A screenshot of mod_status on Apache under attack taken from Shekyan's blog post

According to a recent press release, a new DoS or denial-of-service HTTP has been produced by a software engineer, which is almost impossible to locate. The DoS specializes in slowing server response time and consequently, lowering the rate at which customers peruse web server reactions.

Based on what this Qualys Senior Software Engineer, (named Sergey Shekyan), had to say, Slow Read DOS was created using past research. One of the software tools its based on, (Slowloris) serves to slow HTTP based applications to prevent them from dealing with genuine customers.

According to one of his blog posts, “The idea of the attack I implemented is pretty simple: Bypass policies that filter slow-deciding customers, send a legitimate HTTP request and read the response slowly, aiming to keep as many connections as possible active.”

According to a report, the server must have a higher response interval than its buffer size. Similarly, the send buffer also has to be active for longer in order to ensure prime connectivity.

The software engineer also attacked the newest adaptation of the open source DoS test feature, showhttptest. Apache, nginx, lighttpd and IIS 7.5 are servers which are weak against this kind of assault if they use default settings. However, they can choose to save themselves by switching on their built-in protective measures.

Related posts:

1. Web Host HostPoint Produces Site Builder using CM4All Sites
2. Importance of Software Testing
3. Netregistry Suffers DDOS Attack on its Network

Original: Software Engineer Produces Slow Read DoS Attack

According to reports, the Apache Software Foundation (www.apache.org) is likely to launch a patch in the coming few days to counteract the susceptibility present in the server software. Recently, an exploit that can be employed against Apache HTTPD Web Server versions 1.3 and 2.X was launched on Full Disclosure mailing list.

Hackers can maliciously employ the Apache Killer exploit for sending the denial of service attack against an Apache server which can consequently affect the web server’s speed terribly. The Apache Software Foundation, before releasing the Patch, gave out a warning regarding the exploit.

According to the development team, “By sending specially crafted HTTP requests which include malformed range HTTP header, an attacker can disrupt the normal function of the web server, thus disallowing legitimate users to receive responses from the web server.” It was further explained that “this issue affects all Apache software versions and a patch has not been released yet.” According to Kevin Shorrt, Security analyst of SANS Internet Storm Center; the first error was identified for the first time on bugtraq in 2007, however, it “did not get much attention by Apache developers and it has remained un-patched all of this time” owing to “its lack of sophistication”.

The senior security researcher, Michael Zalewski explained that Apache and Microsoft’s Internet Information Services had “a bizarre implementation of HTTP/1.1 ‘Range’ header functionality”. It’s “implementations allow the same fragment of a file to be requested an arbitrary number of times, and each redundant part to be received separately in a separate multipart/byteranges envelope.”

The Apache Software Foundation, taking another step, also issued a latest advisory, explaining the susceptibility of the web server to the possible attack and said that the “active use of this tool has been observed.” Whereas, others purveyors have taken their own set of security measures against the exploit; for instance, launching tools like Sourcefire, Trustwave’s SpiderLabs and Imperva subsidiary Incapsula. Apache is one of the most preferred web server software that can work with all the leading OS.

Related posts:

1. Top 5 Alternatives to the Apache Web Server
2. Apache vs. IIS Web Server
3. Apache Web Server Risk Discovered

Original: Apache Launches Patch To Counteract Server Software Susceptibility

TransferSummit recently announced that its forum for this year will take place from 5^th-8^th September’ 2011 at Keble College, Oxford. The Summit has announced to provide special incentives when registering from 8^th July.

It provides its partakers with an opportunity to tackle needs and issues, and benefit from the current and future employment of open source technology. The theme for this year’s summit is “Open Innovation Everywhere”, addressing improvement of open source mobile solutions meticulously.

The forum provides an inspirational podium to its participants, from where they gain and share experience with open source influencers. Sessions held by academic speakers, along with representatives from Alfresco, eBay, HP and Red Hat, and leading figures from Apache, Outercurve, Mozilla and LiMo, will present information on the basis of open innovation, open development and case studies.

According to the TransferSummit chair, Ross Gardler, “We are committed to bringing together prominent mind and leading organizations to discuss the most important issues driving open source and mobile development strategies today – and to address what we might expect in the coming year.” He stated, “Places are limited to 300 to give delegates the chance to learn, debate, and share in a highly interactive environment.”

This is the only forum which will present tactical answers to develop cooperation between academic and commercial concerns. The TransferSummit provides access to helpful studies and widens ones creativity in dealing with corporate challenges using the latest technology.

