www-site-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From William A Rowe Jr <wr...@rowe-clan.net>
Subject Anonymization of public http://*.apache.org/server-status data
Date Thu, 01 Oct 2015 14:45:20 GMT
Somewhat simple rule, more complexity could be introduced...

<Location /server-status>
    SetHandler server-status

    <If "%{CONN_REMOTE_ADDR} != '127.0.0.1'">
        SetOutputFilter Sed
        OutputSed "s#<td>[^<]*</td><td nowrap>#<td>redacted</td><td
nowrap>#g"
    </If>
</Location>

This preserves the ability to locally probe server-status with wget to
diagnose what abusive client may be causing problems, but masks the Client
column in public fetches of server-status for anonymity and privacy
concerns.

Mime
View raw message