Re: [Securityfusion-devel] Lightweight Web Server

[Richardson L. <sec...@gm...>]

Fábio,*

*Eu acho que o Jef Poskanzer e colaboradores não estão mais atualizando o
thttpd,abaixo coloquei informações para que nós possamos usar como ponto
inicial .
*
*http://www.acme.com/software/thttpd/thttpd_man.html#THROTTLING*
*
thttpd is an open source software web server from ACME Laboratories,
designed for simplicity, a small execution footprint and speed. thttpd is
single-threaded and portable: it compiles cleanly on most Unix-like
operating systems, including FreeBSD, SunOS 4, Solaris 2, BSD/OS, Linux, and
OSF/1. It has an executable memory size of about 50 kB[1]. While it can be
used as a simplified replacement to more feature-rich servers, it is
uniquely suited to service high volume requests for static data—for example
as an image hosting server. The first "t" in thttpd stands for variously
tiny, turbo, or throttling.

thttpd has a bandwidth throttling feature which is not present in other open
source web server software such as Apache (although throttling is available
as an add-on module for Apache). This feature enables the server
administrator to limit the maximum bit rate at which certain types of files
may be transferred. For example, the administrator may choose to restrict
the transfer of JPEG image files to at most 20 kilobytes per second. This
prevents the connection from becoming saturated so that the server will
still be responsive under heavy load, with the tradeoff that file transfer
speed is reduced.

Sites using thttpd include demon.net, bluelight.com, mtv.com, The Drudge
Report, garfield.com and others.

http://zibet.net/comp/thttpd.html
http://xoomer.alice.it/adefacc/httpd/thttpd/
http://www.ibm.com/developerworks/web/library/wa-ltwebserv/

*Comparison of web server software
*http://en.wikipedia.org/wiki/Comparison_of_web_servers


2008/11/4 Fábio J. Bertinatto <fab...@gm...>

> Excelente idéia!
>
> Não tive muito tempo para analisar o programa, mas acho importante que o
> web server escolhido não esteja descontinuado (é o caso deste?).
>
> Uma falha de segurança não resolvida no webserver fica mal para um software
> de segurança. ;-)
>
> Outra alternativa é o Lighthttp, mas acredito que sua opção seja a ideal
> (caso ainda seja mantido).
>
> Abraços
>
>
>
> 2008/11/4 Richardson Lima <sec...@gm...>
>
>> PessoALL,
>>
>> Hoje em meu horário de almoço estarei analisando o thttpd<http://www.acme.com/software/thttpd/>(a
>> simple, small, portable, fast, and secure HTTP server,among its features
>> are support for the HTTP/1.1 standard, CGIs, virtual hosts, and IPv6 ),ressalto que o tarball só tem 129,2 KB e eu já vi este webserver rodando em
>> máquina com processador de 33MHz.
>> Podemos estudar a possibilidade de fundir ele ao Security Fusion.
>>
>> Feeback ?!?!?!?!
>>
>> []'s
>> --
>> -----------------------------------------------
>> Richardson Lima
>> www.gprt.ufpe.br/~richardson <http://www.gprt.ufpe.br/%7Erichardson> ( My
>> $public_html )
>> http://securityfusion.sourceforge.net
>> (Security Fusion intrusion detection system)
>>
>> Position:  Security System Administrator
>> Location:  Networking and Telecommuncations Research Group
>> Federal University of Pernambuco
>> Informatics Center, Brazil
>>
>> P.O. Box: 7851, ZIP: 50732-970
>> Phone: +55-81-2126-8954 Fax:+55-81-2126-8955
>> Gsm Mobile: +55 81 88725173
>>
>> Compromisso, interesse, diligência e persistência.
>> ---------------------------------------------------------------------
>> "UNIX is basically a simple operating system, but you have to be a genius
>> to understand the simplicity."
>> ------------------------------------------------
>>
>> -------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> challenge
>> Build the coolest Linux based applications with Moblin SDK & win great
>> prizes
>> Grand prize is a trip for two to an Open Source event anywhere in the
>> world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> Securityfusion-devel mailing list
>> Sec...@li...
>> https://lists.sourceforge.net/lists/listinfo/securityfusion-devel
>>
>>
>


-- 
-----------------------------------------------
Richardson Lima
www.gprt.ufpe.br/~richardson ( My $public_html )
http://securityfusion.sourceforge.net
(Security Fusion intrusion detection system)

Position:  Security System Administrator
Location:  Networking and Telecommuncations Research Group
Federal University of Pernambuco
Informatics Center, Brazil

P.O. Box: 7851, ZIP: 50732-970
Phone: +55-81-2126-8954 Fax:+55-81-2126-8955
Gsm Mobile: +55 81 88725173

Compromisso, interesse, diligência e persistência.
---------------------------------------------------------------------
"UNIX is basically a simple operating system, but you have to be a genius to
understand the simplicity."
------------------------------------------------