Questions tagged [http]

HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

Filter by
Sorted by
Tagged with
0 votes
1 answer
12 views

Should HTTP load balancer forward bad requests to backend?

If a HTTP client sends a GET request with a body that would generate a 400 Bad Request response, should the load balancer forward that request to the backend or deal with it immediately? Is there any ...
user avatar
0 votes
1 answer
15 views

Returning compressed data when client omits accept-encoding header

In the HTTP 1.1 Standard, it says that "If no Accept-Encoding field is in the request, any content-coding is considered acceptable by the user agent." Which means that a server can, for ...
user avatar
0 votes
1 answer
33 views

http error 403 for vsphere login page

I am running a vcenter server, and created a desktop shortcut for the vsphere webclient login, it works well, but after a certain time, around 2 weeks the desktop shortcut will no longer work, and ...
user avatar
  • 21
0 votes
0 answers
34 views

Risks of enabling nginx upstream keepalive

Using nginx as HTTP reverse proxy for Apache with PHP backend (I need .htaccess flexibility for webmasters). Seeing http/1.0 used in Apache logs made me look up on how to enable keep-alive connection. ...
user avatar
  • 1
1 vote
0 answers
18 views

Cannot get a response from host, but only from my internet connection

I'm trying to connect to a website that I own. It's a domain that points to a shopify store. The browser just hangs when attempting to load the site. When I issue a request using curl I get the ...
user avatar
  • 821
0 votes
1 answer
55 views

Inconsistent 403 Forbidden issues with images on a website

I am getting inconsistent HTTP 403 Forbidden results when requesting images embedded on a webpage. This is happening more frequently in FireFox, but occasionally also happens in Chrome. This website ...
user avatar
  • 203
0 votes
0 answers
23 views

How to pass https requests to http in nginx

I have a self signed certificate, I deployed my front end react app on nginx which is served by using HTTPS but front end is making call to back-end spring-boot app over HTTP and when i check inspect ...
user avatar
0 votes
0 answers
22 views

Cant handle HTTPS request to HTTP with specified port at Nginx

So I have one server. Let it be server example.com (where SSL is working good) From this server I am sending request to other server called server2.example.com (other location) I am sending such ...
user avatar
0 votes
0 answers
28 views

Can SSH but cannot connect via HTTP

I am trying to set up a web application on my server. I can ssh to the server but when I connect via any browser (using IP or URL) I get no response. Running sudo netstat -tulpn | grep LISTEN gives ...
user avatar
  • 39
0 votes
1 answer
44 views

Nginx www does not work

I really do not know why my nginx configuration does not work for www. My configuration is: server { listen 80; server_name postimg.cz www.postimg.cz; return 301 https://$server_name$...
user avatar
  • 1
-1 votes
2 answers
59 views

The Importance of Paying for SSL Certificate [closed]

Is It really compulsory to pay for ssl Certificate while setting up website? What are the advantages and disadvantages? Thank you.
user avatar
0 votes
1 answer
120 views

Curl and etc. HTTP requests not working when I connected to vpn

Please tell me how to solve next problem: Curl and etc. HTTP requests not working when I connected to vpn. I get a simple error - "could not resolve host". But when i disconnect from vpn ...
user avatar
  • 1
0 votes
1 answer
41 views

nginx empty response after reboot

I bought a new VPS, installed Ubuntu server 20.04, nginx,php7.4-fpm,MariaDB via apt. I scp uploaded my (working on my Ubuntu 20.04 laptop) PHP project. I could see the 'thank you for using nginx' page,...
user avatar
  • 15
0 votes
1 answer
115 views

Redirect HTTPS to HTTP for Safari User-Agents only

Yes, you read that right. I need HTTPS to HTTP for Safari only. Because all links referring to the site anywhere are HTTPS. I have a website that has an SSL certificate, and normally we force ...
user avatar
  • 1
0 votes
3 answers
136 views

NGINX routes to the wrong virtual host when Host header contains colon character

My nginx.conf has several "server" sections, and a catch-all server section. Here is an example nginx.conf to give you an idea: user www-data; worker_processes auto; worker_cpu_affinity auto;...
user avatar
0 votes
0 answers
52 views

Which HTTP Status Code is most appropriate for a non-cooperation response?

