Deploying with --http-socket question (standalone or nginx?)

[Sirtea]

Hi,

I'm deploying uwsgi for an internet exposed server, and I am wondering if uwsgi in http mode do really need a frontend webserver (like nginx) or it's considered secure enough.

Thanks

[unbit]

for frontend you have to use --http instead of --http-socket. Directly exposing your app is a high risk independently by the solidity of the parser (or the app itself)

[Sirtea]

Well, the question was not to parse http in nginx or in uwsgi; uwsgi will handle http protocol anyway, instead of uwsgi protocol.

I was asking if uwsgi process is hardened enough against known attacks (slowloris) I'll take that as a "no".

Thanks