IBM HTTP Server on z/OS

1 RedpaperFront coverIBM HTTP Server on z/OS Migrating from Domino-powered to Apache-poweredEdward McCarthyInternational Technical Support OrganizationIBM HTTP Server on z/OS: Migrating from Domino-powered to Apache-poweredOctober 2016 REDP-4987-02 Copyright International Business Machines Corporation 2013, 2016. All rights to Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP ScheduleContract with IBM Edition (October 2016)This edition applies to Version 9 of IBM HTTP Server powered by Apache (product number xxx-xxx).This document was created or updated on July 12, : Before using this information and the product it supports, read the information in Notices on page ix. Copyright IBM Corp. 2013, 2016. All rights.

2 IxTrademarks ..xIBM Redbooks promotions .. xiPreface .. xiiiAuthors .. xiiiNow you can become a published author, too! .. xivComments welcome.. xivStay connected to IBM Redbooks .. xivSummary of changes.. xvOctober 2016, Third Edition .. xvChapter 1. Introduction to IBM HTTP Server for z/OS.. Why you should migrate .. HTTP Server terminology .. IBM statement of support .. Documentation .. New features in .. Updates to this IBM Redpaper publication .. New features in .. Determining which IBM HTTP Server you are running .. Using SDSF to find running HTTP Servers.. Determining which TCP/IP ports are used .. Accessing the home page.. Using the ps command to check for HTTP Servers .. Checking for non-running IBM HTTP Servers.

3 Checking your IBM HTTP Server version .. Determining IBM HTTP Server powered by Domino version .. Determining IBM HTTP Server powered by Apache version .. For more information.. 12 Chapter 2. Features and performance.. New features in .. Listing MVS data sets .. HTTP response translation improvements .. Federal Information Processing Standards (FIPS140-2) support .. 31-bit support .. Features in IHS powered by Domino and not in IHS powered by Apache .. Support for zEnterprise Data Compression .. zEnterprise Data Compression requirements .. Verifying that zEnterprise Data Compression is active .. Enabling use of zEnterprise Data Compression .. Testing .. SMF information .. Comparing results .. SMF information about hardware compression.

4 Compression log usage information .. 23iv IBM HTTP Server on z/OS: Migrating from Domino-powered to Functional differences .. Performance comparison .. Basic measure of throughput test .. CPU utilization test .. Measure of throughput with and without caching test .. Measure of CPU test.. 27 Chapter 3. Installing your first IHS .. IHS code that is shipped with z/OS .. Obtaining and installing the product code .. Delivered as a component of other IBM products .. Downloaded at no charge from the IBM Shopz website .. Ordering and installing by using Shopz.. IBM Shop z website .. Ordering software .. Downloading the software.. FTP product code to z/OS UNIX in z/OS .. First job to run: GIMUNZIP .. Second job to run: UNZIPJCL.

5 Setting up SMP/E .. Receiving the product code .. Applying the product code .. Accepting the product code .. Summary.. Installation when a component of another IBM product .. Sample real-world setup process .. Defining a configuration directory .. Defining a user ID .. Defining a protected user ID for the started task.. Creating the IHS .. Defining a RACF STARTED rule .. Creating a Started Task to run the IHS .. Verifying that IHS is working .. Using intermediate symbolic links .. Setting up an intermediate link .. Maintenance upgrade .. Gradual maintenance rollout approach .. New_install_root shell .. 62 Chapter 4. Administration .. Running IBM HTTP Server powered by Apache.. Using started tasks.

6 Starting the Server .. Stopping the Server .. Recycling the Server to pick up changes.. Modifying command support in .. Displaying version in job log .. Using apachectl from the command line .. Starting the Server .. Stopping the Server .. Restarting the Server .. Mix and match.. Integration with WebSphere Application Server .. 72 Contents Configuration .. Listen directive .. Virtual hosting .. Monitoring .. SDSF .. Checking pid and log files .. Server status .. Server status by using the modify command .. Thread usage .. Diagnostic tools and information .. Troubleshooting .. Migrating previous versions .. Tracing .. Information about tracing .. Limitation.. Some examples.

7 Handling logging .. Macro support .. Conditional controls.. 83 Chapter 5. Migration.. Planning your migration .. Migration plan .. Migration guidance .. Scalable mode .. SMF records .. Server home directory.. Ports .. Virtual hosts .. Security .. Logging .. URL and file mapping directives .. WebSphere Application Server plug-in .. Timeouts .. Caching .. ASCII/EBCDIC considerations .. GWAPI .. Reverse Proxy .. Comparing DGW and IHS use of directives .. Cleaning up PARMLIB .. Migrating Library Server .. Set up in DGW .. Set up in .. Testing Library Server .. 101 Chapter 6. Scalability and workload management.. Overview .. DGW approach .. IHS approach.

8 Multi-processing module .. How looks on z/OS .. Example of dynamic scalability .. Sizing your Server .. 109vi IBM HTTP Server on z/OS: Migrating from Domino-powered to support for WLM .. Working with WLM in IHS .. Mapping app requests to one WLM transaction class as default approach .. Mapping an application for a specific virtual host .. Mapping multiple applications within a specific virtual host .. Connecting WLM directives and WLM setup .. WLM in action .. Summary .. 116 Chapter 7. Security.. Security overview .. Configuring for your security requirements .. Allowing unauthenticated access .. Allowing all authenticated user access .. Allowing authenticated user that belongs to a group access.

9 Allowing authenticated user access with client credentials.. Required SAF definitions .. Complex authorization logic .. SSL and Session ID .. Configuring SSL support .. RACF or keystore files .. Creating required certificates .. Updating .. Testing SSL .. Advanced SSL options .. Basic SNI Support.. Controlling access by using mod_rewrite .. Caching and security considerations .. Authorization and access control .. Local vulnerabilities.. Cache poisoning .. 130 Chapter 8. System Management Facilities support in IHS .. SMF overview .. DGW and SMF .. and SMF .. Comparing DGW and SMF records.. Content .. SMF browser.. Enabling for subtype 13 .. Enabling for subtype 14.

10 Summary .. 136 Chapter 9. Plug-in for WebSphere Application Server .. Plug-in overview .. Intelligent Management for Web Servers feature .. Configuring WebSphere Application Server plug-in into IBM HTTP Servers .. IBM HTTP Server powered by Domino.. IBM HTTP Server powered by Apache .. Key difference .. Working with the plug-in configuration file.. Regenerating the plug-in configuration file .. Managing who serves application static files .. 143 Contents viiChapter 10. Cache configuration.. Caching overview .. What can be cached .. Not cached .. File-handle caching .. In-memory caching .. Disk-based caching.. Fast Response Cache Accelerator .. 151 Chapter 11. Modules.. Why custom modules are used.