Questions tagged [http]

HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

458 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
9
votes
0answers
140 views

How much does FreeBSD accept_filter actually improve performance in a modern world?

I recently learned about FreeBSD's accept_filter socket option which can allow a worker process to avoid context switching by, for example, waiting until a full HTTP request is received with accf_http:...
9
votes
0answers
271 views

Can Asterisk's phoneprov module be used securely?

I'm using Asterisk 13.1.0 as packaged by Ubuntu Server 16.04 to run a pure-VoIP phone system. Asterisk has a module – phoneprov – that allows it to template out configuration files for ...
5
votes
0answers
769 views

Unable to get ejabberd prebind to work

I'm trying to get the prebind of BOSH sessions to work. I want to be able to authenticate a user in my CMS and then log him in when he accesses the chat, for this I found https://github.com/...
4
votes
1answer
2k views

How to log effective outgoing HTTP requests made by Squid, with headers after adaptation?

I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header. Here is my config : request_header_access User-Agent deny all ...
3
votes
0answers
29 views

How to filter external HTTP requests using on remote host location and GET parameters with Tomcat8?

I have a tomcat 8 web applications server and it has a running application (/app). This /app can be accessed from both internal and external HTTP GET requests but 1 request from external should be ...
3
votes
0answers
81 views

How many HTTP transactions through a connection in Haproxy

I want to know how many http transactions occur through a specific connection of Haproxy with a client (frontend). If I could associate connection (session) id with the frontend's request I would be ...
3
votes
0answers
403 views

HAProxy - Securing inbound TCP connections

I've been trying to implement a load balanced secured proxy passthrough using HAProxy. Basically what I want to do is this: request ----> haproxy passthrough -----> multiple proxy servers -----&...
3
votes
0answers
474 views

What are the benefits and drawbacks of using ETag vs LastModified as a CDN cache validator?

I'm reading this article on Azure CDN. I can either control caching with: An ETag Last Modified Default heuristics What are the benefits and drawbacks of the first two choices? Does it matter? ...
3
votes
3answers
957 views

How can I configure IIS on Azure to stream chunked data from a Node.js app?

I have a Node.js app that uses Transfer-Encoding: Chunked to stream data over HTTP continuously until the client disconnects. When running a local instance of Node, it works fine, but when deployed to ...
3
votes
0answers
3k views

HTTP to HTTPS local proxy that can do the HTTPS connection over a proxy

Here's the deal: Our client software can only connect using http protocol, it can not do https. However, security requirements dictate end-to-end security, so we need to use https when talking to the ...
3
votes
1answer
517 views

Nginx doesn't decrement max-age

I'm trying to set up Nginx as a reverse proxy for my Rails application running on Unicorn. My app has some public pages that I'd like to cache for a duration for 60 minutes, so I set the max-age ...
3
votes
0answers
45 views

Evaluating and redirecting http requests

I am trying to evaluate traffic on port 80 to determine whether or not if we need to redirect a request, or pass it through, while being transparent. Scenario: User connects to our system via Wifi. ...
3
votes
2answers
11k views

How To Enable URL Filtering With Just Squid & C-ICAP

Before I posted this question, I read several set up guides online, the squid docs, c-icap docus, and also the ICAP RFC (3507). Unfortunately, the documentation for SQUID and C-ICAP does not provide ...
3
votes
0answers
318 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in /var/log/auth....
3
votes
1answer
1k views

Apache suddenly very slow on http and faster on https

Background: I have Apache 2 running on ubuntu. There is a low usage on it and mostly being accessed for a web service URL from mobile apps. It was working fine until I installed SSL certificates. I ...
3
votes
1answer
888 views

Allow only one request per ip and url

Using a htaccess file or sending special headers from php, is there any way to allow only one http request by ip and url? I mean, an user could make multiple request simultaneously, but not to the ...
3
votes
1answer
863 views

mod_rewrite in .htaccess causes header not to be applied - why?

