HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

learn more… | top users | synonyms

176
votes
11answers
44k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
137
votes
7answers
14k views

What’s the point in having “www” in a URL?

Other than for historical reasons, is there is reason to have “www” in a URL. Should I do a permanent redirect from www.xyz.com to xyz.com or xyz.com to www.xyz.com? Which one would you suggest and ...
53
votes
11answers
81k views

IIS 7.5 (Windows 7) - HTTP Error 401.3 - Unauthorized

I'm trying to test my ASP.Net website on localhost and I'm getting this error: HTTP Error 401.3 - Unauthorized You do not have permission to view this directory or page because of the access control ...
31
votes
3answers
136k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
27
votes
3answers
30k views

What's the maximum URL length in Tomcat?

And is it configurable? Can I set up Tomcat so that a URL with, say, 200K of query params goes through successfully to the contained servlet? Yes, I know one should use POST when you have lots of ...
25
votes
2answers
4k views

Unusual HEAD requests to nonsense URLs from Chrome

I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
22
votes
8answers
3k views

Dynamically blocking excessive HTTP bandwidth use?

We were a little surprised to see this on our Cacti graphs for June 4 web traffic: We ran Log Parser on our IIS logs and it turns out this was a perfect storm of Yahoo and Google bots indexing us.. ...
20
votes
2answers
8k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
18
votes
4answers
19k views

How to dump entire HTTP requests with apache

Is it possible to dump entire HTTP requests by apache? I need to track all HTTP headers of incomming requests. How to do that?
17
votes
3answers
17k views

How to enable correct charset HTTP-header in NGINX

What is the right way to enable correct charset headers in NGINX? I'm analyzing my website with Google Page Speed. It says that I should specify the charset of HTML files in HTTP-headers. What is the ...
17
votes
2answers
6k views

Google SPDY - Has anyone used it on Apache?

Just wondering if anyone has had any experience with Google SPDY on Apache? http://code.google.com/p/mod-spdy/ I run a couple of web servers and am interested to know if there have been any issues ...
16
votes
4answers
6k views

Change protocol associated with port in wireshark

I'm trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 - ie as HTTP. Just using Decode_As on the ...
16
votes
3answers
16k views

How to list Apache enabled modules?

Is there a command that list all enabled Apache modules?
16
votes
4answers
13k views

IIS Log Request Body / POST Data

Does anyone know how I could get IIS to log POST data or the entire HTTP request?
15
votes
2answers
13k views

How can I return a 503 status in apache without invoking external scripts

I need to return a 503 status code from one of my sites while it's down for maintenance, in the time-honoured SE_firendly fashion. I can't seem to work out how to do this without invoking external ...
15
votes
1answer
1k views

Is the hostname part of HTTP(S) URLs truly case-insensitive?

Is it safe to use http(s)://CompanyName.com/xyz as URL (e.g. for branding purposes) without any changes to the service-side configs? I know that DNS is case-insensitive, but could there still be ...
15
votes
4answers
1k views

HTTP Compression on IIS 6.0 (Windows Server 2003)

There are many things you have to do/consider when you want to enable HTTP compression on IIS 6.0 (Windows Server 2003). Can somebody please provide a comprehensive list of the actions you have to ...
14
votes
2answers
18k views

What is the IIS7 default keepalive time?

What is the IIS7 default time for HTTP keepAlive?
14
votes
5answers
7k views

mod_security block requests by http-host header

The last few days I noticed some servers being hammered with unknown requests. Most of them are like the following: 60.246.*.* - - [03/Jan/2015:20:59:16 +0200] "GET ...
14
votes
3answers
18k views

Is there a maximum size for content of an HTTP POST?

Is there a maximum size for an HTTP POST? And if there is a max size, is it determined by the protocol or is it at the discretion of the server?
13
votes
4answers
16k views

Can the IP address for an HTTP request be spoofed?

On a website I am building, I plan to log the IP addresses of submissions, just in case it's necessary. I don't mind proxies, but outright spoofing your IP address would defeat the purpose. To ...
13
votes
3answers
14k views

When to turn TCP SACK off?

I've been looking at Linux tuning params and see some configs where SACK is turned off. Can anyone explain this? This would be tuning for a busy web server.
13
votes
2answers
8k views

Do HTTP reverse proxies typically enable HTTP Keep-Alive on the client side of the proxied connection and not on the server side?

HAProxy has the ability to enable HTTP keep-alive on the client side (client <-> HAProxy) but disable it on the server side (HAProxy <-> server). Some of our clients connect to our web service ...
12
votes
3answers
2k views

How does the HTTP GET method work in relation to DNS protocol?

I am trying to understand application layer protocols in TCP/IP stack. I know that both HTTP and DNS protocol stay at the top layer (Application Layer). So, when a browser wants to access a resource, ...
12
votes
2answers
13k views

What is the mandatory information a HTTP Request Header must contain?

What is the mandatory information a HTTP Request Header must contain ?
12
votes
6answers
11k views

Getting 408 errors on our logs with no request or user agent

I'm getting a lot of requests turning up in our apache logs that look like this www.example.com:80 10.240.1.8 - - [06/Mar/2013:00:39:19 +0000] "-" 408 0 "-" "-" - There seems to be no request and ...
12
votes
2answers
3k views

What are the pros and cons of SSH and HTTP for a git server?

