HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

learn more… | top users | synonyms

170
votes
7answers
22k views

What’s the point in having “www” in a URL?

Other than for historical reasons, is there is reason to have “www” in a URL. Should I do a permanent redirect from www.xyz.com to xyz.com or xyz.com to www.xyz.com? Which one would you suggest and ...
15
votes
5answers
12k views

mod_security block requests by http-host header

The last few days I noticed some servers being hammered with unknown requests. Most of them are like the following: 60.246.*.* - - [03/Jan/2015:20:59:16 +0200] "GET ...
6
votes
5answers
67k views

How do I use .htaccess to always redirect from HTTP to HTTPS? [duplicate]

There's a few similar questions which I tried to work out the answer from, but so far I have been unsuccessful. Please advise how I can always redirect http to https (and also remove www. from the ...
15
votes
3answers
19k views

When to turn TCP SACK off?

I've been looking at Linux tuning params and see some configs where SACK is turned off. Can anyone explain this? This would be tuning for a busy web server.
6
votes
1answer
9k views

Nginx proxy by Request Method

Is it possible/how can I configure an Nginx location block to proxy to different backends depending on the request method (ie. GET/POST)? The reason is, I am currently handling the 2 methods at 2 ...
5
votes
2answers
4k views

Nginx ignoring client's HTTP 1.0 request and respond by HTTP 1.1

I am testing using nginx/php5-fpm, with the code <?php header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found"); // also tested: header("Status: 404 Not Found"); echo $_SERVER["SERVER_PROTOCOL"]; ...
4
votes
2answers
1k views

Strange request in access.log, how to block?

I am using nginx on my own server, and I noticed a few days ago some strange request in my access.log : 77.50.217.37 - - [19/Aug/2011:17:50:50 +0200] "GET http://images.google.com/ HTTP/1.1" 200 151 ...
4
votes
1answer
5k views

Enable HTTP DELETE requests on Apache server

I need to configure my server to permit the http delete method. currently, I get the following error when I attempt to make this call: HTTP/1.1 405 Method Not Allowed Date: Mon, 11 Apr 2011 ...
213
votes
12answers
71k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. It then set up a redirect for all traffic on my domain on Port 80 to redirect it to Port 443. In other words, all my http://example.com traffic is ...
59
votes
4answers
243k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
21
votes
5answers
26k views

How to dump entire HTTP requests with apache

Is it possible to dump entire HTTP requests by apache? I need to track all HTTP headers of incomming requests. How to do that?
15
votes
8answers
21k views

Getting 408 errors on our logs with no request or user agent

I'm getting a lot of requests turning up in our apache logs that look like this www.example.com:80 10.240.1.8 - - [06/Mar/2013:00:39:19 +0000] "-" 408 0 "-" "-" - There seems to be no request and ...
12
votes
4answers
22k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
10
votes
8answers
7k views

Handling http and https requests using a single port with nginx

i was wondering if nginx is able to handle http and https requests on the same port. [*] This is what i'm trying to do. I'm running a web server (lighttpd) handling http requests, and a C program ...
2
votes
2answers
2k views

Configuring lighttpd for many lightweight concurrent Keep-Alive http connections

I am using lighttpd as a front-end proxy to my custom HTTP based application server. I need to configure lighttpd for a large number (let's say around 5000) simultaneous http connections which have a ...
10
votes
2answers
11k views

Serve http (port 80) and https (port 443) on same VirtualHost

I need to setup my VirtualHost on Apache to serve on both http and https (using standard ports) If I enable the SSL Engine (as per below) - I get an error when on port 80. The reason is, parts of ...
5
votes
3answers
3k views

How do high traffic sites service more than 65535 TCP connections?

If there is a limit on the number of ports one machine can have and a socket can only bind to an unused port number, how do servers experiencing extremely high amounts (more than the max port number) ...
3
votes
2answers
1k views

Why put a reverse proxy in front of a WSGI server?

