OS Manuals

/usr/bin/go-httpbin

FIPS-enabled Go port of the httpbin HTTP request and response testing service, built using only the Go standard library

From go-httpbin-fips 2.26.0-r2 (enterprise-packages), captured 2026-11-08 by running go-httpbin --help (exit 0). permalink

Usage of go-httpbin:
  -allowed-redirect-domains string
    	Comma-separated list of domains the /redirect-to endpoint will allow
  -exclude-headers string
    	Drop platform-specific headers. Comma-separated list of headers key to drop, supporting wildcard matching.
  -host string
    	Host to listen on (default "0.0.0.0")
  -https-cert-file string
    	HTTPS Server certificate file
  -https-key-file string
    	HTTPS Server private key file
  -log-format string
    	Log format (text or json) (default "text")
  -log-level string
    	Logging level (DEBUG, INFO, WARN, ERROR, OFF) (default "INFO")
  -max-body-size int
    	Maximum size of request or response, in bytes (default 1048576)
  -max-duration duration
    	Maximum duration a response may take (default 10s)
  -port int
    	Port to listen on (default 8080)
  -prefix string
    	Path prefix (empty or start with slash and does not end with slash)
  -srv-max-header-bytes int
    	Value to use for the http.Server's MaxHeaderBytes option (default 16384)
  -srv-read-header-timeout duration
    	Value to use for the http.Server's ReadHeaderTimeout option (default 1s)
  -srv-read-timeout duration
    	Value to use for the http.Server's ReadTimeout option (default 5s)
  -unsafe-allow-dangerous-responses
    	Allow endpoints to return unescaped HTML when clients control response Content-Type (enables XSS attacks)
  -use-full-version
    	Expose full version details via /version (default: service name only)
  -use-real-hostname
    	Expose value of os.Hostname() in the /hostname endpoint instead of dummy value
  -version
    	Print version and exit
Options (18)
OptionDescriptionSource
-allowed-redirect-domains stringComma-separated list of domains the /redirect-to endpoint will allowhelp
-exclude-headers stringDrop platform-specific headers.help
-host stringHost to listen on (default "0.0.0.0")help
-https-cert-file stringHTTPS Server certificate filehelp
-https-key-file stringHTTPS Server private key filehelp
-log-format stringLog format (text or json) (default "text")help
-log-level stringLogging level (DEBUG, INFO, WARN, ERROR, OFF) (default "INFO")help
-max-body-size intMaximum size of request or response, in bytes (default 1048576)help
-max-duration durationMaximum duration a response may take (default 10s)help
-port intPort to listen on (default 8080)help
-prefix stringPath prefix (empty or start with slash and does not end with slash)help
-srv-max-header-bytes intValue to use for the http.Server's MaxHeaderBytes option (default 16384)help
-srv-read-header-timeout durationValue to use for the http.Server's ReadHeaderTimeout option (default 1s)help
-srv-read-timeout durationValue to use for the http.Server's ReadTimeout option (default 5s)help
-unsafe-allow-dangerous-responsesAllow endpoints to return unescaped HTML when clients control response Content-Type (enables XSS attacks)help
-use-full-versionExpose full version details via /version (default: service name only)help
-use-real-hostnameExpose value of os.Hostname() in the /hostname endpoint instead of dummy valuehelp
-versionPrint version and exithelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.