I wrote own http server. Are there any free software, test packages
or toolset to validate whether it complies fully or partially with HTTP 1.0 (rfc 1945).
And moreover it'd great if this software could estimate http performance and check for
potential security issues. The same is wanted from this software in respect of FTP
compliance validation.
Lots of
questions here. While I'm sure lots of people will tell you their tool does everything
if only you will buy it, there are very few tools available which make a reasonable
attempt at any one of these.
For the
security side of things, assuming that you are only interested in serving of static
content, there is a list of useful software href="http://www.dragoslungu.com/2007/05/12/my-favorite-10-web-application-security-fuzzing-tools/"
rel="nofollow noreferrer">here.
For
capacity testing you could use ab which ships with apache. You might also consider
scripting more complex interactions using loadrunner ($$$) or href="http://www.perl.com/lpt/a/845" rel="nofollow noreferrer">http::Recorder and
www::mechanize
Most of the large
software packages available as source code come with automatic testing scripts (usually
a target in the Makefile, e.g. 'make test') but the Apache build instructions don't
mention this - might be worth downloading the src and configuring it to see if it does
have test scripts included which could be adapted.
As for performance testing/monitoring - IME
there's nothing currently available which is any good (and I include Oracle's Grid
Control, BMC Patrol, Google Analytics and a large number of other products in the 'not
any good' category). Personally I'm using a home-grown solution which relies on very
detailled logging of URL generation (have a look at mod_log_config %D option and
mod_log_firstbyte).
One area I've not studied
in great depth is passive monitoring - there are tools like href="http://www.amasol.de/sicoms/pictures/download/12_reasons_to_choose_Vantage_AM.pdf"
rel="nofollow noreferrer">vantage agentless but these are very, VERY
expensive. href="http://pastmon.sourceforge.net/Wikka-1.1.6.5/wikka.php?wakka=HomePage"
rel="nofollow noreferrer">PastMon may meet your requirements (its good and
its free) but you're going to need some specialist and expensive hardware to run it on
if you expect to measure what happens when your webserver reaches
saturation.
HTH
C.
Comments
Post a Comment