[XCSSA] Testing LAMP server

[X-otic Computer Systems of San Antonio]

> On Friday 08 February 2008 10:57, X-otic Computer Systems of San Antonio
> wrote:
>> Does anyone have a good idea of some tools to test a LAMP server? Here is
>> what I have found or heard of so far:
>> 1. Siege - tests Apache
>> 2. nmap - tests firewall
>> 3. Nessus - app for overall security testing
>
> What exactly do you want to test?  Stress/load testing?
> If so, I would also look at ab (Apache Benchmark).  Several good articles out
> there on it:
> 	http://www.linuxjournal.com/article/6691
>
>
>> I know there are several security distros that have all these tools already
>> built in, but I can't put my finger on one right now.
>
> So you want to just kind of prep a new server for production (basic lock down,
> audit, stress test and document)?  Some requirements would be helpful.
>
> Tweeks

This is actually going to be the next article comparing three different *AMP
offerings, one WAMP and two LAMP. The comparison points are going to be security
(probably using Nessus), performance (siege and ab - thanks for that one), and
usability (personal observation with a few screenshots).

The main target audience is going to be SOHO, so I'll be using each offering's
defaults. Granted, an admin is going to tweak. It'll be tested on an isolated,
directly connected network, of sorts giving it some of the environment of a DMZ
since there won't be a firewall or proxy between the server and the test
computer.

Tom K.