httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject DO NOT REPLY [Bug 50807] mod_proxy fails to send FIN response when a FIN is received from a backend
Date Thu, 07 Jul 2011 16:06:09 GMT

--- Comment #5 from Adam Woodworth <> 2011-07-07 16:06:09 UTC ---
This bug is made worse by the fact that
net.netfilter.nf_conntrack_tcp_timeout_close_wait in the Linux kernel (at least
on some versions) has a default value of 60 seconds.  This value is used when
iptables is tracking connections, and it is how long conntrack will wait for a
responding FIN after seeing a FIN from one side.  In this case, with the
default value, when Apache finally tries to close a half-closed connection, if
it has been longer than 60 seconds then Apache will not be able to send its
FIN, making this problem worse.  Increasing the value, of course, is an option,
but probably not often done or even known about.

Configure bugmail:
------- You are receiving this mail because: -------
You are the assignee for the bug.

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message