AOLserver Wiki - User contributions [en]

Sites That Run On AOLserver

2009-03-23T18:40:58Z

Markm: Removed whatsthisip.com -- site is offline.

The following is (a probably incomplete) list of sites that run on AOLserver. Some you will recognize, some you probably won't.

Note: Please add entries in the following format:
* Site name | Version | URL | description (optional)

In order to appear on this list, the server '''MUST''' respond with a "Server:" header in the HTTP response which indicates that it is running AOLserver, and what version.

The following is a list of sites running some version of AOLserver at AOL:

{| class="tabulardata" cellpadding="4" cellspacing="0" border="1"
|- class="header"
! Site name !! Version !! URL !! Description (optional)
|-
| AOL.COM || AOLserver/3.4.2 || http://aol.com/ ||
|-
| Netscape || AOLserver/3.5.5 || http://home.netscape.com/ ||
|-
| Digital City || AOLserver/4.0 || http://home.digitalcity.com/ ||
|-
| AOL Mail || AOLserver/3.5.9 || http://webmail.aol.com/ ||
|-
| Moviefone || ArtBlast/3.5.4 || http://www.moviefone.com/ ||
|}

These are non-AOL sites that also use some version of AOLserver:

{| class="tabulardata" cellpadding="4" cellspacing="0" border="1"
|- class="header"
! Site name !! Version !! URL !! Description (optional)
|-
| colspan="4" | '''AOLserver 4.1.x'''
|-
| the CodeMill || AOLserver/4.1.0 || http://www.thecodemill.biz || host of the #aolserver IRC logs[http://www.thecodemill.biz/services/aolserver/irc/]
|-
| colspan="4" | '''AOLserver 4.0.x'''
|-
| [[Panoptic Computer Network]] || AOLserver/4.0.10a || http://panoptic.com/ ||
|-
| NS_SHUTDOWN || AOLserver/4.0.10a || http://www.nsshutdown.com/ ||
|-
| Bayt.com || AOLserver/4.0.10 || http://www.bayt.com/ ||
|-
| CiteULike || AOLserver/4.0.10 || http://www.citeulike.org/ ||
|-
| OpenACS || AOLserver/4.0.9 || http://openacs.org/ ||
|-
| Creative Commons || AOLserver/4.0.8 || http://creativecommons.org/ ||
|-
| Volunteer Solutions || AOLserver/4.0.8 || http://www.volunteersolutions.org/ ||
|-
| jongriffin.com || AOLserver/4.0.5 || http://www.jongriffin.com/ ||
|-
| Rate Your Music || AOLserver/4.0.10 || http://rateyourmusic.com/ ||
|-
| Salsa Blanca || AOLserver/4.0.5 || http://www.salsablanca.com/ ||
|-
| Kurup.org || AOLserver/4.0.10 || http://kurup.org/ ||
|-
| Seven Sisters Trading || AOLserver/4.0.3 || http://www.7-sisters.com/ ||
|-
| AIESEC.net || AOLserver/4.0 || http://www.aiesec.net/ ||
|-
| Don Baccus Photography || AOLserver/4.0 || http://donb.photo.net/ ||
|-
| M³ Beratungsgesellschaft || AOLserver/4.0 || http://www.m3-beratung.de/ ||
|-
| photo.net || AOLserver/4.0 || http://www.photo.net/ ||
|-
| Treffpunkt || AOLserver/4.0.10 || http://www.treffpunktsystems.com/ ||
|-
| Uptime || Aolserver/4.0.10 || http://uptime.openacs.org||
|-
| Myturl || Aolserver/4.0.10 || http://myturl.com || tinyurl clone
|-
| colspan="4" | '''AOLserver 3.5.x'''
|-
| OneWeek || AOLserver/3.5.10 || http://oneweek.org/ ||
|-
| Vitamist Spray Vitamins || AOLserver/3.5.6 || http://www.vitamist.com/ ||
|-
| Anchor Baptist Church || AOLserver/3.5.0 || http://www.anchorbaptist.org/ ||
|-
| Blue Ridge Amateur Radio Club || NaviServer/2.0 AOLserver/3.5.0 || http://www.radioclub.org/ ||
|-
| Irish Tribute || AOLserver/3.5.0 || http://www.irishtribute.com/ || IrishAbroad's tribute site for the WTC dead and missing
|-
| online.ie || AOLserver/3.5.0 || http://www.online.ie/ || Irish news portal
