HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

learn more… | top users | synonyms

137
votes
7answers
14k views

What’s the point in having “www” in a URL?

Other than for historical reasons, is there is reason to have “www” in a URL. Should I do a permanent redirect from www.xyz.com to xyz.com or xyz.com to www.xyz.com? Which one would you suggest and ...
14
votes
5answers
7k views

mod_security block requests by http-host header

The last few days I noticed some servers being hammered with unknown requests. Most of them are like the following: 60.246.*.* - - [03/Jan/2015:20:59:16 +0200] "GET ...
4
votes
5answers
43k views

How do I use .htaccess to always redirect from HTTP to HTTPS?

There's a few similar questions which I tried to work out the answer from, but so far I have been unsuccessful. Please advise how I can always redirect http to https (and also remove www. from the ...
13
votes
3answers
14k views

When to turn TCP SACK off?

I've been looking at Linux tuning params and see some configs where SACK is turned off. Can anyone explain this? This would be tuning for a busy web server.
2
votes
1answer
744 views

Strange request in access.log, how to block?

I am using nginx on my own server, and I noticed a few days ago some strange request in my access.log : 77.50.217.37 - - [19/Aug/2011:17:50:50 +0200] "GET http://images.google.com/ HTTP/1.1" 200 151 ...
176
votes
11answers
44k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
18
votes
4answers
19k views

How to dump entire HTTP requests with apache

Is it possible to dump entire HTTP requests by apache? I need to track all HTTP headers of incomming requests. How to do that?
12
votes
6answers
11k views

Getting 408 errors on our logs with no request or user agent

I'm getting a lot of requests turning up in our apache logs that look like this www.example.com:80 10.240.1.8 - - [06/Mar/2013:00:39:19 +0000] "-" 408 0 "-" "-" - There seems to be no request and ...
9
votes
4answers
14k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
7
votes
8answers
6k views

Handling http and https requests using a single port with nginx

i was wondering if nginx is able to handle http and https requests on the same port. [*] This is what i'm trying to do. I'm running a web server (lighttpd) handling http requests, and a C program ...
2
votes
2answers
2k views

Configuring lighttpd for many lightweight concurrent Keep-Alive http connections

I am using lighttpd as a front-end proxy to my custom HTTP based application server. I need to configure lighttpd for a large number (let's say around 5000) simultaneous http connections which have a ...
3
votes
2answers
3k views

Nginx ignoring client's HTTP 1.0 request and respond by HTTP 1.1

I am testing using nginx/php5-fpm, with the code <?php header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found"); // also tested: header("Status: 404 Not Found"); echo $_SERVER["SERVER_PROTOCOL"]; ...
7
votes
8answers
9k views

Why can't some websites be shown without the “www” in the URL?

I used to type the website URL without the "www" and it works fine with almost all sites that I have tried, so far. But I realize that my university's website never show up if you don't type the ...
3
votes
3answers
2k views

How do high traffic sites service more than 65535 TCP connections?

If there is a limit on the number of ports one machine can have and a socket can only bind to an unused port number, how do servers experiencing extremely high amounts (more than the max port number) ...
3
votes
3answers
5k views

Needed: Simple HTTP reverse proxy for Windows 2008

I need a simple HTTP reverse proxy to be installed on Windows Server 2008 x86 32. All I need from it is to route incoming HTTP (GET and POST) requests to another machine, with a different port, and ...
2
votes
1answer
439 views

Why HTTP sniffers aren't able to capture PHP generated HTTP traffic?