The TransferSummit events will start off with a keynote by the founder of Redmonk, James Governor, titled “Open Business and The Open Society: The Price of Freedom is Eternal Vigilance”. It will provide attendee with a special opportunity to network through event such as:

• Break-out Sessions and Gala Dinner: Participants can carry out discussions regarding presentations during tea breaks and the multi-course banquet at Keble College’s dining hall.
• Beers of a Feather: The term was founded based on a slip-of-the-tongue by Ross Gardler, which expanded TransferSummit’s Birds of a Feather morning coffee break across the college grounds towards nearby pubs.
• Open Gadget Playtime: Participants will have access to the newest advancements in open hardware produced by open source.
• BarCampOxford: A participant driven event, managed in partnership with The Apache Software Foundation, providing partakers to discuss a variety of technology based topics.

Gardler commented, “We are thrilled by the success of last year’s sold-out event. Based on community feedback, energy, and enthusiasm, we anticipate TransferSummit becoming the must-attend gathering for intelligent conversation focusing on the opportunities of open source across technologies, industries, and innovations”

For online registration of the event, visit http://www.transferummit.com/registration, and avail a 20% discount until 8^th July.

Related posts:

1. Increasing Demand for Open Source CMS Abilities in 2011
2. Microsoft Launching an Open-Source CMS?
3. Eight Greatest Things About Open Source

Original: TransferSummit 2011 Presents Open Source

Though often associated with hosting and network servers, Linux itself is operating system software.  Unlike Unix, which can be traced back to AT&T Labs circa in the 1960s, Linux is an open-source system that wasn’t released until nearly 30 years later.  In the 1980s, most operating systems were commercial products tied to proprietary licenses.  Those who wanted to reference the software were out of luck as they didn’t have access to the source code.  Things changed dramatically when Linus Torvalds introduced Linux in 1991.  The system took off in the late 1990s as more students got on board with the development of the project and the open-source community began to evolve.  The purpose of this article isn’t to provide a history lesson, but inform you that the Linux platform has come a long way and now stands at the forefront of the hosting industry.

Why Linux?

Linux makes a great option for web hosting because the system is so widely supported.  Many of the tools that help power the hosting industry have all been specifically designed to support the platform.  This goes from web servers like Apache and programming languages such as PHP, Cold Fusion and Ruby.  Even cPanel, the leading hosting control panel, has been designed to support the system, making it incredibly easy to manage a Linux server that would otherwise be complex.  When choosing Linux, you get a powerful hosting solution that gives you everything you need to create a professional, feature-rich website.

All in all, Linux is cheaper than Microsoft Windows, its main rival, and also said to be faster and more stable.  While the software is naturally complex than Windows, the development community is constantly introducing GUIs (graphical user interfaces) and other comprehensive tools to reduce the learning curve and make the system easier to work with.  As far stability and reliability are concerned, Linux is second to none.  Unlike other systems, this one does not require shutdowns every time you perform an upgrade, patch implementation or software installation.  This factor gives Linux the ability to greatly reduce down and demonstrate resilience in the hosting arena.

Another notable benefit is that regardless of the operating system you have running on your computer, you can still choose a web hosting service running on the Linux platform.  Therefore, even if you have Windows or Mac OS X installed, you can still choose a Linux plan and reap all the benefits it has to offers.  There are however, third-party software applications such as Microsoft SQL Server and other non-open-source technologies that may not be compatible with the Linux platform.  This is changing quickly as even Microsoft’s proprietary FrontPage client is now supported by most hosting providers running the Linux operating system.

The Preferred Hosting Platform

While there are really no significant differences between the systems, Linux has been openly embraced and is therefore, often a first choice for hosting customers.  In fact, you will find that this system is at the basis of most hosting platforms, more so than both Unix and the fast growing Windows server.

Related posts:

1. What Makes Linux Hosting So Popular?
2. Getting to Know Web Hosting Business
3. Matching Your Control Panel with a Platform

Original: Enter the World of Linux Hosting

The Apache vs IIS debate is just as old and intriguing as Linux vs. Windows.  Because these are two of the most widely used web server applications on the market, making a choice is often difficult.  If you have been struggling on which software to run on your server, the details in this article should be able to help you make a more informed decision.

