HTTP header fields are components of the message header of requests and responses in the Hypertext Transfer Protocol (HTTP). They define the operating parameters of an HTTP transaction.

learn more… | top users | synonyms

1
vote
1answer
685 views

nginx and HTTP Referer

I'm using nginx together with php5-fpm and with the following fastcgi_params file: fastcgi_param CONTENT_LENGTH $content_length; fastcgi_param CONTENT_TYPE $content_type; ...
0
votes
1answer
470 views

How can I use SSL behind a load balancer and still get the client IP?

Note, I can't use SSL termination at the load balancer, due to network security related issues. The client IP I get is of course that of the load balancer. I know that the load balancer can't modify ...
0
votes
2answers
268 views

Can Squid 2.7 proxy gzipped content

We have a forward proxy for our network which is Squid 2.7. This is managed for us by a third party. We noticed recently that http requests going from our network to the web were having the ...
0
votes
1answer
95 views

Can we configure HTTP response code headers?

We're stumped. We're getting a new header in our Apache httpd + Passenger web server we didn't expect. We have a sensitive web client reading this we cannot modify at this time. Can we modify this ...
0
votes
1answer
205 views

GoAccess analytics and HTTP Referer

This is a high-level question regarding using goaccess as a tool for website analytics. I have it set up on an nginx server and parsing the logs just fine, but it seems that many requests to my own ...
1
vote
2answers
2k views

Human readable format for http headers with tcpdump

I would like to view the HTTP headers sent from Apache (listening on port 80) to Tomcat (on port 4080) in a Linux machine. According to Wikipedia, Header fields are colon-separated name-value ...
1
vote
1answer
141 views

Why does this HTTP header configuration cause browsers to always perform If-Modified-Since requests?

On our server, we have configured http response headers as follows: Cache-Control:max-age=28800, must-revalidate # (8 hours) Connection:Keep-Alive Date:Wed, 24 Apr 2013 21:36:19 GMT ...
1
vote
1answer
256 views

Amazon ELB not Passing “X-Forwarded-For” to IIS

ELB is setup to accept public HTTPS (443) connections and send them on as HTTP (80) to the EC2 instances. The EC2 instances run an IIS app that needs to know the user's IP address. According to ...
0
votes
0answers
628 views

Why does nginx not send the Content-Length header when the request is HEAD?

I am using CURL to test HEAD requests to my nginx server. The file being served is a simple PHP file. If I use GET: $ curl -XGET http://test.com/phpinfo.php -I HTTP/1.1 200 OK Date: Tue, 09 Apr 2013 ...
2
votes
2answers
413 views

Can I get Apache 2.2 to set a particular response header if some other response header is missing

I have an Apache 2.2 server running mod_proxy. We had a scenario where a response came through from the origin corrupted, it didn't have any content-type or cache-control headers. This meant that ...
-1
votes
1answer
121 views

Do I need to handle chunked HTTP requests if I only work with GET requests? [closed]

I am writing a Netty server that handles HTTP GET requests from the browser to serve scripts or pixels. My understanding is that there is no reason why I would receive chunked requests as all I ...
1
vote
0answers
86 views

nginx: how to serve files in gzip format when client accepts “Accept-Encoding: gzip” and inflated otherwise?

I have a folder full of .gz files and would like to serve them transparently inflated if requested by a client that does not send Accept-Encoding: gzip in the request and as-is (gzip'd) otherwise. I ...
0
votes
1answer
72 views

How respect acept: text/plain with nginx? [duplicate]

In http header there is a field named accept, so client can specify prefered format. How can I configure nginx to return markdown page in case of plain text request and processed via some markdown ...
1
vote
0answers
565 views

IE 10 HTTP 401 Error on AJAX POST

I've been chasing down an issue and decided to make the most basic reproduction of the issue possible in hopes that a simplified question will help me resolve this. I am receiving a 401 error when ...
0
votes
0answers
75 views

Where do I specifiy custom HTTP range-header entities and the necessary logic behind an entitiy?

