【服务器与部署 07】Apache配置大师：让Python Web应用在老牌服务器上焕发新生命

【服务器与部署 07】Apache配置大师：让Python Web应用在老牌服务器上焕发新生命

关键词：Apache配置、Python Web部署、mod_wsgi、虚拟主机、WSGI服务器、Web服务器配置、Apache性能优化、Django部署、Flask部署、生产环境部署

摘要：Apache作为世界上最流行的Web服务器之一，为Python Web应用提供了稳定可靠的托管平台。本文深入探讨Apache与Python应用的集成方案，从mod_wsgi配置到虚拟主机管理，从性能优化到安全加固，帮助开发者掌握在Apache上部署Python Web应用的完整技能。通过实战案例和最佳实践，让这位Web服务器界的"老将"为你的Python应用注入新活力。

引言：为什么选择Apache？

想象一下，你正在为一个企业级Web应用选择服务器。Nginx很快，Node.js很现代，但客户要求使用他们已经熟悉的Apache。这时你可能会想：“Apache不是很老了吗？还能胜任现代Python应用的部署吗？”

答案是肯定的！Apache就像一位经验丰富的老师傅，虽然不是最年轻的，但拥有深厚的功底和丰富的经验。它的模块化架构、稳定性和广泛的社区支持，使其成为许多企业的首选。

今天，我们就来探索如何让Apache这位"老将"为Python Web应用发挥最大价值。

第一部分：Apache架构深度解析

1.1 Apache的核心架构

Apache采用模块化设计，就像一个可以自由组装的积木系统：

核心组件解析：

1. httpd核心：负责基本的HTTP协议处理
2. MPM模块：多进程/多线程处理模块
3. mod_wsgi：Python WSGI接口模块
4. 虚拟主机：支持多站点托管

1.2 Apache vs 其他Web服务器

让我们用一个生动的比喻来理解：

• Apache：像一家老字号酒店，服务周到，配套齐全
• Nginx：像现代化公寓，简洁高效，资源利用率高
• IIS：像企业会所，与Windows生态紧密集成

# Apache的优势
✅ 模块化架构，功能丰富
✅ 配置灵活，支持.htaccess
✅ 社区庞大，文档完善
✅ 企业级稳定性
✅ 与各种技术栈兼容性好

# Apache的劣势
❌ 内存占用相对较高
❌ 高并发性能不如Nginx
❌ 配置相对复杂

第二部分：mod_wsgi深度配置

2.1 mod_wsgi工作原理

mod_wsgi是Apache与Python应用之间的桥梁，就像翻译官一样：

# WSGI应用示例
def application(environ, start_response):
    """
    WSGI应用入口点
    environ: 环境变量字典
    start_response: 响应启动函数
    """
    status = '200 OK'
    headers = [('Content-type', 'text/html')]
    start_response(status, headers)
    
    return [b'<h1>Hello from Apache + mod_wsgi!</h1>']

2.2 mod_wsgi安装与配置

Ubuntu/Debian系统：

# 安装Apache和mod_wsgi
sudo apt update
sudo apt install apache2 apache2-dev python3-dev
sudo apt install libapache2-mod-wsgi-py3

# 启用mod_wsgi模块
sudo a2enmod wsgi
sudo systemctl restart apache2

CentOS/RHEL系统：

# 安装Apache和开发工具
sudo yum install httpd httpd-devel python3-devel gcc
sudo yum install python3-mod_wsgi

# 或者使用pip安装
pip3 install mod_wsgi
mod_wsgi-express install-module

2.3 mod_wsgi配置模式

2.3.1 嵌入模式配置

# /etc/apache2/sites-available/myapp-embedded.conf
<VirtualHost *:80>
    ServerName myapp.example.com
    DocumentRoot /var/www/myapp
    
