HTTP header fields are components of the message header of requests and responses in the Hypertext Transfer Protocol (HTTP). They define the operating parameters of an HTTP transaction.

learn more… | top users | synonyms

0
votes
1answer
196 views

Issues with authenticating through HTTP POST

I am currently investigating an issue with our web authentication server not working for a small subset of users. Our method of authentication involves sending a hash through an HTTP POST. My ...
1
vote
1answer
29 views

“Connection” HTTP header in load balancers

Do load balancers remove the HTTP header indicated in the "Connection" header? As far as I know, headers indicated in the "Connection" header are not supposed to be populated further than the first ...
0
votes
1answer
486 views

Cache header for dynamically created url

I have a PHP script that generates a thumbnail based on an existing path (more info). The basic idea is this: Given the document root /web/, an image lives in /web/images/foo.jpg. When a predefined ...
2
votes
1answer
191 views

Apache returns 206 for some MP3's

We're trying to serve MP3 files from web1.cowbird.com. Most of the time everything works fine. However, sometimes there's a file that the browser is unable to play, and I have no idea why. Here is an ...
2
votes
2answers
148 views

Rejecting traffic where ACCEPT header is empty on favicon.ico requests

As part of filtering out potential harmful traffic, I currently reject traffic where $_SERVER["HTTP_ACCEPT"] is empty. I notice from my logs that a fair number of requests have been rejected due to ...
1
vote
1answer
255 views

How to get custom WebDAV server working with MS mini-redirector

I wrote a custom WebDAV server that authenticates users from a database and serves a virtual file system based on records from a database. It is working well with 3rd party WebDAV clients but does ...
1
vote
0answers
41 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
2
votes
0answers
40 views

Strange faulty 16000d response timing in gdevtools for specific XHR

We have some XHR on our website, that is reported in Google developer tools' network timeline as Receiving for 16035.5 days. There actually is a response, and for sure it does not take as long as ...
0
votes
3answers
855 views

Apache proxy_http redirect to ip and set hostname

hopefully you guys can help me with a proxy problem I have. What I already have I have set up an apache http reverse proxy, to proxy requests from *.proxy.domain to *.intern.domain. The apache is ...
2
votes
2answers
429 views

Why is SPDY breaking 'Vary: Accept-Encoding' in Nginx 1.4.3?

I've compiled Nginx 1.4.3 from source with the SPDY module. However when SPDY is enabled, it seems to break my 'Vary: Accept-Encoding' header. My Nginx Configuration: ./configure ...
0
votes
1answer
261 views

Tell browsers to cache until last modified date changes? [closed]

My web site consists of static HTML files which are usually republished once per day, and sometimes more. I'm using Apache. In the vhost settings for my site, I'd like to tell browsers to cache HTML ...
0
votes
3answers
1k views

htaccess filesMatch exclusion

I have the following directive in my htaccess <filesMatch "\.(gif|jpe?g|png|js|css|swf|php|ico|txt|pdf|xml|html?)$"> FileETag None <ifModule mod_headers.c> Header unset ...
3
votes
4answers
727 views

Only allow the POST method for a specific file in a directory

I have one file that should only be accessible via the POST method. /var/www/folder/index.php The document root is /var/www/ and index.php is nested inside a folder. Version of Apache is: 2.4.4. ...
2
votes
1answer
493 views

Remove “X-Page-Speed” version from headers in ngx_pagespeed

I have compiled ngx_pagespeed, but forgot to remove the version number. Is there any way to overwrite/delete/hide them? Apache has feature to 'unset' them, but I couldn't find anything similar for ...
0
votes
1answer
120 views

How to print out all request headers of HTTP requests on the server side?

I have a HAProxy configuration which balances requests to many servers. I want to compare the outgoing request headers when requests go thru HAProxy to the ones I would make directly to my servers. ...
0
votes
1answer
83 views

Can I set a content type if the origin doesn't send one in mod_proxy?

