linux: April 2008 Archives

This blog now runs on apache + mod_fastcgi. I can feel the difference, especially given the fact that the hardware is not that powerful. I was curious aboud mod_fcgid, which claims to be better but compatible, but I'm not sure why exactly (I think something to do with better timing in spawning / killing cgi persistents processes).

I was willing to move to lighttpd as well, but it looks like it's more work than just installing and configuring mod_fastcgi for apache. By the way, you have to make sure that FCGI (the Perl module) is installed otherwise Movable Type will refuse to work.

This server this site is running on has a VIA CPUwith PadLock features enabled. That allows fast hardware accelerated encryption, namely AES, SHA1, SHA256. With modern kernel and openssl, there is no special patch needed. However, some application using encryption still need a patch to use the hardware feature.

If you are running a PadLock enabled Via CPU, this page has a list of patches for various linux programs. Look at the bottom of the page for contributions, and see if you're using any of these software. Even if you are using the same version, I recommend you to check if the patch hasn't been already applied by the maintainers of your linux distribution.

I applied the patchs for openssh, lighthttpd and a couple of other software.