    # 嵌入模式配置
    WSGIScriptAlias / /var/www/myapp/wsgi.py
    WSGIApplicationGroup %{GLOBAL}
    
    # Python路径配置
    WSGIPythonPath /var/www/myapp:/var/www/myapp/venv/lib/python3.8/site-packages
    
    <Directory /var/www/myapp>
        WSGIProcessGroup %{GLOBAL}
        WSGIApplicationGroup %{GLOBAL}
        Require all granted
    </Directory>
    
    # 静态文件配置
    Alias /static /var/www/myapp/static
    <Directory /var/www/myapp/static>
        Require all granted
    </Directory>
    
    # 日志配置
    ErrorLog ${APACHE_LOG_DIR}/myapp_error.log
    CustomLog ${APACHE_LOG_DIR}/myapp_access.log combined
</VirtualHost>

2.3.2 守护进程模式配置（推荐）

# /etc/apache2/sites-available/myapp-daemon.conf
<VirtualHost *:80>
    ServerName myapp.example.com
    DocumentRoot /var/www/myapp
    
    # 守护进程模式配置
    WSGIDaemonProcess myapp python-home=/var/www/myapp/venv \
                           python-path=/var/www/myapp \
                           processes=4 \
                           threads=15 \
                           display-name=%{GROUP} \
                           user=www-data \
                           group=www-data \
                           maximum-requests=1000 \
                           maximum-requests-per-child=1000
    
    WSGIProcessGroup myapp
    WSGIScriptAlias / /var/www/myapp/wsgi.py
    
    <Directory /var/www/myapp>
        WSGIProcessGroup myapp
        WSGIApplicationGroup %{GLOBAL}
        Require all granted
    </Directory>
    
    # 静态文件优化
    Alias /static /var/www/myapp/static
    <Directory /var/www/myapp/static>
        ExpiresActive On
        ExpiresDefault "access plus 1 month"
        Header append Cache-Control "public"
        Require all granted
    </Directory>
    
    # 媒体文件配置
    Alias /media /var/www/myapp/media
    <Directory /var/www/myapp/media>
        ExpiresActive On
        ExpiresDefault "access plus 1 year"
        Header append Cache-Control "public"
        Require all granted
    </Directory>
</VirtualHost>

2.4 WSGI应用文件配置

# /var/www/myapp/wsgi.py
#!/usr/bin/env python3
"""
WSGI应用配置文件
用于Apache mod_wsgi部署
"""
import os
import sys
import logging

# 配置日志
logging.basicConfig(
    level=logging.INFO,
    format='%(asctime)s %(levelname)s %(message)s',
    handlers=[
        logging.FileHandler('/var/log/apache2/myapp_wsgi.log'),
        logging.StreamHandler()
    ]
)

# 添加项目路径到Python路径
project_path = '/var/www/myapp'
if project_path not in sys.path:
    sys.path.insert(0, project_path)

# 激活虚拟环境
activate_this = '/var/www/myapp/venv/bin/activate_this.py'
if os.path.exists(activate_this):
    exec(open(activate_this).read(), dict(__file__=activate_this))

# 设置Django环境变量
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'myapp.settings.production')

try:
    # Django应用
    from django.core.wsgi import get_wsgi_application
    application = get_wsgi_application()
    logging.info("Django WSGI application loaded successfully")
    
except ImportError:
    # Flask应用
    try:
        from myapp import create_app
        application = create_app()
        logging.info("Flask WSGI application loaded successfully")
    except ImportError as e:
        logging.error(f"Failed to load WSGI application: {e}")
        raise

# 错误处理
def handle_error(environ, start_response):
    """错误处理函数"""
    status = '500 Internal Server Error'
    headers = [('Content-type', 'text/html')]
    start_response(status, headers)
    return [b'<h1>Application Error</h1>']

# 包装应用以添加错误处理
original_application = application

def application(environ, start_response):
    try:
        return original_application(environ, start_response)
    except Exception as e:
        logging.error(f"WSGI application error: {e}")
        return handle_error(environ, start_response)

