Do not enable %ExtendedStatus% (prevents 2 calls to timing functions per request). For %Deny/Allow% rules use IPs rather then domains. (prevents superfluous DNS lookups). Do not enable %HostnameLookups% (DNS is slow). This can be done during log analysis when speed is not an issue. Keep %ServerSignature% off (do not sent Apache identification string)