|-
| colspan="4" | '''AOLserver 3.4.x'''
|-
| Polska.pl || AOLserver/3.4z4l || http://www.polska.pl/ ||
|-
| AMTDA || AOLserver/3.4.2 || http://www.amtda.org/ ||
|-
| Away.com || AOLserver 3.4.2 || http://www.away.com/ ||
|-
| Onet.pl || AOLserver/3.4.2 || http://www.onet.pl/ ||
|-
| Techspex || AOLserver/3.4.2 || http://www.techspex.com/ ||
|-
| University of Hawaii Athletics || AOLserver/3.4.2 || http://uhathletics.hawaii.edu/ ||
|-
| Vivtek || AOLserver/3.4.2 || http://www.vivtek.com/ ||
|-
| unresponsive.net || AOLserver/3.4 || http://www.unresponsive.net/ ||
|-
| DolphinGames || AOLserver/3.4.2 || http://www.dolphingames.cz/ || "Server:" header renamed to DolphinGames/1.0.0; online wap and sms games; internal run also 4.0.x aol servers
|-
| colspan="4" | '''AOLserver 3.3.x'''
|-
| Akoor || AOLserver/3.3.1+ad13 || http://www.akoor.com/ || a cultural french quiz site
|-
| Bitzi || AOLserver/3.3.1+ad13 || http://bitzi.com/ ||
|-
| Caltech || AOLserver/3.3.1+ad13 || http://www.caltech.edu/ ||
|-
| Greatest Networker dot.Community || AOLserver/3.3.1+ad13 || http://www.greatestnetworker.com/ ||
|-
| Infogettable.net Backgammon || AOLserver/3.3.1+ad13 || http://backgammon.infogettable.net/ ||
|-
| thedesignexperience || AOLserver/3.3.1+ad13 || http://www.thedesignexperience.org/ ||
|-
| ]project-open[ || AOLserver/3.3.1+ad13 || http://projop.dnsalias.com/ ||
|-
| ]project-consulting[ Demoserver || AOLserver/3.3.1+ad13 || http://pcdemo.dnsalias.com/ ||
|-
| ]project-translation[ Demoserver || AOLserver/3.3.1+ad13 || http://ptdemo.dnsalias.com/ ||
|-
| colspan="4" | '''AOLserver 3.2.x'''
|-
| Investsberbank || AOLserver/3.2 || http://www.isb.ru/ || Joint-Stock Bank "Investsberbank"
|-
| MyWorkoutProgram || AOLserver/3.2+ad12 || http://www.myworkoutprogram.com/ ||
|-
| colspan="4" | '''AOLserver 2.x'''
|-
| Asimba Trainer Pro || NaviServer/2.0 AOLserver/2.3.3 || http://www.asimbatrainerpro.com/ ||
|-
| Fitrex.com || NaviServer/2.0 AOLserver/2.3.3 || http://www.fitrex.com/ ||
|-
| WGCR Radio || NaviServer/2.0 AOLserver/2.3.3 || http://www.wgcr.org/ ||
|-
| British Cattle Movement Service || NaviServer/2.0 AOLserver/2.3.3 || http://www.bcms.gov.uk/ ||
|}

Also, every website on this list is should be using AOLserver as well: http://openacs.org/community/sites/

----

'''Discussion:'''

'''Why MUST?''' Some people turn that off as part of their security principles. A known bug in Version 4.x would allow an attacker do simply grep through the following list. Could we please take that into consideration? How many sites would, e.g., introduce .adp pages just to get it on this _huge_ (irony) list?

''If anyone takes "security through obscurity" seriously enough to obfuscate the Server: header that's returned, then they also shouldn't want to be included on this list for the same reasons, so that people don't know they run AOLserver. Everyone else is free to advertise their sites here to try and ensure they get picked up by web server surveys like Netcraft, et. al.''

Ok, good point. You're perfectly right. Maybe I was just annoyed by being deleted from the list without explanation about the reason (which was added later). But why reject sites that don't expose the Server header for whatever reason? It is very easy to test that a site is running AOLserver (as easy as testing if a bug exists, of course). Why should we insist on detailed versioning?

