lighttpd 1.4.54 发布高性能 Web 服务器

短命女 2022-02-01 18:11 233阅读 0赞

[lighttpd 1.4.54 已发布][lighttpd 1.4.54]。lighttpd 是一个开源 Web 服务器软件，旨在提供一个专门针对高性能网站，安全、快速、兼容性好并且灵活的 Web Server 环境。具有非常低的内存开销，CPU 占用率低，效能好，以及丰富的模块等特点。

**重要变更**

*  对 URL 进行严格和规范化的解析（可配置）
 *  mod\_webdav 现在会拒绝部分 PUT（可配置）
 *  mod\_auth: HTTP Auth Digest algorithm=SHA-256
 *  mod\_webdav: 提升性能、健壮性以及 RFC 合规性
 *  性能改进和 bug 修复

**下载地址**

*  [lighttpd-1.4.54.tar.gz][] ([GPG signature][])
 *  SHA256: `5151d38cb7c4c40effa13710e77ebdbef899f945b062cf32befc02d128ac424c`
 *  [lighttpd-1.4.54.tar.xz][] ([GPG signature][GPG signature 1])
 *  SHA256: `cf14cce2254a96d8fcb6d3181e1a3c29a8f832531c3e86ff6f2524ecda9a8721`
 *  [SHA256 checksums][]

**Behavior Change**

lighttpd now performs strict URL parsing and normalization on HTTP requests. This is configurable, but the defaults are now strict unless explicitly configured otherwise.

Enabling strict URL parsing and normalization by default provides more consistent behavior for mod\_redirect and mod\_rewrite, which match against the (url-encoded) URL request. However, decoding %2F by default, while generally desirable for consistency, is potentially a breaking change for those encoding URLs in the url-path and relying on the literal ‘/’ as a delimiter. For those uses, “url-path-2f-decode” => “disable” will need to be explicitly set in the lighttpd config.

https://[Redmi][]ne.lighttpd.net/projects/lighttpd/wiki/Server\_http-parseoptsDetails

The recommended settings for server.http-parseopts are the following, unless specific use requires looser settings:

<pre style="box-sizing: border-box; transition: all 0.2s ease 0s; margin: 0px; padding: 0px; border: 0px; font: inherit; vertical-align: baseline;"> server.http-parseopts = ( "header-strict" => "enable", "host-strict" => "enable", "host-normalize" => "enable", "url-normalize" => "enable", "url-normalize-unreserved" => "enable", "url-normalize-required" => "enable", "url-ctrls-reject" => "enable", "url-path-2f-decode" => "enable", "url-path-dotseg-remove" => "enable", "url-query-20-plus" => "enable" )</pre>

