Is it safe to use port 8080?
In a recent webinar hosted by W3Schools, two of their staff members commented that it is not safe to use port 8080.
They said that when they used this port they were not sure if they were being compromised or not.
I found this on the Internet and I was just wondering if there is any truth in what they said? You're using port 8080 because it's a standard, non-secure port for HTTP servers. There is nothing inherently unsafe about using it.
It's up to you as the server administrator to decide whether you want to allow insecure connections to this port. If you don't allow them then a malicious client would have to guess your credentials to gain access.
But by default you should allow it. If you need to block access to the port then you should have a firewall which has been configured to block incoming traffic on that port.
See also: It is generally a bad idea to use port 8080 as a webserver port. The main reason is that you could be leaking information about your internal network. If you are running a webserver that is on the internet, then you are leaking IP addresses, subnets, and possibly DNS names. The easiest way to find out what's leaking out is to just sniff packets on the port.
What is the use of proxy port?
I was working on a simple proxy server with Apache.
I was using ProxyPass and ProxyPassReverse to do the trick. I was unable to understand in Apache.
I know that the HTTP uses TCP port 80 and HTTPS uses TCP port 443. If I just make the Apache listen on the 80 port, it can be used for both HTTP and HTTPS requests.
But if I set proxy port as 8080, it is not suitable for HTTPS connections. So what is the use of proxy port? If the user hits the proxy server through port 8080, how does the proxy server identify it is HTTPS request or HTTP request? I have been looking for some articles or blogs. But all I found were about how to configure the ProxyPass and ProxyPassReverse. But I didn't get the complete picture.
Thanks. The proxy protocol uses a different port, and the proxy will never know which port the original connection was sent from. HTTP is sent over TCP port 80, HTTPS is sent over TCP port 443, but there is no requirement for the client to connect to those ports.
Is port 80 and 8080 the same?
This question is not about how IIS processes web requests.
This question is the definition of port 80. When you refer to port 80, you are actually referring to the well known TCP and UDP service port number of the Hypertext Transfer Protocol (HTTP) transport protocol. Therefore, I believe the answer to your question would be "yes" since there is an HTTP service running on the 80.
No, 8080 means that it's a different "service" than HTTP. It has nothing to do with any programming or processing languages; it simply means different service, one using TCP port 80, the other using TCP port 8080.
An easy way to test whether 80 is listening is typing in the web browser. This should start up an HTTP server locally. If that works, then you've got it working in the system. But if it doesn't, something else is running on that port. That could be IIS or Apache.
Related Answers
Is port 22 HTTP or HTTPS?
HTTPS uses port 443 and it uses the same data channel as HTTP. So yes, po...
How to filter Wireshark using protocol?
I'm using Wireshark 2. 2 on Debian 8.0. I need to...
How to configure reverse proxy in Apache Linux?
I need to configure Apache 2. 2 on my Ubuntu 14.04 s...