The Chinese (Web Servers) Are Coming
Glyn Moody writes "The February 2009 Netcraft survey is not the usual 'Apache continues to trounce Microsoft IIS' story: there's a new entrant — from China. 'This majority of this month's growth is down to the appearance of 20 million Chinese sites served by QZHTTP. This web server is used by QQ to serve millions of Qzone sites beneath the qq.com domain.' What exactly is this QZHTTP, and what does it all mean for the world of Web servers?"
Self Censoring Web servers! Automatically removes all politically sensitive info for you! This will catch on quick, I bet!
Belief? Hope? Preference?The Existential Vortex
Serious? Seriousness is well above my pay grade.
Didn't they implement the 1 server per company policy some time ago now...?? oh wait.
Its parent company is a media company
What exactly is this QZHTTP?
I honestly don't know. Never heard of it before now, my Google Fu finds nothing in English. Indicating it is most likely propriety to Tancent QQ ...
... won't every large company soon be able to foot the bill on and house (what appears to be) 20 million web servers? I guess IP addressing, routing & bandwidth will always be a problem but the hardware is sure getting to the point.
I hope this didn't affect the IPv4 exhaustion date.
I guess this could also just be a whole lot of fuss over something that will become common place. I mean with the event of virtualization, hilarious 32 core chips due out and predictably cheap storage/memory
My work here is dung.
LOL- good to see MS prompted to fight for its second place standing.
The cost of that cleanup, of course, will be borne by taxpayers, not industry.
How dare the country with the worlds highest population, effect all our statistics and charts. Sorry China has no where to go but up. A giant population who has been repressed is not experience a free(ish) market. Will cause some changes.
This isn't a bad thing, if you learn to use it to your advantage.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
Please appoint a Trustee In Bankruptcy In Residence For :
Obama.
Yours In Communism,
Kilgore Trout
P.S.: Slashot - Get some Cyrillic fonts !!
I don't understand the people mocking this. Sure this is probably a service a la geocities with a minority of webpages worth of any interest. But some are. Internet gains million of new users and publishers and people just dismiss this as non-significant while we should try to build bridges. As ugly a Myspace-QQ bridge may sound, it could be a worthwhile objective...
The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
chinese mmo gold farmers are QQ'ing even more over disruptions in their business
"...What exactly is this QZHTTP, and what does it all mean for the world of Web servers?"
Ah, what does it all mean? I dunno, are the Chinese proposing some sort of new web server protocol standard? Is there a new RFC out?
Seems we might be confusing web content with web server software and/or protocols. IM and blogging isn't exactly new, and neither is the idea that whatever China chooses to put online en masse would be larger than just about anything else in the world based on their population numbers alone.
I really don't care what they're serving up on QQ as long as they knock it off with the repeated brute force SSH attempts every single day.
...so is it a re-jiggered Apache (a'la Red Flag Linux), or what? If it's GPL, then cool... welcome to the pile.
Quo usque tandem abutere, Nimbus, patientia nostra?
Ships with mod_serialz, mod_sslstrip, mod_censorhip and mod_smtprelay all configured and ready for use out of the box.
Let's see how all you pro free-trade computer people make out now. Boy, after decades of saying that auto-workers should make the same as their chinese counterparts, how will it feel to hear corporations saying the same about computer people?
This is my sig.
An hour later and your browser is hungry for headers again.
Millions of spam zombies added to the latest Storm botnet based on an exploit in QZHTTP, despite security patches having been available for months. Attempts to contact the owners of the exploited sites are met with silence.
I knew it! China is finally making their move by grabbing up all q's. Then when we least expect it they'll slam down QUAMQUAM on a triple word score and we'll be toast! Why else would the Chinese have such a firm grasp of the Latin language?
-=Bang Bang=-
served by QZHTTP. This web server is used by QQ to serve millions of Qzone sites beneath the qq.com domain
A quorum of queasy, quitting queens, quaffing questionable quaaludes, quietly quote quips of quality quite exquisitely.
Life would be easier if I had the source code.
Stop linking to zero content, zero insight, zero analysis blogs!
My Babylon
I know I know...back to the Warcraft forums.
