Questions tagged [http]
HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.
2,071
questions
1
vote
0answers
12 views
Apache HTTP proxy work for some destination ip and receive 502 Bad Request from other destinations
I've an HTTP proxy like this:
Listen 8240
<VirtualHost *:8240>
ProxyRequests On
<Proxy "*">
SetEnv force-proxy-request-1.0 1
SetEnv proxy-nokeepalive 1
</Proxy>
</...
1
vote
1answer
27 views
Is there anything insecure about opening port 80 just to redirect?
Its a pretty simple question, is there any real network insecurity to opening up port 80 just so I can redirect them to ssl? Currently you have to type https:// just to access one of the sites. Is ...
-1
votes
0answers
36 views
Can nginx do HTTPS content caching if used as tunnel/caching proxy? If yes, how? [closed]
Can nginx do HTTPS content caching if used as tunnel/caching proxy? If yes, how?
0
votes
0answers
19 views
Nginx: block requests with empty http_user_agent header but allow for specific location
So i have this directive in my server block
if ($http_user_agent = "") { return 403; }, but I want to allow empty http_user_agent for example.com/web/app/delete.
How do i do that?
6
votes
2answers
1k views
Is the Host: header required over SSL?
Is the Host: header required over SSL even if the request is not HTTP/1.1?
So, if a client connects over SSL, and sends the following request:
GET / HTTP/1.0
Should the web server throw a bad request ...
0
votes
0answers
13 views
HTTP Nginx redirect 2 domains to 2 internal IP web applications fails (redirect only to the first domain)
I have the following setup: A firewall (pfSense) that redirects HTTP and HTTPS trafic to an internal IP that runs NginX (on CentOS8) - 192.168.10.2
This NginX in turn redirects the trafic to the 2 ...
1
vote
3answers
27 views
Implicitly allow requests in IIS from valid hostname
I have a few publicly accessible IIS servers and sites (personal and corporate), these hosts have own domains/subdomains, and all legit access to these https sites happen through domains.
Almost all ...
0
votes
1answer
35 views
Different response when hitting curl command with & without single quotes
I am hitting admitAD API using curl command.
If i below URL
curl -L -H 'Authorization: Bearer MY_TOKEN' -X
GET https://api.admitad.com/payments/?limit=2&has_statement=0
I am getting response
{
...
0
votes
1answer
31 views
Double call to root path “/” in a website
I'm checking my web page performance, but some strange reason it double calls to root path.
Any idea why this is happening?
Thank you.
-2
votes
1answer
49 views
Why does Apache send HTTP/1.1 when client requests HTTP/1.0? And many other very similar problems [closed]
Apache sends HTTP/1.1 when client requests HTTP/1.0? Why? So the request is:
Connected to example.com port 80
GET / HTTP/1.0
The response is similar to:
HTTP/1.1 200 OK
Server: Apache
It says HTTP/...
2
votes
1answer
42 views
Multiple forwardfor commands in HAProxy config
In HAProxy, I would like to forwardfor everything except a few networks like below (multiple networks)
frontend main
bind myip:5356-60000
mode http
option ...
0
votes
0answers
21 views
NGINX UDP Proxy Pass to HTTP
I built a NGINX reverse proxy where I listen for UDP traffic on port 53 and pass it on to an HTTP endpoint with modified headers. Once the headers are modified, I send the packet to the target.
http....
0
votes
1answer
30 views
What does `Accept-Encoding: gzip,deflate` mean?
Can someone explain what it means when I see Accept-Encoding: gzip,deflate when listening with ncat?
Does it mean the body is compressed? And if so, how can I decompress it?
$ nc -lnvp 4000
Ncat: ...
1
vote
1answer
45 views
What is the circle icon in Chrome's Network tab?
What is the circle icon in this request?
It's a GET request that returns a pdf.
It does it in incognito as well.
I have the following extensions installed:
Cisco Webex Extension
Google Docs Offline
...
0
votes
2answers
43 views
Forwarding all HTTP/HTTPS from server to another server
I need to forward all traffic(HTTP/HTTPs) to my server (Digital ocean) to a new server (AWS load balancer) basically the solution is to use nginx as this questions: Forward my http requests from my ip ...