I can't get why HTTP Analyzer (I prefer this one because it is capable of decoding SSL encoded data transfered through HTTPS) isn't able to capture PHP generated HTTP traffic. It capture HTTP traffic ...
-2
votes
1answer
173 views

Can Squid or other open-source proxy server be set up to process HTTPS encrypted traffic? [closed]

I would like to set up a home proxy server which would filter ads and viruses even before they get to the browser. The problem in this case is that many web sites use encrypted HTTPS connections and I ...
2
votes
5answers
3k views

I am looking for a good load balancing (or reverse proxy) software for TCP and HTTP, any suggestions? [closed]

I am looking for a good load balancing (or reverse proxy) software for TCP and HTTP, any suggestions?
2
votes
4answers
9k views

Cannot commit to SVN repository via http

When I try to import a project into my subversion repository via http, I get this error: Can't create directory '/usr/local/svn/myproj/db/transactions/0-1.txn': Permission denied I set the httpd ...
1
vote
2answers
10k views

Problem with “Transfer-Encoding: chunked” in Apache 2.2

One of client of our web service uses axis2 application that sends HTTP 1.1 query with: Transfer-Encoding: chunked header. Such a query is refused by our Apache 2.2 with message: <title>411 ...
0
votes
2answers
134 views

Is the danger of the heartbleed bug worse than using non-ssl connections?

Trying to understand everything while reading http://heartbleed.com/ This sentence Leaked secret keys allows the attacker to decrypt any past and future traffic to the protected services and to ...
0
votes
1answer
9k views

“Protocol mismatch” when trying to access tunneled HTTP port

I'm using Mac 10.7.4 and I have an HTTP service running on port 8082 of a remote server, which I can only access through an intermediate server. So I execute these tunnel commands ssh -L ...
0
votes
2answers
200 views

Last (I think and hope) problems configuring SSL certificate with Apache and VirtualHosts

Finally I set apache2 to get a single certificate for all subdomains. [...] # Go ahead and accept connections for these vhosts # from non-SNI clients SSLStrictSNIVHostCheck off # Apache setup ...
-1
votes
3answers
285 views

Script to restart httpd if crashed

With heavy trafic, it happen that's my HTTP service crash on my dedicated server. Then, I have to restart httpd service manually. I just search for a shell script that's detect if HTTP service is OK ...
-3
votes
3answers
179 views

How to redirect https request to http [closed]

Assuming I don't have a valid certificate to handle a https session I want to redirect all https requests to http. Is it possible without opening https session?
53
votes
11answers
81k views

IIS 7.5 (Windows 7) - HTTP Error 401.3 - Unauthorized

I'm trying to test my ASP.Net website on localhost and I'm getting this error: HTTP Error 401.3 - Unauthorized You do not have permission to view this directory or page because of the access control ...
22
votes
8answers
3k views

Dynamically blocking excessive HTTP bandwidth use?

We were a little surprised to see this on our Cacti graphs for June 4 web traffic: We ran Log Parser on our IIS logs and it turns out this was a perfect storm of Yahoo and Google bots indexing us.. ...
27
votes
3answers
30k views

What's the maximum URL length in Tomcat?

And is it configurable? Can I set up Tomcat so that a URL with, say, 200K of query params goes through successfully to the contained servlet? Yes, I know one should use POST when you have lots of ...
31
votes
3answers
136k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
13
votes
2answers
8k views

Do HTTP reverse proxies typically enable HTTP Keep-Alive on the client side of the proxied connection and not on the server side?

HAProxy has the ability to enable HTTP keep-alive on the client side (client <-> HAProxy) but disable it on the server side (HAProxy <-> server). Some of our clients connect to our web service ...
8
votes
5answers
5k views

Can I create SSH to tunnel HTTP through server like it was proxy?

Say I have a server and client. I need to create connection from client to a website through server like it was proxy. Is it possible to do this using a SSH tunel, or do I have to install some proxy ...
7
votes
5answers
5k views

Squid or Other HTTP Caches with SSD Cache Store?

I'm contemplating setting up a squid (or possibly varnish) cache on a system with SSD drives. The obvious benefit is that these systems have great READ speeds and I expect my hit ratios to be fairly ...
16
votes
4answers
6k views

Change protocol associated with port in wireshark

I'm trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 - ie as HTTP. Just using Decode_As on the ...
12
votes
3answers
2k views

How does the HTTP GET method work in relation to DNS protocol?