Excerpt from <VirtualHost *:80> section in httpd.conf (goal: set Cache-Control for all JavaScript files): <LocationMatch "\.js"> Header set Cache-Control "max-age=290304000, public" &...
3
votes
1answer
788 views

Web page hangs on reload/refresh

I'm experiencing a strange problem with my website. If I navigate through links inside the website everything is fine, and pages load fast. If I hit the refresh button on the browser on any page, the ...
3
votes
0answers
1k views

Making mod_proxy_http send back response asynchronously (w/o 100 Continue)

A servlet engine (Jetty) is running behind an Apache Httpd server, forwarded using mod_proxy_http. This is running a small servlet that accepts PUT requests and is authenticated using HTTP Basic ...
2
votes
0answers
55 views

CloudFront usually misses from browser, hits from cURL

When I load my HTML page in my browser, all requests for assets have x-cache: Miss from cloudfront. If I reload my browser very quickly, I can sometimes get a Hit. If I open my developer tools and "...
2
votes
0answers
110 views

HTTP Debug method reveals Server header on IIS

Stuck with really weird problem and can't figure out how to handle it. So, I have asp web api application hosted in IIS 10. I use IIS Rewrite module with outbound rule which removes any Server header: ...
2
votes
1answer
579 views

Is it possible to redirect a URL from HTTP to HTTPS on the same port for IIS?

I have a website located on a custom port number in the server. Currently, it is serving the users using HTTP. I was wondering if it is possible to redirect from HTTP to HTTPS while still reusing the ...
2
votes
0answers
156 views

EventStore Bad Request (Invalid host) working in cluster

I'm using EventStore with the following configuration : --- RunProjections: All ClusterSize: 2 Db: /opt/eventstore/db DiscoverViaDns: false GossipSeed: 10.0.100.11:1113 GossipOnExt: false Log: /opt/...
2
votes
0answers
1k views

Squid returns 400 to GET / HTTP/1.1 and Host Header

I need to demonstrate and test a Squid setup, which should blacklist by default, and allow requests only to whitelisted URLs from known networks. This is currently running in my staging environment, ...
2
votes
1answer
637 views

nginx proxy - can I forward the same request to multiple backends?

How can I use a nginx proxy setup to forward the same incoming request to multiple backend servers? I do not want a load-balancing, I want to send the same request to both servers. Normally I would ...
2
votes
0answers
561 views

nginx $request_method gets changed from POST to GET before logging due to internal redirects

NGINX Version: 1.10.3 on a Debain 9.1 OS with Jessie-Backports nginx.conf: user www-data; pid /var/run/nginx.pid; worker_processes 1; error_log /var/log/nginx/error.log; events { ...
2
votes
0answers
248 views

Curl not closed when 204 No-Content and Transfer-Encoding: chunked through haproxy

Haproxy is terminating https connections and forwards requests to backend. When resource returns 204 No-Content and Transfer-Encoding: chunked the curl connection is not closed. When I call resource ...
2
votes
0answers
756 views

Nginx Http Secure Link Module not working

I am using nginx secure_link to prevent video from hotlink. If main server key match remote server key. The video will able to access/watch. Otherwise if user access link directly without md5 link ...
2
votes
0answers
202 views

Is there a length limit on how long an Apache environment variable can be?

Is there something similar to LimitRequestFieldsize that applies a length limit to environment variable? In other words, can one set environment variable value arbitrarily long or it will be ...
2
votes
1answer
734 views

Download speed low over http but Iperf is showing a high bandwidth

I was trying to download some files off of a server that I recently started renting. It is a dedicated server located in Paris-FR. I believe the box is in online.net's datacenter. I am renting it from ...
2
votes
0answers
434 views

Disable HTTPS for one of two name-based websites, hosted on one IP address

I have a local Apache2 server which hosts two name-based websites on a single IP. The first website is hosted only on port 80. The second is hosted on port 80 and 443. If accessed on port 80 the user ...
2
votes
1answer
889 views

Apache returns invalid Content-Length for gzip compressed 204 response

When apache returns a gzip compressed response with 204 response code and empty body server returns invalid header Content-Length: 20 instead of Content-Length: 0. Without gzip compression (without ...
2
votes
0answers
131 views

HAProxy, why would a replaced HTTP header have a number at the end?

