httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Spil Oss" <spil....@googlemail.com>
Subject Re: AW: [users@httpd] Incompatibility Apache reverse proxy and Internet Explorer?
Date Wed, 15 Nov 2006 11:44:49 GMT
Christian,

Thanks for that!
Seems to work!

Hadn't been looking at the fact that we're using ssl on the connections...

Kind regards,

Spil

On 14/11/06, Christian Gottschalch <masro@llbc.de> wrote:
> using ssl in backend may be not a good idea, because it slows down
> everything,
>
> try
> BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> or
> BrowserMatch ".*MSIE.*" ssl-unclean-shutdown
>
>
> Kirchel Oliver schrieb:
> > Hi,
> > I think we had the same error.
> >
> > "The DMZ1 proxy is connected via ssl, the other connections are plain http."
> >
> > Try to connect "the other connection" via ssl, too.
> >
> > That was our solution.
> >
> > Greetings
> >
> > Olli
> >
> > -----Urspr√ľngliche Nachricht-----
> > Von: Spil Oss [mailto:spil.oss@googlemail.com]
> > Gesendet: Dienstag, 14. November 2006 13:22
> > An: users@httpd.apache.org
> > Betreff: [users@httpd] Incompatibility Apache reverse proxy and Internet Explorer?
> >
> > Hi all,
> >
> > Spuriously we get "Server not found or DNS Error" in Internet Explorer
> > for a site that is reversed proxied with Apache.
> > Please find a txt export of the pcap dump attached.
> >
> > What seems to happen is that the reverse proxy returns FIN, ACK on the
> > 3 connections from IE and subsequently a RST. This then triggers IE
> > into displaying the "Server not found or DNS Error" message.
> > Disabling "Show friendly HTTP error messages" seems to help, but we
> > can't force "the whole world" to change that setting in their Internet
> > Explorer browser (if that were possible for users in a business
> > environment anyway)
> >
> > The setup:
> > Internet Explorer ->
> > Reverse Proxy DMZ1 ->
> > Reverse Proxy DMZ2 ->
> > Application Server
> > v.v.
> >
> > The reverse proxies have simple proxy rules like
> > ProxyPass /b2b_portal/ http://dmz2web.domain.com:8080/b2b_portal/
> > <Location /b2b_portal/>
> >    ProxyPassReverse /b2b_portal/
> > </Location>
> >
> > and on dmz2web
> > ProxyPass /b2b_portal/ http://app1.domain.com:80/b2b_portal/
> > <Location /b2b_portal/>
> >    ProxyPassReverse /b2b_portal/
> > </Location>
> >
> > The DMZ1 proxy is connected via ssl, the other connections are plain http.
> >
> > Anyone experience this before and/or can explain this behaviour of the
> > apache reverse proxy? (2.2.3-ssl running on Windows 2003)
> >
> > PS. We used IIS as reverse proxy before and that was fine.....
> > PS. No such behaviour using Firefox 1.5/2.0
> >
> > Help is very much appreciated!
> >
> > Kind regards,
> >
> > Spil.
> >
> > D:\Apache2.2>bin\httpd.exe -V
> > Server version: Apache/2.2.3
> > Server built: Aug 10 2006 17:29:16
> > Server's Module Magic Number: 20051115:3
> > Server loaded: APR 1.2.7, APR-Util 1.2.7
> > Compiled using: APR 1.2.7, APR-Util 1.2.7
> > Architecture: 32-bit
> > Server MPM: WinNT
> > threaded: yes (fixed thread count)
> > forked: no
> > Server compiled with....
> > -D APACHE_MPM_DIR="server/mpm/winnt"
> > -D APR_HAS_SENDFILE
> > -D APR_HAS_MMAP
> > -D APR_HAS_OTHER_CHILD
> > -D AP_HAVE_RELIABLE_PIPED_LOGS
> > -D DYNAMIC_MODULE_LIMIT=128
> > -D HTTPD_ROOT="/apache"
> > -D SUEXEC_BIN="/apache/bin/suexec"
> > -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
> > -D DEFAULT_ERRORLOG="logs/error.log"
> > -D AP_TYPES_CONFIG_FILE="conf/mime.types"
> > -D SERVER_CONFIG_FILE="conf/httpd.conf"
> >
> > D:\Apache2.2>bin\httpd.exe -M
> > Loaded Modules:
> > core_module (static)
> > win32_module (static)
> > mpm_winnt_module (static)
> > http_module (static)
> > so_module (static)
> > actions_module (shared)
> > alias_module (shared)
> > asis_module (shared)
> > auth_basic_module (shared)
> > authn_default_module (shared)
> > authn_file_module (shared)
> > authz_default_module (shared)
> > authz_groupfile_module (shared)
> > authz_host_module (shared)
> > authz_user_module (shared)
> > autoindex_module (shared)
> > cgi_module (shared)
> > dir_module (shared)
> > env_module (shared)
> > imagemap_module (shared)
> > include_module (shared)
> > isapi_module (shared)
> > log_config_module (shared)
> > mime_module (shared)
> > proxy_module (shared)
> > proxy_connect_module (shared)
> > proxy_http_module (shared)
> > negotiation_module (shared)
> > rewrite_module (shared)
> > setenvif_module (shared)
> > userdir_module (shared)
> > ssl_module (shared)
> > Syntax OK
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message