I am trying to understand application layer protocols in TCP/IP stack. I know that both HTTP and DNS protocol stay at the top layer (Application Layer). So, when a browser wants to access a resource, ...
5
votes
4answers
1k views

Setting up SVN server for multiple users over http

The SVN annotate feature is quite powerful and makes quick work of who to track down for a particular feature on a particular line of code. This feature is rendered slightly more limited (but still ...
4
votes
1answer
8k views

why isn't laravel's php artisan serve server being accessible from the WWW on IIS

I have a laravel application running through the laravel artisan server: php artisan serve and it works just fine if I go on my localhost:8000.. Further, I added an inbound rule in the IIS server ...
4
votes
2answers
3k views

Reducing Apache request queuing

In New Relic, one of the metrics they display as part of the application response time is "Request Queue".: To collect request queuing time, you need to mark the HTTP request with a timestamp ...
5
votes
2answers
9k views

What are the steps to setup git-http-backend w/ Apache on Windows?

I would like setup a Git server using the "Smart-HTTP" approach. However, I'm having difficulties getting it to work in Windows, and I'm new to Apache. My httpd.conf, in part: SetEnv ...
2
votes
1answer
1k views

Stunnel too many clients

I'm trying to hook up stunnel and haproxy to forward https connections through to some backend servers. I've got haproxy setup right, and I seem to have stunnel set up right. Trouble is that when I ...
0
votes
2answers
99 views

Tools for replaying _all_ HTTP traffic [closed]

I intend to log all production HTTP requests to be able to do load testing and analysis on that data later on. The log replaying software I have seen so far only seem capable of replaying GETs. Are ...
7
votes
1answer
12k views

How to enable PUT and DELETE in IIS7

I've been hunting for a while and can't seem to find how to enable PUT and DELETE in IIS7. I keep getting 404s when I use those verbs. I've played with request filtering, and that has no impact. ...
6
votes
2answers
380 views

Why might a 413 not be flushed to the client immediately?

I have my local development server returning status 413 for oversized file uploads and the client is receiving these immediately - as I require. My remote server is the same version of Nginx and ...
3
votes
2answers
758 views

Why put a reverse proxy in front of a WSGI server?

A typical configuration for deploying a WSGI application includes a WSGI server (such as uWSGI or Gunicorn) behind a general-purpose web server (like nginx) that acts as a reverse proxy. One major ...
2
votes
4answers
3k views

Issuing commands over web interface to Cisco switch

I am attempting to script a system for automatically deploying new Cisco switches (Cisco 3012 switches for an IBM BladeCenter, to be specific). I need to get telnet access into the new switches, ...
1
vote
1answer
317 views

Jetty 9 - redirect http to https

I'd like to force use of https in Jetty 9. Apparently: <Set name="confidentialPort">443</Set> no longer works in jetty 9. How should I do it properly?
1
vote
1answer
2k views

Logging Timeout'd Request in Apache 2.X

I am migrating some applications from Apache 1.3 to 2.2. We used to run some tests where attacker opens some HTTP connection to our server, and do nothing. Apache 1.3 would log the following 408 ...
1
vote
2answers
2k views

Nginx wont send POST to FastCGI backend, but GET works fine?

Not sure why, but it is happy sending a GET to the FastCGI backend (Mercurial hgwebdir in this case), but simply resorts to the filesystem if the request is a POST. Relevant parts of nginx.conf: ...
1
vote
3answers
1k views

Dealing with moved documents and sites in Sharepoint

My organisation has recently restructured, and as a result, we have to move a bunch of team sites in our Sharepoint 2007 Intranet (MOSS). This is going to result in changed URLs and broken links in ...
0
votes
1answer
3k views

iptables for Windows to redirect traffic

I am currently testing my server traffic and would like to route all incoming+outgoing traffic so as to be picked up by Burpsuite for analysis. Ideally, all traffic from ports 80 and 443 should be ...
0
votes
2answers
215 views

HTTP client -> [proxy] -> HTTPS server. Possible?

Is it possible to have something like this?: [Client] ----HTTP--- > [Magic] ----HTTPS----> [Server] I have a Windows Phone client that should connects to a HTTPS server which is out of my control. ...