Questions tagged [http]

HTTP stands for Hyper Text Transfer Protocol and is the protocol used to transfer information around the World Wide Web.

Filter by
Sorted by
Tagged with
5
votes
2answers
1k views

Is the Host: header required over SSL?

Is the Host: header required over SSL even if the request is not HTTP/1.1? So, if a client connects over SSL, and sends the following request: GET / HTTP/1.0 Should the web server throw a bad request ...
0
votes
0answers
11 views

HTTP Nginx redirect 2 domains to 2 internal IP web applications fails (redirect only to the first domain)

I have the following setup: A firewall (pfSense) that redirects HTTP and HTTPS trafic to an internal IP that runs NginX (on CentOS8) - 192.168.10.2 This NginX in turn redirects the trafic to the 2 ...
1
vote
3answers
27 views

Implicitly allow requests in IIS from valid hostname

I have a few publicly accessible IIS servers and sites (personal and corporate), these hosts have own domains/subdomains, and all legit access to these https sites happen through domains. Almost all ...
0
votes
1answer
29 views

Different response when hitting curl command with & without single quotes

I am hitting admitAD API using curl command. If i below URL curl -L -H 'Authorization: Bearer MY_TOKEN' -X GET https://api.admitad.com/payments/?limit=2&has_statement=0 I am getting response { ...
0
votes
1answer
28 views

Double call to root path “/” in a website

I'm checking my web page performance, but some strange reason it double calls to root path. Any idea why this is happening? Thank you.
-2
votes
1answer
42 views

Why does Apache send HTTP/1.1 when client requests HTTP/1.0? And many other very similar problems [closed]

Apache sends HTTP/1.1 when client requests HTTP/1.0? Why? So the request is: Connected to example.com port 80 GET / HTTP/1.0 The response is similar to: HTTP/1.1 200 OK Server: Apache It says HTTP/...
1
vote
0answers
27 views

Multiple forwardfor commands in HAProxy config

In HAProxy, I would like to forwardfor everything except a few networks like below (multiple networks) frontend main bind myip:5356-60000 mode http option ...
0
votes
0answers
20 views

NGINX UDP Proxy Pass to HTTP

I built a NGINX reverse proxy where I listen for UDP traffic on port 53 and pass it on to an HTTP endpoint with modified headers. Once the headers are modified, I send the packet to the target. http....
0
votes
1answer
27 views

What does `Accept-Encoding: gzip,deflate` mean?

Can someone explain what it means when I see Accept-Encoding: gzip,deflate when listening with ncat? Does it mean the body is compressed? And if so, how can I decompress it? $ nc -lnvp 4000 Ncat: ...
1
vote
1answer
43 views

What is the circle icon in Chrome's Network tab?

What is the circle icon in this request? It's a GET request that returns a pdf. It does it in incognito as well. I have the following extensions installed: Cisco Webex Extension Google Docs Offline ...
0
votes
0answers
17 views

Ubuntu sudo required for listening on port 80 but not on other unused ports [migrated]

On my Ubuntu desktop, I'm able to successfully run a small C++ webserver on unused ports like this: ./myserver 127.0.0.1 3050 This problem is that if I run on port 80, I must run as sudo like this: ...
0
votes
2answers
42 views

Forwarding all HTTP/HTTPS from server to another server

I need to forward all traffic(HTTP/HTTPs) to my server (Digital ocean) to a new server (AWS load balancer) basically the solution is to use nginx as this questions: Forward my http requests from my ip ...
1
vote
1answer
31 views

HTTP 500 Error After Trying To Set Up Error Reporting on Google Cloud Console

I tried the following code on SSH to try and set up Error Reporting on a Wordpress Bitnami vm-instance on Google Cloud Console: sudo -i sudo nano /opt/bitnami/php/etc/php.ini auto_prepend_file="/...
0
votes
0answers
38 views

Apache doesn't show any page for 414 Request URI Too large when using HTTP/2

Apache doesn't show any page for 414 Request URI Too large when using HTTP/2. So, when my request is large enough: HTTP/1.1 results in: HTTP/1.1 414 Request-URI Too Long Date: Tue, 16 Mar 2021 15:16:...
2
votes
0answers
11 views

Single line reverse proxy with HTTP Basic Auth

I am temporarily exposing some HTTP services to the Internet and I would like to password-protect them. Because the exposure is just a few hours, setting up Nginx, Traefik or other heavy-weight ...
1
vote
1answer
113 views

how to enable http/2 on apache2 using ubuntu 20.04?

