From users-return-179647-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org Thu May 08 07:47:40 2008 Return-Path: Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: (qmail 96374 invoked from network); 8 May 2008 07:47:40 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 8 May 2008 07:47:40 -0000 Received: (qmail 58645 invoked by uid 500); 8 May 2008 07:47:29 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 58619 invoked by uid 500); 8 May 2008 07:47:29 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 58608 invoked by uid 99); 8 May 2008 07:47:29 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 May 2008 00:47:29 -0700 X-ASF-Spam-Status: No, hits=-4.0 required=10.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [195.227.30.149] (HELO mailserver.kippdata.de) (195.227.30.149) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 May 2008 07:46:44 +0000 Received: from [192.168.2.102] ([192.168.2.102]) by mailserver.kippdata.de (8.13.5/8.13.5) with ESMTP id m487kt2f003386 for ; Thu, 8 May 2008 09:46:56 +0200 (CEST) Message-ID: <4822AFE4.4050401@kippdata.de> Date: Thu, 08 May 2008 09:46:44 +0200 From: Rainer Jung User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: Tomcat Users List Subject: Re: Web server and tomcat - firewall References: <640358900805061214w33bd264djd7ee12af63f3814c@mail.gmail.com> <482170DF.8010202@kippdata.de> <4821B065.3010209@christopherschultz.net> <640358900805070720p6fb0df10id76707830da9cdca@mail.gmail.com> <4821F186.9010303@kippdata.de> <640358900805071645nbaab06fi40eea40ec9cf20b8@mail.gmail.com> In-Reply-To: <640358900805071645nbaab06fi40eea40ec9cf20b8@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Andrew Hole schrieb: > Thanks > > What means: error 10054 = Connection reset by peer. The backend (Tomcat) or the firewall or something similar in between httpd and Tomcat send back a TCP reset packet, when mod_jk send a packet on an established connection. A reset connection can not be used any longer. Rainer > Andrew > > On Wed, May 7, 2008 at 7:14 PM, Rainer Jung wrote: > >> Andrew Hole wrote: >> >>> HI! >>> >>> I don't have perl installed in production servers, but it is windows >>> server >>> 2003. >>> >> OK, then it is windows error 10054 = Connection reset by peer. >> >> About mod_jk configuration (mod_jk/1.2.18) : >> 1.2.18 does not have DisableReuse. It was first implemented in 1.2.19. Bad >> luck. If you upgrade (you should), then go directly to 1.2.26. >> >> >> # List the workers name >>> worker.list = p1balancer, resumop1 >>> >>> # ---------------------- >>> # Load Balancer worker >>> # ---------------------- >>> worker.p1balancer.type= lb >>> worker.p1balancer.balanced_workers= p11,p12 >>> >>> # ---------------- >>> # First worker >>> # ---------------- >>> worker.p11.port= 8009 >>> worker.p11.host= 10.202.131.130 >>> worker.p11.type= ajp13 >>> >>> >>> # ---------------- >>> # Second worker >>> # ---------------- >>> worker.p12.port= 8009 >>> worker.p12.host= 10.202.131.131 >>> worker.p12.type= ajp13 >>> >>> >>> >>> # ---------------------- >>> # Load Balancer worker >>> # ---------------------- >>> worker.resumop1.type= lb >>> worker.resumop1.balanced_workers= rp11,rp12 >>> >>> # ---------------- >>> # First worker >>> # ---------------- >>> worker.rp11.port= 8007 >>> worker.rp11.host= 10.202.131.130 >>> worker.rp11.type= ajp13 >>> >>> >>> # ---------------- >>> # Second worker >>> # ---------------- >>> worker.rp12.port= 8007 >>> worker.rp12.host= 10.202.131.131 >>> worker.rp12.type= ajp13 >>> >>> >>> On tomcat side >> enableLookups="*false*"redirectPort >>> ="*8443*" protocol="*AJP/1.3*" /> >>> >>> Thanks a lot >>> >> You should start with reading the (relatively) new docs page about >> timeouts: >> >> http://tomcat.apache.org/connectors-doc/generic_howto/timeouts.html >> >> They will help detect such a problem and recover more gracefully. >> Especially cping/cpong are helpful in early problem detection. >> >> The pool timeouts should be helpful for closing idle connections, before >> you get a connection drop. Try to understand the page, and if things are >> unclear, ask us. >> >> How do you know, that the firewall is the root cause? >> >> To get a better understanding for the situation, you could compare >> "netstat -an" on the apache httpd side with one on the tomcat side. Look >> only for the relevant ports (8007 resp. 8009) and look for differences >> between the output. There could be small differences for a short period of >> time, but there should be no connections missing or being in a different >> state between the two outputs for a longer time (except for TIME_WAIT). >> >> Regards, >> >> Rainer >> >> On Wed, May 7, 2008 at 2:36 PM, Christopher Schultz < >>> chris@christopherschultz.net> wrote: >>> >>> -----BEGIN PGP SIGNED MESSAGE----- >>>> Hash: SHA1 >>>> >>>> Rainer, >>>> >>>> Rainer Jung wrote: >>>> |> [Tue May 06 16:24:03 2008] [2704:3128] [error] jk_ajp_common.c >>>> |> (951): (p11) can't receive the response message from tomcat, >>>> |> network problems or tomcat ( 10.202.131.130:8009) is down >>>> |> (errno=54) >>>> | >>>> | What is errno 54 on your platform? >>>> >>>> FWIW, errno 54 on my Linux 2.6/glibc 2.6.1 is: >>>> >>>> "Error 54: Exchange full" >>>> >>>> ??! >>>> >>>> - -chris >>>> >> --------------------------------------------------------------------- >> To start a new topic, e-mail: users@tomcat.apache.org >> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org >> For additional commands, e-mail: users-help@tomcat.apache.org >> >> > --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org