| Boa | |
|---|---|
| Original author | Paul Phillips |
| Developers | Larry Doolittle and Jon Nelson |
| Release | circa 1995 (1995) |
| Final release | |
| Preview release | |
| Operating system | Cross-platform |
| Available in | C |
| Type | Web server |
| License | GPLv2 |
| Website | www |
Boa is an unmaintained since 2005 open-source small-footprint web server that is suitable for embedded applications. Originally written by Paul Phillips, it was previously maintained by Larry Doolittle and Jon Nelson.
Slashdot and Fotolog use Boa to serve images.3
As of its last release, Boa has the following limitations:
- No access control features (HTTP Basic access authentication, etc.)
- No chroot option (planned)
- No Server Side Includes (deemed incompatible with server performance goals)
- No SSL support although there are some patches against 0.94.13 that introduce SSL support
As of 2022 Boa is still used in many embedded applications, and its known vulnerabilities have been actively exploited.4
References
References
- "Boa Webserver". Retrieved 15 November 2023.
- "Boa Webserver".
- Network Security, Firewalls, and VPNS. 2017-10-24. ISBN 9781538803721.
- Burt, Jeff. "Discontinued Boa web servers still a supply chain threat". www.theregister.com. Retrieved 2022-11-24.