[CentOS] Apache User Isolation/Perchild, or PHP "chroot"?

[Dan Mensom]

--- Scott Lamb <slamb at slamb.org> wrote:

> Another option would be to use mod_fcgid to delegate to different PHP  
> instances using FastCGI. FastCGI is popular lately (particularly with  
> the Ruby-on-Rails people) for other reasons - asynchronous webservers  
> like lighttpd and nginx have started to become trendy, and because  
> PHP is not written asynchronously they have no mod_php equivalent.
> 
> The biggest advantage to using FastCGI here would be to reduce the  
> number of processes running and memory footprint. As Paul Heinlein  
> said, this proxied Apache setup would mean doubling the number of  
> Apache processes running. Here you just have a few PHP processes  
> running per vhost to handle the dynamic stuff - static files can be  
> handled by the main server. Presumably a FastCGI PHP process would  
> have less of a memory footprint than a whole Apache also.

>From the various howtos and docs, this, plus suexec seems like the option
I want. However, I don't see a package for fastcgi in base or rpmforge..
Can mod_cgid provide similar functionality? Or do I really want to compile
mod_fastcgi (presumably from http://fastcgi.com/?)


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com