Enhancing Security with Apache Localhost Mode in Plesk 18.0.56 (PPP-43250)

Question

How can I use the new feature in Plesk 18.0.56 that allows Apache Web Server to listen on localhost on ports 7080 and 7081?

Answer

In Plesk 18.0.56, a new security feature (PPP-43250) was introduced that restricts the Apache web server to listening only on localhost ports 7080 and 7081, thereby increasing server security. This feature is particularly active when Apache is running with nginx as a reverse proxy, listening only on the loopback IP address.

The feature is manipulated using the CLI command plesk bin apache --listen-on-localhost
<true|false>, which enables or disables Apache's localhost mode. For new Plesk installations, this mode is enabled by default. However, for Plesk upgrades, localhost mode remains disabled by default.

It's important to note that existing custom hosting templates may require adjustments to function properly in localhost mode, depending on the modifications made to the template. This is an important consideration to ensure the smooth operation of your server configurations.