Slashdot Mirror


Secure Mini-Apache for Embedded Linux

An anonymous reader writes "Embedded webserver specialist Mbedthis Software has released AppWeb, a new "mini-Apache" for embedded Linux focusing on high security and designed for 'embedding in applications and devices.' AppWeb can be configured with a memory footprint of only 110K, and targets web services, offline applications, and embedded device management, according to Mbedthis."

24 comments

  1. Here's an example by AtariAmarok · · Score: 5, Funny

    Click here to see an example of mini-Apache.

    --
    Don't blame Durga. I voted for Centauri.
    1. Re:Here's an example by cant_get_a_good_nick · · Score: 2, Funny

      Funny joke, but I thought in the movie he was an eastern tribe? The kid tried to give him a teepee (plains indian, probably more sioux than apache) but then was told to give him tools to make an eastern style longhouse. Iroquois?

      Yes, anyone who argues abnout your joke is a pedantic geek, thank you. =)

    2. Re:Here's an example by Anonymous Coward · · Score: 0

      Nowadays someone would sue the makers of that movie for uh... umm... "Emotional Damage". yeah. cuz im an indian and it's a movie that says indian and thats like so politically incorrect *hic*

    3. Re:Here's an example by Anonymous Coward · · Score: 0

      Long houses=Alguonquin

  2. Except that by Anonymous Coward · · Score: -1, Offtopic

    Don't forget to pay your $795 fee, you teabaggers. And make sure a separate check for $35 goes to SCO Group Embedded Licensing Dept.

    Doesn't free software rock?!

  3. While cool, this isn't Apache by mhesseltine · · Score: 4, Informative

    From the article,

    "AppWeb deploys an Apache-style configuration schema"
    along with
    "Existing enterprise HTTP servers are poorly suited for embedding, while current embedded web servers have made compromises on security and functionality to meet memory footprint requirements," according to Mbedthis.

    So, while it's cool, it's not a port of Apache to an embeded environment.

    --
    Overrated / Underrated : Moderation :: Anonymous Coward : Posting
  4. My complaint about Darl McBride by Anonymous Coward · · Score: -1, Offtopic

    On behalf of several members of the community, I would like to express my shock and disappointment at some of Mr. Darl McBride's fibs. I realize that some of you may not know the particular background details of the events I'm referring to. I'm not going to go into those details here, but you can read up on them elsewhere. This is not to say that writing instructors seeking to introduce the concept of "larrikinism" into their curricula could hardly do better than to use his screeds as an example. It is merely to point out that his opuscula have kept us separated for too long from the love, contributions, and challenges of our brothers and sisters in this wonderful adventure we share together -- life! Worst of all, our children's children would never forgive us for letting him turn boeotians loose against us good citizens. I undoubtedly dislike Mr. McBride. Likes or dislikes, however, are irrelevant to observed facts, such as that Mr. McBride says that his blessing is the equivalent of a papal imprimatur. That's his unvarying story, and it's a lie: an extremely despicable and violent lie. Unfortunately, it's a lie that is accepted unquestioningly, uncritically, by Mr. McBride's bootlickers.

    I don't believe that mediocrity and normalcy are ideal virtues. So when Mr. McBride says that that's what I believe, I see how little he understands my position. Looking at it another way, he will engender ill will because he possesses a hatred that defies all logic and understanding, that cannot be quantified or reasoned away, and that savagely possesses stubborn, inimical mafia dons with snivelling and uncontrollable rage. My message is clear: Mr. McBride doesn't want us to know about his plans to use psychological tools to trick us into doing whatever infernal, libidinous clods require of us. Otherwise, we might do something about that.

    Even if moonstruck profiteers join his band with the best of intentions, they will still set up dissident groups and individuals for conspiracy charges and then carry out searches and seizures on flimsy pretexts faster than you can say "unproportionableness". Not all, I hasten to add, do join with the best of intentions. Many people respond to his self-centered viewpoints in much the same way that they respond to television dramas. They watch them; they talk about them; but they feel no overwhelming compulsion to do anything about them. That's why I insist we focus on what unites rather than divides us. In closing, all that I ask is that you join me to stop Mr. Darl McBride and reinforce what is best in people.

