HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

learn more… | top users | synonyms

158
votes
11answers
30k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
122
votes
8answers
10k views

What’s the point in having “www” in a URL?

Other than for historical reasons, is there is reason to have “www” in a URL. Should I do a permanent redirect from www.xyz.com to xyz.com or xyz.com to www.xyz.com? Which one would you suggest and ...
43
votes
10answers
67k views

IIS 7.5 (Windows 7) - HTTP Error 401.3 - Unauthorized

I'm trying to test my ASP.Net website on localhost and I'm getting this error: HTTP Error 401.3 - Unauthorized You do not have permission to view this directory or page because of the access control ...
37
votes
11answers
24k views

Tools for load-testing HTTP servers?

I've had to load test HTTP servers/web applications a few times, and each time I've been underwhelmed by the quality of tools I've been able to find. So, when you're load testing a HTTP server, what ...
28
votes
11answers
40k views

What is the best windows tool to capture HTTP traffic? [closed]

When you want to capture browser traffic or general windows HTTP traffic what tool do you use?
26
votes
3answers
23k views

What's the maximum URL length in Tomcat?

And is it configurable? Can I set up Tomcat so that a URL with, say, 200K of query params goes through successfully to the contained servlet? Yes, I know one should use POST when you have lots of ...
26
votes
3answers
31k views

Can subdomain.example.com set a cookie that can be read by example.com?

I simply cannot believe this is quite so hard to determine. Even having read the RFCs, it's not clear to me if a server at subdomain.example.com can set a cookie that can be read by example.com. ...
23
votes
2answers
3k views

Unusual HEAD requests to nonsense URLs from Chrome

I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
21
votes
3answers
90k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
21
votes
8answers
3k views

Dynamically blocking excessive HTTP bandwidth use?

We were a little surprised to see this on our Cacti graphs for June 4 web traffic: We ran Log Parser on our IIS logs and it turns out this was a perfect storm of Yahoo and Google bots indexing us.. ...
17
votes
3answers
13k views

How to enable correct charset HTTP-header in NGINX

What is the right way to enable correct charset headers in NGINX? I'm analyzing my website with Google Page Speed. It says that I should specify the charset of HTML files in HTTP-headers. What is the ...
17
votes
2answers
6k views

Google SPDY - Has anyone used it on Apache?

Just wondering if anyone has had any experience with Google SPDY on Apache? http://code.google.com/p/mod-spdy/ I run a couple of web servers and am interested to know if there have been any issues ...
15
votes
4answers
15k views

How to dump entire HTTP requests with apache

Is it possible to dump entire HTTP requests by apache? I need to track all HTTP headers of incomming requests. How to do that?
15
votes
4answers
6k views

Change protocol associated with port in wireshark

I'm trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 - ie as HTTP. Just using Decode_As on the ...
15
votes
2answers
6k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
15
votes
4answers
1k views

HTTP Compression on IIS 6.0 (Windows Server 2003)

There are many things you have to do/consider when you want to enable HTTP compression on IIS 6.0 (Windows Server 2003). Can somebody please provide a comprehensive list of the actions you have to ...
13
votes
4answers
13k views

Can the IP address for an HTTP request be spoofed?

On a website I am building, I plan to log the IP addresses of submissions, just in case it's necessary. I don't mind proxies, but outright spoofing your IP address would defeat the purpose. To ...
13
votes
3answers
11k views

When to turn TCP SACK off?

I've been looking at Linux tuning params and see some configs where SACK is turned off. Can anyone explain this? This would be tuning for a busy web server.
13
votes
4answers
10k views

IIS Log Request Body / POST Data

Does anyone know how I could get IIS to log POST data or the entire HTTP request?
13
votes
3answers
9k views

How to list Apache enabled modules?

Is there a command that list all enabled Apache modules?
13
votes
2answers
10k views

How can I return a 503 status in apache without invoking external scripts

I need to return a 503 status code from one of my sites while it's down for maintenance, in the time-honoured SE_firendly fashion. I can't seem to work out how to do this without invoking external ...
13
votes
3answers
14k views

Is there a maximum size for content of an HTTP POST?

Is there a maximum size for an HTTP POST? And if there is a max size, is it determined by the protocol or is it at the discretion of the server?
12
votes
2answers
6k views

Do HTTP reverse proxies typically enable HTTP Keep-Alive on the client side of the proxied connection and not on the server side?

HAProxy has the ability to enable HTTP keep-alive on the client side (client <-> HAProxy) but disable it on the server side (HAProxy <-> server). Some of our clients connect to our web service ...
12
votes
2answers
15k views

What is the IIS7 default keepalive time?

What is the IIS7 default time for HTTP keepAlive?
12
votes
1answer
327 views

What HTTP status should I return during temporary site outage/downtime?

I'm going to be taking down my website for an upgrade to the code. I'd like to have a temporary downtime page display during the upgrade. For the sake of preventing issues with bots attempting to ...
11
votes
2answers
9k views

Nginx - Serve static content from a cookieless domain

I'm using the "page speed" extension for Firebug to try to optimise a website and I'm currently working on the following suggestion: "Serve static content from a cookieless domain". I have created a ...
10
votes
2answers
10k views

What is the mandatory information a HTTP Request Header must contain?

What is the mandatory information a HTTP Request Header must contain ?
10
votes
1answer
4k views

nginx: [emerg] unknown directive “http”

When I try to make code like it: 1. http { 2. script 3. server { 4. ... 5. location ... 6. } 7. } I get error: nginx: [emerg] unknown directive "http" in ...
9
votes
4answers
956 views

How visible is my /var/www to the outside world?

