httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kirchel Oliver" <Kirc...@gutenberg-rz.de>
Subject AW: [users@httpd] Incompatibility Apache reverse proxy and Internet Explorer?
Date Tue, 14 Nov 2006 12:28:38 GMT
Hi,
I think we had the same error. 

"The DMZ1 proxy is connected via ssl, the other connections are plain http."

Try to connect "the other connection" via ssl, too.

That was our solution.

Greetings 

Olli

-----Urspr√ľngliche Nachricht-----
Von: Spil Oss [mailto:spil.oss@googlemail.com] 
Gesendet: Dienstag, 14. November 2006 13:22
An: users@httpd.apache.org
Betreff: [users@httpd] Incompatibility Apache reverse proxy and Internet Explorer?

Hi all,

Spuriously we get "Server not found or DNS Error" in Internet Explorer
for a site that is reversed proxied with Apache.
Please find a txt export of the pcap dump attached.

What seems to happen is that the reverse proxy returns FIN, ACK on the
3 connections from IE and subsequently a RST. This then triggers IE
into displaying the "Server not found or DNS Error" message.
Disabling "Show friendly HTTP error messages" seems to help, but we
can't force "the whole world" to change that setting in their Internet
Explorer browser (if that were possible for users in a business
environment anyway)

The setup:
Internet Explorer ->
Reverse Proxy DMZ1 ->
Reverse Proxy DMZ2 ->
Application Server
v.v.

The reverse proxies have simple proxy rules like
ProxyPass /b2b_portal/ http://dmz2web.domain.com:8080/b2b_portal/
<Location /b2b_portal/>
   ProxyPassReverse /b2b_portal/
</Location>

and on dmz2web
ProxyPass /b2b_portal/ http://app1.domain.com:80/b2b_portal/
<Location /b2b_portal/>
   ProxyPassReverse /b2b_portal/
</Location>

The DMZ1 proxy is connected via ssl, the other connections are plain http.

Anyone experience this before and/or can explain this behaviour of the
apache reverse proxy? (2.2.3-ssl running on Windows 2003)

PS. We used IIS as reverse proxy before and that was fine.....
PS. No such behaviour using Firefox 1.5/2.0

Help is very much appreciated!

Kind regards,

Spil.

D:\Apache2.2>bin\httpd.exe -V
Server version: Apache/2.2.3
Server built: Aug 10 2006 17:29:16
Server's Module Magic Number: 20051115:3
Server loaded: APR 1.2.7, APR-Util 1.2.7
Compiled using: APR 1.2.7, APR-Util 1.2.7
Architecture: 32-bit
Server MPM: WinNT
threaded: yes (fixed thread count)
forked: no
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/winnt"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D DYNAMIC_MODULE_LIMIT=128
-D HTTPD_ROOT="/apache"
-D SUEXEC_BIN="/apache/bin/suexec"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_ERRORLOG="logs/error.log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

D:\Apache2.2>bin\httpd.exe -M
Loaded Modules:
core_module (static)
win32_module (static)
mpm_winnt_module (static)
http_module (static)
so_module (static)
actions_module (shared)
alias_module (shared)
asis_module (shared)
auth_basic_module (shared)
authn_default_module (shared)
authn_file_module (shared)
authz_default_module (shared)
authz_groupfile_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
cgi_module (shared)
dir_module (shared)
env_module (shared)
imagemap_module (shared)
include_module (shared)
isapi_module (shared)
log_config_module (shared)
mime_module (shared)
proxy_module (shared)
proxy_connect_module (shared)
proxy_http_module (shared)
negotiation_module (shared)
rewrite_module (shared)
setenvif_module (shared)
userdir_module (shared)
ssl_module (shared)
Syntax OK

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message