Bug 206500 - www/apache24: Include mod_proxy_html by default (or create separate port)
Summary: www/apache24: Include mod_proxy_html by default (or create separate port)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: freebsd-apache (Nobody)
URL:
Keywords: feature, needs-patch
Depends on:
Blocks:
 
Reported: 2016-01-22 16:44 UTC by Ean Kingston
Modified: 2016-05-29 09:17 UTC (History)
2 users (show)

See Also:
bugzilla: maintainer-feedback? (apache)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ean Kingston 2016-01-22 16:44:48 UTC
mod_proxy_html was moved into apache core as of version 2.4 of Apache but is not included in the apache 2.4 package nor is a separate ap24_mod_proxy_http available.

https://httpd.apache.org/docs/2.4/mod/mod_proxy_html.html
Comment 1 Michelle Sullivan 2016-01-22 16:58:44 UTC
My $0.02..

It should *NOT* be enabled by default.  It should be available as an option but not as a default.... mod_proxy has caused a number of security issues in the past with default deployments and default configurations.
Comment 2 Ean Kingston 2016-01-22 17:03:04 UTC
I agree with Michelle Sullivan. Mod_proxy should not be enabled by default but the mod_proxy_html.so module should be included with the base install (or an an additional package that can be installed) of Apache 2.4.
Comment 3 Kubilay Kocak freebsd_committer freebsd_triage 2016-01-22 17:40:45 UTC
There are also certain out of the box expectations that users naturally have (per tutorials, documentation etc out there in the world), that we need to consider when we make decisions.

POLA is still important, and this issue is a case in point, the result of a user (Ean, thank you!) asking the question in #FreeBSD on IRC. There *is* a net overhead (mostly immeasurable) of special/snowflake installations that are not the same as what upstreams provide.
Comment 4 Olli Hauer freebsd_committer freebsd_triage 2016-01-22 18:05:43 UTC
Per default apache24 builds all modules not depending on other ports.
(reflecting ./configure --enable-modules=most plus some addionals)

I'm looking forward for sub packages (not slave ports) in the form to fire one build and create several packages (similar to rpm build).

When we have this in the framework, it would be possible to build apache24 and get the following additional packages apache24-(watchdog echo data reflector charset_lite xml2enc proxy_html ...).

But at the moment the Framework has no support for sub packages, and all documentation I've seen installing the additional packages on top of apache24 (httpd in linux world).
Comment 5 Olli Hauer freebsd_committer freebsd_triage 2016-05-29 09:17:40 UTC
Close this PR, the default OPTION was changed to include proxy_html and xml2enc as default in commit ports r413035 (Makefile.options)