I want to setup a git server. I have found several how-to's, well detailed. Some describe the installation for a git-server accessible thru Ssh, while others, accessible thru HTTP. ( Others even ...
12
votes
1answer
333 views

What HTTP status should I return during temporary site outage/downtime?

I'm going to be taking down my website for an upgrade to the code. I'd like to have a temporary downtime page display during the upgrade. For the sake of preventing issues with bots attempting to ...
11
votes
2answers
10k views

Nginx - Serve static content from a cookieless domain

I'm using the "page speed" extension for Firebug to try to optimise a website and I'm currently working on the following suggestion: "Serve static content from a cookieless domain". I have created a ...
11
votes
1answer
6k views

nginx: [emerg] unknown directive “http”

When I try to make code like it: 1. http { 2. script 3. server { 4. ... 5. location ... 6. } 7. } I get error: nginx: [emerg] unknown directive "http" in ...
10
votes
2answers
6k views

netsh.exe: Error 87

I'm having some trouble creating a urlacl reservation in Windows Server 2008; probably this a rookie mistake. The command line I'm using is: netsh http add urlacl url=http://+:99898/ user=ben The ...
9
votes
4answers
1k views

How visible is my /var/www to the outside world?

I suppose this is more of a house keeping question, but here it goes. If I create a backup file of my index.html called index.html.bak, is it possible that someone from the outside using http on my ...
9
votes
4answers
14k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
9
votes
4answers
31k views

How do I make cURL use keepalive from the command line?

I'm trying to verify that HTTP persistent connections are being used during communication with a Tomcat webserver I've got running. Currently, I can retrieve a resource on my server from a browser ...
9
votes
3answers
42k views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
9
votes
1answer
2k views

Stop IIS 7.5 From Sending Out Cache-Control Max-Age on Error Codes

I have some static content with cache control Max-Age headers attached to it so clients will cache the static content. However, IIS 7.5 still sends this header out when there are error responses ...
9
votes
2answers
721 views

How to handle encrypted and unencrypted http connections through a single port

Please, take a look at the following diagram. How should this work? When a remote requests http:// myhost.com:8080/* , the request should be forwarded to the http server that listens on port 8008 ...
8
votes
9answers
3k views

Who can eavesdrop on a user's HTTP traffic?

I have heard many times that HTTPS should be used for transferring private data, since HTTP is vulnerable to eavesdroppers. But in practical terms, just who is capable of eavesdropping on a given ...
8
votes
5answers
5k views

Can I create SSH to tunnel HTTP through server like it was proxy?

Say I have a server and client. I need to create connection from client to a website through server like it was proxy. Is it possible to do this using a SSH tunel, or do I have to install some proxy ...
8
votes
2answers
10k views

How do CDN (Content Delivery Networks) server work?

There are many CDN (Content Delivery Networks) for hosting mainly static content. How do they work? How they handle http requests?
8
votes
3answers
4k views

Examples of 302 vs 303

What is the difference between a 302 and 303 response? http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html 10.3.3 302 Found 10.3.4 303 See Other Are these interchangeable or why would one be ...
8
votes
2answers
2k views

How can I take advantage of IW10 in kernel 2.6.33?

I've read that 2.6.33+ allows setting custom cwnd. if the IW is 10 by default (for all distros? only some?) how does one view what the current IW is on a particular compiled kernel? references: ...
8
votes
5answers
22k views

Is there a way to turn off client browser caching for specific websites?

This is a browser agnostic question but we're testing with IE9. One of the web apps our users visit is being randomly cached and changes aren't showing up when they should. No other site has this ...
8
votes
6answers
618 views

Are there any free software to test web server? [closed]

I wrote own http server. Are there any free software, test packages or toolset to validate whether it complies fully or partially with HTTP 1.0 (rfc 1945). And moreover it'd great if this software ...
8
votes
1answer
4k views

Mixing Subversion “SVNParentPath” and per-repository configurations?

Given a typical Subversion/Apache configuration using SVNParentPath, with repositories hosted under /svn/ like this: <Location /svn> DAV svn SVNParentPath /srv/source/svn/repos ...
8
votes
1answer
388 views

Why do a few of my customers lose HTTP connectivity for brief periods?

I am running IIS 7.5 on Server 2008 R2 virtualized on a Windows Core 2008 R2 server on Intel server hardware sitting behind a Sonicwall firewall. For a number of months now, we've had a trickle of ...
7
votes
8answers
9k views

Why can't some websites be shown without the “www” in the URL?

I used to type the website URL without the "www" and it works fine with almost all sites that I have tried, so far. But I realize that my university's website never show up if you don't type the ...
7
votes
2answers
9k views

nginx send blank 200 responses

I'm configuring a failover server tasked to accept any incoming request, and reply with blank 200 response. The idea is to minimize the reply time and to ensure we dont send any 40x or 50x. I tried ...
7
votes
3answers
9k views

nginx: dump HTTP requests for debugging

Ubuntu 10.04.2 nginx 0.7.65 I see some weird HTTP requests coming to my nginx server. To better understand what is going on, I want to dump whole HTTP request data for such queries. (I.e. dump all ...
7
votes
8answers
6k views

Handling http and https requests using a single port with nginx

i was wondering if nginx is able to handle http and https requests on the same port. [*] This is what i'm trying to do. I'm running a web server (lighttpd) handling http requests, and a C program ...