I'd like to send an HTTP response that indicates my server is not willing to cooperate with the requester, as a sort of (voluntarily-imposed non-legal) sanction. For example, ACME Corp stole your ...
user avatar
0 votes
0 answers
11 views

Microservice HTTP port connection failure on Windows Server

We have written (in Go and Delphi) several Windows microservices, which respond to HTTP requests on specific ports in the 11000-12000 range. These are designed to run internally within the Domain or ...
user avatar
0 votes
0 answers
12 views

Cannot GET/ Objects once domain name is enabled

By enabling sub domain to my public IP am not getting the GET respone from my backend. In my local machine once i type the URL http://35.22.12.94:3001/objects?design=ficco-desings&category=formals&...
user avatar
0 votes
2 answers
52 views

haproxy: close or change port 80 of stats page

The http-port has to be available for another usage. Port 80 of the stats-page has to be closed or moved to another port. Removing mode http in the default section disables the page. echo >/dev/tcp/...
user avatar
  • 3
0 votes
0 answers
110 views

Nginx Redirect from HTTP to HTTPS works in Firefox but not in Chrome

with my Nginx configuration (see below) redirecting from http to https works fine when accessing the page (http://example.com/) with Firefox. But for some strange reason it does not work with Chrome. ...
user avatar
  • 1
1 vote
1 answer
39 views

What is principial difference between upcoming DNS SVCB RRs and good old SRV records? [duplicate]

In DNS there was SRV record defined long ago, which allowed to direct some services for a domain to different machines. For example, this is how I publish a LDAP service for a domain example.com ...
user avatar
2 votes
1 answer
215 views

is "access-control-allow-origin" a secure way to restrict communication between two servers?

I have two servers, A and B. I want server B to only accept HTTP requests from server A. is "access-control-allow-origin" a secure way to implement that?
user avatar
0 votes
1 answer
19 views

Getting random 404 requests from unknown IPs in Apache + Ubuntu server

This is strange. I just installed a new Ubuntu + Apache in my Digitalocean droplet and installed a Laravel APP there. Now suddenly I see these kind of strange POST, GET and CONNECT requests from ...
user avatar
0 votes
0 answers
62 views

Loopback connection seems blocked

Here is the situation i met: Server is managed by laravel forge It is serving behind cloudflare reverse proxy Nginx is up and running, listening on both port 80 and 443 (confirmed) now i need to ...
user avatar
1 vote
1 answer
66 views

Can a server offer more than one TLS certificate?

Let's say I have a TLS certificate for a domain but I'm not sure if all user agents potentially connecting over HTTP would accept it. Can I obtain another certificate, signed by another certificate ...
user avatar
  • 133
0 votes
0 answers
122 views

Bad Request Error Only in chrome Browser : Apache Logs , BufferOverflowException

List item Background, My firm uses apache http server with apache tomcat, here apache http server acts as a reverse proxy only, we have one apache and one tomcat instance, Bad Request Error is only ...
user avatar
0 votes
0 answers
135 views

Squid Proxy Server Not Accepting External Connection?

I am running squid 3.5.12 on Ubuntu. I have the followings in /etc/squid/squid.conf acl SSL_ports port 443 acl CONNECT method CONNECT acl acl_allowed_ip src my.client.ip.address.com http_access allow ...
user avatar
  • 225
1 vote
0 answers
35 views

Apache and VirtualHosts in RedHat, Can't figure it out

already did my research and Im burned after reading and watching videos for hours; I can't make virtual hosts works at all, it doest matter which configuration I set but Apache will ignore it and ...
user avatar
0 votes
1 answer
613 views

Use multiple server blocks in NGINX on same host and same port

I want to configure the server such that the root of the server serves some static files, which a specific endpoing, /nextcloud serves nextcloud on the same domain. Here is my nginx.conf - ...
user avatar
0 votes
0 answers
20 views

Bizarre intermittent, but long lasting failure to connect to just one server

I have a bizarre connection issue with just one server that I have no idea how to diagnose. Basically I'm setting up a self-hosted email service using iRedMail and everything works fine for a while ...
user avatar
0 votes
1 answer
121 views

CentOS - make Samba share available via nginx

I have a collection of files on a Windows share named \\winserver\bucket. On a CentOS server, I am able to mount it so the content is available for perusal. I created an empty directory named /mnt/...
user avatar
  • 101
0 votes
0 answers
36 views

http request via https

Here is a scenario - http request are sent from monitoring client to an address like https://something.com:9443 which on the other end is (though) handled by nginx configured only as http server. If ...
user avatar
  • 1
0 votes
0 answers
43 views

Nginx proxy_pass to http or https different behavior

Good day! We have a nginx-based proxy with next config: server { server_name proxy; listen 80; underscores_in_headers on; access_log /var/log/nginx/access.log bodylog; location / { ...
user avatar
  • 1
1 vote
1 answer
37 views

