Slashdot Mirror

← Back to Stories (view on slashdot.org)

Secure Mini-Apache for Embedded Linux

Posted by michael on from the apache-on-the-atkins-diet dept.

An anonymous reader writes "Embedded webserver specialist Mbedthis Software has released AppWeb, a new "mini-Apache" for embedded Linux focusing on high security and designed for 'embedding in applications and devices.' AppWeb can be configured with a memory footprint of only 110K, and targets web services, offline applications, and embedded device management, according to Mbedthis."

24 comments

  1. Here's an example by AtariAmarok · · Score: 5, Funny

    Click here to see an example of mini-Apache.

    --
    Don't blame Durga. I voted for Centauri.
    1. Re:Here's an example by cant_get_a_good_nick · · Score: 2, Funny

      Funny joke, but I thought in the movie he was an eastern tribe? The kid tried to give him a teepee (plains indian, probably more sioux than apache) but then was told to give him tools to make an eastern style longhouse. Iroquois?

      Yes, anyone who argues abnout your joke is a pedantic geek, thank you. =)

    2. Re:Here's an example by Anonymous Coward · · Score: 0

      Nowadays someone would sue the makers of that movie for uh... umm... "Emotional Damage". yeah. cuz im an indian and it's a movie that says indian and thats like so politically incorrect *hic*

    3. Re:Here's an example by Anonymous Coward · · Score: 0

      Long houses=Alguonquin

  2. While cool, this isn't Apache by mhesseltine · · Score: 4, Informative

    From the article,

    "AppWeb deploys an Apache-style configuration schema"
    along with
    "Existing enterprise HTTP servers are poorly suited for embedding, while current embedded web servers have made compromises on security and functionality to meet memory footprint requirements," according to Mbedthis.

    So, while it's cool, it's not a port of Apache to an embeded environment.

    --
    Overrated / Underrated : Moderation :: Anonymous Coward : Posting
  3. I'm going to look into this... by shaitand · · Score: 2, Interesting

    It sounds like it isn't missing any of the basic features your average webserver needs.

    And if that is the case why on earth wouldn't you be using for your typical small deployments whether embedded or not?

    1. Re:I'm going to look into this... by Anonymous Coward · · Score: 0
      • It's written in C++
      • The source comes with precompiled executables, ick!
      • The shell scripts and source don't wrap at 80 columns, ick
      • Weird custom build system I'm trying to work out.
      • ///////////The comments are making me cross-eyed///////////
      • First and last time I click through the GPL to download a tarball
      • No mention of the GPL in source headers, authors need to read the GPL "howto".

      The README.html (yes it's a html file) tells you to login as root to unpack the tarball!!! ***DANGER WILL ROBINSON DANGER*** there's also a shell script called "root" thoughtfully included for those that have difficulty entering su password manually. The site claims appWeb was designed to be secure, yet the fscking README makes me doubt the developers know the meaning of the word.

      Most source code gets the once over before I compile it, this won't be getting built until I understand their build system and do a full preliminary code audit.

      Anyway..........
    2. Re:I'm going to look into this... by shaitand · · Score: 1

      yes yes all good and well.

      Have you ever tried to READ the mozilla source? I rest my case. The build process is great and all, but how does the thing actually perform once built?

      P.S. When you get done with the code audit get back to me and we can compare notes ;)

    3. Re:I'm going to look into this... by Anonymous Coward · · Score: 0
      It sure is for embedded applications. Aside from being huge by embedded standards its not a complete solution. Embedded devices need a webserver to be configured not to serve content.

      Where is the part that handles automatically managing the UI? That would make it much easier than having to write lots of little forms and scripted content.

      Anybody know of anything (commercial is fine) that supports building an application without having to be a web wizard?

  4. ProxyPassReverse support? by Amadodd · · Score: 1

    Does it support ProxyPassReverse? Had a look in their docs and can't find a reference. Anybody knows?

    --
    Freedom of speech doesn't come with bandwidth.
  5. ACME Labs Software by gaj · · Score: 4, Interesting
    If you need a really small httpd, you might want to consider one of the options from ACME Labs Software. I've used mini_httpd and found it to work quite well. It can be compiled with SSL support, if you need that. Disk image is about 42k dynamicly linked, so if FLASH space is important, you might consider it. Its RSS is more like about 670k as configured on my system, but IIRC, that's with SSL support.

    If you need to get really small, and don't need much by way of features, micro_httpd, but that's probably overkill (underkill?)

    1. Re:ACME Labs Software by Anonymous Coward · · Score: 3, Informative

      micro_httpd runs from inetd so you need to factor that into your memory footprint if your selecting a server for the embeded market. Also IIRC the ACME license is ... odd ...

      As far as GPL'd servers go there is cherokee (threaded), Thy (forking) and many others. Use google you freaks.

    2. Re:ACME Labs Software by gaj · · Score: 2, Interesting
      Yeah, quite odd.

      Or not. It's basically a modified BSD license.

      /** mini_httpd - small HTTP server
      **
      ** Copyright (C) 1999,2000 by Jef Poskanzer <xxx@xxx.xxx>.
      ** All rights reserved.
      **
      ** Redistribution and use in source and binary forms, with or without
      ** modification, are permitted provided that the following conditions
      ** are met:
      ** 1. Redistributions of source code must retain the above copyright
      ** notice, this list of conditions and the following disclaimer.
      ** 2. Redistributions in binary form must reproduce the above copyright
      ** notice, this list of conditions and the following disclaimer in the
      ** documentation and/or other materials provided with the distribution.
      **
      ** <disclamer snipped because of lame-ass Lameness filter.>
      */

      How exactly is that "odd"? Because it's not GPL?

      OTOH, your point about micro_httpd running from inetd is a good point.

    3. Re:ACME Labs Software by Anonymous Coward · · Score: 0
      How exactly is that "odd"? Because it's not GPL?
      No idea why I remember it being strange or why the license was relevant. It was a few years back.
      OTOH, your point about micro_httpd running from inetd is a good point.
      It also exec'd ls, tail and sed for directory listings, was easy to fix but I'm never going to forget that regexp, it scarred me for life.
    4. Re:ACME Labs Software by Anonymous Coward · · Score: 1, Interesting

      You forgot the mention the mighty thttpd!

    5. Re:ACME Labs Software by Anonymous Coward · · Score: 0

      There is also asmutils httpd

  6. So what? by rayamor · · Score: 0, Flamebait

    Faster porn then?

    1. Re:So what? by Anonymous Coward · · Score: 0

      "Does anyone really need that much porn?"
      "ahhhhh...a million times faster."

  7. A smaller alternative by Anonymous Coward · · Score: 3, Informative

    Also check out this server, seems to be smaller and more targeted towards embedded systems.

  8. Fnord! by Anonymous Coward · · Score: 0

    http://www.fefe.de/fnord/

  9. you think thats small? ... by nonane · · Score: 2, Informative

    Check out boa:

    Boa currently seems to be the favorite web server in the embedded crowd, and embedded Linux, despite all the marketing hype, really is a big deal. Supposedly, an older version of Boa, v0.92q, runs in 32K address space on m68k, like used in uCLinux