บริการเว็บ HTTP/HTTPS

Welcome! In this lesson, we'll explore how websites and applications deliver content to your browser. This involves understanding web services, which are essentially how computers communicate over the internet to share information.

At the heart of this communication are protocols like HTTP and HTTPS, powered by web server software.

HTTP stands for Hypertext Transfer Protocol. It's the standard protocol for sending and receiving web pages and other web content.

• When you type a website address, your browser sends an HTTP request to a server.
• The server processes this request and sends an HTTP response back, usually containing the web page data.
• HTTP typically uses port 80 for communication.

A web server is software that stores web content (like HTML files, images, CSS, JavaScript) and delivers it to clients (like your browser) over HTTP or HTTPS.

Two of the most popular web server software packages are Apache HTTP Server and Nginx. Both are powerful and widely used in Linux environments.

Apache is known for its flexibility and module system. To serve content, Apache needs to know where your website files are located. This is defined by the DocumentRoot directive.

Here's a simplified example of an Apache configuration:

Nginx (pronounced 'engine-x') is known for its high performance and efficiency, especially for serving static content and acting as a reverse proxy. It uses 'server blocks' to define how it handles requests.

The root directive specifies the directory containing your website files.

To host multiple websites on a single server, Apache uses Virtual Hosts. Each Virtual Host configuration block defines settings for a specific domain name or IP address.

This allows Apache to serve example.com from one directory and anothersite.com from a completely different one, all on the same server.

Nginx uses Server Blocks, which are conceptually similar to Apache's Virtual Hosts. Each server block listens on a specific port and responds to requests for particular domain names (specified by server_name).

This makes Nginx highly efficient for managing multiple web applications or websites.

HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP. It's crucial for protecting sensitive data exchanged over the internet.

• Encryption: HTTPS encrypts communication between your browser and the server, making it unreadable to eavesdroppers.
• Data Integrity: It ensures that data hasn't been tampered with during transmission.
• Authentication: It verifies that you are communicating with the intended server, preventing 'man-in-the-middle' attacks.

HTTPS typically uses port 443.

HTTPS relies on SSL/TLS certificates. These digital certificates are issued by trusted Certificate Authorities (CAs) and contain information about the website's identity.

When you visit an HTTPS site, your browser checks the certificate to ensure it's valid and trusted. This handshake process establishes a secure, encrypted connection.

Services like Let's Encrypt provide free SSL/TLS certificates, often automated with tools like Certbot.

To enable HTTPS, you need to configure your web server to use an SSL/TLS certificate. This involves specifying the certificate file and its corresponding private key in your server's configuration.

Both Apache and Nginx have directives to handle this. Here's a conceptual example:

Web servers are essential for delivering content online. Let's test your knowledge about the protocols and their security aspects.

We've covered the fundamentals of web services! You now understand:

• The roles of HTTP and HTTPS protocols.
• How web servers like Apache and Nginx deliver content.
• The importance of DocumentRoot/root and Virtual Hosts/Server Blocks.
• Why HTTPS and SSL/TLS certificates are critical for secure communication.

These concepts are foundational for deploying and managing any web application on a Linux server!