1 Overview

1.1 Oracle HTTP Server Features

Oracle HTTP Server is the Web server component of Oracle Application Server. Based on the Apache infrastructure, Oracle HTTP Server allows developers to program their site in a variety of languages and technologies - Perl (through mod_perl and CGI), C (through CGI, and FastCGI), C++ (through FastCGI), PHP, and Oracle's PL/SQL. It can also be a proxy server, both forward and reverse. In addition, the features of single sign-on, clustered deployment, and high availability, enhances the operations of Oracle HTTP Server.

Based on Apache - HTTP v1.1 Support

Oracle HTTP Server code is based on Apache 1.3 Web Server (http://www.apache.org). With such a proven code base, Oracle HTTP Server provides Oracle Application Server customers with the stability, flexibility, and scalability required of a Web server.

Security - Encryption with SSL

Secure Sockets Layer is required to run any Web site securely. Oracle HTTP Server supports SSL encryption based on industry standard, patented, algorithms. The SSL works seamlessly with both Internet Explorer and Netscape browsers. In addition, the infrastructure has been upgraded to share the same wallet information as the database users. Features include:

• SSL HW Acceleration Support: SSL encryption is slower when done in software. Dedicated hardware support for this purpose is now supported, specifically with nCipher.

• Variable Security per Directory: This feature allows individual directories to be protected by different strength encryption.

• Oracle HTTP Server to OC4J SSL Support: Oracle HTTP Server and OC4J can communicate using AJP protocol over SSL. Previously, Oracle HTTP Server and OC4J used the AJP 1.3 protocol unencrypted, without support for authentication. Now, Oracle HTTP Server has been modified to extend support to the AJP 1.3 protocol over SSL providing both encryption and authentication.

  
  

  See Also: Oracle Application Server Security Guide Chapter 9, "Managing Security" Chapter 10, "Enabling SSL for Oracle HTTP Server"

  
  

Security - Single Sign On

Oracle HTTP Server supports the standard basic authentication features of Web servers. The source for the username and password used here is a flat file (with encrypted passwords). In addition, a module, mod_osso, is included to support single sign on across sites and across applications. This provides for a much better end user experience (they have to login only once), and a much easier development cycle (most of the security is declarative).

Virtual Hosts

The virtual host facility allows an HTTP server to service multiple domain names over one IP address. Thus, virtual hosts www.north.com might have the same IP address as www.south.com. Oracle HTTP Server provides a "container" environment for a virtual host, thus providing a virtual host with its own set of security and other configuration directives, in addition to locations from which the files are served. This allows an ISP to save on hardware and administrative costs by enabling hundreds to thousands of sites to be served from a single runtime instance of Oracle HTTP Server. Only one virtual host on a single IP address can accommodate SSL. Oracle HTTP Server can support multiple IP addresses and each one of them can have one, but only one virtual host.

Proxy Server and URL Rewriting

Any Web site that is "alive" changes often. Along with that, the directory structure and the URLs change. Oracle HTTP Server makes it easy to accommodate these changes by including an engine that support URL rewriting so that the end users do not have to change their bookmarks. It also supports reverse proxy capabilities, thus making it easier to make content served by different servers to appear from one single server.

PL/SQL Stored Procedures

This feature allows access to PL/SQL code stored in the Oracle database.

PL/SQL Stored Procedures

Similar in concept to the JavaServer Pages, this module allows PL/SQL to be used as the scripting language within an HTML page. It gets translated into a stored procedure, which then uses the module described in the previous section (for PL/SQL stored procedure) to send the output to the browser.

Server Side Include

Server Side Includes provide an easy way of adding some dynamic, or uniform static content, across all the site's pages. It is typically used for header/footer information. Oracle HTTP Server supports special directives to enable these only for certain types of files, or for given virtual hosts.

Perl

Perl is a scripting language often used to provide dynamic content. Perl can either be called as a CGI program, or directly through mod_perl. Oracle Application Server uses Perl version 5.6.1.

PHP

PHP is an open source, widely-used, general-purpose, client-side scripting language, that is embedded in standard HTML. It is used to generate dynamic HTML pages.

C/C++ (CGI and FastCGI)

CGI programs have been commonly used to program Web applications. Oracle HTTP Server improves on them by providing a mechanism to keep them alive beyond the request lifecycle, thus improving the performance tremendously.

Dynamic Monitoring Service

Dynamic Monitoring Services (DMS) metrics give runtime performance statistics for both Oracle HTTP Server and OC4J processes. As applications run, DMS collects detailed performance statistics. This data enables you to monitor the duration of important request processing phases and status information. With this information, you can locate performance bottlenecks and tune the application server to maximize throughput and minimize response time.

Oracle Process Manager and Notification Server

Oracle Application Server provides a high availability infrastructure integration with Oracle Process Manager and Notification Server (OPMN), for process management, death detection, and failover for OC4J and Oracle HTTP Server processes.

Load Balancing

Oracle HTTP Server includes a module called mod_oc4j that routes requests from the OC4J instances in a cluster. OPMN helps ensure that mod_oc4j instances know of all the OC4J in the system without requiring a system administrator to do any configuration.

1.2 Oracle HTTP Server Components

Oracle HTTP Server consists of several components that run within the same process. These components provide the extensive list of features that Oracle HTTP Server offers when handling client requests. The following are the major components:

• HTTP Listener: Oracle HTTP Server is based on an Apache HTTP listener to serve client requests. An HTTP server listener handles incoming requests and routes them to the appropriate processing utility.

• Modules (mods): Modules both implement and extend the basic functionality of Oracle HTTP Server. Many of the standard Apache modules are included with Oracle HTTP Server. Oracle also includes several internal modules that are specific to Oracle Application Server components.

  
  

  See Also: "Oracle HTTP Server Modules"

  
  

• Perl Interpreter: A persistent Perl runtime environment embedded in Oracle HTTP Server through mod_perl.

1.3 Oracle HTTP Server Support

Oracle provides technical support for the following Oracle HTTP Server features and conditions:

• Modules included in the Oracle distribution. Modules from any other source, including the Apache Software Foundation, are not supported by Oracle.

• Problems that can be reproduced within an Apache configuration consisting only of supported Oracle Apache modules.

• Use of the included Perl interpreter within the supported Apache configuration.

1.4 Oracle HTTP Server Management

You can manage Oracle HTTP Server using opmnctl. It is the command-line utility for Oracle Process Manager and Notification Server (OPMN) for process management. It is located in:

• UNIX: ORACLE_HOME/opmn/bin

• Windows: ORACLE_HOME\opmn\bin

1.5 Starting, Stopping, and Restarting Oracle HTTP Server

Oracle HTTP Server is managed by Oracle Process Manager and Notification Server (OPMN). You must always use the opmnctl utility to start, stop, and restart the server. Otherwise, the configuration management infrastructure cannot detect or communicate with the Oracle HTTP Server processes, and problems may occur.

To determine the state of Oracle HTTP Server, use the following command:

opmnctl status

The processes are listed with their current state (Up, Down, and so on)