
| TransferLog file|pipe | sv | B | |
| Specify location of a log file | |||
| TypesConfig file-path | conf/mime.types | s | B |
The location of the mime.types file | |||
| UnDefine parameter-name | s | C | |
| Undefine the existence of a variable | |||
| UndefMacro name | svd | B | |
| Undefine a macro | |||
| UnsetEnv env-variable [env-variable] ... | svdh | B | |
| Removes variables from the environment | |||
| Use name [value1 ... valueN] | svd | B | |
| Use a macro | |||
| UseCanonicalName On|Off|DNS | Off | svd | C |
| Configures how the server determines its own name and port | |||
| UseCanonicalPhysicalPort On|Off | Off | svd | C |
| Configures how the server determines its own port | |||
| User unix-userid | #-1 | s | B |
| The userid under which the server will answer requests | |||
| UserDir directory-filename [directory-filename] ... | sv | B | |
| Location of the user-specific directories | |||
| VHostCGIMode On|Off|Secure | On | v | X |
| Determines whether the virtualhost can run subprocesses, and the privileges available to subprocesses. | |||
| VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ... | v | X | |
| Assign arbitrary privileges to subprocesses created by a virtual host. | |||
| VHostGroup unix-groupid | v | X | |
| Sets the Group ID under which a virtual host runs. | |||
| VHostPrivs [+-]?privilege-name [[+-]?privilege-name] ... | v | X | |
| Assign arbitrary privileges to a virtual host. | |||
| VHostSecure On|Off | On | v | X |
| Determines whether the server runs with enhanced security for the virtualhost. | |||
| VHostUser unix-userid | v | X | |
| Sets the User ID under which a virtual host runs. | |||
| VirtualDocumentRoot interpolated-directory|none | none | sv | E |
| Dynamically configure the location of the document root for a given virtual host | |||
| VirtualDocumentRootIP interpolated-directory|none | none | sv | E |
| Dynamically configure the location of the document root for a given virtual host | |||
| <VirtualHost addr[:port] [addr[:port]] ...> ... </VirtualHost> | s | C | |
| Contains directives that apply only to a specific hostname or IP address | |||
| VirtualScriptAlias interpolated-directory|none | none | sv | E |
| Dynamically configure the location of the CGI directory for a given virtual host | |||
| VirtualScriptAliasIP interpolated-directory|none | none | sv | E |
| Dynamically configure the location of the CGI directory for a given virtual host | |||
| WatchdogInterval time-interval[s] | 1 | s | B |
| Watchdog interval in seconds | |||
| XBitHack on|off|full | off | svdh | B |
| Parse SSI directives in files with the execute bit set | |||
| xml2EncAlias charset alias [alias ...] | s | B | |
| Recognise Aliases for encoding values | |||
| xml2EncDefault name | svdh | B | |
| Sets a default encoding to assume when absolutely no information can be automatically detected | |||
| xml2StartParse element [element ...] | svdh | B | |
| Advise the parser to skip leading junk. | |||