Questions tagged [http]
HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.
-1
votes
0answers
5 views
HTTP Error 401.3 - Unauthorized Windows Server 2012 R2 IIS 8.0
HTTP Error 401.3 - Unauthorized
You do not have permission to view this directory or page because of
the access control list (ACL) configuration or encryption settings for
this resource on the Web ...
1
vote
0answers
11 views
Google cloud load balancer not returning Content-Encoding: gzip
I'm using google cloud Load balancer that sits in front of an nginx backend service (in google cloud terms).
When i'm accessing the nginx server directly i can see the 'Content-Encoding: gzip' header ...
google-cloud-platform
0
votes
1answer
22 views
How to force Apache to skip binding to failed interface?
I run Apache inside VirtualBox on a laptop.
I also used IP based VirtualHost-s.
I want to be able to have LAN access whenever I move about,
to certain pre-known networks.
The IP, however, is not "...
0
votes
0answers
11 views
Make HTTP and WebSocket share the same connection with thttpd
I would like to make HTTP and WebSocket share a single TLS-encrypted connection to the port 443. I know it is possible with nginx and apache, but what about thttpd?
0
votes
0answers
20 views
Nginx default_server matches everything
In my Nginx configuration I have three separate sites under different subdomains each with an exact server_name match. My problem is that other subdomains also redirect to these subdomains, which I ...
-2
votes
2answers
41 views
How is HTTPS secure if Private Key is able to be intercepted?
I'm not a networking guy, so I have little knowledge about internet protocols and SSL. My question is coming from a lack of understanding of how https operates.
Basically in https there is a phase ...
0
votes
2answers
60 views
Does it make sense to use both Varnish AND Browser caching?
I'm a bit confused about what the best practice is when using Varnish: I saw many sites where I know they were using Varnish, which had Cache-Control: no-store, no-cache, must-revalidate HTTP headers ...
0
votes
1answer
10 views
Unable to remove Server HTTP header with Varnish 5
I have the following vcl_deliver subroutine:
sub vcl_deliver {
# Remove some HTTP-headers:
unset resp.http.Server;
unset resp.http.X-Varnish;
unset resp.http.Via;
unset resp.http.X-Cacheable;
...
6
votes
3answers
418 views
Does it makes sense from a security perspective to remove the Server HTTP header?
I'm using Varnish and I'm not quite sure if I should also remove the Server: nginx HTTP header. Why do someone needs to know that I'm using NGINX? Is it ok to remove this HTTP header from the response ...
0
votes
0answers
18 views
Nginx doesn't match location when changing proxy_pass from http to https
Current working config (stripped):
server {
listen 443 ssl default_server;
location /about {
proxy_pass http://my-internal-network.com/about ### <- HERE!!!!!!!!!!!!!!
...
0
votes
1answer
38 views
haproxy http request <NOSRV> reponse
I have following configuration in /etc/haproxy/haproxy.cfg
> frontend LB
> bind *:80
> reqadd X-Forwarded-Proto:\ http
> default_backend LB
>
> frontend LBS
...
1
vote
1answer
23 views
Nginx on docker - Vary: Accept-Encoding header is missing
I'm serving a static website from nginx that runs on a docker container which is based on nginx:alpine base image.
My DockerFile:
FROM nginx:alpine
COPY --from=angular-built app/dist/dayTwoApp /usr/...
0
votes
2answers
110 views
Is it possible have a https site without making use of port 80?
Is there a way to redirect all website requests that come to my server from port 80 to port 443 without needing Apache to listen on port 80? Thus freeing port 80 for other use. I'm thinking like some ...
0
votes
2answers
80 views
Apache mod_rewrite redirects me to https://www.(literally) for some reason
I configured an Apache server on my Ubuntu 18.04 computer with HTTPS support.
I have a SSL Certificate for *.example.com so my solution for have HTTPS on example.com was to redirect it to www and ...
-1
votes
0answers
24 views
HAProxy: retrieve http information from SSL connection
I am curious is it possible to make a such trick with HaProxy.
I have a multi-user application with static public IP address. My application generates requests to some kind of external services, ...
0
votes
0answers
14 views
SetEnvIf doesnt work from htaccess
I'm trying to overcome the infamous missing Auth header problem with Apache, PHP and CGI.
If I set this in a virtual host, I can successfully read the Bearer token from the Authorization header.
...
