Questions tagged [http]
HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.
2,156
questions
0
votes
1
answer
12
views
Should HTTP load balancer forward bad requests to backend?
If a HTTP client sends a GET request with a body that would generate a 400 Bad Request response, should the load balancer forward that request to the backend or deal with it immediately? Is there any ...
- 5,595
0
votes
1
answer
15
views
Returning compressed data when client omits accept-encoding header
In the HTTP 1.1 Standard, it says that "If no Accept-Encoding field is in the request, any content-coding is considered acceptable by the user agent."
Which means that a server can, for ...
- 207
0
votes
1
answer
33
views
http error 403 for vsphere login page
I am running a vcenter server, and created a desktop shortcut for the vsphere webclient login, it works well, but after a certain time, around 2 weeks the desktop shortcut will no longer work, and ...
- 21
0
votes
0
answers
34
views
Risks of enabling nginx upstream keepalive
Using nginx as HTTP reverse proxy for Apache with PHP backend (I need .htaccess flexibility for webmasters).
Seeing http/1.0 used in Apache logs made me look up on how to enable keep-alive connection.
...
- 1
1
vote
0
answers
18
views
Cannot get a response from host, but only from my internet connection
I'm trying to connect to a website that I own. It's a domain that points to a shopify store.
The browser just hangs when attempting to load the site. When I issue a request using curl I get the ...
- 821
0
votes
1
answer
55
views
Inconsistent 403 Forbidden issues with images on a website
I am getting inconsistent HTTP 403 Forbidden results when requesting images embedded on a webpage. This is happening more frequently in FireFox, but occasionally also happens in Chrome. This website ...
- 203
0
votes
0
answers
23
views
How to pass https requests to http in nginx
I have a self signed certificate, I deployed my front end react app on nginx which is served by using HTTPS but front end is making call to back-end spring-boot app over HTTP and when i check inspect ...
0
votes
0
answers
22
views
Cant handle HTTPS request to HTTP with specified port at Nginx
So I have one server. Let it be server example.com (where SSL is working good)
From this server I am sending request to other server called server2.example.com (other location)
I am sending such ...
- 1
0
votes
0
answers
28
views
Can SSH but cannot connect via HTTP
I am trying to set up a web application on my server. I can ssh to the server but when I connect via any browser (using IP or URL) I get no response. Running sudo netstat -tulpn | grep LISTEN gives ...
- 39
0
votes
1
answer
44
views
Nginx www does not work
I really do not know why my nginx configuration does not work for www.
My configuration is:
server {
listen 80;
server_name postimg.cz www.postimg.cz;
return 301 https://$server_name$...
- 1
-1
votes
2
answers
59
views
The Importance of Paying for SSL Certificate [closed]
Is It really compulsory to pay for ssl Certificate while setting up website? What are the advantages and disadvantages?
Thank you.
0
votes
1
answer
120
views
Curl and etc. HTTP requests not working when I connected to vpn
Please tell me how to solve next problem:
Curl and etc. HTTP requests not working when I connected to vpn.
I get a simple error - "could not resolve host".
But when i disconnect from vpn ...
- 1
0
votes
1
answer
41
views
nginx empty response after reboot
I bought a new VPS, installed Ubuntu server 20.04, nginx,php7.4-fpm,MariaDB via apt.
I scp uploaded my (working on my Ubuntu 20.04 laptop) PHP project.
I could see the 'thank you for using nginx' page,...
- 15
0
votes
1
answer
115
views
Redirect HTTPS to HTTP for Safari User-Agents only
Yes, you read that right. I need HTTPS to HTTP for Safari only. Because all links referring to the site anywhere are HTTPS.
I have a website that has an SSL certificate, and normally we force ...
- 1
0
votes
3
answers
136
views
NGINX routes to the wrong virtual host when Host header contains colon character
My nginx.conf has several "server" sections, and a catch-all server section. Here is an example nginx.conf to give you an idea:
user www-data;
worker_processes auto;
worker_cpu_affinity auto;...
0
votes
0
answers
52
views
Which HTTP Status Code is most appropriate for a non-cooperation response?
I'd like to send an HTTP response that indicates my server is not willing to cooperate with the requester, as a sort of (voluntarily-imposed non-legal) sanction. For example, ACME Corp stole your ...
- 1
0
votes
0
answers
11
views
Microservice HTTP port connection failure on Windows Server
We have written (in Go and Delphi) several Windows microservices, which respond to HTTP requests on specific ports in the 11000-12000 range. These are designed to run internally within the Domain or ...
