Repository files navigation

docker run -it -v `pwd`:"/storage" -p 8000:8000 --rm farshidashouri/webfsd

• single process: select() + non-blocking I/O.
• trimmed to use as few system calls as possible per request.
• use sendfile to avoid copying data to userspace.
• optional thread support. Every thread has its own selectloop then (compile time option, off by default, edit theMakefile to turn it on).
• automatically generates directory listings when asked for adirectory (check for index.html available as option), cachesthe listings.
• no config file, just a few switches. Try "webfsd -h" for alist, check the man page for a more indepth description.
• Uses /etc/mime.types to map file extentions to mime/types.
• Uses normal unix access rights, it will deliver every regularfile it is able to open for reading. If you want it to servepublic-readable files only, make sure it runs as nobody/nogroup.
• supports keep-alive and pipelined requests.
• serves byte ranges.
• supports virtual hosts.
• supports ipv6.
• optional logging in common log file format.
• optional error logging (to syslog / stderr).
• limited CGI support (GET requests only).
• optional SSL support.

docker run -it -v `pwd`:"/storage" -p 8000:8000 --rm farshidashouri/webfsd

• figure out why the acroread plugin doesn't like mymultipart/byteranges responses.
• benchmarking / profiling.

Don't expect much more features. I want to keep it small andsimple. It is supported to serve just files and to do this in a goodand fast way. It is supposed to be HTTP/1.1 (RfC 2068) compliant.Conditional compliant as there is no entity tag support.

$ make$ su -c "make install"

See INSTALL for more details.

The default for the number of parallel connections is very low (32),you might have to raise this.

You probably don't get better performance by turning on threads. Forstatic content I/O bandwidth is the bottleneck. My box easily fillsup the network bandwidth while webfsd uses less than 10% CPU time(Pentium III/450 MHz, Fast Ethernet, Tulip card).

You might win with threads if you have a very fast network connectionand a lot of traffic. The sendfile() system call blocks if it has toread from harddisk. While one thread waits for data in sendfile(),another can keep the network card busy. You'll probably get bestresults with a small number of threads (2-3) per CPU.

Enough RAM probably also helps to speed up things. Although webfsitself will not need very much memory, your kernel will happily usethe memory as cache for the data sent out via sendfile().

I have no benchmark numbers for webfsd.

I can't guarantee that there are no security flaws. If you find one,report it as a bug. I've done my very best while writing webfsd, I hopethere are no serious bugs like buffer overflows (and no other bugs ofcourse...). If webfsd dumps core, you /have/ a problem; this reallyshouldn't happen.

Don't use versions below 1.20, there are known security holes.

• large file support.
• s/sprintf/snprintf/ in some places.
• changed timestamp handling, webfs doesn't attempt to parse themany more but does a strcmp of rfc1123 dates.
• access log uses local time not GMT now.
• some ssl/cgi cleanups (based on patches from Ludo Stellingwerff).
• misc fixes.

• CGI pipe setup bugfix.
• Don't allow ".." as hostname (security hole with vhosts enabled).
• fix buffer overflow in ls.c with very long file names.
• misc other fixes / cleanups.

• documentation spell fixes (Ludo Stellingwerff).
• added missing items (last two) to the 1.18 Changes notes(pointed out by Jedi/Sector Onej@pureftpd.org).
• Makefile changes.
• finished user home-directory support.

• added -j switch.
• compile fixes for the threaded version.
• use accept filters (FreeBSD).
• shuffled around access log locks.
• added optional SSL support (based on patches byLudo Stellingwerffludo@jonkers.nl).
• run only the absolute needed code with root privileges(bind+chroot) if installed suid-root.
• Makefile tweaks.
• fixed buffer overflow in request.c
• started user home-directory support.

• fix bug in request cleanup code (didn't cleanup properly afterbyte-range requests, thus making webfsd bomb out on non-rangerequests following a byte-range request on the same keep-aliveconnection).

• fix bug in %xx handling (adding CGI support broke this).

• allways use Host: supplied hostname if needed (redirect, ...).
• added -4 / -6 switches.
• Added CGI support (GET requests only).
• compile fix for OpenBSD

• fixed a bug in Basic authentication.

• bumped the version number this time :-)
• small freebsd update (use strmode).
• added -e switch.

• fixed byte rage header parser to deal correctly with 64bit off_t.

• added pidfile support.

• added TCP_CORK support.

• one more security fix (drop secondary groups).
• catch malloc() failures in ls.c.

• security fix (parsing option '-n' did unchecked strcpy).
• documentation updates.

• fixed the sloppy usage of addrlen for the ipv6 name lookupfunctions. Linux worked fine, but the BSD folks have somemore strict checks...
• allow to write the access log to stdout (use "-" as filename)

• fixed a bug in the base64 decoder (which broke basic auth for someuser/passwd combinations)
• added virtual host support.
• webfsd can chroot to $DOCUMENT_ROOT now.

• overwrite the -b user:pw command line option to hide the password(doesn't show up in ps anymore)

• added ipv6 support.
• bugfix in logfile timestamps.

• added basic authentication (one username/password for all files)

• added some casts to compile cleanly on Solaris.
• new -F flag (don't run as daemon).

• fixed a quoting bug.
• documentation updates, minor tweaks.

• fixed a bug in the directory cache.
• fixed uncatched malloc()/realloc() failures.
• added optional pthreads support. Edit the Makefile to turnit on.

• some portability problems fixed (0.6 didn't compile on FreeBSD).
• added a sendfile() emulation based on read()/write() as fallbackif there is no sendfile() available.
• bugfix: '#' must be quoted too...

• increased the listen backlog.
• optionally flush every logfile line to disk.
• new switch to specify the location of the mime.types file.
• byte range bug fixes.
• switch for the hostname has been changed ('-s' => '-n').
• optional log errors to the syslog (switch '-s').
• added sample start/stop script for RedHat.

• FreeBSD port (Charles Randallcrandall@matchlogic.com)
• minor tweaks and spelling fixes.

• last-modified headers (and 304 responses) for directory listings.
• new switch: -f index.html (or whatever you want to use fordirectory indices)
• killed the access() system calls in the ls() function.
• added cache for user/group names.
• wrote a manual page.

• multipart/byteranges improved: You'll get a correct Content-length:header for the whole thing, and we can handle keep-alive on theserequests now.
• bugfix: catch accept() failures.
• bugfix: quote the path in 302 redirect responses.
• accept absolute URLs ("GEThttp://host/path HTTP/1.1")
• fixed handling of conditional GET requests (hope it is RFC-Compilantnow...).
• bugfix: '+' must be quoted using %xx.

• added URL quoting.
• root can set uid/gid now.
• webfs ditches any setuid/setgid priviliges after binding to theTCP port by setting effective to real uid/gid. It should be safeto install webfsd suid root to allow users to use ports below1024 (andonly this of course). If anyone finds a flaw in thiscode drop me a note.
• more verbose directory listing.
• added logging. It does the usual logfile reopen on SIGHUP.

• first public release.