File: README

package info (click to toggle)
webfs 1.21%2Bds1-12
  • links: PTS
  • area: main
  • in suites: bookworm, bullseye, buster, sid, stretch
  • size: 1,188 kB
  • ctags: 1,570
  • sloc: ansic: 3,293; sh: 418; makefile: 20; perl: 7
file content (358 lines) | stat: -rw-r--r-- 9,454 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358

This is a simple http server for pure static content.  You
can use it to serve the content of a ftp server via http for
example.  It is also nice to export some files the quick way
by starting a http server in a few seconds, without editing
some config file first.

It uses sendfile() and knows how to use sendfile on linux and FreeBSD.
Adding other systems shouldn't be difficult.  To use it with linux
you'll need a 2.2.x kernel and glibc 2.1.

There is some sendfile emulation code which uses a userland bounce
buffer, this allows to compile and use webfs on systems without
sendfile().


Features/Design:
================

 * single process: select() + non-blocking I/O.
 * trimmed to use as few system calls as possible per request.
 * use sendfile to avoid copying data to userspace.
 * optional thread support.  Every thread has its own select
   loop then (compile time option, off by default, edit the
   Makefile to turn it on).
 * automatically generates directory listings when asked for a
   directory (check for index.html available as option), caches
   the listings.
 * no config file, just a few switches.  Try "webfsd -h" for a
   list, check the man page for a more indepth description.
 * Uses /etc/mime.types to map file extentions to mime/types.
 * Uses normal unix access rights, it will deliver every regular
   file it is able to open for reading.  If you want it to serve
   public-readable files only, make sure it runs as nobody/nogroup.
 * supports keep-alive and pipelined requests.
 * serves byte ranges.
 * supports virtual hosts.
 * supports ipv6.
 * optional logging in common log file format.
 * optional error logging (to syslog / stderr).
 * limited CGI support (GET requests only).
 * optional SSL support.


Plans/BUGS/TODO
===============

 * figure out why the acroread plugin doesn't like my
   multipart/byteranges responses.
 * benchmarking / profiling.

Don't expect much more features.  I want to keep it small and
simple. It is supported to serve just files and to do this in a good
and fast way.  It is supposed to be HTTP/1.1 (RfC 2068) compliant.
Conditional compliant as there is no entity tag support.


Compile/Install
===============

$ make
$ su -c "make install"

See INSTALL for more details.


Tuning
======

The default for the number of parallel connections is very low (32),
you might have to raise this.

You probably don't get better performance by turning on threads.  For
static content I/O bandwidth is the bottleneck.  My box easily fills
up the network bandwidth while webfsd uses less than 10% CPU time
(Pentium III/450 MHz, Fast Ethernet, Tulip card).

You might win with threads if you have a very fast network connection
and a lot of traffic.  The sendfile() system call blocks if it has to
read from harddisk.  While one thread waits for data in sendfile(),
another can keep the network card busy.  You'll probably get best
results with a small number of threads (2-3) per CPU.

Enough RAM probably also helps to speed up things.  Although webfs
itself will not need very much memory, your kernel will happily use
the memory as cache for the data sent out via sendfile().

I have no benchmark numbers for webfsd.


Security
========

I can't guarantee that there are no security flaws.  If you find one,
report it as a bug.  I've done my very best while writing webfsd, I hope
there are no serious bugs like buffer overflows (and no other bugs of
course...).  If webfsd dumps core, you /have/ a problem; this really
shouldn't happen.

Don't use versions below 1.20, there are known security holes.


Changes in 1.21
===============

  * large file support.
  * s/sprintf/snprintf/ in some places.
  * changed timestamp handling, webfs doesn't attempt to parse them
    any more but does a strcmp of rfc1123 dates.
  * access log uses local time not GMT now.
  * some ssl/cgi cleanups (based on patches from Ludo Stellingwerff).
  * misc fixes.


Changes in 1.20
===============

  * CGI pipe setup bugfix.
  * Don't allow ".." as hostname (security hole with vhosts enabled).
  * fix buffer overflow in ls.c with very long file names.
  * misc other fixes / cleanups.


Changes in 1.19
===============

  * documentation spell fixes (Ludo Stellingwerff).
  * added missing items (last two) to the 1.18 Changes notes
    (pointed out by Jedi/Sector One <j@pureftpd.org>).
  * Makefile changes.
  * finished user home-directory support.


Changes in 1.18
===============

  * added -j switch.
  * compile fixes for the threaded version.
  * use accept filters (FreeBSD).
  * shuffled around access log locks.
  * added optional SSL support (based on patches by
    Ludo Stellingwerff <ludo@jonkers.nl>).
  * run only the absolute needed code with root privileges
    (bind+chroot) if installed suid-root.
  * Makefile tweaks.
  * fixed buffer overflow in request.c
  * started user home-directory support.