''It makes maintaining the list easier. It'd be annoying for folks to add sites to this list and claim they run AOLserver, and then three months later the site switches to Apache. Who has the time to go poking and prodding to do server detection? It's easy to automate a script that asks "do I get a Server: AOLserver/xxx in the HTTP response?" and have it automatically keep the list fresh, which is what I currently have and run periodically. If folks running Apache/IIS want to falsely report AOLserver, that's annoying because the list will be inaccurate, but at least AOLserver will get the credit for the sites. :-)''

----

'''Sites that claim to run AOLserver 3.x, because the person who entered it into this Wiki assured it at that point in time. It may happen that the site runs Apache when you visit it and that may result in immediate pain, suffering or death. You have been warned!'''
* removed

''The links on the pages look awfully Vignette CURL-like. Is this site really running AOLserver? How can you prove it?''

How does a label in the header prove it? But we had this already. I started this rubric ''Sites that claim to run...'' to go around it. But I have absolutely no problem to remove all my sites (including the ones who have the header) from this wiki page in order to satisfy this principle.

Nscache

2007-04-28T18:08:10Z

Markm:

Tcl interface to AOLserver's caching API, by [[Rob Mayoff]].

This module lives in AOLserver CVS[http://cvs.sourceforge.net/viewcvs.py/aolserver/nscache/]

[[AOLserver]] implements a [[C API]] for caching arbitrary data. This module
provides a Tcl API on top of the [[C API]]. The module is only compatible
with AOLserver 3.x using nsd8x, or AOLserver 4.x.

Cache Types
* Global Size-Limited Caches
* Global Time-Limited Caches
* Thread-Private Size-Limited Caches

Cache Commands
* ns_cache create cachename ?-size maxsize? ?-timeout timeout? ?-thread boolean | -serverwide boolean?
* ns_cache eval cachename key script
* ns_cache flush cachename key
* ns_cache get cachename key ?varname?
* ns_cache names cachename ?pattern?
* ns_cache set cachename key value
----

'''Cache Types'''
Nscache supports three types of caches:

----
Global Size-Limited Cache

ns_cache create cachename -size maxsize

ns_cache create cachename -size maxsize -serverwide 1

Entries in a cache of this type are accessible to all threads. Each cache has its own mutex that protects access to its entries.

Cache values are stored as counted strings, so arbitrary binary data can be cached. A global cache stores strings instead of Tcl objects to prevent race conditions that could lead to heap corruption.

The cache has a maximum size specified when the cache is created. The size of the cache is the sum of the sizes of all the values in the cache; keys do not count toward a cache's size. If inserting a value into the cache makes the cache's size exceed its maximum, then cache entries are evicted starting with the least-recently used entry until the size is below the maximum size (or until only the new value remains in the cache).

Caches created with "-serverwide" option are common to all virtual servers in the process, whereas caches created without this option are attached to the current virtual server.

----
Global Time-Limited Cache

ns_cache create cachename -timeout timeout

ns_cache create cachename -timeout timeout -serverwide 1

Entries in a cache of this type are accessible to all threads. Each cache has its own mutex that protects access to its entries.

Cache values are stored as counted strings, as in a global size-limited cache.

The cache has a maximum entry lifetime, called its timeout, specified (in seconds) when the cache is created. Every timeout seconds, AOLserver flushes all cache entries that have not were not created or accessed in the last timeout seconds.

Caches created with "-serverwide" option are common to all virtual servers in the process, whereas caches created without this option are attached to the current virtual server.

----
Thread-Private Size-Limited Cache

ns_cache create cachename -size maxsize -thread 1

Each thread in AOLserver automatically gets its own private cache named cachename. Since a thread-private cache is only accessed by one thread, access to it does not require a mutex. Entries in one thread's cache are not visible to any other thread.

Cache values are stored as Tcl objects. When a value is stored in the cache, nscache computes its string form and uses the length of the string as the size of the value.

The cache has a maximum size, like a global size-limited cache. However, because of the way the cache value sizes are computed, the actual memory usage of the cache values may be several times larger than maxsize.