1
vote
1answer
33 views
HTTP 500 Error After Trying To Set Up Error Reporting on Google Cloud Console
I tried the following code on SSH to try and set up Error Reporting on a Wordpress Bitnami vm-instance on Google Cloud Console:
sudo -i
sudo nano /opt/bitnami/php/etc/php.ini
auto_prepend_file="/...
google-cloud-platform
0
votes
0answers
41 views
Apache doesn't show any page for 414 Request URI Too large when using HTTP/2
Apache doesn't show any page for 414 Request URI Too large when using HTTP/2.
So, when my request is large enough:
HTTP/1.1 results in:
HTTP/1.1 414 Request-URI Too Long
Date: Tue, 16 Mar 2021 15:16:...
2
votes
0answers
11 views
Single line reverse proxy with HTTP Basic Auth
I am temporarily exposing some HTTP services to the Internet and I would like to password-protect them. Because the exposure is just a few hours, setting up Nginx, Traefik or other heavy-weight ...
1
vote
1answer
117 views
how to enable http/2 on apache2 using ubuntu 20.04?
I have VPS server running ubuntu 20.04 (apache2) and is using http/1.1 and I want to upgrade to http/2
The domain is already configured using v-hosts (and has the ssl installed - lets encrypt).
...
0
votes
1answer
511 views
Webserver being attacked
my webserver is constantly under attack by attempted use of PHP vulnerabilities and through the use of GET requests. How concerned should I be that I have been compromised and how could I check as ...
0
votes
1answer
37 views
Nginx simple PUT file
I have set the following configuration:
location /upl {
root /storage/www/upl/data;
client_body_temp_path /storage/www/upl/client_tmp;
dav_methods PUT DELETE MKCOL COPY MOVE;
...
2
votes
1answer
75 views
Why am I not receiving a response when the request is sent through a load balancer and the response is too big to fit into a single packet?
There's a certain condition where I'm unable to receive a response from an HTTP request to a particular service: the request is sent through a load balancer and the response is too big to fit into a ...
0
votes
0answers
32 views
apache (httpd) - How to set rewrite URL [duplicate]
I have a new website on Nette Framework, the problem is that the old website had URLs in the form:
https://example.com/Questions/
https://example.com/Tags
So all over the internet there are backlinks ...
1
vote
1answer
67 views
Is it normal for (fake) host in HTTP request header to recieve requests?
Penetration testing has suggested our web app is vulnerable to server-side request forgery. The supposed proof is that when making a request with a fake Host header (example: fakehost.com) to our web ...
0
votes
0answers
9 views
Netgear FVS318N won't allow connection to certain machines but not others
I have a client using the Netgear VPN software to connect to 4 locations. These VPNs have been setup and working for years.
The locations house servers that were recently replaced, and they changed ...
0
votes
0answers
40 views
Nginx removing port in redirect to Docker container?
I'm working on a website that runs within a Docker container and embeds visualisations hosted on other Docker containers. To do this, I have Nginx set up as a reverse proxy, redirecting requests to ...
1
vote
0answers
31 views
Nginx showing 504 Gateway timed out when uploading large files
I have a simple PHP file upload script that uploads a file. The server consists of 1 nginx reverse proxy and another nginx server (upstream). The problem is that when I try to upload very large files ~...
0
votes
1answer
21 views
How to configure openssl client to only accept specific server certificates?
I'm new to this community and kind of to things related to security.
I have three servers
Web Server (Client)
Mail Server (eSMTP)
Web Server
All servers have their own SSL certificates and got asked ...
0
votes
0answers
71 views
Android Volley JsonObjectRequest times out, but explicit IP:port request works
I have a REST API in go on my server VM, with gorilla/mux:
router := mux.NewRouter().StrictSlash(true)
log.Fatal(http.ListenAndServe(":49186", router))
I have an exposed IP and the domain ...
1
vote
1answer
32 views
Forwarding request made to my server to another server on the same path
I need to create a sub-directory mapping in the Apache server such that each request made to the path /another-path gets forwarded to https://some-website/another-path. How could I do this?
If the ...
0
votes
1answer
34 views
Can you ssh into a server given only an HTTPs address
I have a server that I have a domain name for. The DNS redirects the address ssh.example.com to https://example.com:12345/ssh/.
Note: My server DNS needs to have a port as my server isn't accessible ...
0
votes
2answers
65 views
How do I ssh into a server over HTTPs?
I have a server that has a reverse proxy (NGINX) set up to host all my other websites/services on a single server. I would like to create a way to SSH into that server over HTTP. The reason I need to ...
0
votes
0answers
27 views
Uploading file from JS web app to S3 fails due to CORS
I have a JS web app and I'm trying to upload a file to AWS S3 from the client.