第三部分：虚拟主机配置与管理

3.1 虚拟主机类型

Apache支持三种虚拟主机类型：

3.1.1 基于域名的虚拟主机

# /etc/apache2/sites-available/000-default.conf
<VirtualHost *:80>
    ServerName www.example.com
    ServerAlias example.com
    DocumentRoot /var/www/example
    
    WSGIDaemonProcess example python-home=/var/www/example/venv
    WSGIProcessGroup example
    WSGIScriptAlias / /var/www/example/wsgi.py
    
    <Directory /var/www/example>
        WSGIProcessGroup example
        WSGIApplicationGroup %{GLOBAL}
        Require all granted
    </Directory>
</VirtualHost>

<VirtualHost *:80>
    ServerName api.example.com
    DocumentRoot /var/www/api
    
    WSGIDaemonProcess api python-home=/var/www/api/venv
    WSGIProcessGroup api
    WSGIScriptAlias / /var/www/api/wsgi.py
    
    <Directory /var/www/api>
        WSGIProcessGroup api
        WSGIApplicationGroup %{GLOBAL}
        Require all granted
    </Directory>
</VirtualHost>

3.1.2 基于IP的虚拟主机

# 适用于多IP服务器
<VirtualHost 192.168.1.10:80>
    ServerName app1.example.com
    DocumentRoot /var/www/app1
    # ... 其他配置
</VirtualHost>

<VirtualHost 192.168.1.11:80>
    ServerName app2.example.com
    DocumentRoot /var/www/app2
    # ... 其他配置
</VirtualHost>

3.1.3 基于端口的虚拟主机

# 监听多个端口
Listen 80
Listen 8080
Listen 8081

<VirtualHost *:80>
    ServerName www.example.com
    # ... 主站配置
</VirtualHost>

<VirtualHost *:8080>
    ServerName admin.example.com
    # ... 管理后台配置
</VirtualHost>

<VirtualHost *:8081>
    ServerName api.example.com
    # ... API服务配置
</VirtualHost>

3.2 SSL/HTTPS配置

# /etc/apache2/sites-available/myapp-ssl.conf
<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName myapp.example.com
    DocumentRoot /var/www/myapp
    
    # SSL配置
    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/myapp.crt
    SSLCertificateKeyFile /etc/ssl/private/myapp.key
    SSLCertificateChainFile /etc/ssl/certs/myapp-chain.crt
    
    # 现代SSL配置
    SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256
    SSLHonorCipherOrder off
    SSLSessionTickets off
    
    # HSTS配置
    Header always set Strict-Transport-Security "max-age=63072000"
    
    # WSGI配置
    WSGIDaemonProcess myapp-ssl python-home=/var/www/myapp/venv
    WSGIProcessGroup myapp-ssl
    WSGIScriptAlias / /var/www/myapp/wsgi.py
    
    <Directory /var/www/myapp>
        WSGIProcessGroup myapp-ssl
        WSGIApplicationGroup %{GLOBAL}
        Require all granted
    </Directory>
</VirtualHost>
</IfModule>

# HTTP重定向到HTTPS
<VirtualHost *:80>
    ServerName myapp.example.com
    Redirect permanent / https://myapp.example.com/
</VirtualHost>

第四部分：性能优化与调优

4.1 MPM模块优化

# /etc/apache2/mods-available/mpm_prefork.conf
<IfModule mpm_prefork_module>
    StartServers             8
    MinSpareServers          5
    MaxSpareServers         20
    ServerLimit            256
    MaxRequestWorkers      256
    MaxConnectionsPerChild   0
</IfModule>

# /etc/apache2/mods-available/mpm_worker.conf
<IfModule mpm_worker_module>
    StartServers             3
    MinSpareThreads         75
    MaxSpareThreads        250
    ThreadsPerChild         25
    MaxRequestWorkers      400
    MaxConnectionsPerChild   0
</IfModule>

