Wopepuka http seva lighttpd 1.4.65 yatulutsidwa, kuyesera kuphatikiza magwiridwe antchito apamwamba, chitetezo, kutsatira miyezo ndi kusinthasintha kwa kasinthidwe. Lighttpd ndiyoyenera kugwiritsidwa ntchito pamakina odzaza kwambiri ndipo cholinga chake ndi kukumbukira kochepa komanso kugwiritsa ntchito CPU. Mtundu watsopanowu uli ndi zosintha 173. Khodi ya projekitiyo idalembedwa mu C ndikugawidwa pansi pa layisensi ya BSD.
Zatsopano zazikulu:
- Thandizo lowonjezera la WebSocket pa HTTP/2, ndikukhazikitsa RFC 8441, yomwe imafotokoza njira yoyendetsera protocol ya WebSockets pa ulusi umodzi mkati mwa kulumikizana kwa HTTP/2.
- Dongosolo lotsogola lotsogola lakhazikitsidwa lomwe limalola kasitomala kuwongolera mayankho omwe amatumizidwa ndi seva (RFC 9218), komanso kuyang'anira zofunikira pakuwongolera zopempha. HTTP/2 imapereka chithandizo pa chimango cha PRIORITY_UPDATE.
- M'makonzedwe a lighttpd.conf, chithandizo cha machesi ovomerezeka ndi kumanga kumayambiriro (=^) ndi mapeto (=$) a chingwe chawonjezedwa. Kufufuza kwa zingwe zotere kumathamanga kwambiri kuposa mawu okhazikika ndipo ndikokwanira macheke ambiri osavuta.
- Thandizo lowonjezera la magwiridwe antchito a PUT (kuphimba gawo la data pogwiritsa ntchito mutu wa Range) mpaka mod_webdav. Kuti mulowetse, mungagwiritse ntchito njira 'webdav.opts += ("partial-put-copy-modify' => "yambitsani")'.
- Onjezani 'accesslog.escaping = 'json'" njira mod_accesslog."
- Zowonjezera zothandizira kumanga ndi libdeflate ku mod_deflate.
- Kupempha kufalitsa thupi kudzera pa HTTP/2 kwafulumizitsa.
- Mtengo wosasinthika wa zopempha za server.max-keep-alive-requests zasinthidwa kuchoka pa 100 kufika pa 1000.
- Pamndandanda wamitundu ya MIME, "application/javascript" yasinthidwa ndi "text/javascript" (RFC 9239).
Mapulani amtsogolo akuphatikiza makonda okhwima a TLS ndikuletsa ma ciphers olowa mwachisawawa. Zokonda za CipherString zisinthidwa kuchoka ku "HIGH" kukhala "EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384". Zomwe zakonzedwa kuti zichotsedwe ndi zosankha za TLS zomwe zatha kale: ssl.honor-cipher-order, ssl.dh-file, ssl.ec-curve, ssl.disable-client-renegotiation, ssl.use-sslv2, ssl.use-sslv3. Kuphatikiza apo, tipitiliza kuyeretsa ma mini-module, omwe angasinthidwe ndi kukhazikitsa kwa Lua kwa mod_magnet. Makamaka, ma module mod_evasive, mod_secdownload, mod_uploadprogress ndi mod_usertrack akukonzekera kuchotsedwa.
Source: opennet.ru