A Webserver written in Rust. Build on the speedy Hyper.

Usage

Installation

Install cargo and then: cargo install flash_rust_ws (stable) cargo install --git https://github.com/User65k/flash_rust_ws.git (hottest kind of hot)

Running

Create a config file and execute the binary :relaxed:

See the Wiki for some help with the config file.

You will need at least a single Host containing a Mount Path.

Minimal Example:

toml ["example.com"] ip = "127.0.0.1:80" dir = "/var/www/"

Let's Encrypt Example: toml ["example.com"] ip = "[::]:443" validate_server_name = true dir = "/var/www/" tls.host.ACME = {uri="https://acme-staging-v02.api.letsencrypt.org/directory",cache_dir=".",contact=["mailto:admin@example.com"]}

Goals

• Easy configuration and safe defaults
• Light Footprint
• Speed

Functions

• [x] [Virtual Hosts](https://github.com/User65k/flashrustws/wiki/virtual-host)
• [x] ["Mount Points"](https://github.com/User65k/flashrustws/wiki/mount-path) to serve files from
• [x] [FastCGI](https://github.com/User65k/flashrustws/wiki/FCGI)
• [x] [HTTPS](https://github.com/User65k/flashrustws/wiki/TLS)
  • [x] Cert per vHost / SNI
  • [x] Cert per Keytype (EC, ED, RSA)
  • [x] ACME-TLS
• [x] HTTP2
• [x] [WebDAV](https://github.com/User65k/flashrustws/wiki/webdav)
• [ ] Reverse-Proxy
• [x] [Websocket](https://github.com/User65k/flashrustws/wiki/websocket)
• [x] Customizable Logging
  • [x] to journald
  • [ ] to Windows Event Log?
• [ ] Security
  • [x] [HTTP user auth](https://github.com/User65k/flashrustws/wiki/authentication): Digest - (MD5 because FireFox, but better that nothing)
  • [x] [Systemd Socket Activation](https://github.com/User65k/flashrustws/wiki/systemd#socket-activation)
  • [ ] DoS protection
  • [x] Don't be affected by Sloloris
  • [ ] limit connection count ?
  • [ ] rate ?
  • [ ] min speed ?
  • [x] no default files
  • [ ] no DAV without users?
  • [x] no folder listings (except DAV)
  • [x] recomended http headers by default
  • [x] no path traversals :-)
  • [x] only use filters based on allowed values
  • [ ] only https ?
  • [x] avoid BEAST and CRIME
  • [x] only follow symlinks if told so
• [ ] SCGI