What is our primary use case?
I use the solution in my company as a base server. Many of our company's applications are hosted on Apache Web Server. As an open-source WAF, my company uses Apache Web Server with ModSecurity. My company also uses Apache Web Server as a proxy manager.
What is most valuable?
The most valuable features of the solution stem from the installation part and configuration manager that I use the most.
What needs improvement?
When it comes to Apache Web Server, I don't have any suggestions for improvement because we use it in the UAT environment. For production, my company mainly uses NGINX.
There is no direct package provided by the product if I want to use WAF. In NGINX, NGINX Plus has the signature update capability, but in Apache, the same feature is not available, making it an area where improvements are required.
If WAF can be introduced in Apache Web Server, it would be a good improvement so that its users can implement either the WAF module or ModSecurity, as they choose.
For NGINX, I think it has NGINX Management Suite, which is GUI-based and allows you to manage your configuration via the user interface, but Apache fails to offer such capabilities to users.
Apache Web Server should provide users with the same capabilities offered under NGINX Management Suite with the help of a simple GUI so that our company doesn't have to do anything on the terminal while directly getting to use the user interface, which can help us with the configuration part.
For how long have I used the solution?
I have been using Apache Web Server for more than five years.
What do I think about the stability of the solution?
Stability-wise, I rate the solution an eight out of ten.
What do I think about the scalability of the solution?
My company does not have to deal with many volumes on Apache Web Server since we use it in a UAT environment and not in production,
Around 1,500 people in my company use the product.
My company plans to increase the usage of the product in the future.
How are customer service and support?
My company receives technical support from Apache, along with community support. I think it's a very old web server that is older than NGINX.
From a technical support perspective, users can get a lot of stuff related to the product and access Apache's online community support.
How was the initial setup?
The product's initial setup phase is straightforward.
The product's deployment phase is easy for me because if I want to install it, then I need to pay the price for the solution, and it's easy and similar to NGINX. In general, deployment and installation are easy processes.
The solution is deployed on an on-premises model. My company has a private cloud infrastructure, which is not AWS or GCP.
What's my experience with pricing, setup cost, and licensing?
The price of the product is an area handled by the procurement team in my company.
What other advice do I have?
In terms of scalability and performance, I would say that the performance is similar to NGINX. Right now, we are not using the tool in relation to our company's traffic. The tool is fine, but I haven't tried to use it much for the traffic part if I compare it with NGINX.
When it comes to modularity, for the configuration part, there is a separate module users can create for each of the shared applications, which is similar to what NGINX offers.
The product's security features are reliable, especially since Apache provides ModSecurity for HSTS. You can overcome the need for most of the security headers if you add ModSecurity packaged with Apache, which is fine for our company.
I recommend the product to beginners who want a simple base server in their company for security purposes. I have to pay if I go with ModSecurity in NGINX. If I am a beginner who wants to secure my application, then I need to choose Apache Web Server since it offers ModSecurity for free.
The benefit of the use of the product stems from the capability it provides in the form of the security module, which is called ModSecurity. For NGINX, if you want to integrate ModSecurity, it comes across as a very lengthy module. If you talk about Apache, it is very easy. I think Apache offers unique features.
Apache Web Server offers modular configuration. On multiple websites, you can host multiple domains, and it also offers the capability of modularity, which allows you to create multiple configuration modules on separate web applications.
Apache Web Server is available as an open-source tool. In the product, you can get a free signature update for the database which is the most vulnerable, and you will get an update if you are using ModSecurity. Users also get community support.
I rate the tool an eight out of ten.
Which deployment model are you using for this solution?
On-premises