Just in case you didn’t see the announcement on the main page: click

Please head over there for more information.

We would like to draw your attention to the latest pre-release of the stable 1.4 branch of lighttpd.

You can get the pre-release from these urls:
download.lighttpd.net/lighttpd/snapshots-1.4.x/lighttpd-1.4.26rc1-r2710.tar.gz
download.lighttpd.net/lighttpd/snapshots-1.4.x/lighttpd-1.4.26rc1-r2710.tar.bz2
SHA1 checksums:
download.lighttpd.net/lighttpd/snapshots-1.4.x/lighttpd-1.4.26rc1-r2710.sha1sum

Please test it as much as possible and provide us with feedback.
A lot of testing ensures a good release.

There have been some important bug fixes (request parser handling for splitted header data, a fd leak in mod_cgi, a segfault with broken configs in mod_rewrite/mod_redirect and of course the latest security issue with an OOM vulnerability)

If no showstoppers are encountered, there will be a final release soon.

PS: As it is often asked in the comments: We don’t plan to release 1.5, as we are working on 2.0; we can’t support too many different versions, so while we are still trying to keep 1.5 working, our main efforts will be keeping 1.4 stable and working on 2.0 for now.

Just in case you didn’t see the announcement on the main page: click

Please head over there for more information.

We also started a public directory listing with all the releases, snapshots and security announcements of our projects under download.lighttpd.net

We would like to draw your attention to the latest pre-release of the stable 1.4 branch of lighttpd.

You can get the pre-release from these urls:
www.lighttpd.net/download/lighttpd-1.4.25rc1-r2692.tar.gz
www.lighttpd.net/download/lighttpd-1.4.25rc1-r2692.tar.bz2
SHA1 checksums:
www.lighttpd.net/download/lighttpd-1.4.25rc1-r2692.sha1sum

Please test it as much as possible and provide us with feedback.
A lot of testing ensures a good release.

We did some important bug fixes (some of them new since 1.4.24, and some older bugs). Only 2 small new features: traceback for lua errors and the SSL_CLIENT_* vars export for ssl client cert validation.

If no showstoppers are encountered, there will be a final release soon.

Just in case you didn’t see the announcement on the main page: click

Please head over there for more information.

We would like to draw your attention to the latest pre-release of the stable 1.4 branch of lighttpd.

You can get the pre-release from these urls:
www.lighttpd.net/download/lighttpd-1.4.24rc2-r2668.tar.gz
www.lighttpd.net/download/lighttpd-1.4.24rc2-r2668.tar.bz2
SHA1 checksums:
www.lighttpd.net/download/lighttpd-1.4.24rc2-r2668.sha1sum

Please test it as much as possible and provide us with feedback.
A lot of testing ensures a good release.

Since rc1 we fixed another fastcgi bug, escape accesslog data and fixed a crash in webdav (which got introduced in rc1)

Already in rc1: We have made many changes, especially regarding the core of our connection state machine (hopefully fixing the lingering socket close, which should fix pipelining), and the FastCGI internals (it should recover from crashing FastCGI applications)

There are two new features for SSL too: TLS SNI and client certificate validation.

If no showstoppers are encountered, there will be a final release soon.

We would like to draw your attention to the latest pre-release of the stable 1.4 branch of lighttpd.

You can get the pre-release from these urls:
www.lighttpd.net/download/lighttpd-1.4.24rc1-r2656.tar.gz
www.lighttpd.net/download/lighttpd-1.4.24rc1-r2656.tar.bz2
SHA1 checksums:
www.lighttpd.net/download/lighttpd-1.4.24rc1-r2656.sha1sum

Please test it as much as possible and provide us with feedback.
A lot of testing ensures a good release.

We have made many changes, especially regarding the core of our connection state machine (hopefully fixing the lingering socket close, which should fix pipelining), and the FastCGI internals (it should recover from crashing FastCGI applications)

There are two new features for SSL too: TLS SNI and client certificate validation.

If no showstoppers are encountered, there will be a final release soon.

Just in case you didn’t see the announcement here

Please head over there for more information.

Hey folks,

back in december, we posted about a new lighty branch and opened up our project to the public: redmine.lighttpd.net/wiki/lighttpd-sandbox

It’s still not in a fully useable state yet, but we have been very busy and made huge progress meanwhile.
Look what we had last time:

Dec 08:

• the config handling is pretty complete
• basic connection handling including throttling and keep-alive/IO timeouts works
• error logging works (introducing multiple error log levels and targets)
• module/plugin interface mostly done
• completely multithreaded
• serves static files

Apart from some minor features we can now say the core is almost done with just small changes or optimizations to it.
We now start to add functionality to the core via modules and following ones already work pretty well:

• mod_accesslog
• mod_auth (auth-basic with plaintext files working)
• mod_dirlist
• mod_expire
• mod_fastcgi (working pretty well already, giving usability a big boost!)
• mod_openssl (ssl functionality provided through openssl)
• mod_redirect (more powerful than in 1.x)
• mod_rewrite (also more powerful than in 1.x)
• mod_status
• mod_vhost (virtual hosts, plenty of options and possibilities; combines mod_simple_vhost and mod_evhost plus more)

Performance seems to be really great so far. Thanks to being fully multithreaded, lighty 2.0 scales nicely with multicore CPUs.
It can handle several hundred thousand requests per second on a new Intel i7 (for really small static files, on localhost, not a great benchmark :P).

Let me tell you, alot has changed! And of course you’re welcome to test and have a look at its current state. But – just like last time – the forum as well as ticket/issue tracking is still disabled for it because we are not capable of providing any support as well as getting things done within a reasonable amount of time – so we focus on getting things done. :)

Some people might already be able to do basic stuff like serving static files, maybe play with fastcgi a little. As the config and design completely differs from 1.x you might already want to take a look or “test ride”. Remember: No support at the moment. :-)

We can’t (and really don’t want to) provide any specific release date but hope to have 2.0 in a usable state by the end of the year.
Remember we do this in our free time for fun.

As for lighty 1.4 and 1.5: everything will continue like before – no worries.

This is it for today.

Thanks for flying light.

Just in case you didn’t see the announcement on the main page: click

Please head over there for more information.