What makes this all slightly troubling is that I don't know anything about QZHTTP: I presume it's not open souce, since I can't find any links to its code.
The only point that I could find from the second article (oh wait, random vapid blog post referencing the first article). What kind of logic is this? "I don't know anything about X, therefore X must be a scourge upon the earth." I personally don't know anything about Glyn Moody, so I assume he is a SCO shill trying to incite terrorism.
I'm not sure you want to mess with the omnipotent. You may end up a merry man.
Mao is dead!
I've abandoned my search for truth; now I'm just looking for some useful delusions.
I'll bet dollars to donuts it's just "a patchy" apache. This raises the question as to how netcraft should determine speciation...
If it does not match up correctly, they kill it.
Ah, is it still considered phishing when it's a feature enabled by default?
Just curious.
Ok, if you can stand the sight of a bunch of skinny Japanese comedians running around in underwear, there is a music video... http://www.youtube.com/watch?v=rW6M8D41ZWU
It's not as gay as it sounds.
What kind of logic is this? "I don't know anything about X, therefore X must be a scourge upon the earth."
Well, it's not the logic in the article you're referencing, so my guess is that it's reductio ad absurdum.
Getting back to the logic in the article itself... if it was open source, then he would likely have been able to find it by searching the web. He tried to find links to it, failed, so it's a reasonable assumption that it's not open source. He obviously doesn't like the idea that it's proprietary. Perhaps you have a different opinion there. Which is also reasonable. In any case I don't see anything wrong with the logic.
With google translate we can now access 20 millions new webpages filled with political free content.just a little bit of adware, and blurry pictures :)
It's a whole new arena from which the Chinese hackers can continue to launch their lame--but oh, so annoying--port scans and root login attempts. I'm jaded enough to be willing to bet money that the security will be up to the usual high Chinese standards--absent unless they decide to block something. Every day I have the same struggle: Bad Self says, "Just block the whole goddamned country." Good Self says, "Shame on you." One of these days, Bad Self is going to win.
(Speaking of lame login attempts, the firewall just blocked the first one ever from Rwanda. Good Self is telling me that I should be encouraged that they actually have an Internet there...)
"Here's what's happening. You're starting to drive like your Dad..." - Red Green
Really this is only impacting the overall market share percentage by incorporating previously unreported data. It's not like a giant portion of servers suddenly switched over to qq.com
I don't get why the article is being sensationalist about this. Is it simply a re-configured Apache? Is it a new closed source platform? I just don't know. It's curious, yes, but hardly frightening.
Competition *IS* good right?
Maybe I'm missing something like... Is the server itself doing anything odd other than "being mysterious"?
I think it's more likely to be a version of thttpd because of an error message I got:
telnet qzone.qq.com 80
Trying 58.251.60.181...
Connected to qzone.qq.com.
Escape character is '^]'.
GET - HTTP/1.0
HTTP/1.1 400 Bad Request
Server: qhttpd
Connection: close
Content-Type: text/html
Content-Length: 235
<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H2>400 Bad Request</H2>Your request has bad syntax or is inherently impossible to satisfy.<HR><ADDRESS><A HREF="http://www.tencent.com/">qhttpd Server</A></ADDRESS></BODY></HTML>
Compare that message with:
thttpd-2.25b
libhttpd.c: "Your request has bad syntax or is inherently impossible to satisfy.\n";
Actually, wait. Considering this is China, I'll accept QQ instead of pewpew.
"Get some Cyrillic fonts" doesn't make any sense. It's not a lack of fonts that are causing the problem, it's the non-unicode character encoding (Latin-1).
It is pitch black. You are likely to be eaten by a grue.
I bet this is like the old ICQ service where you could run a shitty web server from your computer. Even though I wasn't even in high school at the time, it seemed like a huge security flaw. Extra points to the first hacker to exploit the flaws in this system to make a new botnet!
You must be new here.
Don't swim against the current, but perpendicular to it.
