Slashdot Mirror


The Chinese (Web Servers) Are Coming

Glyn Moody writes "The February 2009 Netcraft survey is not the usual 'Apache continues to trounce Microsoft IIS' story: there's a new entrant — from China. 'This majority of this month's growth is down to the appearance of 20 million Chinese sites served by QZHTTP. This web server is used by QQ to serve millions of Qzone sites beneath the qq.com domain.' What exactly is this QZHTTP, and what does it all mean for the world of Web servers?"

33 of 231 comments (clear)

  1. Self-Censored by FredFredrickson · · Score: 5, Funny

    Self Censoring Web servers! Automatically removes all politically sensitive info for you! This will catch on quick, I bet!

    --
    Belief? Hope? Preference?The Existential Vortex
    1. Re:Self-Censored by UID30 · · Score: 5, Funny

      Self Censoring Web servers! Automatically removes all politically sensitive info for you! This will catch on quick, I bet!

      pfft. I've had this running as an apache module for years. mod_bigbrother ftw.

      --
      "Glory is fleeting, but obscurity is forever." - Napoleon Bonaparte
    2. Re:Self-Censored by Fulcrum+of+Evil · · Score: 3, Informative

      trickle-down economics *works*.

      Yeah, it got Reagan elected. As an economic theory, it's bunk - rich people are rich because they spend a lot less than they earn.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    3. Re:Self-Censored by kiddygrinder · · Score: 4, Insightful

      What's the difference? they're still taking money out of the machine. 100 people on 30k will keep a lot more money moving than 1 person on 3 mill

      --
      This is a joke. I am joking. Joke joke joke.
  2. Corrected Story Blurb by JWSmythe · · Score: 5, Funny

    ... the appearance of 20 million Chinese phisher sites ...

    --
    Serious? Seriousness is well above my pay grade.
    1. Re:Corrected Story Blurb by Anonymous Coward · · Score: 3, Funny

      I'm also part of this conversation!

  3. Population growth by dimethylxanthine · · Score: 5, Funny

    Didn't they implement the 1 server per company policy some time ago now...?? oh wait.

  4. The GeoCities of China? by eldavojohn · · Score: 5, Interesting
    Could someone help me out here, I am an ignorant occidental American developer barely able to use English ... I thought QQ was just a messaging program of bloated malware and adware that is insanely popular in China? Has it become (or is it aiming to become) more than that?

    Its parent company is a media company ... is this destined to be China's GeoCities era with horrid user generated web content alongside ads and malicious user generated data like GeoCities in the 90s? Or maybe the Myspace/Facebook of China?

    What exactly is this QZHTTP?

    I honestly don't know. Never heard of it before now, my Google Fu finds nothing in English. Indicating it is most likely propriety to Tancent QQ ...

    I hope this didn't affect the IPv4 exhaustion date.

    I guess this could also just be a whole lot of fuss over something that will become common place. I mean with the event of virtualization, hilarious 32 core chips due out and predictably cheap storage/memory ... won't every large company soon be able to foot the bill on and house (what appears to be) 20 million web servers? I guess IP addressing, routing & bandwidth will always be a problem but the hardware is sure getting to the point.

    --
    My work here is dung.
    1. Re:The GeoCities of China? by the+white+plague · · Score: 5, Funny

      I thought 'QQ' was "round eyes filled with tears".

    2. Re:The GeoCities of China? by JWSmythe · · Score: 3, Informative

          My guess on the QZHTTP thing is that they're simply sending their own banner, rather than that of their real server. It's not exactly rocket science. Anyone who's good enough to handle millions of domains can set one line of configuration I wish we had some examples. The qq.com domain itself, besides being pathetically slow, gives these headers:

      telnet www.qq.com 80
      Connected to www.qq.com.
      Escape character is '^]'.
      GET ? HTTP/1.1

      HTTP/1.0 400 Bad Request
      Server: squid/2.6.STABLE5
      Date: Tue, 24 Feb 2009 17:17:23 GMT
      Content-Type: text/html
      Content-Length: 1336
      Expires: Tue, 24 Feb 2009 17:17:23 GMT
      X-Squid-Error: ERR_INVALID_URL 0
      X-Cache: MISS from rainny.qq.com
      Via: 1.0 rainny.qq.com:80 (squid/2.6.STABLE5)
      Connection: close

          So, I'd guess they're basing that analysis on the Via or X-Cache lines (or both)

      For those who aren't familiar with the headers, this is what it looks like from Slashdot
      telnet slashdot.org 80
      Trying 216.34.181.45...
      Connected to slashdot.org.
      Escape character is '^]'.
      GET ? HTTP/1.1

      HTTP/1.1 400 Bad Request
      Date: Tue, 24 Feb 2009 17:19:49 GMT
      Server: Apache/1.3.41 (Unix) mod_perl/1.31-rc4
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=iso-8859-1
      Vary: Accept-Encoding, User-Agent

      I'll simpify the rest, and just show the "Server:" line.