Can someone explain what the "X-Forwarded-Proto2" header is in this HAProxy frontend stanza?: frontend main *:443 ... reqirep ^(X-Forwarded-Proto:)(.*) X-Forwarded-Proto2:\2 ... I understand ...
2
votes
1answer
964 views

Nginx request_time slower with HTTP/2

We are running nginx/1.9.10 as a frontend server with multiple application server as upstream. We are using plain http, mostly https and switched to http/2 in the last weak. We are logging like this:...
2
votes
0answers
149 views

Issues with URL length in Apache/mod_wsgi

I have a python wsgi API in which I process incoming URL payloads of varied length. I believe, but am not absolutely sure, that I may have run into a limitation of URL size. For a particular payload (...
2
votes
0answers
64 views

Dozens of identical HTTP requests from Chrome on Android

I'm seeing an odd pattern in my HTTP access log. Sometimes a mobile Chrome browser makes dozens of seemingly redundant HTTP requests to get the same page. What could cause this behavior? A buggy app ...
2
votes
0answers
177 views

Anyone know what could cause this pattern of http requests?

It's from a registered user on my website. Activity begins with normal looking URLs, which correlates to manual browsing, but then that stops. After that I get the same GUID-based requests every 3 ...
2
votes
1answer
2k views

How to transparently cache git clone?

I would like to offer a continuous integration service (I'm planning to use hudson, but the solution should work for others as well) with a web interface where a user will define a SCM URL (e.g. a git ...
2
votes
0answers
970 views

Error: No 'Access-Control-Allow-Origin' header is present on the requested resource. (NGINX)

I am using NGINX and I am receiving that error in the browser's console. I am so frustrated. According to my boss, I need to set up cors which what I did and still I am getting the same error. This ...
2
votes
0answers
37 views

Can IE be considered a reasonable website access test for the .Net framework

We are currently updating our SSL cipher settings in order to improve our SSL rating. The changes included the removal of SSL3 and RC4 ciphers. However this appears to have caused problems with some ...
2
votes
1answer
662 views

Disable html error reporting on nginx

Is it possible to completly remove the html erroring reporting in nginx for instance, when I have a 403 error nginx serves the following : <html> <head><title>403 Forbidden</...
2
votes
0answers
1k views

What would cause Apache to return malformed HTTP responses?

I have a Go server that reverse proxies requests to an Apache/PHP server. I have been able to rarely observe that on occasion, the Apache/PHP server will cause Go to produce the following error ...
2
votes
0answers
623 views

Closing proxy to service socket when client is lost

We are using nginx, right now 1.6 to reverse proxy our services to the client. We are also using Server-Sent Events, a layer on top of HTTP that keeps the socket open. Here is a piece of required ...
2
votes
1answer
670 views

git: create new remote repo with http backend?

I set up access to git over apache2 and the git-http-backend as described in http://www.tikalk.com/alm/setup-git-gitweb-git-http-backend-smart-http-ubuntu-1204 . I can pull from the test repository ...
2
votes
2answers
105 views

Is this reverse proxy configuration possible

I will first try to describe the problem I have. Let's say I have two different http servers running on two different ports behind firewall on my local machine: SERVER1: http://localhost:8001 ...
2
votes
1answer
1k views

Jetty 9 - redirect http to https

I'd like to force use of https in Jetty 9. Apparently: <Set name="confidentialPort">443</Set> no longer works in jetty 9. How should I do it properly?
2
votes
3answers
54 views

file link access via email

we have a server where an application is hosted. in our current configuration, our web server (IBM HTTPD) redirects all its requests to the application server (WAS). Now, we want to access a file ...
2
votes
1answer
1k views

Server responds to pings but no SSH or HTTP access

I do not know what has caused this but my websites have been down for 2+ days now and I cannot connect via SSH or FTP either. The only way to get signs of life from my server is to reboot it via the ...
2
votes
0answers
306 views

Cherokee force gzip compression for HTTP/1.0

I am using CloudFront with a Cherokee origin server for static files. Cherokee serves gzipped content for direct browser requests without any problem. But when CloudFront requests content, Cherokee ...
2
votes
0answers
136 views

Fence node in apache traffic server

I'm currently looking into Apache Traffic Server as a tool for providing better availability of web services. But looking at the manual I can't see any reference to how I can pro-actively fence a ...