# /etc/apache2/mods-available/mpm_event.conf (推荐)
<IfModule mpm_event_module>
    StartServers             3
    MinSpareThreads         75
    MaxSpareThreads        250
    ThreadsPerChild         25
    MaxRequestWorkers      400
    MaxConnectionsPerChild   0
    AsyncRequestWorkerFactor 2
</IfModule>

4.2 缓存配置

# 启用缓存模块
LoadModule cache_module modules/mod_cache.so
LoadModule cache_disk_module modules/mod_cache_disk.so

# 磁盘缓存配置
<IfModule mod_cache_disk.c>
    CacheRoot /var/cache/apache2/mod_cache_disk
    CacheEnable disk /
    CacheDirLevels 2
    CacheDirLength 1
    CacheMaxFileSize 1000000
    CacheDefaultExpire 3600
    CacheMaxExpire 86400
</IfModule>

# 静态文件缓存
<LocationMatch "\.(css|js|png|jpg|jpeg|gif|ico|svg)$">
    ExpiresActive On
    ExpiresDefault "access plus 1 month"
    Header append Cache-Control "public"
</LocationMatch>

4.3 压缩配置

# 启用压缩模块
LoadModule deflate_module modules/mod_deflate.so

# 压缩配置
<IfModule mod_deflate.c>
    # 压缩文件类型
    AddOutputFilterByType DEFLATE text/plain
    AddOutputFilterByType DEFLATE text/html
    AddOutputFilterByType DEFLATE text/xml
    AddOutputFilterByType DEFLATE text/css
    AddOutputFilterByType DEFLATE application/xml
    AddOutputFilterByType DEFLATE application/xhtml+xml
    AddOutputFilterByType DEFLATE application/rss+xml
    AddOutputFilterByType DEFLATE application/javascript
    AddOutputFilterByType DEFLATE application/x-javascript
    AddOutputFilterByType DEFLATE application/json
    
    # 排除已压缩的文件
    SetEnvIfNoCase Request_URI \
        \.(?:gif|jpe?g|png|zip|gz|bz2)$ no-gzip dont-vary
    SetEnvIfNoCase Request_URI \
        \.(?:exe|t?gz|zip|bz2|sit|rar)$ no-gzip dont-vary
    
    # 设置压缩级别
    DeflateCompressionLevel 6
    
    # 日志记录
    DeflateFilterNote Input instream
    DeflateFilterNote Output outstream
    DeflateFilterNote Ratio ratio
    LogFormat '"%r" %{outstream}n/%{instream}n (%{ratio}n%%)' deflate
</IfModule>

4.4 连接优化

# /etc/apache2/apache2.conf
# 超时设置
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 5

# 请求限制
LimitRequestBody 52428800  # 50MB
LimitRequestFields 100
LimitRequestFieldSize 8190
LimitRequestLine 8190

# 服务器令牌
ServerTokens Prod
ServerSignature Off

第五部分：实战案例 - Django电商平台部署

5.1 项目结构

/var/www/ecommerce/
├── manage.py
├── requirements.txt
├── ecommerce/
│   ├── __init__.py
│   ├── settings/
│   │   ├── __init__.py
│   │   ├── base.py
│   │   ├── development.py
│   │   └── production.py
│   ├── urls.py
│   └── wsgi.py
├── apps/
│   ├── products/
│   ├── orders/
│   └── users/
├── static/
├── media/
├── templates/
├── logs/
└── venv/

5.2 生产环境配置

# ecommerce/settings/production.py
import os
from .base import *

# 安全配置
DEBUG = False
ALLOWED_HOSTS = ['ecommerce.example.com', 'www.ecommerce.example.com']

# 数据库配置
DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql',
        'NAME': 'ecommerce_prod',
        'USER': 'ecommerce_user',
        'PASSWORD': os.environ.get('DB_PASSWORD'),
        'HOST': 'localhost',
        'PORT': '5432',
        'OPTIONS': {
            'connect_timeout': 60,
        }
    }
}