Load balancing: how to find the fastest route to a user

I’m thinking about it like a week. Consider that we have a load balancer server, and two storage servers, X and Y. A user connects to load balancer. Load balancer should decide which of that two ...
user avatar
1 vote
0 answers
41 views

Lighttpd - Redirect HTTPS 443 to HTTPS 123

I have HTTPS working for a local instance of Lighttpd. But I'm wanting to redirect: http://192.168.1.254 -> https://192.168.1.254:123 https://192.168.1.254 -> https://192.168.1.254:123 My ...
user avatar
0 votes
1 answer
59 views

Set HTTP/HTTPS man-in-the-middle proxy for webserver (Apache2)

To log all http/https requests by a specific application, we use man-in-the-middle proxies (set as http or SOCKS5 proxies). On our local Windows and Mac machines, we usually 'proxify' apps or ...
user avatar
  • 23
28 votes
6 answers
5k views

Why are CentOS mirrors HTTP and not HTTPS?

As far as I know, HTTP is prone to man-in-the-middle attacks. As such, the repositories in Alpine Linux or the CentOS Mirrors are not HTTPS. In the olden days, having HTTPS used to be an expensive ...
user avatar
  • 391
1 vote
1 answer
520 views

How to use wget http status codes in an if else statement to take an action based on the status code

I'm writing a script that is downloading a bunch of files, I'm using wget to download the file and I want to echo back to the terminal custom status messages for each file based on 3 scenarios: ...
user avatar
0 votes
1 answer
149 views

Apache server dead

I've been struggling around to get my website running with HTTP redirect https and ssl. Apache 2.4.41 Ubuntu 20.04 LTS Current data: iptables -> https://www.toptal.com/developers/hastebin/...
user avatar
0 votes
1 answer
42 views

Assume platform performance based on Nginx - ngx_http_stub_status_module

Nginx is placed in front of a microservice architecture on which we don't have any insight. We retrieve the metrics exposed by the http stub status and would like to compute an indicator of the ...
user avatar
1 vote
1 answer
170 views

Is there any difference between using a cookie and using a normal header in the case of HTTP communication?

I have a system consisting of a custom software and an HTTP server. The software will send some requests with some headers and the HTTP server will send response back. Now I have some custom ...
user avatar
  • 185
1 vote
0 answers
21 views

Monitor website (http) not accesible via webmin (server status tool)

I am trying to workout how to test that a site is inaccesible with webmin's tools... System and server status. This is... an URL that should not be accesible to anyone except certain IPs or an http ...
user avatar
  • 273
0 votes
1 answer
16 views

can http clients configure if they want persistent or non-persistent connections with the http server?

I want to understand, if depending on how client configures the http connection, the server can behave in non-persistent manner or persistent manner, so in effect some clients can connect in ...
user avatar
0 votes
2 answers
95 views

Does http protocol standard support long polling?

I recently read about long-polling concept which can be used with http. I want to understand, if any http protocol standard itself supports long-polling concept, so that depending on how client ...
user avatar
0 votes
0 answers
311 views

What are NGINX reverseproxy users doing to prevent HTTP Request smuggling?

Since NGINX does not support sending HTTP/2 requests upstream, what are the present NGINX reverseproxy users doing to mitigate HTTP Request Smuggling vulnerability? I understand that the best way to ...
user avatar
2 votes
1 answer
146 views

Apache, redirect a client instead of showing HTTP/HTTPS error

If a web admin configures an HTTPS/SSL vhost on a custom port (e.g. 4433) and a browser connects to that vhost but using HTTP (http://vhost:4433), is there any way to configure apache to rather issue ...
user avatar
  • 192
0 votes
0 answers
32 views

Is it normal NGINX http upstream check status to be public?

I am newbie in pentest. I pentest a website, where I found a service "NGINX http upstream check status" in public, with private IPs and ports linked to internal servers. I am wondering if it'...
user avatar
0 votes
2 answers
40 views

How to make nginx receive and send data to both server1 and server2?

I have nginx as reverse proxy. I want to send data to both server, not just one not load balancing (just send data that it receive from port 80 to server1 and then server2). Server1 will be a web ...
user avatar
  • 1
0 votes
1 answer
150 views

Is rate limiting delay included in nginx $request_time?

If requests are delayed by nginx rate limiting (rate limit exceeded, but within burst rate), is this delay included in the nginx $request_time total? The nginx docs state that $request_time is "...
user avatar
  • 400
0 votes
2 answers
1k views

How to add http host header in URL?

I have web app deployed in K8 in aws & configured LoadBalancer to call the same from internet. In the Postman I call like , GET https://myteams.myorg.net/config Headers: Host doom.myteams.myorg....
user avatar
  • 1

1
2 3 4 5
44