HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

learn more… | top users | synonyms

215
votes
12answers
73k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. It then set up a redirect for all traffic on my domain on Port 80 to redirect it to Port 443. In other words, all my http://example.com traffic is ...
171
votes
7answers
22k views

What’s the point in having “www” in a URL?

Other than for historical reasons, is there is reason to have “www” in a URL. Should I do a permanent redirect from www.xyz.com to xyz.com or xyz.com to www.xyz.com? Which one would you suggest and ...
61
votes
11answers
108k views

IIS 7.5 (Windows 7) - HTTP Error 401.3 - Unauthorized

I'm trying to test my ASP.Net website on localhost and I'm getting this error: HTTP Error 401.3 - Unauthorized You do not have permission to view this directory or page because of the access control ...
58
votes
4answers
252k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
35
votes
4answers
42k views

What's the maximum URL length in Tomcat?

And is it configurable? Can I set up Tomcat so that a URL with, say, 200K of query params goes through successfully to the contained servlet? Yes, I know one should use POST when you have lots of ...
32
votes
2answers
6k views

Unusual HEAD requests to nonsense URLs from Chrome

I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
30
votes
2answers
54k views

How to make wireshark filter POST-requests only?

How to make wireshark filter POST-requests only?
26
votes
3answers
36k views

How to list Apache enabled modules?

Is there a command that list all enabled Apache modules?
25
votes
3answers
35k views

Human readable format for http headers with tcpdump

I would like to view the HTTP headers sent from Apache (listening on port 80) to Tomcat (on port 4080) in a Linux machine. According to Wikipedia, Header fields are colon-separated name-value ...
22
votes
5answers
27k views

How to dump entire HTTP requests with apache

Is it possible to dump entire HTTP requests by apache? I need to track all HTTP headers of incomming requests. How to do that?
22
votes
8answers
3k views

Dynamically blocking excessive HTTP bandwidth use?

We were a little surprised to see this on our Cacti graphs for June 4 web traffic: We ran Log Parser on our IIS logs and it turns out this was a perfect storm of Yahoo and Google bots indexing us.. ...
22
votes
2answers
11k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
21
votes
3answers
25k views

How to enable correct charset HTTP-header in NGINX

What is the right way to enable correct charset headers in NGINX? I'm analyzing my website with Google Page Speed. It says that I should specify the charset of HTML files in HTTP-headers. What is the ...
21
votes
2answers
19k views

How can I return a 503 status in apache without invoking external scripts

I need to return a 503 status code from one of my sites while it's down for maintenance, in the time-honoured SE_firendly fashion. I can't seem to work out how to do this without invoking external ...
20
votes
4answers
19k views

IIS Log Request Body / POST Data

Does anyone know how I could get IIS to log POST data or the entire HTTP request?
18
votes
3answers
26k views

Is there a maximum size for content of an HTTP POST?

Is there a maximum size for an HTTP POST? And if there is a max size, is it determined by the protocol or is it at the discretion of the server?
17
votes
2answers
12k views

Do HTTP reverse proxies typically enable HTTP Keep-Alive on the client side of the proxied connection and not on the server side?

HAProxy has the ability to enable HTTP keep-alive on the client side (client <-> HAProxy) but disable it on the server side (HAProxy <-> server). Some of our clients connect to our web service ...
17
votes
4answers
8k views

Change protocol associated with port in wireshark

I'm trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 - ie as HTTP. Just using Decode_As on the ...
17
votes
2answers
24k views

What is the IIS7 default keepalive time?

What is the IIS7 default time for HTTP keepAlive?
17
votes
2answers
6k views

Google SPDY - Has anyone used it on Apache?

Just wondering if anyone has had any experience with Google SPDY on Apache? http://code.google.com/p/mod-spdy/ I run a couple of web servers and am interested to know if there have been any issues ...
16
votes
4answers
26k views

Can the IP address for an HTTP request be spoofed?

On a website I am building, I plan to log the IP addresses of submissions, just in case it's necessary. I don't mind proxies, but outright spoofing your IP address would defeat the purpose. To ...
16
votes
3answers
89k views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
16
votes
1answer
1k views

Is the hostname part of HTTP(S) URLs truly case-insensitive?

Is it safe to use http(s)://CompanyName.com/xyz as URL (e.g. for branding purposes) without any changes to the service-side configs? I know that DNS is case-insensitive, but could there still be ...
16
votes
8answers
22k views

Getting 408 errors on our logs with no request or user agent

I'm getting a lot of requests turning up in our apache logs that look like this www.example.com:80 10.240.1.8 - - [06/Mar/2013:00:39:19 +0000] "-" 408 0 "-" "-" - There seems to be no request and ...
16
votes
2answers
7k views

What are the pros and cons of SSH and HTTP for a git server?

I want to setup a git server. I have found several how-to's, well detailed. Some describe the installation for a git-server accessible thru Ssh, while others, accessible thru HTTP. ( Others even ...
15
votes
3answers
19k views

When to turn TCP SACK off?

I've been looking at Linux tuning params and see some configs where SACK is turned off. Can anyone explain this? This would be tuning for a busy web server.
15
votes
5answers
12k views

mod_security block requests by http-host header

The last few days I noticed some servers being hammered with unknown requests. Most of them are like the following: 60.246.*.* - - [03/Jan/2015:20:59:16 +0200] "GET ...
15
votes
1answer
615 views

Under HTTP2, how often are new TCP connections initiated?