Reliability and Performance

If you are worried about the reliability IIS offers vs. Apache, then your concerns are a bit outdated.  IIS 6.0 offered a process model able to reliably host applications and monitor them for health and responsiveness.  The main draw of this feature was its ability to proactively detect and recycle unhealthy applications.  IIS 7.0 took the process model one step further by creating a dynamic architecture for the Windows platform, making it a high-performance, multi-threaded server that enables secure isolation of websites by default.  With IIS, the Windows platform is agile enough to quickly respond to poor health conditions and recycle applications in a more efficient manner.

The Issue of PHP

If you are worried about IIS performance when running PHP vs Apache, then your concerns are definitely warranted.  Until recently, there where two ways to run PHP in the Windows environment: the slow way with CGI, and the unreliable way with ISAPI.  Because many PHP scripts are specifically written for Apache and Linux, running them on the Windows platform with ISAPI may cause them to crash and strip the IIS process serving the applications.  On the brighter side of things, Microsoft’s partnership with Zend has brought forth answers to many of these issues in the form of compatibility and performance fixes.  One of the most notable improvements is achieved through FastCGI, a feature that enables an IIS web server to deliver fast and reliable PHP hosting.

Ease of Use

One area in which IIS has always shined in comparison to Apache is user-friendly administrative tools.  IIS 7 keeps up the tradition by providing a new management tool that is extremely powerful yet simple and very ease to use.  Now feature-focused, the tool allows you to simply click on a web server, website or application to individually manage each element.  It supports remote administration via HTTP, making it possible to maintain the server locally or over the internet.  It also has configuration settings that make it easy to delegate administrators to specific websites and applications.  The new IIS administrative tool is completely module and built on a highly extensible framework that allows it be enhanced with ease.

IIS 7.0 is a breath of fresh air in comparison to previous Microsoft web server applications.  It offers rock-solid security along with the exceptional performance and reliability needed to run in demanding hosting environments.  In addition, it delivers some powerful management and extensibility capabilities that exceed Apache.  Both make an excellent choice, but IIS is growing more popular by the day.  Even if you already have Apache installed on your server, you can check out what IIS has to offer as it integrated into versions of Windows Vista as a desktop application.  If you are like most users, you will surely appreciate its power.

Related posts:

1. Factors to Consider for Your Web Server Software

Original: Apache vs. IIS Web Server

There are a number of factors that must be considered when it comes to choosing the web server application you want to utilize.  Elements such as the operating system, the level of security, scalability and price should all come into play when basing your decision.  It can be a grueling process but focusing on these key components will make your choice much easier.

Operating Platform

The operating system you choose to run the server on will have a major influence on the software you decide to go with.  The most popular platforms today are Windows, Unix and various flavors of the Linux operating system.  While all can perform in a multitude of environments, Windows is usually preferred in the business setting while Unix and Linux are designed for more complex and demanding tasks.  There are also other choices such as Mac OS X, but this platform isn’t as common and therefore lacks support from the web community.

Solid Security

Above all, security should be your number one priority in choosing web server software.  Since most websites are public, they make a prime target for hackers and other cyber criminals looking to steal sensitive information.  Even if you decided on a seemingly secure application, keep in mind that the server is really only as secure as its configurations.  For example, it probably wouldn’t be a good idea to leave the default security settings intact because the attackers have already discovered ways around them.  Additionally, you want a server that is easy to patch and update to ensure that the latest security vulnerabilities and issues are addressed.

Easy Scalability

Scalability refers to your web server’s ability to grow alongside the growth of your web operations.  This is an extremely important quality as a slow server could end up costing you new visitors and customers as well as existing ones.  On the web, they say that you only have a few seconds to grab the attention of potential customers.  If your web server can’t perform or slows down after a couple thousand hits, you have essentially set yourself up for failure.

Good Support System

Apache is the most popular and widely installed web server in the world.  The software is freely available and can be downloaded by virtually anyone.  While this is definitely a plus, it can also be a disadvantage considering how you view the situation.  Apache and other open-source programs come at the price of limited formal support.  If you don’t have an experienced IT staff on hand to deal with the server, you may want to choose a product that comes with official support to help out when things get rough.

True Value

Cost is often the first factor many people consider when they want to invest in something.  With a web server, it should be the last thing you consider.  As we mentioned, there are free servers as well those that come with expensive licenses, particularly Microsoft’s IIS (Internet Information Services).  This specific application ranks up there with the best but you could actually hurt your efforts by judging web servers on cost.  Pick the cheap software and you just might end up with a product the lacks the compatibility, scalability and functionality you need to be successful.

No related posts.

Original: Factors to Consider for Your Web Server Software