A typical configuration for deploying a WSGI application includes a WSGI server (such as uWSGI or Gunicorn) behind a general-purpose web server (like nginx) that acts as a reverse proxy. One major ...
3
votes
3answers
6k views

Needed: Simple HTTP reverse proxy for Windows 2008

I need a simple HTTP reverse proxy to be installed on Windows Server 2008 x86 32. All I need from it is to route incoming HTTP (GET and POST) requests to another machine, with a different port, and ...
2
votes
2answers
10k views

How can i forward the http and ssh port to my internal server using iptables

I do not have the router so i make the Linux system into router having centos 6.4 for forwarding the Public network traffic to my local LAN.It has the two NIC card. one for public ip (eth1) and ...
2
votes
1answer
2k views

Why can't I log in to a Windows-protected IIS 7.5 directory on the server?

I have a web site with an admin subdirectory that is protected by integrated Windows authentication. Works flawlessly from remote PCs. But when I attempt to access these pages on the server itself, ...
2
votes
1answer
546 views

Why HTTP sniffers aren't able to capture PHP generated HTTP traffic?

I can't get why HTTP Analyzer (I prefer this one because it is capable of decoding SSL encoded data transfered through HTTPS) isn't able to capture PHP generated HTTP traffic. It capture HTTP traffic ...
-2
votes
1answer
207 views

Can Squid or other open-source proxy server be set up to process HTTPS encrypted traffic? [closed]

I would like to set up a home proxy server which would filter ads and viruses even before they get to the browser. The problem in this case is that many web sites use encrypted HTTPS connections and I ...
6
votes
8answers
13k views

Why can't some websites be shown without the “www” in the URL? [closed]

I used to type the website URL without the "www" and it works fine with almost all sites that I have tried, so far. But I realize that my university's website never show up if you don't type the ...
2
votes
1answer
349 views

Why does this HTTP header configuration cause browsers to always perform If-Modified-Since requests?

On our server, we have configured http response headers as follows: Cache-Control:max-age=28800, must-revalidate # (8 hours) Connection:Keep-Alive Date:Wed, 24 Apr 2013 21:36:19 GMT ...
2
votes
5answers
3k views

I am looking for a good load balancing (or reverse proxy) software for TCP and HTTP, any suggestions? [closed]

I am looking for a good load balancing (or reverse proxy) software for TCP and HTTP, any suggestions?
2
votes
4answers
12k views

Cannot commit to SVN repository via http

When I try to import a project into my subversion repository via http, I get this error: Can't create directory '/usr/local/svn/myproj/db/transactions/0-1.txn': Permission denied I set the httpd ...
1
vote
1answer
93 views

Apache HTTP authentication fault

It's weird that I only need to type in the first 70% part of the password to be cleared for access. I used .htaccess and .htpasswd to set up the authentication. And it's more weird that when the ...
1
vote
2answers
12k views

Problem with “Transfer-Encoding: chunked” in Apache 2.2

One of client of our web service uses axis2 application that sends HTTP 1.1 query with: Transfer-Encoding: chunked header. Such a query is refused by our Apache 2.2 with message: <title>411 ...
0
votes
2answers
134 views

Is the danger of the heartbleed bug worse than using non-ssl connections?

Trying to understand everything while reading http://heartbleed.com/ This sentence Leaked secret keys allows the attacker to decrypt any past and future traffic to the protected services and to ...
0
votes
2answers
185 views

Override SSH message when accessed via HTTP

If you access my server via HTTP using the SSH port (22), you'll see a message like this: SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.1 Could be possible to display a different message?
0
votes
1answer
15k views

“Protocol mismatch” when trying to access tunneled HTTP port

I'm using Mac 10.7.4 and I have an HTTP service running on port 8082 of a remote server, which I can only access through an intermediate server. So I execute these tunnel commands ssh -L ...
0
votes
2answers
203 views

Last (I think and hope) problems configuring SSL certificate with Apache and VirtualHosts

Finally I set apache2 to get a single certificate for all subdomains. [...] # Go ahead and accept connections for these vhosts # from non-SNI clients SSLStrictSNIVHostCheck off # Apache setup ...
-1
votes
3answers
397 views

