The release of the lightweight HTTP server lighttpd 1.4.73 has been published, aiming to combine high performance, security, standard compliance, and configurability. Lighttpd is suitable for high-load systems and focuses on low memory and CPU resource consumption. The project code is written in C and is distributed under the BSD license.
The new version provides detection and logging of 'Rapid Reset' class DoS attacks, in which a large number of streams are dropped simultaneously within a single HTTP/2 connection. Changes have been made to mod_h2 to protect against flooding and to speed up HTTP/2 header flag parsing. In the event of an abnormally high number of incoming requests, 'GOAWAY' responses are sent. A new MIME type for files with the '.mkv' extension has been added.
Source: opennet.ru
