41
votes
Ordering: 1. nginx 2. varnish 3. haproxy 4. webserver?
Foreword
Update in 2016. Things are evolving, all servers are getting better, they all support SSL and the web is more amazing than ever.
Unless stated, the following is targeted toward ...
- 2,859
38
votes
Should my website have an IPv6 address?
Lack of IPv6 support on your site will hurt some of your users.
According to stats published by Google 20-25% of users currently have IPv6. A large fraction of those users will need to go through ...
- 30.1k
27
votes
How is possible that the web site is down but the traceroute is ok?
The website runs on a server process. When you shut down the server process, the server does not magically turn off. Also not when you misconfigure your firewall (and block port 80) neither does the ...
- 51.4k
12
votes
SSL for devices in local network
Step 1: Make the device generate a self-signed certificate for its IP address and/or hostname on first setup or when the IP address is changed unless there is a customer-provided certificate in place. ...
- 4,991
10
votes
How is possible that the web site is down but the traceroute is ok?
Traceroute uses ICMP protocol to reach an address, and a HTTP server use HTTP protocol, different ports, and different approaches.
I can reach an address via ICMP echo request but, if the port I'm ...
9
votes
Allow a certain URL path with Squid
For anyone else like me that stumbles across this post looking for an answer. The reason is that squid can't see the full URL for HTTPS requests, only the domain.
You can do a url_regex only for ...
- 91
9
votes
Accepted
With IPv6, should we be assigning distinct IP addresses to each host name served over HTTP(S)?
Giving each website its own address makes it easier to see which website traffic is for on the network. This can help with accounting, attack detection and prevention and things like that. It may also ...
- 7,672
8
votes
Accepted
Why is the TTFB of requests 5 times longer when a new TCP session is created on Apache?
Yes, it is normal that non-persistent connections take longer to send first byte of data.
This is because the IP address has to be resolved from the DNS, the TCP connection has to be set up, then the ...
- 36.1k
7
votes
Accepted
How can I access a URL through it's IP address?
The HTTP protocol allows the client application (usually a web browser) to create HTTP requests containing the name of the web site it wants to contact; this allows multiple web sites to coexist on ...
- 69.5k
7
votes
Expose Fileserver (SMB) over WEB / HTTP(S) Interface
NextCloud has WebDAV functionality / integration and can replicate data between off-site <-> on-premises in the way you want. This is no open source / free software, but you might want to give it a ...
- 12.7k
6
votes
Accepted
Connecting to IPv4 server from an IPv6 address
Short answer: NO
Long answer: IPv4 and IPv6 are different protocols. In theory you can connect from IPv6 address to IPv4 service, but you need NAT64 for this and this is primary designed for IPv6 ...
- 1,299
6
votes
Expose Fileserver (SMB) over WEB / HTTP(S) Interface
Pydio has Web UX for CIFS/SMB shares:
https://pydio.com
- 8,928
6
votes
Accepted
How to redirect port 80 to 8080 while keeping 8080 closed to the Internet?
This schematic should help you understand how packet handling is done:
The filter/INPUT rules see only packets after they were NATed in nat/PREROUTING, so by default can't tell the difference between ...
- 9,670
5
votes
How can I check if my IIS site is using NTLM or Kerberos?
If you have access to your IIS server then the answer is much simpler than inspecting HTTP traffic: Simply view the site Authentication module config for Windows Authentication.
In IIS Manager
...
- 2,554
5
votes
Accepted
How is possible that the web site is down but the traceroute is ok?
What Is a Virtual-Host?
Some web-servers, like Apache, can be configured to use what's called virtual-hosting; essentially a local redirection service. In essence, it works like this: the web server(...
5
votes
Accepted
automatic dedicated access_log for each client using ip in naming
Use the Apache log pipe feature: logs can be sent to an outside process. That process will have full latitude to filter things as it wants and create files as needed. See http://httpd.apache.org/docs/...
- 9,711
5
votes
HAProxy redirect multiple domain
You can route to different backends for multiple FQDNs as long as you have the cert/key for the sites. HA proxy needs to be able to decrypt the traffic and read the host header, unless you want to ...
- 521
5
votes
SSL for devices in local network
I deal with this issue extensively for my current job - including high emphasis on the works-offline issues. I'm coming at the question with the precondition that enterprise-ish elements like adding a ...
- 181
4
votes
Accepted
Protect Nginx directory recursively
You can deny access to locations with a specific prefix. nginx resolves locations to directory paths by using the value of the root or alias directive.
The prefix location with the ^~ modifier takes ...
- 12.4k
4
votes
Accepted
Strange scans from robots
They scan to know if you are at risk, thus to hack you later on if they can get their hand on those files.
It's often php config's file (with database password in it), wordpress's config file, etc.. ...
- 16.5k
4
votes
Connecting to IPv4 server from an IPv6 address
Updated to reflect comments:
My answer below is incorrect, but I suspect (i.e. hope) I am not the only person to have been under similar misconceptions, and that this answer (and more so, its comments)...
- 3,618
4
votes
What will happen if a CPU burst up to 100% utilization in an SMP infrastructure?
If the utilization of one of the CPU in the quad-core system happens to be 100%, and it is being fixed to the interrupt to the NIC interrupt. Will the kernel schedule another CPU that is not very busy ...
- 31.4k
4
votes
Expose Fileserver (SMB) over WEB / HTTP(S) Interface
I guess OwnCloud might be a bit overkill for your needs, but still going to mention it. :)
- 31.7k
4
votes
SSL for devices in local network
In one of our projects we faced a problem, that we wanted to connect to websocket on a local network from webpage, that was served from the Internet. In order to use secure web socket connection (wss:/...
- 41
3
votes
External IP shows me ESXi web client
You're NATting to the wrong IP. Don't NAT to your host's management IP, NAT to your guest's IP.
- 101k
3
votes
Allow a certain URL path with Squid
it's described here;
http://wiki.squid-cache.org/SquidFaq/SquidAcl
My current setup is like this;
acl special_client src 10.1.255.93
acl special_url url_regex ^http://ppa.launchpad.net/adiscon/v8-...
3
votes
Get a website's host machine's OS/server software without access to the server
Your best option, without SSH access would be nmap's OS detection.
It's not going to be totally reliable, but it's probably better than nothing, which seems to be your other option. Here's a page ...
- 53.6k
3
votes
How to protect origin server?
The IP address that accessed your site is passed in CloudFlare's own CF-Connecting-IP header. You should always use this instead of X-Forwarded-For, as that can be supplied by the user and contain ...
- 241k
3
votes
Hidden development server
Put the server on a private network and require connecting to a VPN in order to access it.
- 109k
3
votes
Active Directory Domain same as web domain
From the doc you linked to:
make your internal domain a subdomain of your external domain
You should not be creating your active directory domain name with the same domain name as your public ...
- 68.6k
Only top scored, non community-wiki answers of a minimum length are eligible