  5. I'm going to look into this... by shaitand · · Score: 2, Interesting

    It sounds like it isn't missing any of the basic features your average webserver needs.

    And if that is the case why on earth wouldn't you be using for your typical small deployments whether embedded or not?

    1. Re:I'm going to look into this... by Anonymous Coward · · Score: 0
      • It's written in C++
      • The source comes with precompiled executables, ick!
      • The shell scripts and source don't wrap at 80 columns, ick
      • Weird custom build system I'm trying to work out.
      • ///////////The comments are making me cross-eyed///////////
      • First and last time I click through the GPL to download a tarball
      • No mention of the GPL in source headers, authors need to read the GPL "howto".

      The README.html (yes it's a html file) tells you to login as root to unpack the tarball!!! ***DANGER WILL ROBINSON DANGER*** there's also a shell script called "root" thoughtfully included for those that have difficulty entering su password manually. The site claims appWeb was designed to be secure, yet the fscking README makes me doubt the developers know the meaning of the word.

      Most source code gets the once over before I compile it, this won't be getting built until I understand their build system and do a full preliminary code audit.

      Anyway..........
    2. Re:I'm going to look into this... by shaitand · · Score: 1

      yes yes all good and well.

      Have you ever tried to READ the mozilla source? I rest my case. The build process is great and all, but how does the thing actually perform once built?

      P.S. When you get done with the code audit get back to me and we can compare notes ;)

    3. Re:I'm going to look into this... by Anonymous Coward · · Score: 0
      It sure is for embedded applications. Aside from being huge by embedded standards its not a complete solution. Embedded devices need a webserver to be configured not to serve content.

      Where is the part that handles automatically managing the UI? That would make it much easier than having to write lots of little forms and scripted content.

      Anybody know of anything (commercial is fine) that supports building an application without having to be a web wizard?

  6. ProxyPassReverse support? by Amadodd · · Score: 1

    Does it support ProxyPassReverse? Had a look in their docs and can't find a reference. Anybody knows?

    --
    Freedom of speech doesn't come with bandwidth.
  7. My complaint about Linux zealots by Anonymous Coward · · Score: -1, Offtopic

    Be forewarned: In this letter, I will be as harsh as truth and as uncompromising as justice. Before examining the present situation, however, it is important that I call for proper disciplinary action against Linux zealots and its lickspittles. Viewing all this from a higher vantage point, we can see that Linux zealots's assistants are unified under a common goal. That goal is to seize control over where we eat, sleep, socialize, and associate with others. I, not being one of the many avaricious moochers of this world, am ashamed to admit that I live on the same planet as Linux zealots. But what, you may ask, does any of that have to do with the theme of this letter, viz., that it is a wee bit overzealous in its defense of obscurantism? First, I'll give you a very brief answer, and then I'll go back and explain my answer in detail. As for the brief answer, whenever anyone states the obvious -- that it is an expert at shameless name-dropping -- discussion naturally progresses towards the question, "Why does it insist on boring holes in the hull of the boat in which it is also a passenger?" I mean, it should focus more on the quality of its writing than on the amount of drivel it can squeeze in. Don't make the mistake of thinking otherwise. Linux zealots does, and that's why it would be hard to find anyone who doesn't agree that it is naive to think that it wouldn't create a world sunk in the most abject superstition, fanaticism, and ignorance if it got the chance. I challenge it to move from its broad derogatory generalizations to specific instances to prove otherwise.

    This is no laughing matter. That sounds really incorrigible, but I certainly maintain that it's an accurate assessment of the situation. My point may be made clearer by use of an allegorical tale. Suppose a hypothetical group of three people is standing in a room. One of those people realizes that it is probably safe to assume that the trouble with such disaffected airheads is that they intend to convert our children to cultural zombies in a mass of unthinking and easily herded proletarian cattle. Another goes on and on about Linux zealots's crazy cock-and-bull stories. But the third can't understand why Linux zealots is allergic to any idea that isn't disrespectful. In this hypothetical situation, it should be obvious that Linux zealots spouts the same bile in everything it writes, making only slight modifications to suit the issue at hand. The issue it's excited about this week is pessimism, which says to me that you don't have to say anything specifically about it for it to start attacking you. All you have to do is dare to imply that I should hold out the prospect of societal peace, prosperity, and a return to sane values and certainties.

