Re: Writing my own FastCGI Server

Jeffrey H. Coffield wrote:
> From your message, it sounds like you have the skills to do this. RFC
> 2616 will tell you what a web server
> needs to do. I wrote my own web server because of security reasons.
> Apache has too many features to keep
> up with. All I needed was static pages and FastCGI. No PHP, Perl, Asp,
> xyx, blah, blah, blah...
Yes, I'd like to write my own http server, of course. But I think that 
is too much responsibility. I'm also thinking seriously about 
Lighthttpd. It has native fastcgi support .

If I had to write my own httpserver, I'd use XB2NET which is a product 
that already has a httpd class. I'd simply inherit from it.
But I'd have to purchase this product whereas using FastCGI I could go 
around and get free stuff.

>
> My main recommendation is to be extremely careful on how url's are
> translated into file names. This is probably
> the most important pieces of a web server. A mistake or unintended
> "feature" here can leave your system wide
> open to attacks.
In my case I could say I only accept 1 URL : the one to my dynamic 
content page.
>
> You could look at moving the web server to your Unisys if it supports
> TCP/IP but it is not considered good
> security practice to have an Internet web server running on the same
> system as your databases. Usually the
> web servers are in some sort of DMZ.
Not at all. Unisys mainframe OS does have a http server called Atlas. 
But who would run a http server on a mainframe ? Have you though about 
CGIs on a mainframe ?

Way, way too expensive !

>
> My final recommendation is to look at moving off of Windows to some
> operating system that scales better
> and is inherently more secure.
Yes, this would be nice but, I'd have to rewrite it all, from bottom up.

Anyway, thanks 4 your support !
>
> Jeff Coffield
>
>


-- 
Obrigado,
------------------------------------------------------------------------------
                Jose Adriano Baltieri - Analista de Sistemas
                DTI - CENTRO - UNIMEP - Universidade Metodista de Piracicaba
                PIRACICABA - SP - Brasil - Fone : (19) 3124-1858
------------------------------------------------------------------------------

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/