Hiawatha 5.2 review

Hiawatha is a secure webserver for Unix

License: GPL (GNU General Public License) File size: 0K Developer: Hugo Leisink

0

Hiawatha is a secure webserver for Unix. Hiawatha has been written with 'being secure' as its main goal. Hiawatha has lots of features that no other webserver has.

This and the fact that Hiawatha's source code is free of security-bugs, makes Hiawatha the most secure webserver available. I hereby challege every visitor of this website to find a security-bug in the Hiawatha webserver.

Hiawatha has been tested and runs perfectly on Linux, FreeBSD, OpenBSD, MacOS X and Cygwin.

Why you should use Hiawatha instead of Apache? Apache is a big piece of software and has a damn ugly configurationfile. Nevertheless, it's fast in handling PHP files and has lots of features, like WebDAV.

If you need that, stick with Apache. If you don't, there's no reason why should not try Hiawatha. Hiawatha is small (about 60kb) and its configurationfile is easy to understand. And if you need a real secure webserver, Hiawatha is your piece of software.

Here are some key features of "Hiawatha":
Abilities:

Request methods:

GET
POST
HEAD
OPTIONS

HTTP codes:

200 OK
206 Partial Content
301 Moved Permanently
302 Found
304 Not Modified
400 Bad Request
401 Unauthorized
403 Forbidden
404 Not Found
405 Method Not Allowed
408 Request Timeout
412 Precondition Failed
413 Request Entity Too Large
416 Requested Range Not Satisfiable
500 Internal Server Error
501 Not Implemented
503 Service Unavailable
505 HTTP Version Not Supported

Extra:

Access/connection control
Banning
Basic authorization & authentication
CGI support (including PHP)
Chunked Transfer-encoding
CommandChannel (control Hiawatha by telnetting to a special port)
Cookie support
Cross-site scripting prevention
Customizable ServerString
Directorylisting in HTML format
DoS/flooding protection
GZip Content-Encoding support
If-(Un)Modified-Since header field
Interface binding control
Keep-alive connections
Logfiles
Request pipelining
Plugin support (at sourcelevel)
Range header field (single range support)
Referer control for images (prevent external image linking)
Rootjail
SSL support
SQL injection prevention
Traffic throttling (control uploadspeed)
Userdirectory support (run CGI scripts with uid and gid of that user)
Virtual host support
Volatile object support (for frequently changing objects, like webcam pictures)

What's New in This Release:
Multiple, load-balanced FastCGI server support.
Digest HTTP authentication.
Impoved error checking by Wigwam.
Included FreeBSD port files.