HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

learn more… | top users | synonyms

217
votes
12answers
76k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. It then set up a redirect for all traffic on my domain on Port 80 to redirect it to Port 443. In other words, all my http://example.com traffic is ...
172
votes
7answers
23k views

What’s the point in having “www” in a URL?

Other than for historical reasons, is there is reason to have “www” in a URL. Should I do a permanent redirect from www.xyz.com to xyz.com or xyz.com to www.xyz.com? Which one would you suggest and ...
63
votes
11answers
112k views

IIS 7.5 (Windows 7) - HTTP Error 401.3 - Unauthorized

I'm trying to test my ASP.Net website on localhost and I'm getting this error: HTTP Error 401.3 - Unauthorized You do not have permission to view this directory or page because of the access control ...
62
votes
4answers
275k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried http://myserver.com/~user=...
39
votes
11answers
41k views

Tools for load-testing HTTP servers? [duplicate]

I've had to load test HTTP servers/web applications a few times, and each time I've been underwhelmed by the quality of tools I've been able to find. So, when you're load testing a HTTP server, what ...
36
votes
4answers
44k views

What's the maximum URL length in Tomcat?

And is it configurable? Can I set up Tomcat so that a URL with, say, 200K of query params goes through successfully to the contained servlet? Yes, I know one should use POST when you have lots of ...
33
votes
2answers
6k views

Unusual HEAD requests to nonsense URLs from Chrome

I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
32
votes
2answers
57k views

How to make wireshark filter POST-requests only?

How to make wireshark filter POST-requests only?
29
votes
3answers
39k views

How to list Apache enabled modules?

Is there a command that list all enabled Apache modules?
28
votes
3answers
39k views

Human readable format for http headers with tcpdump

I would like to view the HTTP headers sent from Apache (listening on port 80) to Tomcat (on port 4080) in a Linux machine. According to Wikipedia, Header fields are colon-separated name-value ...
26
votes
3answers
58k views

Can subdomain.example.com set a cookie that can be read by example.com?

I simply cannot believe this is quite so hard to determine. Even having read the RFCs, it's not clear to me if a server at subdomain.example.com can set a cookie that can be read by example.com. ...
23
votes
5answers
28k views

How to dump entire HTTP requests with apache

Is it possible to dump entire HTTP requests by apache? I need to track all HTTP headers of incomming requests. How to do that?
23
votes
2answers
11k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
22
votes
8answers
3k views

Dynamically blocking excessive HTTP bandwidth use?

We were a little surprised to see this on our Cacti graphs for June 4 web traffic: We ran Log Parser on our IIS logs and it turns out this was a perfect storm of Yahoo and Google bots indexing us.. ...
21
votes
3answers
26k views

How to enable correct charset HTTP-header in NGINX

What is the right way to enable correct charset headers in NGINX? I'm analyzing my website with Google Page Speed. It says that I should specify the charset of HTML files in HTTP-headers. What is the ...
21
votes
4answers
20k views

IIS Log Request Body / POST Data

Does anyone know how I could get IIS to log POST data or the entire HTTP request?
21
votes
2answers
20k views

How can I return a 503 status in apache without invoking external scripts

I need to return a 503 status code from one of my sites while it's down for maintenance, in the time-honoured SE_firendly fashion. I can't seem to work out how to do this without invoking external ...
19
votes
2answers
25k views

What is the IIS7 default keepalive time?

What is the IIS7 default time for HTTP keepAlive?
18
votes
3answers
27k views

Is there a maximum size for content of an HTTP POST?

Is there a maximum size for an HTTP POST? And if there is a max size, is it determined by the protocol or is it at the discretion of the server?
18
votes
8answers
23k views

Getting 408 errors on our logs with no request or user agent

I'm getting a lot of requests turning up in our apache logs that look like this www.example.com:80 10.240.1.8 - - [06/Mar/2013:00:39:19 +0000] "-" 408 0 "-" "-" - There seems to be no request and ...
17
votes
2answers
13k views

Do HTTP reverse proxies typically enable HTTP Keep-Alive on the client side of the proxied connection and not on the server side?

HAProxy has the ability to enable HTTP keep-alive on the client side (client <-> HAProxy) but disable it on the server side (HAProxy <-> server). Some of our clients connect to our web service ...
17
votes
4answers
53k views

How do I make cURL use keepalive from the command line?

I'm trying to verify that HTTP persistent connections are being used during communication with a Tomcat webserver I've got running. Currently, I can retrieve a resource on my server from a browser (e....
17
votes
4answers
8k views

Change protocol associated with port in wireshark

I'm trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 - ie as HTTP. Just using Decode_As on the ...
17
votes
2answers
6k views

Google SPDY - Has anyone used it on Apache?

Just wondering if anyone has had any experience with Google SPDY on Apache? http://code.google.com/p/mod-spdy/ I run a couple of web servers and am interested to know if there have been any issues ...
16
votes
4answers
27k views

Can the IP address for an HTTP request be spoofed?

On a website I am building, I plan to log the IP addresses of submissions, just in case it's necessary. I don't mind proxies, but outright spoofing your IP address would defeat the purpose. To ...
16
votes
3answers
93k views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
16
votes
1answer
1k views

Is the hostname part of HTTP(S) URLs truly case-insensitive?