# 缓存配置
CACHES = {
    'default': {
        'BACKEND': 'django.core.cache.backends.redis.RedisCache',
        'LOCATION': 'redis://127.0.0.1:6379/1',
        'OPTIONS': {
            'CLIENT_CLASS': 'django_redis.client.DefaultClient',
        }
    }
}

# 静态文件配置
STATIC_URL = '/static/'
STATIC_ROOT = '/var/www/ecommerce/static'
MEDIA_URL = '/media/'
MEDIA_ROOT = '/var/www/ecommerce/media'

# 日志配置
LOGGING = {
    'version': 1,
    'disable_existing_loggers': False,
    'formatters': {
        'verbose': {
            'format': '{levelname} {asctime} {module} {process:d} {thread:d} {message}',
            'style': '{',
        },
    },
    'handlers': {
        'file': {
            'level': 'INFO',
            'class': 'logging.handlers.RotatingFileHandler',
            'filename': '/var/www/ecommerce/logs/django.log',
            'maxBytes': 1024*1024*10,  # 10MB
            'backupCount': 5,
            'formatter': 'verbose',
        },
        'error_file': {
            'level': 'ERROR',
            'class': 'logging.handlers.RotatingFileHandler',
            'filename': '/var/www/ecommerce/logs/django_error.log',
            'maxBytes': 1024*1024*10,  # 10MB
            'backupCount': 5,
            'formatter': 'verbose',
        },
    },
    'loggers': {
        'django': {
            'handlers': ['file', 'error_file'],
            'level': 'INFO',
            'propagate': True,
        },
        'ecommerce': {
            'handlers': ['file', 'error_file'],
            'level': 'INFO',
            'propagate': True,
        },
    },
}

# 安全设置
SECURE_SSL_REDIRECT = True
SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
SECURE_HSTS_SECONDS = 31536000
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
SECURE_HSTS_PRELOAD = True

5.3 Apache虚拟主机配置

# /etc/apache2/sites-available/ecommerce.conf
<VirtualHost *:80>
    ServerName ecommerce.example.com
    ServerAlias www.ecommerce.example.com
    Redirect permanent / https://ecommerce.example.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName ecommerce.example.com
    ServerAlias www.ecommerce.example.com
    DocumentRoot /var/www/ecommerce
    
    # SSL配置
    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/ecommerce.crt
    SSLCertificateKeyFile /etc/ssl/private/ecommerce.key
    SSLCertificateChainFile /etc/ssl/certs/ecommerce-chain.crt
    
    # 现代SSL配置
    SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256
    SSLHonorCipherOrder off
    SSLSessionTickets off
    
    # WSGI配置
    WSGIDaemonProcess ecommerce \
        python-home=/var/www/ecommerce/venv \
        python-path=/var/www/ecommerce \
        processes=4 \
        threads=15 \
        display-name=%{GROUP} \
        user=www-data \
        group=www-data \
        maximum-requests=1000 \
        memory-limit=512000000 \
        cpu-time-limit=60 \
        socket-timeout=60 \
        header-buffer-size=32768 \
        response-buffer-size=1048576 \
        server-metrics=On
    
    WSGIProcessGroup ecommerce
    WSGIScriptAlias / /var/www/ecommerce/ecommerce/wsgi.py
    
    <Directory /var/www/ecommerce>
        WSGIProcessGroup ecommerce
        WSGIApplicationGroup %{GLOBAL}
        Require all granted
    </Directory>
    
    # 静态文件配置
    Alias /static /var/www/ecommerce/static
    <Directory /var/www/ecommerce/static>
        ExpiresActive On
        ExpiresDefault "access plus 1 month"
        Header append Cache-Control "public"
        
