Set Up Apache Virtual Hosts

Overview

Virtual hosts allow us to run more than one web site on the same IP address. While not appropriate for production environments, name-based vulnerable hosts work well for providing production-like sites in isolated lab environments; especially those running only locally.

Video Tutorials

Creating Virtual Hosts

Virtual hosts can be used to allow both HTTP and HTTPS sites for the same application. 
An example of a possible configuration is below. This example limits mutillidae to running 
on localhost only at IP address 127.0.0.1 on standard ports 80 and 443 respectively.

<VirtualHost 127.0.0.1:80>
	ServerName mutillidae.local
	DocumentRoot /var/www/html/mutillidae

	ErrorLog ${APACHE_LOG_DIR}/mutillidae-error.log
	CustomLog ${APACHE_LOG_DIR}/mutillidae-access.log combined
</VirtualHost>

<VirtualHost 127.0.0.1:443>
	DocumentRoot /var/www/html/mutillidae
	ServerName mutillidae.local

	ErrorLog ${APACHE_LOG_DIR}/mutillidae-error.log
	CustomLog ${APACHE_LOG_DIR}/mutillidae-access.log combined

	SSLEngine On
	SSLOptions +StrictRequire
	SSLCertificateFile /etc/ssl/certs/mutillidae-selfsigned.crt
	SSLCertificateKeyFile /etc/ssl/private/mutillidae-selfsigned.key
	SSLProtocol TLSv1
</VirtualHost>

Creating Multiple "Named" Virtual Hosts

Apache allows more than one website to run on a single IP address. This pattern
should not be used for production sites, but is convenient for lab
environments. In this example, we enable the default web site located at
/var/www/html and enable mutillidae at /var/www/html/mutillidae. Both sites
are running on IP address 127.0.0.1. However, the default site will respond to
http://localhost while Mutillidae will respond to http://mutillidae or 
http://mutillidae.local. In the case of a tie, "first match wins". For example,
http://127.0.0.1 will load the default site because there is no hostname on
which to match and the default site is listed first.

	# Localhost

    <VirtualHost 127.0.0.1:80>
        ServerName localhost
        DocumentRoot /var/www/html
    
    	ErrorLog ${APACHE_LOG_DIR}/localhost-error.log
    	CustomLog ${APACHE_LOG_DIR}/localhost-access.log combined
    </VirtualHost>
    
    <VirtualHost 127.0.0.1:443>
        ServerName localhost
        DocumentRoot /var/www/html
    
    	ErrorLog ${APACHE_LOG_DIR}/localhost-error.log
    	CustomLog ${APACHE_LOG_DIR}/localhost-access.log combined
    
        SSLEngine On
        SSLOptions +StrictRequire
        SSLCertificateFile /etc/ssl/certs/mutillidae-selfsigned.crt
        SSLCertificateKeyFile /etc/ssl/private/mutillidae-selfsigned.key
        SSLProtocol -all +TLSv1.2
    </VirtualHost>
    
    # Mutillidae
    
    <VirtualHost 127.0.0.1:80>
        ServerName mutillidae.local
    	ServerAlias mutillidae
        DocumentRoot /var/www/html/mutillidae
    
    	ErrorLog ${APACHE_LOG_DIR}/mutillidae-error.log
    	CustomLog ${APACHE_LOG_DIR}/mutillidae-access.log combined
    </VirtualHost>
    
    <VirtualHost 127.0.0.1:443>
        ServerName mutillidae.local
    	ServerAlias mutillidae
        DocumentRoot /var/www/html/mutillidae
    
    	ErrorLog ${APACHE_LOG_DIR}/mutillidae-error.log
    	CustomLog ${APACHE_LOG_DIR}/mutillidae-access.log combined
    
        SSLEngine On
        SSLOptions +StrictRequire
        SSLCertificateFile /etc/ssl/certs/mutillidae-selfsigned.crt
        SSLCertificateKeyFile /etc/ssl/private/mutillidae-selfsigned.key
        SSLProtocol -all +TLSv1 +TLSv1.1 +TLSv1.2
    </VirtualHost>

"Named Hosts" requires, well, the hosts be named. Otherwise, there is no
name on which Apache can match. To add localhost names for IP address
127.0.0.1, we can use the following.

    echo -e "\n127.0.0.1\tmutillidae.local" >> /etc/hosts
    echo -e "\n127.0.0.1\tmutillidae" >> /etc/hosts

The resulting /etc/hosts file might look something like this

    127.0.0.1 localhost
    
    # The following lines are desirable for IPv6 capable hosts
    ::1 ip6-localhost ip6-loopback
    fe00::0 ip6-localnet
    ff00::0 ip6-mcastprefix
    ff02::1 ip6-allnodes
    ff02::2 ip6-allrouters
    ff02::3 ip6-allhosts
    
    127.0.0.1	mutillidae.local
    127.0.0.1	mutillidae

Videos

How to Create Virtual Hosts in Apache