general/9454: Page not displayed errors with KeepAlive at low values

[Rick Mitterer <rm...@getthere.com>]

>Number:         9454
>Category:       general
>Synopsis:       Page not displayed errors with KeepAlive at low values
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Fri Jan 11 14:30:00 PST 2002
>Closed-Date:
>Last-Modified:
>Originator:     rmitterer@getthere.com
>Release:        1.3.19
>Organization:
apache
>Environment:
Solaris 2.6  105181-13

4 x 400Mhz processor with 2GB of memory and 2GB swap.
>Description:
We are terminating SSL at the web server. We've patched the apache web server with the apache-ssl code (www.apache-ssl.org) when we set the KeepAlive timeout to 10 and we get quite a few "Page Not Displayed" errors. We keep getting these errors, although less frequent, all the way up to 60. Currently we have it set at 75.
  We've modified the tcp parameters a bit:

/usr/sbin/ndd -set /dev/tcp tcp_keepalive_interval 900000
/usr/sbin/ndd -set /dev/tcp tcp_rexmit_interval_min 6000
/usr/sbin/ndd -set /dev/tcp tcp_rexmit_interval_initial 6000
/usr/sbin/ndd -set /dev/tcp tcp_rexmit_interval_max 10000
/usr/sbin/ndd -set /dev/tcp tcp_close_wait_interval 60000
/usr/sbin/ndd -set /dev/tcp tcp_ip_abort_interval 60000
/usr/sbin/ndd -set /dev/tcp tcp_conn_req_max_q 1024

The web servers are behind F5's Big IP product.
>How-To-Repeat:
Unfortunately it's a large production system. We are currently trying to duplicate the problem in a test environment.
>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted:
 [In order for any reply to be added to the PR database, you need]
 [to include <ap...@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]