Changes in 1.17
===============

  * fix bug in request cleanup code (didn't cleanup properly after
    byte-range requests, thus making webfsd bomb out on non-range
    requests following a byte-range request on the same keep-alive
    connection).


Changes in 1.16
===============

  * fix bug in %xx handling (adding CGI support broke this).


Changes in 1.14
===============

  * allways use Host: supplied hostname if needed (redirect, ...).
  * added -4 / -6 switches.
  * Added CGI support (GET requests only).
  * compile fix for OpenBSD


Changes in 1.13
===============

  * fixed a bug in Basic authentication.


Changes in 1.11
===============

  * bumped the version number this time :-)
  * small freebsd update (use strmode).
  * added -e switch.


Changes in 1.10
===============

  * fixed byte rage header parser to deal correctly with 64bit off_t.


Changes in 1.9
==============

  * added pidfile support.


Changes in 1.8
==============

  * added TCP_CORK support.


Changes in 1.7
==============

  * one more security fix (drop secondary groups).
  * catch malloc() failures in ls.c.


Changes in 1.6
==============

  * security fix (parsing option '-n' did unchecked strcpy).
  * documentation updates.


Changes in 1.5
==============

  * fixed the sloppy usage of addrlen for the ipv6 name lookup
    functions.  Linux worked fine, but the BSD folks have some
    more strict checks...
  * allow to write the access log to stdout (use "-" as filename)


Changes in 1.4
==============

  * fixed a bug in the base64 decoder (which broke basic auth for some
    user/passwd combinations)
  * added virtual host support.
  * webfsd can chroot to $DOCUMENT_ROOT now.


Changes in 1.3
==============

  * overwrite the -b user:pw command line option to hide the password
    (doesn't show up in ps anymore)


Changes in 1.2
==============

  * added ipv6 support.
  * bugfix in logfile timestamps.


Changes in 1.1
==============

  * added basic authentication (one username/password for all files)


Changes in 1.0
==============

  * added some casts to compile cleanly on Solaris.
  * new -F flag (don't run as daemon).


Changes in 0.9
==============

  * fixed a quoting bug.
  * documentation updates, minor tweaks.


Changes in 0.8
==============

  * fixed a bug in the directory cache.
  * fixed uncatched malloc()/realloc() failures.
  * added optional pthreads support.  Edit the Makefile to turn
    it on.


Changes in 0.7
==============

  * some portability problems fixed (0.6 didn't compile on FreeBSD).
  * added a sendfile() emulation based on read()/write() as fallback
    if there is no sendfile() available.
  * bugfix: '#' must be quoted too...


Changes in 0.6
==============

  * increased the listen backlog.
  * optionally flush every logfile line to disk.
  * new switch to specify the location of the mime.types file.
  * byte range bug fixes.
  * switch for the hostname has been changed ('-s' => '-n').
  * optional log errors to the syslog (switch '-s').
  * added sample start/stop script for RedHat.


Changes in 0.5
==============

  * FreeBSD port (Charles Randall <crandall@matchlogic.com>)
  * minor tweaks and spelling fixes.


Changes in 0.4
==============

  * last-modified headers (and 304 responses) for directory listings.
  * new switch: -f index.html (or whatever you want to use for
    directory indices)
  * killed the access() system calls in the ls() function.
  * added cache for user/group names.
  * wrote a manual page.


Changes in 0.3
==============

  * multipart/byteranges improved:  You'll get a correct Content-length:
    header for the whole thing, and we can handle keep-alive on these
    requests now.
  * bugfix: catch accept() failures.
  * bugfix: quote the path in 302 redirect responses.
  * accept absolute URLs ("GET http://host/path HTTP/1.1")
  * fixed handling of conditional GET requests (hope it is RFC-Compilant
    now...).
  * bugfix: '+' must be quoted using %xx.


Changes in 0.2
==============

  * added URL quoting.
  * root can set uid/gid now.
  * webfs ditches any setuid/setgid priviliges after binding to the
    TCP port by setting effective to real uid/gid.  It should be safe
    to install webfsd suid root to allow users to use ports below
    1024 (and _only_ this of course).  If anyone finds a flaw in this
    code drop me a note.
  * more verbose directory listing.
  * added logging. It does the usual logfile reopen on SIGHUP.


Changes in 0.1
==============

  * first public release.


Have fun,
  Gerd

-- 
Gerd Knorr <kraxel@bytesex.org>