Script to restart httpd if crashed

With heavy trafic, it happen that's my HTTP service crash on my dedicated server. Then, I have to restart httpd service manually. I just search for a shell script that's detect if HTTP service is OK ...
-3
votes
3answers
506 views

How to redirect https request to http [closed]

Assuming I don't have a valid certificate to handle a https session I want to redirect all https requests to http. Is it possible without opening https session?
60
votes
11answers
107k views

IIS 7.5 (Windows 7) - HTTP Error 401.3 - Unauthorized

I'm trying to test my ASP.Net website on localhost and I'm getting this error: HTTP Error 401.3 - Unauthorized You do not have permission to view this directory or page because of the access control ...
22
votes
8answers
3k views

Dynamically blocking excessive HTTP bandwidth use?

We were a little surprised to see this on our Cacti graphs for June 4 web traffic: We ran Log Parser on our IIS logs and it turns out this was a perfect storm of Yahoo and Google bots indexing us.. ...
35
votes
4answers
42k views

What's the maximum URL length in Tomcat?

And is it configurable? Can I set up Tomcat so that a URL with, say, 200K of query params goes through successfully to the contained servlet? Yes, I know one should use POST when you have lots of ...
31
votes
2answers
6k views

Unusual HEAD requests to nonsense URLs from Chrome

I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
17
votes
2answers
12k views

Do HTTP reverse proxies typically enable HTTP Keep-Alive on the client side of the proxied connection and not on the server side?

HAProxy has the ability to enable HTTP keep-alive on the client side (client <-> HAProxy) but disable it on the server side (HAProxy <-> server). Some of our clients connect to our web service ...
12
votes
4answers
48k views

How do I make cURL use keepalive from the command line?

I'm trying to verify that HTTP persistent connections are being used during communication with a Tomcat webserver I've got running. Currently, I can retrieve a resource on my server from a browser ...
8
votes
1answer
19k views

why isn't laravel's php artisan serve server being accessible from the WWW on IIS

I have a laravel application running through the laravel artisan server: php artisan serve and it works just fine if I go on my localhost:8000.. Further, I added an inbound rule in the IIS server ...
16
votes
4answers
25k views

Can the IP address for an HTTP request be spoofed?

On a website I am building, I plan to log the IP addresses of submissions, just in case it's necessary. I don't mind proxies, but outright spoofing your IP address would defeat the purpose. To ...
10
votes
5answers
13k views

Can I create SSH to tunnel HTTP through server like it was proxy?

Say I have a server and client. I need to create connection from client to a website through server like it was proxy. Is it possible to do this using a SSH tunel, or do I have to install some proxy ...
9
votes
5answers
5k views

Squid or Other HTTP Caches with SSD Cache Store?

I'm contemplating setting up a squid (or possibly varnish) cache on a system with SSD drives. The obvious benefit is that these systems have great READ speeds and I expect my hit ratios to be fairly ...
8
votes
3answers
542 views

Upgrade HTTP connection to SSL/TLS

I currently have a server which automatically redirects all HTTP requests to the equivalent HTTPS site. The problem is that is seems like some browsers do not accept the SSL certificate (StartSSL.com) ...
6
votes
4answers
21k views

How DNS lookups work when using an HTTP proxy (or not) in IE

I recently participated in a discussion regarding what happens when a client requests a page from a proxy server. I just wanted to make sure that my understanding of this sequence of events was ...
5
votes
2answers
5k views

Reducing Apache request queuing

In New Relic, one of the metrics they display as part of the application response time is "Request Queue".: To collect request queuing time, you need to mark the HTTP request with a timestamp ...
2
votes
2answers
2k views

What are the pros and cons of using HTTP for web server communication with app server(s)?

Background: I want to separate our web server/app server functions onto separate machines (logically or physically). Meaning, I want to dedicate certain resources to serving static content (static ...
17
votes
4answers
8k views

Change protocol associated with port in wireshark

I'm trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 - ie as HTTP. Just using Decode_As on the ...