- 101
0
votes
0
answers
12
views
Cannot GET/ Objects once domain name is enabled
By enabling sub domain to my public IP am not getting the GET respone from my backend.
In my local machine once i type the URL http://35.22.12.94:3001/objects?design=ficco-desings&category=formals&...
0
votes
2
answers
52
views
haproxy: close or change port 80 of stats page
The http-port has to be available for another usage.
Port 80 of the stats-page has to be closed or moved to another port.
Removing mode http in the default section disables the page.
echo >/dev/tcp/...
- 3
0
votes
0
answers
110
views
Nginx Redirect from HTTP to HTTPS works in Firefox but not in Chrome
with my Nginx configuration (see below) redirecting from http to https works fine when accessing the page (http://example.com/) with Firefox. But for some strange reason it does not work with Chrome.
...
- 1
1
vote
1
answer
39
views
What is principial difference between upcoming DNS SVCB RRs and good old SRV records? [duplicate]
In DNS there was SRV record defined long ago, which allowed to direct some services for a domain to different machines. For example, this is how I publish a LDAP service for a domain example.com ...
- 6,592
2
votes
1
answer
215
views
is "access-control-allow-origin" a secure way to restrict communication between two servers?
I have two servers, A and B. I want server B to only accept HTTP requests from server A.
is "access-control-allow-origin" a secure way to implement that?
- 131
0
votes
1
answer
19
views
Getting random 404 requests from unknown IPs in Apache + Ubuntu server
This is strange.
I just installed a new Ubuntu + Apache in my Digitalocean droplet and installed a Laravel APP there.
Now suddenly I see these kind of strange POST, GET and CONNECT requests from ...
0
votes
0
answers
62
views
Loopback connection seems blocked
Here is the situation i met:
Server is managed by laravel forge
It is serving behind cloudflare reverse proxy
Nginx is up and running, listening on both port 80 and 443 (confirmed)
now i need to ...
- 21
1
vote
1
answer
66
views
Can a server offer more than one TLS certificate?
Let's say I have a TLS certificate for a domain but I'm not sure if all user agents potentially connecting over HTTP would accept it. Can I obtain another certificate, signed by another certificate ...
- 133
0
votes
0
answers
122
views
Bad Request Error Only in chrome Browser : Apache Logs , BufferOverflowException
List item
Background,
My firm uses apache http server with apache tomcat, here apache http server acts as a reverse proxy only, we have one apache and one tomcat instance,
Bad Request Error is only ...
0
votes
0
answers
135
views
Squid Proxy Server Not Accepting External Connection?
I am running squid 3.5.12 on Ubuntu.
I have the followings in /etc/squid/squid.conf
acl SSL_ports port 443
acl CONNECT method CONNECT
acl acl_allowed_ip src my.client.ip.address.com
http_access allow ...
- 225
1
vote
0
answers
35
views
Apache and VirtualHosts in RedHat, Can't figure it out
already did my research and Im burned after reading and watching videos for hours; I can't make virtual hosts works at all, it doest matter which configuration I set but Apache will ignore it and ...
- 11
0
votes
1
answer
613
views
Use multiple server blocks in NGINX on same host and same port
I want to configure the server such that the root of the server serves some static files, which a specific endpoing, /nextcloud serves nextcloud on the same domain.
Here is my nginx.conf -
...
0
votes
0
answers
20
views
Bizarre intermittent, but long lasting failure to connect to just one server
I have a bizarre connection issue with just one server that I have no idea how to diagnose. Basically I'm setting up a self-hosted email service using iRedMail and everything works fine for a while ...
- 101
0
votes
1
answer
121
views
CentOS - make Samba share available via nginx
I have a collection of files on a Windows share named \\winserver\bucket.
On a CentOS server, I am able to mount it so the content is available for perusal. I created an empty directory named /mnt/...
- 101
0
votes
0
answers
36
views
http request via https
Here is a scenario - http request are sent from monitoring client to an address like https://something.com:9443 which on the other end is (though) handled by nginx configured only as http server. If ...
- 1
0
votes
0
answers
43
views
Nginx proxy_pass to http or https different behavior
Good day! We have a nginx-based proxy with next config:
server {
server_name proxy;
listen 80;
underscores_in_headers on;
access_log /var/log/nginx/access.log bodylog;
location / {
...
- 1
1
vote
1
answer
37
views
Load balancing: how to find the fastest route to a user
I’m thinking about it like a week.
