General Apache Configuration Notes

Prefer Apache mod_deflate to Confluence's built-in gzip implementation

  1. Disable gzip in confluence. See Compressing an HTTP Response within Confluence.
  2. Enable gzip compression in Apache. For RedHat distributions this can be achieved by adding the following lines:

    AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css application/x-javascript
    
    # ensure sensible defaults
    DeflateBufferSize 8192
    DeflateCompressionLevel 4
    DeflateMemLevel 9
    DeflateWindowSize 15
    

Ensure keepalive is enabled

KeepAlive On

Enable keepalive for recent MSIE user agents

The standard Apache SSL configuration is very conservative when it comes to MSIE and SSL. By default all keepalives are disabled when using HTTPS with MSIE. While MSIE will always be special, the issues with SSL and MSIE have been solved since Service Pack 2 for Windows XP, released over 4 years go. For anyone using an XP machine SP2 or above, it is safe to allow keepalive for MSIE 6 and above.

Remove the following lines:

SetEnvIf User-Agent ".*MSIE.*" \
   nokeepalive ssl-unclean-shutdown \
   downgrade-1.0 force-response-1.0

Add these in their place:

BrowserMatch "MSIE [1-5]" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [6-9]" ssl-unclean-shutdown
Last modified on Jan 30, 2018

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.