httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jérémie Grauer <jeremie.gra...@fimasys.com>
Subject [users@httpd] Issue with mod_proxy and customer proxy
Date Wed, 25 Nov 2009 16:29:09 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>

<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#ffffff">
<font size="-1"><font face="sans-serif">Hello,<br>
<br>
I have changed our main reverse proxy server on our network from an old
debian woody server with apache httpd 1 to a debian lenny with apache
httpd version 2.2.9-10+lenny6.<br>
<br>
Before, our customer had no problem with the reverse proxy, but now,
some of them can no longer use our proxied website, or it's so slow
that the timeout is reached.<br>
<br>
The problem always happen for user with corporate proxy contacting our
own reverse proxy (without a proxy before our reverse proxy, everything
works just fine), but when I told those customer that the problem come
from their proxy configuration, I have trouble explaining why it worked
before and why we are the only website they have trouble with...<br>
<br>
Bellow is my reverse proxy vhost : (using http or https doesn't matter
to have the problem)<br>
<br>
&lt;IfModule mod_ssl.c&gt;<br>
&lt;VirtualHost xx.xx.xx.xx:443&gt;<br>
        ServerName support.enterprise.com<br>
        ServerAdmin <a class="moz-txt-link-abbreviated" href="mailto:support@enterprise.com">support@enterprise.com</a><br>
<br>
<br>
        SSLEngine On<br>
        SSLCertificateFile    /etc/apache2/ssl/wildcard-enterprise.crt<br>
        SSLCertificateKeyFile /etc/apache2/ssl/wildcard-enterprise.key<br>
<br>
        ProxyRequests Off<br>
        &lt;Proxy *&gt;<br>
                Order Deny,Allow<br>
                Allow from all<br>
        &lt;/Proxy&gt;<br>
        ProxyPass / <a class="moz-txt-link-freetext" href="http://srv-53.enterprise.com:10000/">http://srv-53.enterprise.com:10000/</a><br>
        ProxyPassReverse / <a class="moz-txt-link-freetext" href="http://srv-53.enterprise.com:10000/">http://srv-53.enterprise.com:10000/</a><br>
<br>
&lt;/VirtualHost&gt;<br>
&lt;/IfModule&gt;  <br>
<br>
&lt;VirtualHost xx.xx.xx.xx:80&gt;<br>
        ServerName support.enterprise.com<br>
        ServerAdmin <a class="moz-txt-link-abbreviated" href="mailto:support@enterprise.com">support@enterprise.com</a><br>
<br>
        ProxyRequests Off<br>
        &lt;Proxy *&gt;<br>
                Order Deny,Allow<br>
                Allow from all <br>
        &lt;/Proxy&gt;<br>
        ProxyPass / <a class="moz-txt-link-freetext" href="http://srv-53.enterprise.com:10000/">http://srv-53.enterprise.com:10000/</a><br>
        ProxyPassReverse / <a class="moz-txt-link-freetext" href="http://srv-53.enterprise.com:10000/">http://srv-53.enterprise.com:10000/</a><br>
<br>
&lt;/VirtualHost&gt;<br>
<br>
The error I got in the error.log are (http access) :<br>
For customer A : [error] (104)Connection reset by peer: proxy: prefetch
request body failed to 172.16.15.53:10000 (srv-53.enterprise.com) from
yy.yy.yy.yy ()<br>
For customer B &amp; C : [error] (70007)The timeout specified has
expired: proxy: prefetch request body failed to </font></font><font
 size="-1"><font face="sans-serif">172.16.15.53:10000
(srv-53.enterprise.com)</font></font><font size="-1"><font
 face="sans-serif"> from zz.zz.zz.zz ()<br>
<br>
For customer B, they told me they are using "squid/2.5.STABLE7-NT" and
customer C is using "squid/2.7.STABLE6" (on Solaris for customer C), I
don't know what proxy is used by customer A except that it's not squid.<br>
<br>
Customer B client side error :<br>
---------<br>
ERROR<br>
The requested URL could not be reieved<br>
While trying to retrieve the URL: [no URL]<br>
<br>
The following error was encountered:<br>
    - Read Timeout<br>
The system returned:<br>
 [No Error]<br>
<br>
A Timeout occured while waiting to read data from the network. the
netwokr or server may be down or congested. Please retry your request.<br>
Generated by client-B-squid-server.com (</font></font><font size="-1"><font
 face="sans-serif">squid/2.5.STABLE7-NT)<br>
</font></font><font size="-1"><font face="sans-serif">---------</font></font><br>
<br>
<font size="-1"><font face="sans-serif">Customer C client side error :<br>
</font></font><font size="-1"><font face="sans-serif">---------</font></font><br>
<font size="-1"><font face="sans-serif">Bad Request<br>
Your browser sent a request that this server could not understand.<br>
<br>
Apache/2.2.9 (Debian) proxy_html/3.0.0 mod_ssl/2.2.9 OpenSSL/0.9.8g
Server at support.enterprise.com Port 80<br>
</font></font><font size="-1"><font face="sans-serif">---------<br>
<br>
</font></font><font size="-1"><font face="sans-serif">Any idea how
to
fix this ?<br>
<br>
Jeremie</font></font><br>
</body>
</html>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message