The lightweight http server lighttpd 1.4.65 yakasunungurwa, ichiedza kubatanidza kushanda kwepamusoro, kuchengeteka, kutevedzera mitemo uye kushanduka kwekugadzirisa. Lighttpd inokodzera kushandiswa pamasisitimu akaremerwa zvakanyanya uye yakanangana neyakaderera ndangariro uye CPU kushandiswa. Shanduro itsva ine 173 shanduko. Iyo kodhi yeprojekiti yakanyorwa muC uye yakagoverwa pasi peiyo BSD rezinesi.
Zvitsva zvikuru:
- Yakawedzera tsigiro yeWebSocket pamusoro peHTTP/2, uye yakaitwa RFC 8441, iyo inotsanangura nzira yekushandisa iyo WebSockets protocol patambo imwechete mukati meHTTP/2 yekubatanidza.
- Chirongwa chepamberi chepamberi chekutonga chakaitwa chinobvumira mutengi kuti ape pekutanga mhinduro dzinotumirwa neseva (RFC 9218), pamwe nekugadzirisa zvinokosheswa kana uchitungamira zvikumbiro. HTTP/2 inopa rutsigiro rwePRIORITY_UPDATE furemu.
- Mune lighttpd.conf marongero, tsigiro yemachisi anosungirirwa ane anosunga kumavambo (=^) uye kupera (=$) yetambo yawedzerwa. Kuongorora kwetambo kwakadai kwakakurumidza kupfuura kutaura kwakajairwa uye kunokwana kune akawanda macheki akareruka.
- Yakawedzerwa rutsigiro rwechikamu chePUT mashandiro (inovhara chikamu che data uchishandisa iyo Range musoro) kune mod_webdav. Kuigonesa, unogona kushandisa sarudzo 'webdav.opts += ("partial-put-copy-modify' => "gonesa")'.
- Yakawedzera 'accesslog.escaping ='json' sarudzo kune mod_accesslog."
- Yakawedzera rutsigiro rwekuvaka ne libdeflate kune mod_deflate.
- Kukumbira kutapurirana kwemuviri kuburikidza neHTTP/2 kwave kukurumidza.
- Iko kukosha kweiyo server.max-keep-alive-requests parameter yachinjwa kubva pa100 kuenda pa1000.
- Mune runyorwa rwemhando dzeMIME, "application/javascript" yakatsiviwa ne "text/javascript" (RFC 9239).
Zvirongwa zveramangwana zvinosanganisira zvakaomesesa cipher marongero eTLS uye kudzima legacy ciphers nekukasira. Maseting eCipherString achachinjwa kubva ku"HIGH" kuenda ku"EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384". Zvakare zvakarongerwa kubviswa zvakasakara TLS sarudzo: ssl.honor-cipher-order, ssl.dh-file, ssl.ec-curve, ssl.disable-client-renegotiation, ssl.use-sslv2, ssl.use-sslv3. Pamusoro pezvo, isu ticharamba tichichenesa mini-module, iyo inogona kutsiviwa neinochinjika Lua kuita ye mod_magnet. Kunyanya, mamodule mod_evasive, mod_secdownload, mod_uploadprogress uye mod_usertrack akarongerwa kubviswa.
Source: opennet.ru