I have a large JSON file which consists of xyz records. I'm looking for a way to retrieve parts of the file and have been reading the http-specs on how to define HTTP range-headers in Apache. The ...
0
votes
1answer
182 views

nginx ssl proxy for one hostname only

I want nginx to serve as a ssl proxy but for host: "ssl.example.com" at the same time I want nginx to serve "nginx is ok" website for host: "ssl-check.example.com" (this is just example, please don't ...
0
votes
0answers
44 views

Apache rendering page as plain/text with leading 0

I'm having an intermittent issue with an Apache Server( 2.0.44 ) rendering output as plain/text. The header has the correct Content type, but on occasion the Header and page content is output as ...
2
votes
1answer
515 views

IIS7 Response header exposes server information when post request is incomplete

IIS reveals "Server: Microsoft-HTTPAPI/2.0" in the response header when a invalid Post request is made. e.g. content-length is not included in the header. The Response returned also says HTTP/1.1 411 ...
0
votes
1answer
720 views

Set Access-Control-Allow-Origin in nginx using wildcard domain

With nginx can I specify Access-Control-Allow-Origin using a wildcard like *.mydomain.com? Would it look like: add_header Access-Control-Allow-Origin *.mydomain.com; Thanks.
1
vote
2answers
541 views

nginx redirection cycle with X-Accel-Redirect

Trying to get nginx to work with the X-Accel-Redirect header. I'm getting this error: *24 rewrite or internal redirection cycle while internally redirecting to "/app/index.php", client: 127.0.0.1, ...
-1
votes
1answer
342 views

Lowercase headers [closed]

One thing I've noticed about CloudFlare and Google's web servers are that they both use lowercase response headers. Is this just for looks, or does it actually provide a performance increase? I'm ...
-2
votes
1answer
64 views

Why is there a redundancy in HTTP status headers? [closed]

I'd like to learn something from the design of HTTP protocol - why is there, for example, "Not found", following the "404" code? Wouldn't the number itself be sufficient?
2
votes
1answer
2k views

Disable compression on SSL/TLS connections in Apache < 2.2.16 using mod_header

Because of CRIME, as I understand, compression on SSL connections have to be turned off. In newer versions of apache this can be done with a newly introduced directive SSLCompression off, in older ...
1
vote
1answer
96 views

How to deal with downtime of web server without losing SEO ranking?

I am having a website which I'm planning to keep in maintenance mode for about 2 days without losing SEO ranking. According to Google blog post, we can do this by having a 503 Service Temporarily ...
0
votes
1answer
657 views

Why is IIS 7.5 seeing some requests as HTTP/1.0?

While trying to work out why Static File Compression wasn't working on one of our IIS servers, the error was coming back as "NO_COMPRESSION_10" which translates to: Server not configured to ...
0
votes
1answer
528 views

Cache Control Headers with IIS 7.5

I'm trying to wrap my head around client side (web browser) caching and how it works in relation to IIS 7.5 cache control headers. In particular: If we want to force clients to reload cached ...
1
vote
0answers
269 views

Why pragma: no-cache does not work anymore on IE?

On my employer web server, we have 200+ PHP applications with this kind of code to allow download of a file : header('Content-Disposition: attachment; filename="file.pdf"'); header('Expires: 0'); ...
2
votes
2answers
463 views

nginx conditional Accept header

Some mobile devices send the following incorrect requests to our servers : GET / HTTP/1.0 Accept: User-Agent : xxx The empty Accept header causes our Ruby on Rails server to throw back a 500 error. ...
0
votes
1answer
277 views

Have set Expiration time: Still getting “Query string present but no explicit expiration time”

I have one local Apache instance running with mod_cache (+ disk & mem) enabled, and it seems to cache content from my appserver fine. My app server sets Expiration headers and Last-modified. Yet, ...
1
vote
1answer
105 views

Delivering partial content to iTunes podcast [closed]

We've noticed that our Podcasts, when being streamed through iTunes, are unable to "seek" properly. Any time you click on the timeline, it restarts from the beginning. I'm pretty sure we're ...
0
votes
1answer
328 views

nginx rule to capture header and append value as query string

I have an interesting problem I need to solve in nginx: one of the sites I'm building receives inbound traffic on port 80 (and only port 80) which may have a certain header set in the request. If this ...
0
votes
1answer
311 views

Apache returns HTTP 206 for GET /file.mp3

I am making a get request to an SSL enabled site on apache (so wireshark isn't giving me anything to useful). In my Apache SSL access log I see the following entry: 1.2.3.4 - my.username ...
0
votes
0answers
82 views

How to change HTTP_REFERER using perl?