      Apache.org: Server: Apache/2.2.9 (Unix)
      Microsoft: Server: Microsoft-HTTPAPI/2.0
      Whitehouse.gov: Server: AkamaiGHost
      cnn.com: Server: Apache

      --
      Serious? Seriousness is well above my pay grade.
    3. Re:The GeoCities of China? by querist · · Score: 3, Informative

      I don't know about malware in QQ's software, but QQ is much more than just China's answer to Microsoft Messenger.

      QQ is a portal site that links to search engines and also provides users a place to create their "home" on the Internet, much like live.com and other sites.

      Yes, QQ is insanely popular in China, as is MSN and Yahoo! chat.

    4. Re:The GeoCities of China? by Anonymous+Conrad · · Score: 5, Informative

      Try qzone.qq.com rather than just qq.com.

      HTTP/1.1 200 OK
      Date: Tue, 24 Feb 2009 17:41:06 GMT
      Server: QZHTTP-2.3
      Content-type: text/html
      Content-length: 1728
      Connection: close

    5. Re:The GeoCities of China? by khellendros1984 · · Score: 5, Funny

      Nope. It's boobs with tassels on the nipples.

      --
      It is pitch black. You are likely to be eaten by a grue.
    6. Re:The GeoCities of China? by Anonymous Coward · · Score: 5, Informative

      I think you are mistaken here.

      The sites in question are not qq.com they are subdomains of .qzone.qq.com
      (BTW http://qzone.qq.com/ by itself does not use QZHTTP 2.3 web server software it uses Apache)
      like
      http://182273490.qzone.qq.com/
      Here is the netcraft report for that site:
      http://uptime.netcraft.com/up/graph?site=182273490.qzone.qq.com

      These sites appear to be running on Linux and state they are running QZHTTP-2.3 web server software.

      Yes you can edit the banner but often netcraft digs further into it then this (response times, packet information, etc) and doesn't blindly use the banner value.

      It is likely to be using a modified version of Apache like Google do with their GWS (Google Web Server) software.

      And thus given a separate version of web server software in its own right. So I suspect there has to be a significant changes to the normal operation/code of Apache (or whatever they have modded). It could be a whole new set of web server software but likely a significantly modified version.

      Hope it helps

    7. Re:The GeoCities of China? by miller60 · · Score: 3, Interesting

      Netcraft's actual site report for qq.com shows it using Apache on Linux, so odds are qzhttp is either customized Apache or using altered headers.

      Spoofing headers to fool Netcraft is nothing new. Bruce Perens did it with his Open Source Parking project. He was using lighttpd but wanted to help Apache's numbers.

    8. Re:The GeoCities of China? by Anonymous Coward · · Score: 3, Interesting

      Two things:

      Use netcat, not telnet.
      Send a HEAD request, not a bogus GET.

  5. Neck-and-neck by conureman · · Score: 3, Insightful

    LOL- good to see MS prompted to fight for its second place standing.

    --
    The cost of that cleanup, of course, will be borne by taxpayers, not industry.
  6. Why mock this ? by Yvanhoe · · Score: 4, Insightful

    I don't understand the people mocking this. Sure this is probably a service a la geocities with a minority of webpages worth of any interest. But some are. Internet gains million of new users and publishers and people just dismiss this as non-significant while we should try to build bridges. As ugly a Myspace-QQ bridge may sound, it could be a worthwhile objective...

    --
    The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
    1. Re:Why mock this ? by Skye16 · · Score: 5, Funny

      We'd learn some sweet Mandarin phrases, get some space ships, and then live in a pseudo wild-west sci-fi sort of situation.

      Just remember; I do the job, I get paid.

    2. Re:Why mock this ? by russotto · · Score: 5, Funny

      Well, in France we wondered why Americans didn't take over all French websites by learning some basic French ;-)

      A) Americans, learn a foreign language? You must be joking.