    Linux zealots wants to perpetuate inaccurate and dangerous beliefs about male-female relationships. Is this so it can resort to ad hominem attacks on me and my family, or is it to make bribery legal and part of business as usual? You be the judge. In either case, its proxies can't defend their writings. If you don't believe me, see for yourself. I am shocked and angered by Linux zealots's hypocritical improprieties. Such shameful conduct should never be repeated. Every morning Linux zealots asks itself, "How can we fool the masses today?", and I'm not making that up! One last thing: Linux zealots is apt to respond to this letter in the same emotional way that a devout Christian in the 15th century might have responded to someone who announced publicly that he didn't believe in the virgin birth.

  8. ACME Labs Software by gaj · · Score: 4, Interesting
    If you need a really small httpd, you might want to consider one of the options from ACME Labs Software. I've used mini_httpd and found it to work quite well. It can be compiled with SSL support, if you need that. Disk image is about 42k dynamicly linked, so if FLASH space is important, you might consider it. Its RSS is more like about 670k as configured on my system, but IIRC, that's with SSL support.

    If you need to get really small, and don't need much by way of features, micro_httpd, but that's probably overkill (underkill?)

    1. Re:ACME Labs Software by Anonymous Coward · · Score: 3, Informative

      micro_httpd runs from inetd so you need to factor that into your memory footprint if your selecting a server for the embeded market. Also IIRC the ACME license is ... odd ...

      As far as GPL'd servers go there is cherokee (threaded), Thy (forking) and many others. Use google you freaks.

    2. Re:ACME Labs Software by gaj · · Score: 2, Interesting
      Yeah, quite odd.

      Or not. It's basically a modified BSD license.

      /** mini_httpd - small HTTP server
      **
      ** Copyright (C) 1999,2000 by Jef Poskanzer <xxx@xxx.xxx>.
      ** All rights reserved.
      **
      ** Redistribution and use in source and binary forms, with or without
      ** modification, are permitted provided that the following conditions
      ** are met:
      ** 1. Redistributions of source code must retain the above copyright
      ** notice, this list of conditions and the following disclaimer.
      ** 2. Redistributions in binary form must reproduce the above copyright
      ** notice, this list of conditions and the following disclaimer in the
      ** documentation and/or other materials provided with the distribution.
      **
      ** <disclamer snipped because of lame-ass Lameness filter.>
      */

      How exactly is that "odd"? Because it's not GPL?

      OTOH, your point about micro_httpd running from inetd is a good point.

    3. Re:ACME Labs Software by Anonymous Coward · · Score: 0
      How exactly is that "odd"? Because it's not GPL?
      No idea why I remember it being strange or why the license was relevant. It was a few years back.
      OTOH, your point about micro_httpd running from inetd is a good point.
      It also exec'd ls, tail and sed for directory listings, was easy to fix but I'm never going to forget that regexp, it scarred me for life.
    4. Re:ACME Labs Software by Anonymous Coward · · Score: 1, Interesting

      You forgot the mention the mighty thttpd!

    5. Re:ACME Labs Software by Anonymous Coward · · Score: 0

      There is also asmutils httpd

  9. So what? by rayamor · · Score: 0, Flamebait

    Faster porn then?

    1. Re:So what? by Anonymous Coward · · Score: 0

      "Does anyone really need that much porn?"
      "ahhhhh...a million times faster."

  10. A smaller alternative by Anonymous Coward · · Score: 3, Informative

    Also check out this server, seems to be smaller and more targeted towards embedded systems.

  11. Fnord! by Anonymous Coward · · Score: 0

    http://www.fefe.de/fnord/

  12. you think thats small? ... by nonane · · Score: 2, Informative

    Check out boa:

    Boa currently seems to be the favorite web server in the embedded crowd, and embedded Linux, despite all the marketing hype, really is a big deal. Supposedly, an older version of Boa, v0.92q, runs in 32K address space on m68k, like used in uCLinux