I understand that HTTP2 aims to keep everything under a single TCP connection, and I was wondering how often TCP connections would be torn down. For example, if I visit youtube, do some browsing, ...
15
votes
4answers
1k views

HTTP Compression on IIS 6.0 (Windows Server 2003)

There are many things you have to do/consider when you want to enable HTTP compression on IIS 6.0 (Windows Server 2003). Can somebody please provide a comprehensive list of the actions you have to ...
14
votes
4answers
50k views

How do I make cURL use keepalive from the command line?

I'm trying to verify that HTTP persistent connections are being used during communication with a Tomcat webserver I've got running. Currently, I can retrieve a resource on my server from a browser ...
14
votes
2answers
20k views

What is the mandatory information a HTTP Request Header must contain?

What is the mandatory information a HTTP Request Header must contain ?
13
votes
2answers
9k views

netsh.exe: Error 87

I'm having some trouble creating a urlacl reservation in Windows Server 2008; probably this a rookie mistake. The command line I'm using is: netsh http add urlacl url=http://+:99898/ user=ben The ...
12
votes
3answers
4k views

How does the HTTP GET method work in relation to DNS protocol?

I am trying to understand application layer protocols in TCP/IP stack. I know that both HTTP and DNS protocol stay at the top layer (Application Layer). So, when a browser wants to access a resource, ...
12
votes
4answers
23k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
12
votes
3answers
6k views

Examples of 302 vs 303

What is the difference between a 302 and 303 response? http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html 10.3.3 302 Found 10.3.4 303 See Other Are these interchangeable or why would one be ...
12
votes
1answer
8k views

nginx: [emerg] unknown directive “http”

When I try to make code like it: 1. http { 2. script 3. server { 4. ... 5. location ... 6. } 7. } I get error: nginx: [emerg] unknown directive "http" in ...
12
votes
1answer
354 views

What HTTP status should I return during temporary site outage/downtime?

I'm going to be taking down my website for an upgrade to the code. I'd like to have a temporary downtime page display during the upgrade. For the sake of preventing issues with bots attempting to ...
11
votes
2answers
12k views

Serve http (port 80) and https (port 443) on same VirtualHost

I need to setup my VirtualHost on Apache to serve on both http and https (using standard ports) If I enable the SSL Engine (as per below) - I get an error when on port 80. The reason is, parts of ...
11
votes
2answers
12k views

Nginx - Serve static content from a cookieless domain

I'm using the "page speed" extension for Firebug to try to optimise a website and I'm currently working on the following suggestion: "Serve static content from a cookieless domain". I have created a ...
11
votes
5answers
11k views

Referer is passed from HTTPS to HTTP in some cases… How?

In theory browsers do not pass on referer information from HTTPS to HTTP sites. And in my experience this has always been true. But I just found an exception, and I want to understand why it works so ...
11
votes
2answers
7k views

Redirect all http requests behind Amazon ELB to https without using if

Currently I have an ELB serving both http://www.example.org and https://www.example.org. I would like to set it up so any request pointing to http://www.example.org is redirect to ...
10
votes
9answers
4k views

Who can eavesdrop on a user's HTTP traffic?

I have heard many times that HTTPS should be used for transferring private data, since HTTP is vulnerable to eavesdroppers. But in practical terms, just who is capable of eavesdropping on a given ...
10
votes
5answers
13k views

Can I create SSH to tunnel HTTP through server like it was proxy?

Say I have a server and client. I need to create connection from client to a website through server like it was proxy. Is it possible to do this using a SSH tunel, or do I have to install some proxy ...
10
votes
3answers
13k views

nginx: dump HTTP requests for debugging

Ubuntu 10.04.2 nginx 0.7.65 I see some weird HTTP requests coming to my nginx server. To better understand what is going on, I want to dump whole HTTP request data for such queries. (I.e. dump all ...
10
votes
8answers
7k views

Handling http and https requests using a single port with nginx

i was wondering if nginx is able to handle http and https requests on the same port. [*] This is what i'm trying to do. I'm running a web server (lighttpd) handling http requests, and a C program ...
10
votes
1answer
19k views

What does http code 206 (partial content) really mean?

I'm building a page (using video.js, should it matter) that holds players for a reasonably large number of videos -- click a button on a thumbnail of the image and a modal player opens up, playing the ...
10
votes
2answers
5k views

Git push over http (using git-http-backend) and Apache is not working

I have desperately been trying to get push for git working through the "smart-http" mode using git-http-backend. However after many hours of testing and troubleshooting, I am still left with error: ...
9
votes
5answers
4k views

Testing a servers ability to serve a particular domain

Say you have Server A set up with your favourite webserver-daemon to serve www.example.com. Now you want to move this to Server B. After a bunch of copying and configuring, the new server seems to be ...
9
votes
2answers
15k views

nginx send blank 200 responses

I'm configuring a failover server tasked to accept any incoming request, and reply with blank 200 response. The idea is to minimize the reply time and to ensure we dont send any 40x or 50x. I tried ...
9
votes
4answers
1k views

How visible is my /var/www to the outside world?

I suppose this is more of a house keeping question, but here it goes. If I create a backup file of my index.html called index.html.bak, is it possible that someone from the outside using http on my ...