Consider that we have a load balancer server, and two storage servers, X and Y.
A user connects to load balancer. Load balancer should decide which of that two ...
- 131
1
vote
0
answers
41
views
Lighttpd - Redirect HTTPS 443 to HTTPS 123
I have HTTPS working for a local instance of Lighttpd.
But I'm wanting to redirect:
http://192.168.1.254 -> https://192.168.1.254:123
https://192.168.1.254 -> https://192.168.1.254:123
My ...
- 111
0
votes
1
answer
59
views
Set HTTP/HTTPS man-in-the-middle proxy for webserver (Apache2)
To log all http/https requests by a specific application, we use man-in-the-middle proxies (set as http or SOCKS5 proxies). On our local Windows and Mac machines, we usually 'proxify' apps or ...
- 23
28
votes
6
answers
5k
views
Why are CentOS mirrors HTTP and not HTTPS?
As far as I know, HTTP is prone to man-in-the-middle attacks. As such, the repositories in Alpine Linux or the CentOS Mirrors are not HTTPS.
In the olden days, having HTTPS used to be an expensive ...
- 391
1
vote
1
answer
520
views
How to use wget http status codes in an if else statement to take an action based on the status code
I'm writing a script that is downloading a bunch of files, I'm using wget to download the file and I want to echo back to the terminal custom status messages for each file based on 3 scenarios:
...
- 11
0
votes
1
answer
149
views
Apache server dead
I've been struggling around to get my website running with HTTP redirect https and ssl.
Apache 2.4.41
Ubuntu 20.04 LTS
Current data:
iptables -> https://www.toptal.com/developers/hastebin/...
- 1
0
votes
1
answer
42
views
Assume platform performance based on Nginx - ngx_http_stub_status_module
Nginx is placed in front of a microservice architecture on which we don't have any insight. We retrieve the metrics exposed by the http stub status and would like to compute an indicator of the ...
- 3
1
vote
1
answer
170
views
Is there any difference between using a cookie and using a normal header in the case of HTTP communication?
I have a system consisting of a custom software and an HTTP server. The software will send some requests with some headers and the HTTP server will send response back.
Now I have some custom ...
- 185
1
vote
0
answers
21
views
Monitor website (http) not accesible via webmin (server status tool)
I am trying to workout how to test that a site is inaccesible with webmin's tools... System and server status.
This is... an URL that should not be accesible to anyone except certain IPs or an http ...
- 273
0
votes
1
answer
16
views
can http clients configure if they want persistent or non-persistent connections with the http server?
I want to understand, if depending on how client configures the http connection, the server can behave in non-persistent manner or persistent manner, so in effect some clients can connect in ...
- 3
0
votes
2
answers
95
views
Does http protocol standard support long polling?
I recently read about long-polling concept which can be used with http. I want to understand, if any http protocol standard itself supports long-polling concept, so that depending on how client ...
- 3
0
votes
0
answers
311
views
What are NGINX reverseproxy users doing to prevent HTTP Request smuggling?
Since NGINX does not support sending HTTP/2 requests upstream, what are the present NGINX reverseproxy users doing to mitigate HTTP Request Smuggling vulnerability?
I understand that the best way to ...
2
votes
1
answer
146
views
Apache, redirect a client instead of showing HTTP/HTTPS error
If a web admin configures an HTTPS/SSL vhost on a custom port (e.g. 4433) and a browser connects to that vhost but using HTTP (http://vhost:4433), is there any way to configure apache to rather issue ...
- 192
0
votes
0
answers
32
views
Is it normal NGINX http upstream check status to be public?
I am newbie in pentest. I pentest a website, where I found a service "NGINX http upstream check status" in public, with private IPs and ports linked to internal servers. I am wondering if it'...
0
votes
2
answers
40
views
How to make nginx receive and send data to both server1 and server2?
I have nginx as reverse proxy. I want to send data to both server, not just one
not load balancing (just send data that it receive from port 80 to server1 and then server2).
Server1 will be a web ...
- 1
0
votes
1
answer
150
views
Is rate limiting delay included in nginx $request_time?
If requests are delayed by nginx rate limiting (rate limit exceeded, but within burst rate), is this delay included in the nginx $request_time total?
The nginx docs state that $request_time is "...
- 400
0
votes
2
answers
1k
views
How to add http host header in URL?
I have web app deployed in K8 in aws & configured LoadBalancer to call the same from internet.
In the Postman I call like ,
GET https://myteams.myorg.net/config
Headers: Host doom.myteams.myorg....
- 1