Comment removed based on user account deletion
"learn Chinese"
I've seen many sites change the headers/version replies for various reasons. Hell, anyone using mod security for Apache will default to a different version if they use the community ruleset.One website I know will respond with:
Server: Apache/2.2.0 - However, I know for a fact it is running 2.2.11
That can easily be changed in the mod security ruleset to be anything. Like this: Server: Myfakehttpdtakesovertheworld/1.9
I'd bet it is just apache.
they're using qhttpd and linux.
filtered/parsed results from running :
nmap -A -T4 -F 182273490.qzone.qq.com
Port80-TCP : i686-pc-linux-gnu
501 Method Not Implemented
The requested method 'OPTIONS' is not implemented by this server.
http://www.tencent.com/ - qhttpd Server
Server: qhttpd
Connection: close
Content-Type: text/html
Content-Length: 255
info on qhttpd :
http://www.xman.org/Qhttpd/design.shtml
Alright, I'm calling your bluff: link to one GeoCities page worth our time.
http://www.geocities.com/rcwoolley/
Pretty clever... and no clashing-colour or non-scrolling-starfield background in sight!
:-)
At the same time, it's hardly topical and doesn't exactly counter the notion that nothing on GeoCities has been updated since the year 2000...
"Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
" What exactly is this QZHTTP, and what does it all mean for the world of Web servers?"
I think the first question is settled on the page referenced (as well as in another reply here), but the second one really cracked me up. Why should it mean anything of import to "the world of web servers"?
Even if it were truly a new piece of code written in China as opposed to Apache (maybe with mods, maybe not), why would anyone outside China worry? As for the Chinese, I suspect they're far more concerned with overall censorship of external web server access, and free speech in general.
Am I seeing double, or what?
I went to eat some animal crackers and the box said, "Do not eat if seal is broken." I opened the box and sure enough..
In the most common form of Chinese written in the latin alphabet (pinyin), Q stands for something like the "ch" sound in "chin", or "qin" as the Chinese would write it.
mod_moron and mod_troll have to be preinstalled. i guess that is the setup you are using anyway so no problem.
Read radical news here
because capitalism worked SO much better, to the point of totally breaking down ENTIRE WORLD ECONOMY in just 6 years.
definitely we all should buy into your morondom. count me in.
Read radical news here
Hey, of course he's doing it. Might as well dump all that old valueless money. Everyone's doing it - they don't care. Money is being sucked out of a common economy because of the realization that within a seen time it will be worthless - when you need food a system will provide it, when you need shelter the same system kicks in. Machines work, people think. You could be anything you wanted and like the nannies in THQ 1138 machine-systems prevent anyone from offending anyone-else according to the Law.
Shh.
Oops, my bad: THX 1138. Sorry! :)
Shh.
It's called red scare.
Self-made rich people grow their lifestyle with their means, focusing on maximizing their income. Contrast that with someone who bags groceries, who spends less than they make. They do it because they can't afford to live any more lavishly - they're bumping up against a ceiling.
Maybe the rich got rich because they actually understand the difference between a necessity and a luxury, and they have a long-term goal?
server installs you!
Maybe the chinese is adopting MS business model -- Embrace (HTTP) Extend (QZHTTP) Extinguish (HTTP)
Mod parent up, this is useful info...
Due to the new system of Pinyin romanization, the letters Q, Z, and X occur frequently at the beginnings of words in Mandarin Chinese. This makes abbreviations look weird. They especially like Q, for some reason. The stolen design of the Chevy Spark compact car is being sold as the QQ.
Shutting down free speech with violence isn't fighting fascism. It IS fascism!
This is great, just when the Americans said they would control the internet by having their own botnet, here come the Chinese before them to take over the internet. Lets see how many more zero day attacks are hosted on these websites now.
Chinese aren't capable of innovations, everything they ever came up with are either stoled or faked, just like compass, printing, gun powder, and paper making... Oh did I mention that the Art of War is actually just a big state propaganda?
Of course the Chinese don't have the brains and capacities to develop their own web servers, because they are CHINESE!
Let's not forget that the Apache's license SPECIFICALLY STATED that it's alright for anyone to grab and modify its source code, except for the Chinese, in which case it becomes crime of stealing.
If they can't even steal right, never mind innovate.
Now, that's slightly troublesome and frightening to me...