网址：http://www.xiaojb.com/archives/it/lighttpdsecurit.shtml
lighttpd–http://www.lighttpd.net/
Security, speed, compliance, and flexibility–all of these describe LightTPD which is rapidly redefining efficiency of a webserver; as it is designed and optimized for high performance environments. With a small memory footprint compared to other web-servers, effective management of the cpu-load, and advanced feature set (FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more) LightTPD is the perfect solution for every server that is suffering load problems. And best of all it’s Open Source licensed under the revised BSD license.
What’s with the name?
Light footprint + httpd = LightTPD
If you prefer, call it just “Lighty”. We want to keep your tongue intact. 
Features
Advanced Features:
* virtual hosts
* virtual directory listings
* URL-Rewriting, HTTP-Redirects
* automatic expiration of files
* Large File Support (64bit fileoffsets)
* Ranges (start-end, start-, -end, multiple ranges)
* on-the-fly output-compression with transparent caching
o deflate, gzip, bzip2
* authentication
o basic, digest
o backends: plain files, htpasswd, htdigest, ldap
* fast and secure application controlled downloads
* Server Side Includes
* User Tracking
* FastCGI, CGI, SSI
PHP-Support:
* same speed as or faster than apache + mod_php4
* includes a utility to spawn FastCGI processes (neccesary for PHP 4.3.x)
* via FastCGI and CGI interface
* support Code Caches like Turckmm, APC or eaccelarator
* load-balanced FastCGI
(one webserver distibutes request to multiple PHP-servers via FastCGI)
Security features:
* chroot(), set UID, set GID
* protecting docroot
* strict HTTP-header parsing
Platforms
Releases of lighttpd are built regulary for at least the following platforms
* Linux (binary packages for FC3, SuSE, Debian, Gentoo, PLD-Linux, OpenWRT)
* *BSD (FreeBSD, NetBSD, OpenBSD, MacOS X)
* SGI IRIX
* Windows (Cygwin)
while it is known to compile cleanly on
* Solaris
* AIX
and various other POSIX compatible OSes.
Recent Comments