Re:Apache HTTP Server 2.4.58 (CVE fixes)
by blind_oracle on Thursday October 19, 2023 @09:42AM
(#37942787)
I'm surprised people still actively use it and it seems on par with nginx, at least according to https://www.netcraft.com/blog/january-2023-web-server-survey...
[ Parent
| on HN ]
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by Twirrim on Thursday October 19, 2023 @09:50AM
(#37942887)
Why surprised? It's rock solid, stable, fast, and does pretty much everything you need, and nothing is hidden behind premium tiers, unlike nginx where they leave bugs and awful behaviour in the open source version that aren't in the premium ones (e.g. nginx used to only resolve hostname entries on start-up, https://forum.nginx.org/read.php?2,215830,215832#msg-215832, so if you used a hostname in proxy_pass, and the DNS changed, oops sorry. Actual honouring of DNS TTLs used to be a premium only feature)
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by thakoppno on Thursday October 19, 2023 @11:45AM
(#37944482)
I love apache as much as anyone, cut my teeth with it and still work with it plenty.
It doesn’t strike me as odd to question its fit for people who have more experience with containers. If there’s a reverse proxy in the front, one may just need business logic in the back.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by tempest_ on Thursday October 19, 2023 @12:32PM
(#37945057)
I am actively trying to remove apache from a large chunk of projects mainly because at this point it is being used as a poor reverse proxy and not a web server which is its core competency.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by jimjag on Thursday October 19, 2023 @01:47PM
(#37946065)
Actually, its reverse proxy implementation is quite capable and performant.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by dylan604 on Thursday October 19, 2023 @11:54AM
(#37944589)
>If there’s a reverse proxy in the front, one may just need business logic in the back.
I'm trying to imagine what that haircut would look like
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by kstrauser on Thursday October 19, 2023 @12:36PM
(#37945118)
Walk into your nearest Hot Topic.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by daveevad on Thursday October 19, 2023 @01:07PM
(#37945528)
Full disclosure: I haven't cut my hair in awhile. It may be influencing my architecture decisions at this point.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by talent_deprived on Thursday October 19, 2023 @01:00PM
(#37945423)
I run all my microservices and web sites in containers behind Apache. It's not required to use any specific reverse proxy, nginx is Russian made, like Jetbrains' products so Google pushes them and that's why under-educated milenials assume nginx is the only reverse proxy on Earth.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by jamesnorden on Thursday October 19, 2023 @01:13PM
(#37945614)
Why do you believe Google "pushes" Russian software? That seems odd.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by biorach on Thursday October 19, 2023 @01:17PM
(#37945667)
I guess referring to conspiracy theories is one way of evaluating software.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by 1over137 on Thursday October 19, 2023 @09:48AM
(#37942856)
I'm surprised you're surprised. It's a good web server.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by badcppdev on Thursday October 19, 2023 @10:04AM
(#37943080)
I'm surprised HN hasn't added a feature where if you start a comment with "I'm surprised" it asks you to tick a box to confirm that you're really sure you're contributing to the discussion.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by nontiko on Thursday October 19, 2023 @10:31AM
(#37943427)
Usually when I’m surprised about something, I realize that I am uninformed or out of touch.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by bityard on Thursday October 19, 2023 @11:28AM
(#37944247)
I am strongly in favor of this. I would also like HN to implement a warning that your comment may be extremely uninteresting if it starts out with, "Unfortunately..." or, "Can we all just agree that..."
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by supriyo-biswas on Thursday October 19, 2023 @11:43AM
(#37944447)
Also some of the snide comments beginning with “lol” and “I didn’t ask you”.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by bewuethr on Thursday October 19, 2023 @01:45PM
(#37946039)
I've found the experience when people are explicitly requested to never do this (feign surprise) to be excellent; for example, Recurse Center: https://www.recurse.com/manual#sub-sec-social-rules
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by gustavus on Thursday October 19, 2023 @11:24AM
(#37944180)
I agree after all Node.js is Bad Ass Rockstar Tech https://www.youtube.com/watch?v=bzkRVzciAZg&t=1s
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by nurettin on Thursday October 19, 2023 @12:55PM
(#37945363)
I wonder what "other" is and how it suddenly shot up while Apache was suddenly going down.
Re:Apache HTTP Server 2.4.58 (CVE fixes)
by bikezen on Thursday October 19, 2023 @01:49PM
(#37946099)
It's still in most distros default repos, unlike things like caddy, and also supports features like mod_ldap out of the box without enterprise, like nginx. If you just need a simple web server, potentially with some auth even for static files its a no brainier default for internal projects.