1
FastCGI: 30 years old and still the better protocol for reverse proxies
For FastCGI's 30th birthday, let's look at how it avoids the security problems inherent in HTTP reverse proxying
I'm a software engineer who works on security, usability, networking, and cryptography. I'm the bootstrapped founder of SSLMate , which makes it easy to obtain and monitor SSL certificates, and DNS Helper , which helps your customers add DNS records so you don't have to.
Visit agwa.name → RSS feedOn Hacker News Jul 2014 – Apr 2026
Security & Privacy 5Networking & Internet 4Systems & Performance 3Web & Frontend 2Software Engineering 2Open Source 2
For FastCGI's 30th birthday, let's look at how it avoids the security problems inherent in HTTP reverse proxying
I hate HTTP reverse proxies and want my webapps to listen directly on port 443. How can I make this work in a world of IPv4 scarcity?