I have a misbehaving origin that when it has an error page it is not setting a content-type header. This is then a problem as we're sitting behind Edgecast and they default to ...
0
votes
1answer
440 views

How do I set up a conditional redirect in Tomcat

I have Tomcat running Jira. I have two DNS names that are attached to this site - mysite.myorg.com and mysite.myorg.net. I want the mysite.myorg.com to redirect all users to mysite.myorg.net since I ...
3
votes
1answer
2k views

Disabling 206 partial content responses on nginx

I have an HTML5 web app that uses a video tag. Depending on the user actions, different parts of the video will be played in response. This video does not exceed 5MB. I need this video to be entirely ...
0
votes
1answer
167 views

Sending two Content-Security-Policy headers

I current have an nginx server that is sending the Content-Security-Policy header, however I've read that apparently IE only supports "X-Content-Security-Policy". Would it be a good idea to send both ...
0
votes
1answer
627 views

nginx expires directive without Cache Control header

Is it possible to use the expires directive in nginx to display the "Expires" header alone without the Cache-control ? Also I've seen some websites whose max-age value decrements over time. Example ...
0
votes
2answers
212 views

Can't get nginx to reply to ab with compressed content

ab -n 1 -H 'Accept-Encoding: gzip, deflate' http://mywebsite.com/ This always returns the uncompressed content (I can see that both from its size and because I'm sniffing the traffic with ngrep). ...
1
vote
1answer
236 views

How do I get Apache2 to parse (without error) Header directives in a .htaccess?

I am getting pages loading with a 500 internal server error, due I believe to a directive that Apache has not been configured to allow. I have AllowOverride set to all, and a .htaccess file, ...
1
vote
1answer
116 views

How to store value of a non-standard HTTP request header to be used in an Apache If conditional

My server will be receiving a non-standard HTTP request named EmployeeID that I want to use to determine access rights to certain directories on the server. How can I store the value of the incoming ...
3
votes
1answer
1k views

Set header in apache if it doesn't already exist

I have a proxy that is injecting some headers but I want to modify it so it only sets the headers if they are not already present: <Location /api> RequestHeader set MY_HEADER "value" ...
1
vote
1answer
1k views

nginx and HTTP Referer

I'm using nginx together with php5-fpm and with the following fastcgi_params file: fastcgi_param CONTENT_LENGTH $content_length; fastcgi_param CONTENT_TYPE $content_type; ...
0
votes
1answer
810 views

How can I use SSL behind a load balancer and still get the client IP?

Note, I can't use SSL termination at the load balancer, due to network security related issues. The client IP I get is of course that of the load balancer. I know that the load balancer can't modify ...
0
votes
2answers
551 views

Can Squid 2.7 proxy gzipped content

We have a forward proxy for our network which is Squid 2.7. This is managed for us by a third party. We noticed recently that http requests going from our network to the web were having the ...
0
votes
1answer
101 views

Can we configure HTTP response code headers?

We're stumped. We're getting a new header in our Apache httpd + Passenger web server we didn't expect. We have a sensitive web client reading this we cannot modify at this time. Can we modify this ...
0
votes
1answer
261 views

GoAccess analytics and HTTP Referer

This is a high-level question regarding using goaccess as a tool for website analytics. I have it set up on an nginx server and parsing the logs just fine, but it seems that many requests to my own ...
1
vote
3answers
5k views

Human readable format for http headers with tcpdump

I would like to view the HTTP headers sent from Apache (listening on port 80) to Tomcat (on port 4080) in a Linux machine. According to Wikipedia, Header fields are colon-separated name-value ...
1
vote
1answer
192 views

Why does this HTTP header configuration cause browsers to always perform If-Modified-Since requests?

On our server, we have configured http response headers as follows: Cache-Control:max-age=28800, must-revalidate # (8 hours) Connection:Keep-Alive Date:Wed, 24 Apr 2013 21:36:19 GMT ...
1
vote
1answer
492 views

Amazon ELB not Passing “X-Forwarded-For” to IIS

ELB is setup to accept public HTTPS (443) connections and send them on as HTTP (80) to the EC2 instances. The EC2 instances run an IIS app that needs to know the user's IP address. According to ...
0
votes
0answers
761 views

Why does nginx not send the Content-Length header when the request is HEAD?

