September 25, 2003
Compile Modules into Apache Statically . . . Yes or No
Today I'm exploring trends in compiling modules statically into Apache. There are plenty of documents out there detailing the process, but haven't been able to track anything down that indicates what is considered best practice.
We statically compile all necessary modules into the Apache binary, but are making moves to implement Shibboleth for cross-institution authorization (so people elsewhere can get into our content). The Shibboleth modules require a DSO version of OpenSSL 0.9.7b.
Altering our build doesn't seem that difficult, recomiple Apache with everything statically compiled except ssl, and then add the LoadModule and AddModule directives to the configuration file.
The bigger question is do we run Sibboleth on our existing machines, or get separate machines to run the service. Seems like if there are different dependencies between the two services it would be better to have separate machines.
Posted by mike at September 25, 2003 12:29 PM