Thread-private caches may offer higher performance if the cached values are complex objects such as lists or scripts, but require more storage than global caches.

'''Cache Commands'''

ns_cache create cachename ?-size maxsize? ?-timeout timeout? ?-thread thread?

This command creates a new cache named cachename. If thread is given and is true, then it is a thread-private cache. Otherwise it is a global cache. If maxsize is given, then it is a sized-based cache. Otherwise, if timeout is given, then it is a timeout-based cache. Otherwise, it is a timeout-based cache with an infinite timeout.

This command returns nothing if it is successful.

ns_cache eval cachename key script

This command atomically sets and gets a cache value. First, it looks up key in the cache named cachename. If it finds an entry, it returns the value of that entry. Otherwise, it executes script, stores the return value in the cache, and also returns that value.

Script may optionally use the return command to return its value. For example, this will store the value "2" in mycache, if mykey is not already present:

ns_cache eval mycache mykey {
expr {1+1}
}

This will also store the value "2" in mycache:
ns_cache eval mycache mykey {
return [[expr {1+1}]]
}

If script raises an error, or exits with break or continue, then ns_cache eval simply returns the same condition without modifying the cache.

This command is particularly useful for global caches because of its atomicity. Consider this definition:

proc get_thing {key} {
ns_cache eval thing_cache $key {
# some long, expensive database operation that
# computes the value for $key
}
}

ns_cache flush cachename key

This command removes the entry for key from the cache named cachename. If the cache has no entry for key, then nothing happens.

For global caches, ns_cache flush interacts with ns_cache eval. Suppose thread 1 has called get_thing A and is executing the long operation to compute the value for A. Thread 2 calls get_thing A and starts waiting for thread 1 to finish. Thread 3 calls ns_cache flush thing_cache A. Thread 1 will continue executing the long operation, but thread 2 will also start the long operation. When thread 1 completes the long operation, ns_cache eval returns the (now stale) value it computed, but it does not store the value in the cache. When thread 2 completes the long operation, ns_cache eval stores the (fresh) value it computed in the cache and returns the fresh value.

ns_cache get cachename key ?varname?

This command looks up key in the specified cache. It operates differently depending on whether varname was given:

* If the varname is given and the key is not found, then: Raises error
* If the varname is given and the key is found, then: set varname to value, and return 1
* If the varname is not given and the key is found, then: Returns value
* If the varname is not given and the key is not found, then: Raises error

If some other thread is in ns_cache eval when ns_cache get is called for the same global cache and key, then ns_cache get waits for the other thread to finish.

ns_cache names cachename ?pattern?

This command returns a list of all keys currently in the specified cache or the keys matched with optional pattern. If the cache is thread-private, then the list only includes keys that are in the thread's private cache.

ns_cache set cachename key value

This command stores value for key in the specified cache. It is roughly equivalent to this script:

ns_cache flush cachename key
ns_cache eval cachename key { return value }

However, the ns_cache set command operates atomically.

'''Configuration'''

To enable the module in your server, edit your server config file and add

ns_section ns/server/YourServerName
ns_param nscache nscache.so

Sites That Run On AOLserver

2007-04-09T20:05:34Z

Markm:

The following is (a probably incomplete) list of sites that run on AOLserver. Some you will recognize, some you probably won't.

Note: Please add entries in the following format:
* Site name | Version | URL | description (optional)

In order to appear on this list, the server '''MUST''' respond with a "Server:" header in the HTTP response which indicates that it is running AOLserver, and what version.

The following is a list of sites running some version of AOLserver at AOL:

{| class="tabulardata" cellpadding="4" cellspacing="0" border="1"
|- class="header"
! Site name !! Version !! URL !! Description (optional)
|-
| AOL.COM || AOLserver/3.4.2 || http://aol.com/ ||
|-
| Netscape || AOLserver/3.5.5 || http://home.netscape.com/ ||
|-
| Digital City || AOLserver/4.0 || http://home.digitalcity.com/ ||
|-
| AOL Mail || AOLserver/3.5.9 || http://webmail.aol.com/ ||
|-
| Moviefone || ArtBlast/3.5.4 || http://www.moviefone.com/ ||
|}

These are non-AOL sites that also use some version of AOLserver:

{| class="tabulardata" cellpadding="4" cellspacing="0" border="1"
|- class="header"
! Site name !! Version !! URL !! Description (optional)
|-
| colspan="4" | '''AOLserver 4.5.x'''
|-
| WhatsThisIP.com || AOLserver/4.5.0 || http://WhatsThisIP.com/ ||
|-
| colspan="4" | '''AOLserver 4.1.x'''
|-
| the CodeMill || AOLserver/4.1.0 || http://www.thecodemill.biz || host of the #aolserver IRC logs[http://www.thecodemill.biz/services/aolserver/irc/]
|-
| colspan="4" | '''AOLserver 4.0.x'''
|-
| [[Panoptic Computer Network]] || AOLserver/4.0.10a || http://panoptic.com/ ||
|-
| NS_SHUTDOWN || AOLserver/4.0.10a || http://www.nsshutdown.com/ ||
|-
| Bayt.com || AOLserver/4.0.10 || http://www.bayt.com/ ||
|-
| OpenACS || AOLserver/4.0.9 || http://openacs.org/ ||
|-
| Creative Commons || AOLserver/4.0.8 || http://creativecommons.org/ ||
|-
| Volunteer Solutions || AOLserver/4.0.8 || http://www.volunteersolutions.org/ ||
|-
| jongriffin.com || AOLserver/4.0.5 || http://www.jongriffin.com/ ||
|-
| Rate Your Music || AOLserver/4.0.10 || http://rateyourmusic.com/ ||
|-
| Salsa Blanca || AOLserver/4.0.5 || http://www.salsablanca.com/ ||
|-
| Kurup.org || AOLserver/4.0.10 || http://kurup.org/ ||
|-
| Seven Sisters Trading || AOLserver/4.0.3 || http://www.7-sisters.com/ ||
|-
| AIESEC.net || AOLserver/4.0 || http://www.aiesec.net/ ||
|-
| Don Baccus Photography || AOLserver/4.0 || http://donb.photo.net/ ||
|-
| M³ Beratungsgesellschaft || AOLserver/4.0 || http://www.m3-beratung.de/ ||
|-
| photo.net || AOLserver/4.0 || http://www.photo.net/ ||
|-
| Treffpunkt || AOLserver/4.0.10 || http://www.treffpunktsystems.com/ ||
|-
| Uptime || Aolserver/4.0.10 || http://uptime.openacs.org||
|-
| Myturl || Aolserver/4.0.10 || http://myturl.com || tinyurl clone
|-
| colspan="4" | '''AOLserver 3.5.x'''
|-
| OneWeek || AOLserver/3.5.10 || http://oneweek.org/ ||
|-
| Vitamist Spray Vitamins || AOLserver/3.5.6 || http://www.vitamist.com/ ||
|-
| Anchor Baptist Church || AOLserver/3.5.0 || http://www.anchorbaptist.org/ ||
|-
| Blue Ridge Amateur Radio Club || NaviServer/2.0 AOLserver/3.5.0 || http://www.radioclub.org/ ||
|-
| Irish Tribute || AOLserver/3.5.0 || http://www.irishtribute.com/ || IrishAbroad's tribute site for the WTC dead and missing
|-
| online.ie || AOLserver/3.5.0 || http://www.online.ie/ || Irish news portal
|-
| colspan="4" | '''AOLserver 3.4.x'''
|-
| Polska.pl || AOLserver/3.4z4l || http://www.polska.pl/ ||
|-
| AMTDA || AOLserver/3.4.2 || http://www.amtda.org/ ||
|-
| Away.com || AOLserver 3.4.2 || http://www.away.com/ ||
|-
| Onet.pl || AOLserver/3.4.2 || http://www.onet.pl/ ||
|-
| Techspex || AOLserver/3.4.2 || http://www.techspex.com/ ||
|-
| University of Hawaii Athletics || AOLserver/3.4.2 || http://uhathletics.hawaii.edu/ ||
|-
| Vivtek || AOLserver/3.4.2 || http://www.vivtek.com/ ||
|-
| unresponsive.net || AOLserver/3.4 || http://www.unresponsive.net/ ||
|-
| DolphinGames || AOLserver/3.4.2 || http://www.dolphingames.cz/ || "Server:" header renamed to DolphinGames/1.0.0; online wap and sms games; internal run also 4.0.x aol servers
|-
| colspan="4" | '''AOLserver 3.3.x'''
|-
| Akoor || AOLserver/3.3.1+ad13 || http://www.akoor.com/ || a cultural french quiz site
|-
| Bitzi || AOLserver/3.3.1+ad13 || http://bitzi.com/ ||
|-
| Caltech || AOLserver/3.3.1+ad13 || http://www.caltech.edu/ ||
|-
| Greatest Networker dot.Community || AOLserver/3.3.1+ad13 || http://www.greatestnetworker.com/ ||
|-
| Infogettable.net Backgammon || AOLserver/3.3.1+ad13 || http://backgammon.infogettable.net/ ||
|-
| thedesignexperience || AOLserver/3.3.1+ad13 || http://www.thedesignexperience.org/ ||
|-
| ]project-open[ || AOLserver/3.3.1+ad13 || http://projop.dnsalias.com/ ||
|-
| ]project-consulting[ Demoserver || AOLserver/3.3.1+ad13 || http://pcdemo.dnsalias.com/ ||
|-
| ]project-translation[ Demoserver || AOLserver/3.3.1+ad13 || http://ptdemo.dnsalias.com/ ||
|-
| colspan="4" | '''AOLserver 3.2.x'''
|-
| Investsberbank || AOLserver/3.2 || http://www.isb.ru/ || Joint-Stock Bank "Investsberbank"
|-
| MyWorkoutProgram || AOLserver/3.2+ad12 || http://www.myworkoutprogram.com/ ||
|-
| colspan="4" | '''AOLserver 2.x'''
|-
| Asimba Trainer Pro || NaviServer/2.0 AOLserver/2.3.3 || http://www.asimbatrainerpro.com/ ||
|-
| Fitrex.com || NaviServer/2.0 AOLserver/2.3.3 || http://www.fitrex.com/ ||
|-
| WGCR Radio || NaviServer/2.0 AOLserver/2.3.3 || http://www.wgcr.org/ ||
|-
| British Cattle Movement Service || NaviServer/2.0 AOLserver/2.3.3 || http://www.bcms.gov.uk/ ||
|}