0
votes
0answers
33 views
not found in Access-Control-Allow-Origin only for specific user
I have the following server/application setup:
Server is Windows Server 2012.
I have Silverlight website hosted on IIS (Version 8.5)
And I have integration service running on port 6543.
Some pages on ...
0
votes
2answers
88 views
NGINX: HTTP to HTTPS redirect not working
First time posting here. I've been searching on here for about two days to find a solution to my problem and nothing is working.
I know, there is a ton of posts about this same problem but none of ...
1
vote
0answers
16 views
EventStore Bad Request (Invalid host) working in cluster
I'm using EventStore with the following configuration :
---
RunProjections: All
ClusterSize: 2
Db: /opt/eventstore/db
DiscoverViaDns: false
GossipSeed: 10.0.100.11:1113
GossipOnExt: false
Log: /opt/...
0
votes
0answers
30 views
How to log outgoing HTTP requests (including headers) from an Apache reverse proxy
We have an Apache 2.4 instance set up which acts as a reverse proxy for multiple applications.
In one of the virtual hosts I have configured it to set an additional HTTP header in a request before ...
0
votes
1answer
53 views
http to https redirection - apache2
I have a odoo instance running in an ubuntu16 server. Apache is acting as the front end server and is proxypassing the request to the odoo instance. I have now configured the virtualhost to enable SSL ...
0
votes
0answers
49 views
Squid to forward only HTTP (not HTTPS) request to another proxy running on localhost
I have a squid proxy and nginx configured as forward proxy only for HTTP requests. My nginx proxy can only work as forward proxy for http requests and fails if a request is https. That is why I would ...
0
votes
1answer
28 views
Could not resolve host after removing KDE packages
When the server was deployed, KDE was installed, it was not needed and I removed it.
Now when executing queries with any utilities (including apt) I get Could not resolve host.
What could I delete ...
0
votes
0answers
52 views
multiple websites on centos 7 using docker + nginx-proxy + multiple httpd + wildcard cert
I want to set up multiple websites on a centos 7 machinge using docker + nginx-proxy + multiple httpd + wildcard cert.
I am new to docker,but I have successfully got the multiple sites up and running ...
0
votes
1answer
32 views
IIS 8.5 on Windows 2012 R2 works fine for around a day, then all my sites go down and give 500 errors. How can I diagnose?
In just the last few days IIS 8.5 on my Windows 2012 R2 server started going down. Every 24 hours or so, the server stops shows my webpages when going to a URL, and instead shows HTTP 500 errors. My ...
0
votes
0answers
26 views
Nginx SSL request process
I have a Nginx 1.10 with this 2 sites:
site A:
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/ssl/example.com/fullchain.pem;
...
2
votes
1answer
258 views
.htaccess block access when HTTP_HOST is IP (Security)
I have had a lot of attacks on my server. Most start with a vulnerability scan, followed by waves of POST requests.
I will soon be implementing Cloudflare (WAF and DDos). This means that a DNS lookup ...
3
votes
2answers
435 views
HSTS in Nginx: should the Strict-Transport-Security header be added in subdomain server blocks too?
Let's take the following nginx.conf configuration file with server blocks for example.com and subdomain.example.com:
http {
...
server {
listen [::]:80 ipv6only=off default_server;
...
0
votes
1answer
46 views
Varnish https caching in apache?
Is it possible to cache HTTPS traffic with Varnish in apache ?
I have done http caching with varnish and it works fine. But my website is in HTTPS.
So can any body please confirm it ?
Thank you. :-)...
0
votes
1answer
55 views
Apache 2: redirecting from https to https with www in htaccess
I have a problem with redirecting my website from
https://example.com to https://www.example.com
I've found a lot of advices (means rewrite rule to htaccess) on the Stack Overflow and serverfault ...
-2
votes
2answers
59 views
http to https redirection multiple sites
I use IIS10 and I want to redirect all HTTP to HTTPS for all my sites.
For example:
http://one.test.example should be redirected to https://one.test.example
http://two.test.example should be ...
1
vote
1answer
92 views
HAProxy still return 502 after 120seconds
I have HAProxy configured that will forward my http requests to various services on internal ports.
One of this service may take some minutes to elaborate an answer, but after 120s HAProxy will still ...
1
vote
1answer
258 views
nginx returns 302 FOUND with http instead of https
I try to access https://seafile.example.com, which is a proxied application. The application will return 302, but with HTTP instead of HTTPS. Should this be fixed in Nginx or the application (Seafile ...
