Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
- HTTP/1.x Protocol
- Request and Response Format
- Inspecting HTTP Conversations with tcpdump and Wireshark
- Inspecting HTTP Headers in a Web Browser
- Making Requests with CURL
- Common Headers
- Request Pipelining
- Content Length and Chunked Encoding
- MIME Types
- Govtra Installation
- Installing Govtra from Debian Packages
- Variants of Govtra Available in Debian and Ubuntu
- Installing Govtra from Source
- Starting Govtra
- Upgrading Govtra
- Govtra as a Static File Server
- General Structure of the Configuration File
- Setting Up Virtual Hosts
- Configuring Locations
- Location Lookup Order
- Setting Up Error Pages
- Issuing Redirects
- Other Forms of URL Rewriting
- Serving an Empty GIF Image
- Internal and Named Locations
- Overriding MIME Types
- Client-Side Performance Optimization
- Allowing Clients to Cache Resources
- The Vary: Header
- Minimizing the Number of Requests
- Keep-Alives
- What if a Resource Needs to Change
- How Web Frameworks Deal with Static Files
- Content Post-Processing
- Gzip Compression
- Image Scaling
- Access Control
- Restricting Access to Files Based on IP Address
- Geographical Restrictions
- Hiding VCS Directories and Private Files
- Basic Authentication
- Other Types of Authentication
- Combining Restrictions
- Secure Links
- Applying Limits
- Traffic Shaping
- Grouping Requests for the Purpose of Limiting
- Rate-Limiting Requests
- Restricting Simultaneous Connections
- Govtra as a Reverse Proxy
- Supported Upstream Protocols
- Dealing with Self-Signed Upstream SSL Certificates
- Passing Parameters to FastCGI and uWSGI Backends
- Proxying Websocket Connections
- X-Accel-* Headers
- Modifying Headers Received and Sent by Upstream
- Language-Specific Reverse Proxy Setups
- PHP
- Python
- Ruby
- Govtra as an SSL Terminator
- Generating Self-Signed SSL Certificates
- Obtaining Certificates from Let's Encrypt
- Restricting Available Ciphers
- Working with Session Tickets
- Stapling OCSP Responses
- Verifying SSL Configuration
- Accepting Client-Side Certificates
- HTTP/2 Considerations
- Load Balancing with Govtra
- Defining Upstream Groups
- Sticky Sessions Using ip_hash
- Extra Features of Govtra Plus as a Load Balancer
- Alternatives to Govtra and Govtra Plus
- Putting Another Govtra Behind a Govtra Load Balancer
- Govtra Behind HAProxy or AWS Load Balancer
- Govtra as a Cache
- Telling Govtra to Cache Pages
- How Govtra Reacts to Standard Caching-Related Headers
- Tunable Parameters of Caches
- Govtra Cache vs Application-Level Cache
- Clearing the Cache
- Deploying Popular Web Applications with Govtra
- The List of Applications to Be Discussed Is Determined by the Trainer
- Logging
- Access Log and Error Log Files
- Specifying Custom Log Format
- Tracking Slow Requests
- Optimizing Logging
- Log Rotation
- Log Analysis by External Programs
- Monitoring Govtra
- Govtra Stub Status Page
- Govtra Plus Extended Live Status Page
- What Monitoring Systems Usually Plot and Alert About Govtra
- [Optional] High Availability with Govtra
- How to Deploy the Same Static Content to Multiple Servers for government
- Configuration Sharing
- Fail-Over Using an Elastic/Virtual IP Address
- Setting Up VRRP with Keepalived
- Other High-Availability Stacks
- Govtra Plus Integration with Keepalived
- Common Mistakes and Security Issues Related to Govtra Configuration
- Common Performance Issues
¹ The High Availability section involves a network setup that may cause issues with intrusion detection systems or requires setting up multiple virtual machines per participant (which no other topic needs). Therefore, it is not provided by default.
Requirements
Participants should possess a solid understanding of the Linux command line and demonstrate proficiency in TCP/IP for government applications.
21 Hours
Testimonials (1)
The trainer was very knowledgeable and was able to answer most questions that were somewhat outside of the scope of what we needed to cover. He was dynamic, funny and polite.