I tried to change log format and change HTTP_REFERER using perl to change browser's referrer like below. [pattern1] Log Format : %{HTTP_REFERER}o perl : $ENV{'HTTP_REFERER'} = ...
2
votes
1answer
981 views

server_tokens off but still publishing them

I added server_tokens off; to http{} section of /etc/nginx/nginx.conf file and restarted nginx with service nginx restart command. but server still publishing the server tokens when responsing ...
1
vote
1answer
266 views

Blocking HEAD, DELETE, etc. with lighttpd

So I have lighttpd installed and the site it runs only needs to respond to GET requests. I was wondering how I can return 405 responses with Allow: GET headers to anything but GET requests using ...
2
votes
1answer
972 views

LiteSpeed enable Access-Control-Allow-Origin (no response header on CORS request)

Seriously, I can't find a single page discussing this for litespeed. Using this format in the htaccess "Header set Access-Control-Allow-Origin http://aSite.com" (and https) sends the setting in the ...
1
vote
1answer
492 views

Load Balancing with haproxy and http-send-name-header Host

I ran into the following problem: tldr; When dynamically rewriting the HTTP Host header with http-send-name-header Host haproxy seems to mess up HTTP Response headers. Doing so works fine when using ...
2
votes
1answer
922 views

Stop squid caching 302 and 307 with deny_info

TLDR: 302, 307 and Error pages are being cached. Need to force a refresh of the content. Long version: I've setup a very minimal squid instance running on a gateway which shouldn't not cache ANYTHING ...
0
votes
1answer
87 views

Setting correct Content-Type sent from Wordpress, on Apache server

I need help pointing me in the right direction for setting the ContentType returned by Apache for content produced by WordPress. I'm having trouble figuring out why WordPress is returning incorrect ...
2
votes
2answers
118 views

One single page showing 3 requests (also printing the headers)

Someone in my studio designed a webpage some years ago, and now the client decided to change the server (he moved to a Linux Apache server running Gen2 SMP, 64 bits, PHP version 5.3.8, Standard MYSQL ...
1
vote
1answer
394 views

Can I use adsutil.vbs to remove the 'X—Powered-By' response header from IIS6

Can I use adsutil.vbs to remove the X—Powered-By response header from IIS6 configuration? We have a site that is running on some IIS6 servers. Migration to IIS7 is a few months away at least. In the ...
1
vote
2answers
440 views

Http header 304 and caching?

Our company uses these settings( don't ask me why) - for every request they want a new request from server. this is an intranet system which uses only IE. They defined it in : We also have ...
2
votes
1answer
2k views

Nginix proxy caching - how to check if it is working?

I have set up my nginx.conf file to use proxy caching from tutorials I have found online. However, I am trying to figure out how to check if it is actually working. I've read somewhere that adding ...
0
votes
3answers
385 views

Uploading to another domain gives HTTP code 405

I'm trying to upload a file (which can be quite large) from the website of one server to the backend of another server using plupload. Lets say: domain 1 = http://www.websitedomain.com/uploadform ...
1
vote
3answers
533 views

HTTP/1.1 Status Codes 400 and 417, cannot choose which

I have been referred to here that it might be of better help, I've got a processing file which handles the user sent data, before that, however, it compares the input from client to the expected ...
0
votes
1answer
697 views

Get Squid to pass X-Requested-With header

I have configured a squid 3.1 proxy server. Everything works great except for the X-Requested-With header. I can't manage to figure out how to pass that header to the site I'm attempting to open via ...
0
votes
1answer
324 views

Make nginx avoid cache if response contains Vary Accept-Language

The cache module of nginx version 1.1.19 does not take the Vary header into account. This means that nginx will serve the same request even if the content of one of the fields specified in the Vary ...
1
vote
2answers
4k views

why i cannot download jdk from oracle web site directly without AuthParam?

that is download with the following command, why it fails to download that file? wget http://download.oracle.com/otn-pub/java/jdk/6u35-b10/jdk-6u35-linux-i586.bin the following command works, but ...
0
votes
1answer
309 views

Chrome rejecting connections to netcat webserver

I have a very simple netcat webserver set up to display the /etc/motd file for some machines, which works fine in Firefox, but intermittently fails in Chrome. I suspect it's an HTTP header / caching ...
1
vote
2answers
1k views

Can't turn off SNI on apache

When I go to: http://web-sniffer.net/ and check the headers of my site (https://www.example.org), I get a status code 200 But when I use the radio button HTTP/1.0 (without Host header), I get a ...