Server on genhttp-kt

Logging

Mon, 01 Jan 0001 00:00:00 +0000

genhttp-kt logs through SLF4J, the logging facade of the JVM, and allows to create loggers via the Server interface. If there is an SLF4J provider on the classpath (such as Logback, Log4j 2 or slf4j-simple), the server logs through it. Otherwise, the host falls back to a console logger of its own (and SLF4J warns once at startup that it found no provider).

Logging Information

The following code shows to obtain a logger from the server instance in a custom Handler implementation. It is recommended to create the logger once in the preparation phase and store the reference somewhere. You can use this pattern anywhere where you have access to Server (e.g. via request.server).

Endpoints and Ports

Mon, 01 Jan 0001 00:00:00 +0000

By default, the server will listen on port 8080 for incoming IPv4 or IPv6 connections on any interface. To simply change the port the server will listen on, you can use the port() directive of the host. Please note, that hosting a server on ports below 1024 will require additional permissions on some operating systems.

 Kotlin
 
 
val app = Layout.create()

val host = Host.create()
 .handler(app)
 .port(80)

To configure the server to listen on specific interfaces only, you can bind() those endpoints explicitly. As soon as an endpoint is bound, the port set via port() is ignored.

Security

Mon, 01 Jan 0001 00:00:00 +0000

This page summarizes security considerations and configuration options when running genhttp-kt applications.

General Considerations

genhttp-kt is designed to be used as an application server behind a reverse proxy, and therefore does not provide built-in DoS protection (such as IP connection limits or Slowloris prevention). However, its engines are hardened against typical attack vectors such as request smuggling, header injection, or malformed chunk attacks: both parse requests with a port of Glyph11, the hardened parser of GenHTTP, and passes the ported acceptance tests of GenHTTP, which is explicitly tested for these attacks.