Also, every website on this list is should be using AOLserver as well: http://openacs.org/community/sites/

----

'''Discussion:'''

'''Why MUST?''' Some people turn that off as part of their security principles. A known bug in Version 4.x would allow an attacker do simply grep through the following list. Could we please take that into consideration? How many sites would, e.g., introduce .adp pages just to get it on this _huge_ (irony) list?

''If anyone takes "security through obscurity" seriously enough to obfuscate the Server: header that's returned, then they also shouldn't want to be included on this list for the same reasons, so that people don't know they run AOLserver. Everyone else is free to advertise their sites here to try and ensure they get picked up by web server surveys like Netcraft, et. al.''

Ok, good point. You're perfectly right. Maybe I was just annoyed by being deleted from the list without explanation about the reason (which was added later). But why reject sites that don't expose the Server header for whatever reason? It is very easy to test that a site is running AOLserver (as easy as testing if a bug exists, of course). Why should we insist on detailed versioning?

''It makes maintaining the list easier. It'd be annoying for folks to add sites to this list and claim they run AOLserver, and then three months later the site switches to Apache. Who has the time to go poking and prodding to do server detection? It's easy to automate a script that asks "do I get a Server: AOLserver/xxx in the HTTP response?" and have it automatically keep the list fresh, which is what I currently have and run periodically. If folks running Apache/IIS want to falsely report AOLserver, that's annoying because the list will be inaccurate, but at least AOLserver will get the credit for the sites. :-)''

----

'''Sites that claim to run AOLserver 3.x, because the person who entered it into this Wiki assured it at that point in time. It may happen that the site runs Apache when you visit it and that may result in immediate pain, suffering or death. You have been warned!'''
* removed

''The links on the pages look awfully Vignette CURL-like. Is this site really running AOLserver? How can you prove it?''

How does a label in the header prove it? But we had this already. I started this rubric ''Sites that claim to run...'' to go around it. But I have absolutely no problem to remove all my sites (including the ones who have the header) from this wiki page in order to satisfy this principle.