**Changes from 1.4.53**

*  \[mod\_evhost\] handle IPv6 literal addr; add tests
 *  \[core\] separate server\_main\_loop() func, mark hot
 *  \[core\] mark startup/shutdown funcs cold
 *  \[core\] some server\_main\_loop() cleanup
 *  \[core\] fdevent\_process()
 *  \[core\] srv→max\_fds\_lowat and srv→max\_fds\_hiwat
 *  \[core\] remove server.h
 *  \[mod\_staticfile\] search ext array if not empty
 *  \[core\] store joblist pointer on stack
 *  \[core\] quickly clear request buffer for reuse
 *  \[core\] helper funcs for connection\_state\_machine()
 *  \[core\] perf: optimize connection\_read\_header()
 *  \[core\] parse request in connection\_read\_header()
 *  \[core\] log\_request\_header\_on\_error in one place
 *  \[core\] copy request only if might need for logging
 *  \[core\] make parse\_request,request.request same buf
 *  \[core\] prefer buffer\_caseless\_compare()
 *  \[core\] pass req hdrs buffer to http\_request\_parse
 *  \[core\] replace con→response.keep\_alive
 *  \[core\] mark log\_error\_write\*() funcs cold
 *  \[core\] http\_request\_parse() mark error paths cold
 *  \[core\] lift code out of request line parse loop
 *  \[core\] get\_http\_method\_key() match by strlen first
 *  \[core\] RFC7230 HTTP-version parse
 *  \[mod\_accesslog\] attempt to reconstruct req line
 *  \[multiple\] minor: remove duplicated conditions
 *  \[mod\_deflate\] honor request for x-gzip, x-bzip2
 *  \[mod\_auth\] minor: adjust config validation
 *  \[core\] discard oversized trailers
 *  \[core\] no keep-alive if POLLRDHUP,empty read queue
 *  \[core\] fix gw\_backend spelling of directive in err
 *  \[multiple\] reduce code dup in list resizing
 *  \[core\] con→is\_ssl\_sock
 *  \[core\] connection\_handle\_write() updates con state
 *  \[core\] skip plugins\_call\_cleanup if not init’ed
 *  \[core\] simpler loops to run plugin hooks
 *  \[core\] fix mixed use of srv→split\_vals array (fixes [\#2932][2932])
 *  \[core\] dispatch events from within event framework
 *  \[core\] don’t call fd event handlers more than once, they might already be gone (fixes segfault)
 *  \[core\] poll: fdarray uses fd as index, not fde\_ndx
 *  \[core\] map FDEVENT\_\* to OS system event frameworks
 *  \[core\] prefer memchr() over strchr()
 *  \[core\] use openssl to read,discard request body
 *  \[mod\_openssl\] inherit cipherlist from global scope
 *  \[mod\_openssl\] default: ssl.cipher-list = “HIGH”
 *  \[mod\_proxy\] pass Content-Length to backend if > 0
 *  \[core\] config option to allow GET w/ request body
 *  \[core\] some fdevent code streamlining
 *  \[core\] remove fde\_ndx member outside fdevents
 *  \[core\] remove redundant check for allow\_http11
 *  \[mod\_openssl\] use 16k static buffer instead of 6[4K][]
 *  \[core\] pull server load checks out of main loop
 *  \[core\] isolate fdevent processing
 *  \[core\] release empty chunk buf when nothing read
 *  \[core\] perf: pass (fdnode \*) to epoll and kqueue
 *  \[core\] modify config parser to handle multiple \}
 *  \[core\] pass (fdnode \*) for registered fdevent fd
 *  \[mod\_auth\] http\_auth\_digest\_hex2bin()
 *  \[mod\_auth\] http\_auth\_info\_t digest abstraction
 *  \[mod\_auth\] pass http\_auth\_require\_t for 401 Unauth
 *  \[core\] no SOCK\_NONBLOCK on QNX 7.0
 *  \[mod\_auth\] HTTP Auth Digest algorithm=SHA-256
 *  \[core\] silence coverity warning
 *  \[mod\_magnet\] fix invalid script return-type crash (fixes [\#2938][2938])
 *  \[build\] remove -Wdeclaration-after-statement
 *  \[core\] pass conf.follow\_symlink in more places
 *  \[core\] fix assertion with server.error-handler (fixes [\#2941][2941])
 *  \[core\] extend dir redirection to take HTTP status
 *  \[doc\] minor adjust create-mime.conf.pl regex match ([\#2942][2942])
 *  \[core\] *attribute*((fallthrough)) for GCC 7.0
 *  \[core\] fdevent\_mkstemp\_append() (shared)
 *  \[core\] off\_t upload\_temp\_file\_size
 *  \[core\] clear FDEVENT\_RDHUP if no POLLRDHUP
 *  \[mod\_wstunnel\] fix ping-interval for big-endian (fixes [\#2944][2944])
 *  \[core\] fix abort in http-parseopts (fixes [\#2945][2945])
 *  \[core\] remove repeated slashes in http-parseopts
 *  \[core\] fix 1.4.52 regression in mem use with POST (fixes [\#2948][2948])
 *  \[multiple\] cleaner calloc use in SETDEFAULTS\_FUNC
 *  \[core\] add const to some etag prototypes
 *  \[core\] *attribute*((format …))
 *  \[core\] struct log\_error\_st for error logging
 *  \[core\] log\_error, log\_perror using printf-like fmt
 *  \[core\] new worker\_init hook to follow parent fork
 *  \[core\] replace open() with fdevent\_open\_cloexec()
 *  \[mod\_webdav\] major rewrite (fixes [\#1818][1818])
 *  \[core\] 200 for OPTIONS /non-existent/path HTTP/1.1 (fixes [\#2939][2939])
 *  \[mod\_webdav\] surround Lock-Token with “<…>”
 *  \[mod\_webdav\] fix uuid detection macro
 *  \[mod\_webdav\] fix misbehavior on blank nodes in PROPPATCH
 *  \[mod\_webdav\] clean up resources after do\{\}while(0)
 *  \[mod\_webdav\] check If-Match, If-Unmodified-Since ([\#1818][1818])
 *  \[mod\_webdav\] deprecated unsafe partial PUT compat
 *  \[mod\_webdav\] provide ETag in more responses
 *  \[mod\_webdav\] platform portability fixes
 *  \[mod\_webdav\] disable elftc\_copyfile() on FreeBSD
 *  \[mod\_webdav\] special-case If: ( )
 *  \[mod\_webdav\] check If-None-Match ([\#1818][1818])
 *  \[stat\_cache\] separate func for symlink policy chk
 *  \[stat\_cache\] separate symlink pol from data struct
 *  \[stat\_cache\] store entries without trailing slash
 *  \[stat\_cache\] pass age param for stat cache cleanup
 *  \[stat\_cache\] remove splaytree ins/del debug code
 *  \[stat\_cache\] FAM: reduce string copying
 *  \[stat\_cache\] FAM: check FAMNextEvent() return code
 *  \[stat\_cache\] FAM: use entry hash index as userdata
 *  \[stat\_cache\] FAM: improve handling modified file
 *  \[stat\_cache\] FAM: ignore follow-symlink config
 *  \[stat\_cache\] FAM: check hash collision before add
 *  \[stat\_cache\] FAM: ignore event with no valid match
 *  \[stat\_cache\] FAM: funcs to invalidate entries
 *  \[stat\_cache\] interfaces to invalidate entries
 *  \[mod\_webdav\] update stat\_cache after file mod
 *  \[core\] use high precision stat timestamp in etag
 *  \[scons\] adjustment for static build under CentOS
 *  \[core\] emit trace using path before clearing path
 *  \[core\] http\_chunk\_append\_file\_fd()
 *  \[multiple\] open target file earlier in some cases
 *  \[stat\_cache\] no longer stat() and open() for stat
 *  \[stat\_cache\] FAM: improve monitoring, cache 16 sec
 *  \[stat\_cache\] FAM: separate routine for FDEVENT\_IN
 *  \[stat\_cache\] FAM: whitespace-only change
 *  \[mod\_webdav\] quiet coverity warnings
 *  \[doc\] highlight relevance of module load order (fixes [\#2946][2946])
 *  \[core\] behavior change: stricter URL normalization
 *  \[stat\_cache\] fix compilation error for cmake
 *  \[cmake\] help cmake on FreeBSD find sys/event.h
 *  \[scons\] help scons on FreeBSD find sys/event.h
 *  \[build\] detect FreeBSD elftc\_copyfile()
 *  \[mod\_openssl\] use SSL\_CTX\_set\_client\_hello\_cb()
 *  \[core\] support weak etags with If-None-Match
 *  \[core\] store log\_state\_handling flag on stack
 *  \[core\] check if splay\_tree NULL before invalidate
 *  \[mod\_webdav\] workaround Microsoft-WebDAV-MiniRedir
 *  \[mod\_webdav\] doc Microsoft-WebDAV-MiniRedir bugs
 *  \[mod\_webdav\] invalidate parent dir in stat\_cache
 *  \[doc\] systemd socket activation config example
 *  \[core\] chunkqueue perf: code reuse
 *  \[core\] chunkqueue perf: specialized buffer.h funcs
 *  \[core\] chunkqueue perf: skip opening 0-length file
 *  \[core\] chunkqueue perf: read small files into mem
 *  \[core\] buffer\_reset() should not be passed NULL
 *  \[tests\] has\_feature() helper func
 *  \[tests\] skip mod-secdownload HMAC-SHA1,HMAC-SHA256
 *  \[core\] use high precision stat timestamp on OS X
 *  \[mod\_magnet\] expose server addr (local IP) to lua
 *  \[core\] adjust http\_chunk read() retry loop
 *  \[mod\_maxminddb\] MaxMind GeoIP2 support
 *  \[mod\_authn\_ldap\] ldap\_set\_option LDAP\_OPT\_RESTART (fixes [\#2940][2940])

