QAHTTPd Product Sheet

QAHTTPd is a powerful and high-secure embedded HTTP server, developed from scratch in Java.

QAHTTPd Lion Logo
QAHTTPd contains an integrated Web Application Firewall so that no third party products are required to protect the Web Server against hacking. QAHTTPd is "self-contained" in the sense that no dependencies exist to any third party Java libraries. The entire QAHTTPd is encapsulated in a single JAR-file. QAHTTPd does not need to be "installed" before used. There is no "setup" procedure and no XML configuration files. QAHTTPd can just be started as a Java program or as an integrated Java thread (which run many sub-threads).
QAHTTPd is fast, secure, and stable, and is ideally suited to run professional high performance web sites and services.

QAHTTPd Web Server Features

  • Pluggable HTTP/S connection adapter(s)
  • Pluggable log adapter
  • Self-tuning worker thread pool
  • Self-tuning, pluggable SQL connection pool(s)
  • Support of anonymous and authenticated sessions
  • Support of translating URL paths
  • Support of pluggable HTTP pre-processing and processing filters
  • Support of Servlet-like functions (= Weblets)
  • Support of Streaming (= Streamlets)
  • Support of WebSockets (= WebSocketProcesslets)
  • Support of server-side JavaScript pre-preprocessors, callable from any HTML web page, executed before the page content is delivered to the HTTP client
  • Support of server-side Include Files pre-preprocessor, callable from any HTML web page, executed before the page content is delivered to the HTTP client
  • Automatically applied Response Content Compression
  • Implemented as Java module
  • Integrated dynamic Java class loader
  • No configuration files required (but can be implemented as needed)
  • Can be used both as a standalone web server and as a component of any Java program
  • Contains Integrated Server Status Pages to which access can be restricted or disabled
  • QAHTTPd is powerful, secure and stable

QAHTTPd Security Features

QAHTTPd is intrinsically safe and can be operated directly at the internet without the need for additional security solutions.

  • Dynamic IP block list, enabled by default
  • Support of pluggable Alarm Adapter(s)
  • Protection against DOS attacks
  • Protection against too many HTTP requests
  • Protection against too many invalid URL calls
  • Protection against too many form submits
  • Protection against too large HTTP requests
  • Protection against Zip bombs in compressed HTTP request content
  • Protection against guessing authentication credentials
  • Protection against guessing authenticated session IDs (digitally signed sessions)
  • Protection against of changing the User Agent within a session
  • Protection against of changing the IP Address too often within a session
  • Protection against receiving too many WebSocket frames
  • Protection against receiving unwanted WebSocket frames
  • Protection against receiving too large WebSocket frames
QAHTTPd is not freeware: Using QAHTTPd in your own projects requires a commercial license. License price and JavaDoc are available on request.

QAHTTPd is the HTTP/S server of portal.realload.com and is used also by other Real Load product components such as Measuring Agent, Cluster Controller and Remote Proxy Recorder.

Proof of QAHTTPd Power | 600 Concurrent Users Endurance Test

QAHTTPd is powerful, secure and stable - this is not an empty promise - have a look at the following test result. There is no other Web Server which provides the same security, performance and functionality in such an easy way.
Test Case & Test Environment
QAHTTPd Web Server Test Result Summary
Test Result Screenshots
Executed Web Session (real-time snapshot @ portal server):
Note: URL[24] is a QAHTTPd Weblet which generates a Captcha
Executed Web Session
Test Result (snapshot @ portal server):
Test Result
CPU Usage and Java Garbage Collector at QAHTTPd Web Server:
There are no internal blockages and no memory leak. The QAHTTPd performance is only limited by the CPU.
CPU Usage and Java Garbage Collector
Size of self-tuning QAHTTPd Worker Thread Pool during Test Execution:
The self-tuning worker thread pool has been expanded up to 2,458 threads - but the "Execution Queue Length" is still zero (0).
self-tuning QAHTTPd Worker Thread Pool during Test Execution
Size of self-tuning QAHTTPd Worker Thread Pool after Test Execution:
The self-tuning worker thread pool has shrunk back to 4 threads.
self-tuning QAHTTPd Worker Thread Pool after Test Execution

© by David K. Fischer, Bern, Switzerland Last updated on 18. December 2023