      B) Taking over French things is the Germans' job.

  7. Websites by iztehsux · · Score: 5, Interesting

    I really don't care what they're serving up on QQ as long as they knock it off with the repeated brute force SSH attempts every single day.

  8. What exactly is this QZHTTP by dimethylxanthine · · Score: 3, Funny

    Ships with mod_serialz, mod_sslstrip, mod_censorhip and mod_smtprelay all configured and ready for use out of the box.

  9. The biggest problem with QZHTTP by Anonymous Coward · · Score: 5, Funny

    An hour later and your browser is hungry for headers again.

  10. The Great Scrabble Offensive of Twenty Ought-Nine! by MaxwellEdison · · Score: 4, Funny

    I knew it! China is finally making their move by grabbing up all q's. Then when we least expect it they'll slam down QUAMQUAM on a triple word score and we'll be toast! Why else would the Chinese have such a firm grasp of the Latin language?

    --
    -=Bang Bang=-
  11. In other news, by SilentBob0727 · · Score: 4, Funny

    served by QZHTTP. This web server is used by QQ to serve millions of Qzone sites beneath the qq.com domain

    A quorum of queasy, quitting queens, quaffing questionable quaaludes, quietly quote quips of quality quite exquisitely.

    --
    Life would be easier if I had the source code.
  12. Please no more... by ericrost · · Score: 4, Insightful

    Stop linking to zero content, zero insight, zero analysis blogs!

  13. Re:LOL web admins by tjstork · · Score: 3, Insightful

    Every job has a cost - the opportunity cost. Reduce that cost and you increase wealth.

    It's whose wealth is being increased, is the question that we're asking here.

    --
    This is my sig.
  14. Re:Software vs. content by Anonymous+Conrad · · Score: 3, Informative

    Ah, what does it all mean? I dunno, are the Chinese proposing some sort of new web server protocol standard? Is there a new RFC out?

    They've just called their software 'QZHTTP'. Try 'telnet qzone.qq.com 80' and 'HEAD / HTTP/1.0' and you'll see for yourself:

    Server: QZHTTP-2.3

    I don't think anyone's suggesting there's a new protocol here.

  15. Re:Pheature creep... by Fred_A · · Score: 5, Funny

    Ah, is it still considered phishing when it's a feature enabled by default?

    Just curious.

    Teach one man to phish and he can feed...

    Teach 20 million to phish and you have the Internet.

    --

    May contain traces of nut.
    Made from the freshest electrons.
  16. Might be a version of thttpd instead by TheLink · · Score: 5, Insightful

    I think it's more likely to be a version of thttpd because of an error message I got:

    telnet qzone.qq.com 80
    Trying 58.251.60.181...
    Connected to qzone.qq.com.
    Escape character is '^]'.
    GET - HTTP/1.0

    HTTP/1.1 400 Bad Request
    Server: qhttpd
    Connection: close
    Content-Type: text/html
    Content-Length: 235

    <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H2>400 Bad Request</H2>Your request has bad syntax or is inherently impossible to satisfy.<HR><ADDRESS><A HREF="http://www.tencent.com/">qhttpd Server</A></ADDRESS></BODY></HTML>

    Compare that message with:
    thttpd-2.25b
    libhttpd.c: "Your request has bad syntax or is inherently impossible to satisfy.\n";

    --
  17. Re:Good News ! Dear China : +1, Informative by khellendros1984 · · Score: 3, Informative

    "Get some Cyrillic fonts" doesn't make any sense. It's not a lack of fonts that are causing the problem, it's the non-unicode character encoding (Latin-1).

    --
    It is pitch black. You are likely to be eaten by a grue.
  18. oblig by ianare · · Score: 3, Funny

    You must be new here.
    Don't swim against the current, but perpendicular to it.

  19. qhttpd by ianare · · Score: 4, Interesting

    they're using qhttpd and linux.

    filtered/parsed results from running :
    nmap -A -T4 -F 182273490.qzone.qq.com

    Port80-TCP : i686-pc-linux-gnu

    501 Method Not Implemented
    The requested method 'OPTIONS' is not implemented by this server.
    http://www.tencent.com/ - qhttpd Server
    Server: qhttpd
    Connection: close
    Content-Type: text/html
    Content-Length: 255

    info on qhttpd :
    http://www.xman.org/Qhttpd/design.shtml