![4624570-e58389b27d7916b0][]

好书推荐、视频分享，公众号"读书ReadBook"与您一起进步

[lighttpd 1.4.54]: https://links.jianshu.com/go?to=http%3A%2F%2Fwww.lighttpd.net%2F2019%2F5%2F27%2F1.4.54%2F
[lighttpd-1.4.54.tar.gz]: https://links.jianshu.com/go?to=https%3A%2F%2Fdownload.lighttpd.net%2Flighttpd%2Freleases-1.4.x%2Flighttpd-1.4.54.tar.gz
[GPG signature]: https://links.jianshu.com/go?to=https%3A%2F%2Fdownload.lighttpd.net%2Flighttpd%2Freleases-1.4.x%2Flighttpd-1.4.54.tar.gz.asc
[lighttpd-1.4.54.tar.xz]: https://links.jianshu.com/go?to=https%3A%2F%2Fdownload.lighttpd.net%2Flighttpd%2Freleases-1.4.x%2Flighttpd-1.4.54.tar.xz
[GPG signature 1]: https://links.jianshu.com/go?to=https%3A%2F%2Fdownload.lighttpd.net%2Flighttpd%2Freleases-1.4.x%2Flighttpd-1.4.54.tar.xz.asc
[SHA256 checksums]: https://links.jianshu.com/go?to=https%3A%2F%2Fdownload.lighttpd.net%2Flighttpd%2Freleases-1.4.x%2Flighttpd-1.4.54.sha256sum
[Redmi]: https://links.jianshu.com/go?to=https%3A%2F%2Fc.duomai.com%2Ftrack.php%3Fsite_id%3D242986%26aid%3D450%26euid%3D%26t%3Dhttp%253A%252F%252Fwww.mi.com%252F
[2932]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2932
[4K]: https://links.jianshu.com/go?to=https%3A%2F%2Fc.duomai.com%2Ftrack.php%3Fsite_id%3D242986%26euid%3D%26t%3Dhttps%253A%252F%252Flist.jd.com%252Flist.html%253Fcat%253D737%252C794%252C798%2526ev%253D4155_110018%2526sort%253Dsort_rank_asc%2526trans%253D1%2526JL%253D2_1_0%2523J_crumbsBar
[2938]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2938
[2941]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2941
[2942]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2942
[2944]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2944
[2945]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2945
[2948]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2948
[1818]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F1818
[2939]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2939
[2946]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2946
[2940]: https://links.jianshu.com/go?to=https%3A%2F%2Fredmine.lighttpd.net%2Fissues%2F2940
[4624570-e58389b27d7916b0]: /images/20220126/2a605218dc544532a9b9cad67fffe226.png