I suppose this is more of a house keeping question, but here it goes. If I create a backup file of my index.html called index.html.bak, is it possible that someone from the outside using http on my ...
9
votes
4answers
23k views

How do I make cURL use keepalive from the command line?

I'm trying to verify that HTTP persistent connections are being used during communication with a Tomcat webserver I've got running. Currently, I can retrieve a resource on my server from a browser ...
9
votes
1answer
1k views

Stop IIS 7.5 From Sending Out Cache-Control Max-Age on Error Codes

I have some static content with cache control Max-Age headers attached to it so clients will cache the static content. However, IIS 7.5 still sends this header out when there are error responses ...
9
votes
2answers
706 views

How to handle encrypted and unencrypted http connections through a single port

Please, take a look at the following diagram. How should this work? When a remote requests http:// myhost.com:8080/* , the request should be forwarded to the http server that listens on port 8008 ...
8
votes
9answers
3k views

Who can eavesdrop on a user's HTTP traffic?

I have heard many times that HTTPS should be used for transferring private data, since HTTP is vulnerable to eavesdroppers. But in practical terms, just who is capable of eavesdropping on a given ...
8
votes
4answers
19k views

What does a DNS request look like?

I have seen what the text representation of an HTTP request is, but what does a DNS request look like? Where in the data is the location of the URL you are trying to locate? Also, how is the ...
8
votes
2answers
10k views

How do CDN (Content Delivery Networks) server work?

There are many CDN (Content Delivery Networks) for hosting mainly static content. How do they work? How they handle http requests?
8
votes
6answers
602 views

Are there any free software to test web server?

I wrote own http server. Are there any free software, test packages or toolset to validate whether it complies fully or partially with HTTP 1.0 (rfc 1945). And moreover it'd great if this software ...
8
votes
1answer
383 views

Why do a few of my customers lose HTTP connectivity for brief periods?

I am running IIS 7.5 on Server 2008 R2 virtualized on a Windows Core 2008 R2 server on Intel server hardware sitting behind a Sonicwall firewall. For a number of months now, we've had a trickle of ...
7
votes
8answers
8k views

Why can't some websites be shown without the “www” in the URL?

I used to type the website URL without the "www" and it works fine with almost all sites that I have tried, so far. But I realize that my university's website never show up if you don't type the ...
7
votes
3answers
365 views

Upgrade HTTP connection to SSL/TLS

I currently have a server which automatically redirects all HTTP requests to the equivalent HTTPS site. The problem is that is seems like some browsers do not accept the SSL certificate (StartSSL.com) ...
7
votes
2answers
2k views

What are the pros and cons of SSH and HTTP for a git server?

I want to setup a git server. I have found several how-to's, well detailed. Some describe the installation for a git-server accessible thru Ssh, while others, accessible thru HTTP. ( Others even ...
7
votes
2answers
2k views

How can I take advantage of IW10 in kernel 2.6.33?

I've read that 2.6.33+ allows setting custom cwnd. if the IW is 10 by default (for all distros? only some?) how does one view what the current IW is on a particular compiled kernel? references: ...
7
votes
3answers
328 views

Should a web server care about IPv6 compatibility?

Are there any IPv6 clients in the real world? If not, is there any other reason to support IPv6? (My understanding is that with the advent of WANs and such IPv6 is not necessary, hence extremely low ...
7
votes
2answers
4k views

netsh.exe: Error 87

I'm having some trouble creating a urlacl reservation in Windows Server 2008; probably this a rookie mistake. The command line I'm using is: netsh http add urlacl url=http://+:99898/ user=ben The ...
7
votes
5answers
5k views

Squid or Other HTTP Caches with SSD Cache Store?

I'm contemplating setting up a squid (or possibly varnish) cache on a system with SSD drives. The obvious benefit is that these systems have great READ speeds and I expect my hit ratios to be fairly ...
7
votes
2answers
5k views

When nginx is configured as reverse proxy, can it rewrite the host header to the downstream server like Apache's ProxyPreserveHost?

I can't seem to find the equivalent of Apache's ProxyPreserveHost http://httpd.apache.org/docs/2.0/mod/mod%5Fproxy.html#proxypreservehost option in nginx. This is required to reverse proxy to virtual ...
7
votes
5answers
3k views

Which reverse-proxies support HTTP/1.1 ETag and If-None-Match headers?

I'm developing a caching system for an ecommerce platform that will use a reverse proxy for caching. I plan to handle invalidation by using proper HTTP/1.1 headers. That is, I will set an ETag on ...
7
votes
3answers
473 views

What's wrong with this HTTP POST request?

I'm trying to fuzz a server using the Sulley fuzzing framework. I observe the following stream in Wireshark. The error talks about a problem with JSON parsing, however, when I try the same HTTP POST ...
7
votes
2answers
2k views

Apache: insecure request sent to secure port…want to redirect

Preface Firstly: A simply Port 80 -> Port 443 Rewrite WILL NOT fix this. In almost every previous question, mail thread, forum thread, etc., I have found this was the first ignorant response and ...
7
votes
1answer
3k views

Mixing Subversion “SVNParentPath” and per-repository configurations?

Given a typical Subversion/Apache configuration using SVNParentPath, with repositories hosted under /svn/ like this: <Location /svn> DAV svn SVNParentPath /srv/source/svn/repos ...
6
votes
5answers
4k views

Can I create SSH to tunnel HTTP through server like it was proxy?

Say I have a server and client. I need to create connection from client to a website through server like it was proxy. Is it possible to do this using a SSH tunel, or do I have to install some proxy ...