106 lines
3.5 KiB
Raw Permalink Normal View History

2014-03-11 11:39:36 -06:00
2014-03-11 12:03:43 -06:00
Eris is an HTTP/1.1 web server with CGI.
It is very fast,
uses very little memory,
and has a tiny codebase which has been audited at least twice by gray-hat hackers.
It relies on an external program,
such as tcpserver or netcat,
to handle networking,
and expects to be run once for every connection.
This may sound horrible,
but it's actually pretty quick,
especially since this architecture makes it trivial to use the
`sendfile` call in Linux
(added in 2003 as a reaction to Apache losing to IIS in benchmarks),
which sends an open file directly to a socket,
without having to context switch into userspace.
It conforms to the parts of HTTP/1.1 that appear to be important to clients.
I have not found any HTTP/1.1 clients which have trouble with Eris,
including curl, which breaks with fnord (the reason I began work on Eris).
2014-03-11 11:49:35 -06:00
Eris HTTPD is a part of [Dirtbags Capture The Flag](
2014-03-11 12:03:43 -06:00
After many patches against [fnord 1.10](,
2014-03-11 11:49:35 -06:00
I decided to fork fnord into a new project.
Fnord's author approved of the fork.
2014-03-11 12:03:43 -06:00
2014-03-11 11:39:36 -06:00
Differences with fnord
Significant differences between eris and fnord are:
* command-line arguments instead of compile-time defines
* eliminated use of libowfat
* no build dependency of dietlibc
* elimination of "old style symlink handling"
* elimination of user switching (you can use tcpserver -[ug])
* elimination of chroot code (you can use chroot)
* several bugfixes (sent to the fnord mail list)
2014-03-11 11:39:36 -06:00
* ignores Accept header (fnord also ignores it, but claims not to)
Start with:
2014-03-11 11:39:36 -06:00
tcpserver -v -RHl localhost -u 1234 -g 1234 0 80 ./eris
2014-03-11 11:39:36 -06:00
There are many other ways to start eris.
2014-11-19 16:49:48 -07:00
For example, you can run an HTTPS server with stunnel.
2011-08-16 14:36:11 -06:00
2014-03-11 11:39:36 -06:00
You just need something that launches eris with stdin and stdout connected to the client.
2011-08-16 14:36:11 -06:00
Will log to stderr in the form
2014-03-11 11:39:36 -06:00 200 23 localhost Links_(0.96;_Unix) none /index.html
where is the client IP, 200 is the HTTP exit code,
23 is the size of the content that was served (or 0 for unsuccessful exit codes),
localhost is the Host: header (the virtual host),
the next token is the user agent with spaces replaced by underscores,
the next token (none) is the Referer HTTP header or "none" if none was given,
and the rest of each line is the decoded requested URL.
2011-08-16 14:36:11 -06:00
2014-03-11 11:39:36 -06:00
eris does simple virtual hosting. If the `Host:` HTTP header is there,
eris will try to chdir to a directory of that name, i.e. if the client
asks for "/" on host "", eris will look for
"". Eris will also try the directory "default"
2014-03-11 11:39:36 -06:00
if no specific directory for the virtual host was there.
2011-08-16 14:36:11 -06:00
eris implements el-cheapo HTTP ranges (only byte ranges and only of the
2011-08-16 14:36:11 -06:00
form x-y, not multiple ranges).
eris will change dots at the start of file or directory names to colons
2011-08-16 14:36:11 -06:00
in the query before trying to answer them.
eris understands and implements keep-alive connections.
2011-08-16 14:36:11 -06:00
eris will use sendfile on Linux to enable zero-copy TCP.
If eris is given the -c option, it will regard files
2011-08-16 14:36:11 -06:00
whose names end with ".cgi" as CGI programs and try to execute them.
2014-03-11 11:39:36 -06:00
Please see <> for the CGI specification.
2014-03-11 11:49:35 -06:00
About The Name
2014-03-11 11:49:35 -06:00
is the most massive (heaviest) dwarf planet in the solar system.
It's heavier than Pluto!
Its discovery is what spurred astronomers to finally define the word "planet",
which resulted in Pluto being classified a dwarf planet.
Otherwise, we would have to count Eris as a tenth planet.