I am using CURL to test HEAD requests to my nginx server. The file being served is a simple PHP file. If I use GET: $ curl -XGET http://test.com/phpinfo.php -I HTTP/1.1 200 OK Date: Tue, 09 Apr 2013 ...
2
votes
2answers
514 views

Can I get Apache 2.2 to set a particular response header if some other response header is missing

I have an Apache 2.2 server running mod_proxy. We had a scenario where a response came through from the origin corrupted, it didn't have any content-type or cache-control headers. This meant that ...
-1
votes
1answer
136 views

Do I need to handle chunked HTTP requests if I only work with GET requests? [closed]

I am writing a Netty server that handles HTTP GET requests from the browser to serve scripts or pixels. My understanding is that there is no reason why I would receive chunked requests as all I ...
1
vote
0answers
96 views

nginx: how to serve files in gzip format when client accepts “Accept-Encoding: gzip” and inflated otherwise?

I have a folder full of .gz files and would like to serve them transparently inflated if requested by a client that does not send Accept-Encoding: gzip in the request and as-is (gzip'd) otherwise. I ...
0
votes
1answer
86 views

How respect acept: text/plain with nginx? [duplicate]

In http header there is a field named accept, so client can specify prefered format. How can I configure nginx to return markdown page in case of plain text request and processed via some markdown ...
1
vote
0answers
730 views

IE 10 HTTP 401 Error on AJAX POST

I've been chasing down an issue and decided to make the most basic reproduction of the issue possible in hopes that a simplified question will help me resolve this. I am receiving a 401 error when ...
0
votes
0answers
80 views

Where do I specifiy custom HTTP range-header entities and the necessary logic behind an entitiy?

I have a large JSON file which consists of xyz records. I'm looking for a way to retrieve parts of the file and have been reading the http-specs on how to define HTTP range-headers in Apache. The ...
0
votes
1answer
224 views

nginx ssl proxy for one hostname only

I want nginx to serve as a ssl proxy but for host: "ssl.example.com" at the same time I want nginx to serve "nginx is ok" website for host: "ssl-check.example.com" (this is just example, please don't ...
0
votes
0answers
53 views

Apache rendering page as plain/text with leading 0

I'm having an intermittent issue with an Apache Server( 2.0.44 ) rendering output as plain/text. The header has the correct Content type, but on occasion the Header and page content is output as ...
2
votes
1answer
645 views

IIS7 Response header exposes server information when post request is incomplete

IIS reveals "Server: Microsoft-HTTPAPI/2.0" in the response header when a invalid Post request is made. e.g. content-length is not included in the header. The Response returned also says HTTP/1.1 411 ...
1
vote
1answer
1k views

Set Access-Control-Allow-Origin in nginx using wildcard domain

With nginx can I specify Access-Control-Allow-Origin using a wildcard like *.mydomain.com? Would it look like: add_header Access-Control-Allow-Origin *.mydomain.com; Thanks.
1
vote
2answers
701 views

nginx redirection cycle with X-Accel-Redirect

Trying to get nginx to work with the X-Accel-Redirect header. I'm getting this error: *24 rewrite or internal redirection cycle while internally redirecting to "/app/index.php", client: 127.0.0.1, ...
-1
votes
1answer
458 views

Lowercase headers [closed]

One thing I've noticed about CloudFlare and Google's web servers are that they both use lowercase response headers. Is this just for looks, or does it actually provide a performance increase? I'm ...
-2
votes
1answer
69 views

Why is there a redundancy in HTTP status headers? [closed]

I'd like to learn something from the design of HTTP protocol - why is there, for example, "Not found", following the "404" code? Wouldn't the number itself be sufficient?
2
votes
1answer
2k views

Disable compression on SSL/TLS connections in Apache < 2.2.16 using mod_header

Because of CRIME, as I understand, compression on SSL connections have to be turned off. In newer versions of apache this can be done with a newly introduced directive SSLCompression off, in older ...
1
vote
1answer
110 views

How to deal with downtime of web server without losing SEO ranking?

I am having a website which I'm planning to keep in maintenance mode for about 2 days without losing SEO ranking. According to Google blog post, we can do this by having a 503 Service Temporarily ...
0
votes
1answer
987 views

Why is IIS 7.5 seeing some requests as HTTP/1.0?

While trying to work out why Static File Compression wasn't working on one of our IIS servers, the error was coming back as "NO_COMPRESSION_10" which translates to: Server not configured to ...
0
votes
1answer
951 views

Cache Control Headers with IIS 7.5

I'm trying to wrap my head around client side (web browser) caching and how it works in relation to IIS 7.5 cache control headers. In particular: If we want to force clients to reload cached ...