I have VPS server running ubuntu 20.04 (apache2) and is using http/1.1 and I want to upgrade to http/2 The domain is already configured using v-hosts (and has the ssl installed - lets encrypt). ...
0
votes
1answer
385 views

Webserver being attacked

my webserver is constantly under attack by attempted use of PHP vulnerabilities and through the use of GET requests. How concerned should I be that I have been compromised and how could I check as ...
0
votes
1answer
32 views

Nginx simple PUT file

I have set the following configuration: location /upl { root /storage/www/upl/data; client_body_temp_path /storage/www/upl/client_tmp; dav_methods PUT DELETE MKCOL COPY MOVE; ...
2
votes
1answer
70 views

Why am I not receiving a response when the request is sent through a load balancer and the response is too big to fit into a single packet?

There's a certain condition where I'm unable to receive a response from an HTTP request to a particular service: the request is sent through a load balancer and the response is too big to fit into a ...
0
votes
0answers
32 views

apache (httpd) - How to set rewrite URL [duplicate]

I have a new website on Nette Framework, the problem is that the old website had URLs in the form: https://example.com/Questions/ https://example.com/Tags So all over the internet there are backlinks ...
1
vote
1answer
62 views

Is it normal for (fake) host in HTTP request header to recieve requests?

Penetration testing has suggested our web app is vulnerable to server-side request forgery. The supposed proof is that when making a request with a fake Host header (example: fakehost.com) to our web ...
0
votes
0answers
9 views

Netgear FVS318N won't allow connection to certain machines but not others

I have a client using the Netgear VPN software to connect to 4 locations. These VPNs have been setup and working for years. The locations house servers that were recently replaced, and they changed ...
0
votes
0answers
40 views

Nginx removing port in redirect to Docker container?

I'm working on a website that runs within a Docker container and embeds visualisations hosted on other Docker containers. To do this, I have Nginx set up as a reverse proxy, redirecting requests to ...
1
vote
0answers
30 views

Nginx showing 504 Gateway timed out when uploading large files

I have a simple PHP file upload script that uploads a file. The server consists of 1 nginx reverse proxy and another nginx server (upstream). The problem is that when I try to upload very large files ~...
0
votes
1answer
21 views

How to configure openssl client to only accept specific server certificates?

I'm new to this community and kind of to things related to security. I have three servers Web Server (Client) Mail Server (eSMTP) Web Server All servers have their own SSL certificates and got asked ...
0
votes
0answers
55 views

Android Volley JsonObjectRequest times out, but explicit IP:port request works

I have a REST API in go on my server VM, with gorilla/mux: router := mux.NewRouter().StrictSlash(true) log.Fatal(http.ListenAndServe(":49186", router)) I have an exposed IP and the domain ...
1
vote
1answer
32 views

Forwarding request made to my server to another server on the same path

I need to create a sub-directory mapping in the Apache server such that each request made to the path /another-path gets forwarded to https://some-website/another-path. How could I do this? If the ...
0
votes
1answer
33 views

Can you ssh into a server given only an HTTPs address

I have a server that I have a domain name for. The DNS redirects the address ssh.example.com to https://example.com:12345/ssh/. Note: My server DNS needs to have a port as my server isn't accessible ...
0
votes
2answers
64 views

How do I ssh into a server over HTTPs?

I have a server that has a reverse proxy (NGINX) set up to host all my other websites/services on a single server. I would like to create a way to SSH into that server over HTTP. The reason I need to ...
0
votes
0answers
26 views

Uploading file from JS web app to S3 fails due to CORS

I have a JS web app and I'm trying to upload a file to AWS S3 from the client. I've tried everything both locally (localhost:3000) and when deployed to production (Vercel serverless functions). I ...
0
votes
2answers
17 views

HTTPS redirect enforcement

Are there some automatic free tools for enforcing http->https redirect which dosen't affect the ht.access file ? Thanks for any suggestions !
0
votes
1answer
14 views

Use of :80 in proxy URL

Setting some Squid proxies up, and trying to figure out some behavior. Squid in a pass-all configuration, with the linux node set to forward 80 to port 3128, which Squid is listening on. I do have an ...
1
vote
2answers
35 views

