This is sist3m's personal profession blog. Covering security news, howto's, discussions, incidents vulnerability & discovery, including exploitation development..... and anything else I see fit to throw in there !

Monday, 18 December 2006

Functionality Differences Between Apache 1.3 and 2.0

During the planning of my proxypot, a crucial decision came up about the version of Apache which was going to be used. There are major fundamental differences between Apache 1.3 and 2.0.

Apache 1.3 has the majority of current market share due to its greater length of existence. The 2.0 version is gaining in popularity. There are many advancements in Apache 2.0 that not only improve Apache performance, but also has flexibility for security enhancements. The table below illustrates the main differences between Apache 1.3 and Apache 2.0



Feature
Apache 1.3
Apache 2.0






IPv6 Capability
Unofficial Patches
Fully Supported






Multi-Processing Mudules/Threading
Less-scalable Multi-process model
Enhanced to support several models for better scalability






Build Configuration
APACI
GNU Autoconf






Server Configuration directives
Redundant directives
Streamlined to remove confusing






Platform Support (APR)
Limited and problematic
Expanded with Apache Portable Runtime






Multi-Protocol Support
None
Can create protocol modules







HTTP Proxy Support
HTTP 1.0
HTTP 1.1






Input/Output Filtering
None
Fully Supported






SSL Support OpenSSL's support
Unofficially supported
Supported through mod_sll, which uses OpenSSL's support


There are a handful of features Apache 2.0 version that enable you to accomplish important security tasks. The most notable are the advanced proxy capability, improved header manipulation with mod_headers, and finally input/output filtering. There is also a really cool feature of the Mod_Security module called Output filtering that is only available if you are using Apache 2.0. So perhaps Apache 2.0 will be deployed for the proxypot !