Is it safe to use http(s)://CompanyName.com/xyz as URL (e.g. for branding purposes) without any changes to the service-side configs? I know that DNS is case-insensitive, but could there still be side-...
16
votes
2answers
7k views

What are the pros and cons of SSH and HTTP for a git server?

I want to setup a git server. I have found several how-to's, well detailed. Some describe the installation for a git-server accessible thru Ssh, while others, accessible thru HTTP. ( Others even ...
16
votes
4answers
16k views

Is it possible to enable http compression for requests?

I see lots of information about enabling http compression for server responses but what about for incoming requests. Wouldn't it make sense for the browsers to compress large form posts before ...
15
votes
3answers
20k views

When to turn TCP SACK off?

I've been looking at Linux tuning params and see some configs where SACK is turned off. Can anyone explain this? This would be tuning for a busy web server.
15
votes
5answers
12k views

mod_security block requests by http-host header

The last few days I noticed some servers being hammered with unknown requests. Most of them are like the following: 60.246.*.* - - [03/Jan/2015:20:59:16 +0200] "GET /announce.php?info_hash=%80%85%8e%...
15
votes
1answer
620 views

Under HTTP2, how often are new TCP connections initiated?

I understand that HTTP2 aims to keep everything under a single TCP connection, and I was wondering how often TCP connections would be torn down. For example, if I visit youtube, do some browsing, ...
15
votes
4answers
1k views

HTTP Compression on IIS 6.0 (Windows Server 2003)

There are many things you have to do/consider when you want to enable HTTP compression on IIS 6.0 (Windows Server 2003). Can somebody please provide a comprehensive list of the actions you have to ...
14
votes
2answers
10k views

netsh.exe: Error 87

I'm having some trouble creating a urlacl reservation in Windows Server 2008; probably this a rookie mistake. The command line I'm using is: netsh http add urlacl url=http://+:99898/ user=ben The ...
14
votes
2answers
20k views

What is the mandatory information a HTTP Request Header must contain?

What is the mandatory information a HTTP Request Header must contain ?
14
votes
3answers
8k views

Redirect all http requests behind Amazon ELB to https without using if

Currently I have an ELB serving both http://www.example.org and https://www.example.org. I would like to set it up so any request pointing to http://www.example.org is redirect to https://www.example....
13
votes
4answers
24k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
12
votes
3answers
5k views

How does the HTTP GET method work in relation to DNS protocol?

I am trying to understand application layer protocols in TCP/IP stack. I know that both HTTP and DNS protocol stay at the top layer (Application Layer). So, when a browser wants to access a resource, ...
12
votes
2answers
14k views

Serve http (port 80) and https (port 443) on same VirtualHost

I need to setup my VirtualHost on Apache to serve on both http and https (using standard ports) If I enable the SSL Engine (as per below) - I get an error when on port 80. The reason is, parts of ...
12
votes
3answers
7k views

Examples of 302 vs 303

What is the difference between a 302 and 303 response? http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html 10.3.3 302 Found 10.3.4 303 See Other Are these interchangeable or why would one be ...
12
votes
1answer
8k views

nginx: [emerg] unknown directive “http”

When I try to make code like it: 1. http { 2. script 3. server { 4. ... 5. location ... 6. } 7. } I get error: nginx: [emerg] unknown directive "http" in /etc/nginx/conf.d/...
12
votes
5answers
12k views

Referer is passed from HTTPS to HTTP in some cases… How?

In theory browsers do not pass on referer information from HTTPS to HTTP sites. And in my experience this has always been true. But I just found an exception, and I want to understand why it works so ...
12
votes
1answer
358 views

What HTTP status should I return during temporary site outage/downtime?

I'm going to be taking down my website for an upgrade to the code. I'd like to have a temporary downtime page display during the upgrade. For the sake of preventing issues with bots attempting to ...
11
votes
8answers
8k views

Handling http and https requests using a single port with nginx

i was wondering if nginx is able to handle http and https requests on the same port. [*] This is what i'm trying to do. I'm running a web server (lighttpd) handling http requests, and a C program ...
11
votes
2answers
12k views

Nginx - Serve static content from a cookieless domain

I'm using the "page speed" extension for Firebug to try to optimise a website and I'm currently working on the following suggestion: "Serve static content from a cookieless domain". I have created a ...
10
votes
9answers
4k views

Who can eavesdrop on a user's HTTP traffic?

I have heard many times that HTTPS should be used for transferring private data, since HTTP is vulnerable to eavesdroppers. But in practical terms, just who is capable of eavesdropping on a given ...
10
votes
2answers
16k views

nginx send blank 200 responses

I'm configuring a failover server tasked to accept any incoming request, and reply with blank 200 response. The idea is to minimize the reply time and to ensure we dont send any 40x or 50x. I tried ...
10
votes
5answers
15k views

Can I create SSH to tunnel HTTP through server like it was proxy?

Say I have a server and client. I need to create connection from client to a website through server like it was proxy. Is it possible to do this using a SSH tunel, or do I have to install some proxy ...
10
votes
3answers
14k views

nginx: dump HTTP requests for debugging

Ubuntu 10.04.2 nginx 0.7.65 I see some weird HTTP requests coming to my nginx server. To better understand what is going on, I want to dump whole HTTP request data for such queries. (I.e. dump all ...
10
votes
3answers
11k views

What tools are available on Windows to simulate/emulate network issues?

I am looking for tools for Windows that can act as a reverse-proxy in front of a server to introduce various networking issues like jitter, delays, or packet loss. My preference is a software ...