Feeds

Google mystery server rooted in Apache

Oompa Loompas go for GFE

  • alert
  • submit to reddit

SANS - Survey on application security programs

The Google Web Server - a custom server used only by Google itself - was originally built from open-source Apache code, according to a former Google employee.

However, over the past several years, the server has been so heavily modified that it now bears little resemblance to the ubiquitous Apache server. It is so tightly tied to Google's famously distributed internal infrastructure, the ex-employee says, it could not be used for serving sites outside of the company.

The Google Web Server is known as GWS - pronounced "gwiss" - inside the Mountain View Chocolate Factory. According to the ex-employee, it's chock full of custom I/O handles meant to interface with Google-specific remote procedure calls.

Google's private infrastructure - sometimes referred as "The Google Network" - spans nearly 40 data centers across the globe, and it's pieced together with myriad custom-built and proprietary tools, including a distributed file system dubbed GFS; a distributed number-crunching platform known as MapReduce; and a new platform known as Spanner, designed to automatically move and replicate loads between the company's mega data centers.

The latest survey data from the web-server-tracking UK research outfit Netcraft shows that even though GWS is only used inside of Google, it's now hosting nearly 13 per cent of all active websites. That's 11 million sites that are regularly updated with new content. This includes not only sites run solely by Google, but also sites the company operates on behalf of third parties via services like Blogger, Google Sites, and Google App Engine.

According to Netcraft, Apache runs 44 million active sites, and Microsoft servers run nearly 14 million.

In a 2007 web post, conspicuous Googler Matt Cutts indicated that GWS was not based on Apache. "That's not correct," he wrote. "I believe GWS is a custom web server, not a modified version of Apache." But this hardly seems authoritative.

For Java applications, Mountain View uses another custom server, which is apparently known as GFE. That's Google Front End - not girlfriend experience. GFE is mentioned in the same 2003 blog post where Cutts comments on Google Web Server. According to the ex-employee, the word inside Google is that this custom Java server "blows Tomcat out of the water."

Google has not responded to our requests for comment on GWS or GFE. ®

3 Big data security analytics techniques

More from The Register

next story
Ubuntu 14.04 LTS: Great changes, but sssh don't mention the...
Why HELLO Amazon! You weren't here last time
OpenBSD founder wants to bin buggy OpenSSL library, launches fork
One Heartbleed vuln was too many for Theo de Raadt
This time it's 'Personal': new Office 365 sub covers just two devices
Redmond also brings Office into Google's back yard
Got Windows 8.1 Update yet? Get ready for YET ANOTHER ONE – rumor
Leaker claims big release due this fall as Microsoft herds us into the CLOUD
Next Windows obsolescence panic is 450 days from … NOW!
The clock is ticking louder for Windows Server 2003 R2 users
Patch iOS, OS X now: PDFs, JPEGs, URLs, web pages can pwn your kit
Plus: iThings and desktops at risk of NEW SSL attack flaw
Batten down the hatches, Ubuntu 14.04 LTS due in TWO DAYS
Admins dab straining server brows in advance of Trusty Tahr's long-term support landing
Red Hat to ship RHEL 7 release candidate with a taste of container tech
Grab 'near-final' version of next Enterprise Linux next week
Apple inaugurates free OS X beta program for world+dog
Prerelease software now open to anyone, not just developers – as long as you keep quiet
prev story

Whitepapers

Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.