        # 启用压缩
        <IfModule mod_deflate.c>
            AddOutputFilterByType DEFLATE text/css
            AddOutputFilterByType DEFLATE application/javascript
            AddOutputFilterByType DEFLATE text/javascript
        </IfModule>
        
        Require all granted
    </Directory>
    
    # 媒体文件配置
    Alias /media /var/www/ecommerce/media
    <Directory /var/www/ecommerce/media>
        ExpiresActive On
        ExpiresDefault "access plus 1 year"
        Header append Cache-Control "public"
        
        # 安全设置
        <FilesMatch "\.(php|py|pl|cgi|sh)$">
            Require all denied
        </FilesMatch>
        
        Require all granted
    </Directory>
    
    # 安全头设置
    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options DENY
    Header always set X-XSS-Protection "1; mode=block"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
    Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
    
    # 日志配置
    ErrorLog ${APACHE_LOG_DIR}/ecommerce_error.log
    CustomLog ${APACHE_LOG_DIR}/ecommerce_access.log combined
    
    # 自定义日志格式
    LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\" %D" combined_with_time
    CustomLog ${APACHE_LOG_DIR}/ecommerce_performance.log combined_with_time
</VirtualHost>

5.4 部署脚本

#!/bin/bash
# deploy.sh - 电商平台部署脚本

set -e

PROJECT_DIR="/var/www/ecommerce"
VENV_DIR="$PROJECT_DIR/venv"
APACHE_SITE="ecommerce"
BACKUP_DIR="/var/backups/ecommerce"

echo "开始部署电商平台..."

# 创建备份
echo "创建备份..."
mkdir -p $BACKUP_DIR
sudo cp -r $PROJECT_DIR $BACKUP_DIR/backup_$(date +%Y%m%d_%H%M%S)

# 更新代码
echo "更新代码..."
cd $PROJECT_DIR
git pull origin main

# 激活虚拟环境
echo "激活虚拟环境..."
source $VENV_DIR/bin/activate

# 安装依赖
echo "安装依赖..."
pip install -r requirements.txt

# 收集静态文件
echo "收集静态文件..."
python manage.py collectstatic --noinput --settings=ecommerce.settings.production

# 数据库迁移
echo "执行数据库迁移..."
python manage.py migrate --settings=ecommerce.settings.production

# 创建超级用户（如果不存在）
echo "检查超级用户..."
python manage.py shell --settings=ecommerce.settings.production << EOF
from django.contrib.auth import get_user_model
User = get_user_model()
if not User.objects.filter(username='admin').exists():
    User.objects.create_superuser('admin', 'admin@example.com', 'secure_password')
    print('超级用户已创建')
else:
    print('超级用户已存在')
EOF

# 设置权限
echo "设置权限..."
sudo chown -R www-data:www-data $PROJECT_DIR
sudo chmod -R 755 $PROJECT_DIR
sudo chmod -R 644 $PROJECT_DIR/static
sudo chmod -R 755 $PROJECT_DIR/media

# 测试配置
echo "测试Apache配置..."
sudo apache2ctl configtest

# 重启Apache
echo "重启Apache..."
sudo systemctl restart apache2

# 检查服务状态
echo "检查服务状态..."
sudo systemctl status apache2

echo "部署完成！"
echo "网站地址: https://ecommerce.example.com"
echo "管理后台: https://ecommerce.example.com/admin"

第六部分：监控与故障排除

6.1 日志分析

# 实时监控错误日志
sudo tail -f /var/log/apache2/ecommerce_error.log

# 分析访问日志
sudo awk '{print $1}' /var/log/apache2/ecommerce_access.log | sort | uniq -c | sort -nr | head -10

# 查看响应时间
sudo awk '{print $NF}' /var/log/apache2/ecommerce_performance.log | sort -n | tail -10

6.2 性能监控脚本

#!/usr/bin/env python3
# monitor.py - Apache性能监控脚本

import requests
import time
import logging
from datetime import datetime

# 配置日志
logging.basicConfig(
    level=logging.INFO,
    format='%(asctime)s - %(levelname)s - %(message)s',
    handlers=[
        logging.FileHandler('/var/log/apache_monitor.log'),
        logging.StreamHandler()
    ]
)

