[oe] Is boa still a decent choice for an embedded web server?

[Samuel Stirtzel]

2012/4/2 Bob Cochran <openembedded at mindchasers.com>:
> *** apologies: I accidentally sent this out the first time on the wrong OE
> (commits) list ****
>
>
>
> Hello Group,
>
> I would appreciate any thoughts about the relevancy & security of boa for an
> embedded system that needs to support up to several active web requests at a
> time.

You can be almost sure that it will not meet (any) security
anticipation, if Wikipedia is correct about the last release date.

>
> The code is getting old and some of the system calls are deprecated or
> obsolete (e.g., gethostbyname()).
>
> Apache appears to be overkill for what we're doing.
>
> Ultimately, our web server won't just serve static pages but also serve a
> low volume of python / django pages, too.  I realize that CGI performance
> with boa is bad, but it seems that there are options to increase performance
> over simply exec'ing the python scripts.
>
>
> Thanks,
>
> Bob
>


Maybe Cherokee is worth a try.
It looks simple to configure,  don't know how secure it is.
But I also don't know your expectations of "how secure it has to be" anyways.


-- 
Regards
Samuel