0
votes
0answers
65 views
NGINX - differentiate between plain HTTP and AJAX requests
Is there a way to differentiate between plain HTTP(s) and AJAX requests?
My idea was to log the X-Requested-Withheader in the nginx logs, but it seems it's not set by each AJAX client.
So what is ...
1
vote
1answer
76 views
Using a GCP Global Load Balancer HTTP health check, is it possible to POST instead of GET?
We have configured GLB in GCP in front of a Netcool Ominibus Probe server. This is an API that accepts POST events only. When the health check on the GLB tries to connect to the probe server on port ...
0
votes
2answers
41 views
Disallowing http communication
I am running an Ubuntu instance on GCP with apache2 and php 7.
More so, I am using CloudFlare as my SSL certificate provider.
In GCP, if I configure "allow http and https", the website works both for ...
1
vote
2answers
30 views
Determine the end of a malformed (bad) http request
I'm implementing a HTTP server and wonder, if there is a defined way of when a server would determine a bad request as ended to
return the corresponding 400 status, and
accept the following data as ...
0
votes
1answer
41 views
access specific server behind reverse proxy
I have multiple devices that are all behind a private network. I have a WAN facing server that I can call into. Is there any way for me to be able to send an HTTP request through the WAN server to a ...
1
vote
2answers
34 views
OpenVPN stopped loading sites in Tunisia
I have had an OpenVPN setup for a few years now. I've got three computers around the world connected to a central server (OVH France), and I've been using this to talk between them and route all ...
0
votes
0answers
31 views
Chrome asks for user / password on every site click with Digest authentication while IE, Edge and Firefox do not
We have a site with a virtual folder where browsing is enabled. To access this folder digest authentication has been enabled so only some users can access it.
With IE, Edge and Firefox everything ...
1
vote
0answers
207 views
Squid returns 400 to GET / HTTP/1.1 and Host Header
I need to demonstrate and test a Squid setup, which should blacklist by default, and allow requests only to whitelisted URLs from known networks. This is currently running in my staging environment, ...
0
votes
1answer
28 views
How to make sure 8080 is accessbile outside the server?
How to open a 8080 port for an application, with iptables
I see the above thread. And I run the following commands. But it seems that 8080 is still accessible outside the machine. Does anybody know ...
0
votes
0answers
69 views
HTTPS Caching proxy server for S3
I'm looking for a way to cache objects contained from S3 to a local proxy server.
But, unlike solutions I've seen written in Internet blogs which cache to one specific S3 host only, I need to allow ...
0
votes
2answers
396 views
Why does my 404 return 200 status code?
Not sure why but all of my error pages respond with a 200. That's feels a little strange to me, the pages exist but shouldn't they have their corresponding status codes? How do I get Nginx to render ...
-1
votes
1answer
92 views
Whitelist domain name for speedtest.net to allow a test to run
Using a 4G Router (HUAWEI B315) with a domain name whitelist to prevent excessive data usage.
It will only allow our custom API through.
However when testing the router at new venues it would be ...
1
vote
0answers
43 views
Last 4 bytes of HTTP response come after >30s delay
I'm encountering a weird error with one of my websites. No matter which page I'm trying to display, about 3 out of 5 cases and up loading in no less than 30 seconds...
When loading the website with ...
0
votes
0answers
23 views
Is there a traceroute equivalent for http applications?
My website is configured to be served by a CDN's network and I'd like to know how could I know exactly by which others HTTP applications my requests go through ?
I'm interested in knowing how many ...
1
vote
2answers
92 views
apache2 mod_rewrite redirect without http body [duplicate]
I am currently using Apache mod_rewrite to redirect to HTTPS,
but I would like to remove the body from the response.
How it is currently:
Example: How I would like it to be
My redirect ...
0
votes
0answers
20 views
http doesn't work from internal to access web page on dmz
FYI
on internal network server app-200 http 8080
on DMZ network server web-200 http 8080
Im trying on server app-200 to access http://web-200:8080 and I don't get any web page then I checked
telnet ...
1
vote
1answer
2k views
How to downgrade PHP from 7.2 to 7.0
I am running CentOS 7.4 and HTTP 2.4.6
I installed PHP 7.2.3
I know need to downgrade to 7.0 (reason is software company initially told me to install latest/stable for PHP and now they tell me 7.2 ...