def check_website_health():
    """检查网站健康状态"""
    urls = [
        'https://ecommerce.example.com/',
        'https://ecommerce.example.com/api/health/',
        'https://ecommerce.example.com/admin/',
    ]
    
    for url in urls:
        try:
            start_time = time.time()
            response = requests.get(url, timeout=10)
            response_time = time.time() - start_time
            
            if response.status_code == 200:
                logging.info(f"✅ {url} - 响应时间: {response_time:.2f}s")
            else:
                logging.warning(f"⚠️ {url} - 状态码: {response.status_code}")
                
        except requests.exceptions.RequestException as e:
            logging.error(f"❌ {url} - 错误: {e}")

def check_apache_status():
    """检查Apache状态"""
    try:
        response = requests.get('http://localhost/server-status?auto', timeout=5)
        if response.status_code == 200:
            status_data = response.text
            logging.info(f"Apache状态: {status_data}")
        else:
            logging.warning("无法获取Apache状态")
    except requests.exceptions.RequestException as e:
        logging.error(f"Apache状态检查失败: {e}")

if __name__ == "__main__":
    logging.info("开始监控...")
    check_website_health()
    check_apache_status()
    logging.info("监控完成")

6.3 常见问题解决

问题1：mod_wsgi导入错误

# 错误信息
[wsgi:error] ModuleNotFoundError: No module named 'myapp'

# 解决方案
# 1. 检查Python路径
WSGIPythonPath /var/www/myapp:/var/www/myapp/venv/lib/python3.8/site-packages

# 2. 检查虚拟环境
WSGIDaemonProcess myapp python-home=/var/www/myapp/venv

# 3. 检查文件权限
sudo chown -R www-data:www-data /var/www/myapp

问题2：静态文件404

# 添加静态文件别名
Alias /static /var/www/myapp/static
<Directory /var/www/myapp/static>
    Require all granted
</Directory>

# 检查Django设置
STATIC_URL = '/static/'
STATIC_ROOT = '/var/www/myapp/static'

问题3：SSL证书问题

# 检查证书有效性
openssl x509 -in /etc/ssl/certs/myapp.crt -text -noout

# 测试SSL配置
sudo apache2ctl configtest

# 重新生成Let's Encrypt证书
sudo certbot renew --dry-run

第七部分：安全加固

7.1 基础安全配置

# /etc/apache2/conf-available/security.conf
ServerTokens Prod
ServerSignature Off

# 隐藏Apache版本
Header always unset Server
Header always set Server "WebServer"

# 防止点击劫持
Header always set X-Frame-Options DENY

# 防止MIME类型嗅探
Header always set X-Content-Type-Options nosniff

# XSS保护
Header always set X-XSS-Protection "1; mode=block"

# 内容安全策略
Header always set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"

# 禁用不必要的HTTP方法
<Location />
    <LimitExcept GET POST HEAD>
        Require all denied
    </LimitExcept>
</Location>

7.2 访问控制

# IP白名单
<Directory /var/www/myapp/admin>
    Require ip 192.168.1.0/24
    Require ip 10.0.0.0/8
</Directory>

# 基于时间的访问控制
<Directory /var/www/myapp/maintenance>
    <RequireAll>
        Require all granted
        Require expr %{TIME_HOUR} -ge 02 && %{TIME_HOUR} -le 06
    </RequireAll>
</Directory>