Prevent data exfiltration in AWS via HTTP and FTP

I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
1
vote
0answers
24 views

Apache2 reverse proxy https <-> http with digest authentication

Sorry, If I posted a repeated question. Didn't find my answer yet. What I have is: a webservice on LAN which is only accesable over HTTP ans uses Digest Auth another server in LAN which has Apache2 ...
0
votes
1answer
21 views

http/1 and http/2 parallel delivery using nginx

Is it possible to have both http/1 and http/2 enabled for a vhost in nginx? The idea is to broaden the supported browsers by serving http/2 if supported, and, if not, fall back to http/1.
-1
votes
2answers
64 views

Chrome is redirecting to HTTPS while access HTTP but for DNS only .. IP works fine

I am a bit new to this so pls bear with me ... in the company policy, all machines in the domain are forced to use SSL (CGP forces this in Chrome).. however it works for some sites and for some it's ...
0
votes
0answers
15 views

Running nginx on AWS and accessing the website over plain old http [duplicate]

Two days ago I've started using AWS in order to serve my web applications. I've subscribed to the t2.micro and formed an Instance and then installed nginx on it from scratch using ./configure --prefix=...
0
votes
0answers
34 views

Nginx 404 on woff2

I have a reverse proxy on and it works but on my webpage when I go on the admin console to see the code I have 2 404 error 1 on woff2 type and the other on an xhr. I tried to modify mims but it doesn'...
0
votes
1answer
435 views

OpenVPN Client not tunnelling HTTP traffic

I am hosting an OpenVPN Server (I followed this tutorial) and I am facing some issues on the client side. When I use my phone as a hotspot, and I log into the VPN from my Mac (using my phone's ...
2
votes
1answer
28 views

Node.js server does not respond externally

I made a simple node.js server: var http = require('http'); http.createServer(function (req, res) { res.writeHead(200, {'Content-Type': 'text/plain'}); res.end('Hello World\n'); }).listen(9999, '0....
1
vote
1answer
82 views

How to use HTTP headers in Nginx to serve different content?

I noticed that Deno serves html or javascript depending on the HTTP accept header. For example if you simply open in your browser this package you will get HTML back (because the accept header is set ...
1
vote
0answers
354 views

NGINX-QUIC-BORINGSSL — NO_SUPPORTED_VERSIONS_ENABLED)

I'm getting this error (and a timeout) when I try open an http3 connection to a freshly compiled NGINX QUIC instance (1.19.6). SSL_do_handshake() failed (SSL: error:10000118:SSL routines:...
0
votes
0answers
23 views

Domain shows wrong site in nginx, but only for HTTP

I have multiple sites configured in Nginx 1.14.2-2+deb10u3 on Debian 10. One is a.mydomain.com, another one is b.mydomain.com. Both domains have two server blocks each, for port 80 and for port 443. ...
0
votes
2answers
43 views

apache2 - How to allow unencrypted access only to local network?

I have a Linux server on my local network with a few services running. I want to be able to access that server by my domain's name with encryption, but leaving LAN access free. I tried searching for ...
0
votes
2answers
40 views

Opening port securely

I'm operating a webapp that should be accessible only to a small number of people equipped with tablets. It is served on port 80 of a server that is on our local network behind the ISP router. The ...
0
votes
0answers
30 views

Linux Proxy Manager

I'd like to set up a proxy service where users will connect to a single server where the requests will then be forwarded using a pool of proxies I supply. Essentially a SOCKS 5 or HTTP proxy server. I'...
0
votes
1answer
34 views

How to forward http request to application running on port 80 with NGINX

The Ubuntu server is running, Glassfish on port 80(http) & 443(https) Nginx on port 8080(http) & 8081(https) The goal is, www.hostname01.com to access Glassfish, www.hostname02.com to access ...
0
votes
0answers
27 views

nginx returns 405 on adding an empty if to a location block

Assume we have the following config ($branch is set before this snippet, but it's not related, I guess): # If the request origin ends in .domain.com set $allowed_origin ""; if ($http_origin ~...
0
votes
0answers
15 views

SSL certificate for Cockpit running on separate machine?

I have a machine hosting web content (using Apache) for my domain (let's say example.com). It has a certificate that was created using certbot and is setup to auto-renew. I've recently added another ...
1
vote
1answer
201 views

How can you redirect from HTTP to HTTPS where IAP is configured with GCP Load Balancers?

I've currently got a website hosted on Google Compute Engine that's authenticated with Identity-Aware-Proxy which sits behind a load balancer. This all works great over https, but I was wanting to ...

1
2 3 4 5
42