I've tried everything both locally (localhost:3000) and when deployed to production (Vercel serverless functions).
I ...
0
votes
2answers
17 views
HTTPS redirect enforcement
Are there some automatic free tools for enforcing http->https redirect which dosen't affect the ht.access file ?
Thanks for any suggestions !
0
votes
1answer
14 views
Use of :80 in proxy URL
Setting some Squid proxies up, and trying to figure out some behavior.
Squid in a pass-all configuration, with the linux node set to forward 80 to port 3128, which Squid is listening on.
I do have an ...
1
vote
2answers
36 views
Prevent data exfiltration in AWS via HTTP and FTP
I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
1
vote
0answers
25 views
Apache2 reverse proxy https <-> http with digest authentication
Sorry, If I posted a repeated question. Didn't find my answer yet.
What I have is:
a webservice on LAN which is only accesable over HTTP ans uses Digest Auth
another server in LAN which has Apache2 ...
0
votes
1answer
21 views
http/1 and http/2 parallel delivery using nginx
Is it possible to have both http/1 and http/2 enabled for a vhost in nginx?
The idea is to broaden the supported browsers by serving http/2 if supported, and, if not, fall back to http/1.
-1
votes
2answers
65 views
Chrome is redirecting to HTTPS while access HTTP but for DNS only .. IP works fine
I am a bit new to this so pls bear with me ... in the company policy, all machines in the domain are forced to use SSL (CGP forces this in Chrome).. however it works for some sites and for some it's ...
0
votes
0answers
15 views
Running nginx on AWS and accessing the website over plain old http [duplicate]
Two days ago I've started using AWS in order to serve my web applications. I've subscribed to the t2.micro and formed an Instance and then installed nginx on it from scratch using
./configure --prefix=...
0
votes
0answers
35 views
Nginx 404 on woff2
I have a reverse proxy on and it works but on my webpage when I go on the admin console to see the code I have 2 404 error 1 on woff2 type and the other on an xhr. I tried to modify mims but it doesn'...
0
votes
1answer
501 views
OpenVPN Client not tunnelling HTTP traffic
I am hosting an OpenVPN Server (I followed this tutorial) and I am facing some issues on the client side.
When I use my phone as a hotspot, and I log into the VPN from my Mac (using my phone's ...
2
votes
1answer
28 views
Node.js server does not respond externally
I made a simple node.js server:
var http = require('http');
http.createServer(function (req, res) {
res.writeHead(200, {'Content-Type': 'text/plain'});
res.end('Hello World\n');
}).listen(9999, '0....
1
vote
1answer
96 views
How to use HTTP headers in Nginx to serve different content?
I noticed that Deno serves html or javascript depending on the HTTP accept header.
For example if you simply open in your browser this package you will get HTML back (because the accept header is set ...
1
vote
0answers
402 views
NGINX-QUIC-BORINGSSL — NO_SUPPORTED_VERSIONS_ENABLED)
I'm getting this error (and a timeout) when I try open an http3 connection to a freshly compiled NGINX QUIC instance (1.19.6).
SSL_do_handshake() failed (SSL: error:10000118:SSL routines:...
0
votes
0answers
23 views
Domain shows wrong site in nginx, but only for HTTP
I have multiple sites configured in Nginx 1.14.2-2+deb10u3 on Debian 10.
One is a.mydomain.com, another one is b.mydomain.com.
Both domains have two server blocks each, for port 80 and for port 443.
...
0
votes
2answers
43 views
apache2 - How to allow unencrypted access only to local network?
I have a Linux server on my local network with a few services running. I want to be able to access that server by my domain's name with encryption, but leaving LAN access free. I tried searching for ...
0
votes
2answers
40 views
Opening port securely
I'm operating a webapp that should be accessible only to a small number of people equipped with tablets.
It is served on port 80 of a server that is on our local network behind the ISP router.
The ...
0
votes
0answers
32 views
Linux Proxy Manager
I'd like to set up a proxy service where users will connect to a single server where the requests will then be forwarded using a pool of proxies I supply. Essentially a SOCKS 5 or HTTP proxy server.
I'...
0
votes
1answer
35 views
How to forward http request to application running on port 80 with NGINX
The Ubuntu server is running,
Glassfish on port 80(http) & 443(https)
Nginx on port 8080(http) & 8081(https)
The goal is,
www.hostname01.com to access Glassfish,
www.hostname02.com to access ...