# 防止敏感文件访问
<FilesMatch "\.(py|pyc|pyo|pyd|db|sqlite|conf|ini|log)$">
    Require all denied
</FilesMatch>

7.3 DDoS防护

# 启用mod_evasive
LoadModule evasive24_module modules/mod_evasive24.so

<IfModule mod_evasive24.c>
    DOSHashTableSize    2048
    DOSPageCount        2
    DOSPageInterval     1
    DOSSiteCount        50
    DOSSiteInterval     1
    DOSBlockingPeriod   600
    DOSLogDir           /var/log/apache2/evasive
    DOSEmailNotify      admin@example.com
    DOSWhitelist        127.0.0.1
    DOSWhitelist        192.168.1.*
</IfModule>

# 连接限制
<IfModule mod_limitipconn.c>
    MaxConnPerIP 10
    NoIPLimit images/*.jpg
    NoIPLimit images/*.png
</IfModule>

第八部分：最佳实践总结

8.1 部署检查清单

# 部署前检查清单
✅ 虚拟环境已创建并激活
✅ 依赖包已安装
✅ 数据库已配置并迁移
✅ 静态文件已收集
✅ 媒体文件目录已创建
✅ 日志目录已创建
✅ 文件权限已设置
✅ Apache配置已测试
✅ SSL证书已配置
✅ 安全头已设置
✅ 监控已配置
✅ 备份策略已制定

8.2 性能优化建议

# 性能优化配置示例
PERFORMANCE_SETTINGS = {
    # Apache MPM配置
    'mpm_event': {
        'StartServers': 3,
        'MinSpareThreads': 75,
        'MaxSpareThreads': 250,
        'ThreadsPerChild': 25,
        'MaxRequestWorkers': 400,
    },
    
    # mod_wsgi配置
    'wsgi_daemon': {
        'processes': 4,
        'threads': 15,
        'maximum-requests': 1000,
        'memory-limit': 512000000,
    },
    
    # 缓存配置
    'cache': {
        'static_files': '1 month',
        'media_files': '1 year',
        'api_responses': '5 minutes',
    },
    
    # 压缩配置
    'compression': {
        'level': 6,
        'types': ['text/html', 'text/css', 'application/javascript'],
    }
}

8.3 监控指标

# 关键监控指标
MONITORING_METRICS = {
    'response_time': {
        'target': '< 2秒',
        'warning': '> 3秒',
        'critical': '> 5秒',
    },
    'error_rate': {
        'target': '< 1%',
        'warning': '> 2%',
        'critical': '> 5%',
    },
    'cpu_usage': {
        'target': '< 70%',
        'warning': '> 80%',
        'critical': '> 90%',
    },
    'memory_usage': {
        'target': '< 80%',
        'warning': '> 85%',
        'critical': '> 95%',
    },
    'disk_usage': {
        'target': '< 80%',
        'warning': '> 85%',
        'critical': '> 95%',
    }
}

结语：Apache的现代化之路

通过本文的深入探讨，我们看到Apache虽然是一位"老将"，但在现代Python Web应用部署中仍然具有重要价值。它的模块化架构、稳定性和丰富的功能，使其成为许多企业的首选。

Apache的优势在于：

• 稳定可靠：经过多年验证的企业级稳定性
• 功能丰富：强大的模块化架构支持各种需求
• 配置灵活：支持复杂的虚拟主机和路由配置
• 社区支持：庞大的社区和丰富的文档资源

虽然在高并发场景下可能不如Nginx，但对于大多数中小型应用，Apache提供了足够的性能和更好的易用性。

记住，选择技术栈不仅要考虑性能，还要考虑团队熟悉度、维护成本和业务需求。Apache为Python Web应用提供了一个稳定、可靠的托管平台，让你可以专注于业务逻辑的开发。

在下一篇文章中，我们将探讨虚拟环境管理，学习如何在生产环境中优雅地管理Python依赖。让我们继续这段服务器与部署的学习之旅！

参考资料

1. Apache HTTP Server Documentation
2. mod_wsgi Documentation
3. Django Deployment with Apache
4. Flask Deployment Options
5. Apache Security Tips
6. Let’s Encrypt with Apache
7. Apache Performance Tuning