You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@trafficserver.apache.org by Jan-Frode Myklebust <ja...@tanso.net> on 2014/05/27 12:22:43 UTC

ERR_CONNECT_FAIL/301 on all redirects?

We're using the following logs_xml.config:

	<LogFormat>
		<Name = "squid_plus_correct_host_hdr"/>
		<Format = "%<cqtq> %<ttms> %<chi> %<crc>/%<pssc> %<psql> %<cqhm> %<cquuc> %<caun> %<phr>/%<pqsn> %<psct> %<xid>"/> </LogFormat>
	<LogObject>
		<Format = "squid_plus_correct_host_hdr"/>
		<Filename = "modified_squid"/>
		<Mode = "binary"/>
	</LogObject>

and are a bit surprised at seeing strange "ERR_CONNECT_FAIL/301" logs
on all our remap.config redirects. I.e.:

	1401184410.874 0 213.167.104.143 ERR_CONNECT_FAIL/301 418 GET http:/// - NONE/- text/html -
	1401184413.376 0 213.167.104.143 ERR_CONNECT_FAIL/301 425 GET http:///hdshdsh - NONE/- text/html -
	1401184416.562 0 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 421 GET https:/// - NONE/- text/html -
	1401184419.780 7 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 424 GET https:///sds - NONE/- text/html -
	1401184422.460 0 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 424 GET http:///sds - NONE/- text/html -
	1401184425.293 0 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 421 GET http:/// - NONE/- text/html -
	1401184427.428 0 213.167.104.143 ERR_CONNECT_FAIL/301 418 GET http:/// - NONE/- text/html -
	1401184430.086 0 213.167.104.143 ERR_CONNECT_FAIL/301 425 GET http:///hdshdsh - NONE/- text/html -

"extended" logs looks more like what we expect:

	213.167.104.143 - - [27/May/2014:11:53:20 +0100] "GET http://example2.no/ HTTP/1.1" 301 0 000 0 0 0 169 418 0 0 0
	213.167.104.143 - - [27/May/2014:11:53:22 +0100] "GET http://example2.no/hdshdsh HTTP/1.1" 301 0 000 0 0 0 176 425 0 0 0
	213.167.104.143 - - [27/May/2014:11:53:30 +0100] "GET http://example2.no/ HTTP/1.1" 301 0 000 0 0 0 169 418 0 0 0
	213.167.104.143 - - [27/May/2014:11:53:33 +0100] "GET http://example2.no/hdshdsh HTTP/1.1" 301 0 000 0 0 0 176 425 0 0 0
	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:36 +0100] "GET https://example.no/ HTTP/1.1" 301 0 000 0 0 0 173 421 0 0 0
	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:39 +0100] "GET https://example.no/sds HTTP/1.1" 301 0 000 0 0 0 176 424 0 0 0
	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:42 +0100] "GET http://example.no/sds HTTP/1.1" 301 0 000 0 0 0 175 424 0 0 0
	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:45 +0100] "GET http://example.no/ HTTP/1.1" 301 0 000 0 0 0 172 421 0 0 0
	213.167.104.143 - - [27/May/2014:11:53:47 +0100] "GET http://example2.no/ HTTP/1.1" 301 0 000 0 0 0 169 418 0 0 0
	213.167.104.143 - - [27/May/2014:11:53:50 +0100] "GET http://example2.no/hdshdsh HTTP/1.1" 301 0 000 0 0 0 176 425 0 0 0


Shouldn't %<crc> contain a non ERR message, and also, why is the 
hostname dropped from %<cquuc> ?


BTW: this is with ATS 4.1.2, and proxy.config.url_remap.pristine_host_hdr=1.


  -jf

Re: ERR_CONNECT_FAIL/301 on all redirects?

Posted by Ethan Lai <yz...@yahoo.com>.
Yes, the "ERR_CONNECT_FAIL/301 and logging of http:///" were also fixed
with TS-2344.

If you're interested in it, this code section

> -  if (s->http_config_param->errors_log_error_pages) {
> +  if (s->http_config_param->errors_log_error_pages && status_code >= HTTP_STATUS_BAD_REQUEST) {
>
> from https://github.com/apache/trafficserver/pull/86.patch is preventing
redirects were logged in error.log  :)

Thanks,
-Ethan


2014-05-30 20:20 GMT+08:00 Jan-Frode Myklebust <ja...@tanso.net>:

> On Wed, May 28, 2014 at 03:58:31AM +0000, David Carlin wrote:
> > Is this a manifestation of https://issues.apache.org/jira/browse/TS-2344
> ??
> >
>
> In my error.log I see:
>
> 20140530.14h11m39s RESPONSE: sent 2a01:798:0:30:0:de:face:d status 301
> (Redirect) for 'https://example.no/'
> 20140530.14h11m39s RESPONSE: sent 2a01:798:0:30:0:de:face:d status 404
> (Not Found on Accelerator) for 'https://example.no/'
>
> so that second line is probably fixed with TS-2344. But is there also
> something there that fixes the ERR_CONNECT_FAIL/301 and logging of
> http:/// on these requests?
>
>
>    -jf
>

Re: ERR_CONNECT_FAIL/301 on all redirects?

Posted by Jan-Frode Myklebust <ja...@tanso.net>.
On Wed, May 28, 2014 at 03:58:31AM +0000, David Carlin wrote:
> Is this a manifestation of https://issues.apache.org/jira/browse/TS-2344 ??
> 

In my error.log I see:

20140530.14h11m39s RESPONSE: sent 2a01:798:0:30:0:de:face:d status 301 (Redirect) for 'https://example.no/'
20140530.14h11m39s RESPONSE: sent 2a01:798:0:30:0:de:face:d status 404 (Not Found on Accelerator) for 'https://example.no/'

so that second line is probably fixed with TS-2344. But is there also
something there that fixes the ERR_CONNECT_FAIL/301 and logging of 
http:/// on these requests?


   -jf

Re: ERR_CONNECT_FAIL/301 on all redirects?

Posted by David Carlin <dc...@yahoo-inc.com>.
Is this a manifestation of https://issues.apache.org/jira/browse/TS-2344 ??

David

On 5/27/14, 6:22 AM, "Jan-Frode Myklebust" <ja...@tanso.net> wrote:

>We're using the following logs_xml.config:
>
>	<LogFormat>
>		<Name = "squid_plus_correct_host_hdr"/>
>		<Format = "%<cqtq> %<ttms> %<chi> %<crc>/%<pssc> %<psql> %<cqhm>
>%<cquuc> %<caun> %<phr>/%<pqsn> %<psct> %<xid>"/> </LogFormat>
>	<LogObject>
>		<Format = "squid_plus_correct_host_hdr"/>
>		<Filename = "modified_squid"/>
>		<Mode = "binary"/>
>	</LogObject>
>
>and are a bit surprised at seeing strange "ERR_CONNECT_FAIL/301" logs
>on all our remap.config redirects. I.e.:
>
>	1401184410.874 0 213.167.104.143 ERR_CONNECT_FAIL/301 418 GET http:/// -
>NONE/- text/html -
>	1401184413.376 0 213.167.104.143 ERR_CONNECT_FAIL/301 425 GET
>http:///hdshdsh - NONE/- text/html -
>	1401184416.562 0 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 421 GET
>https:/// - NONE/- text/html -
>	1401184419.780 7 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 424 GET
>https:///sds - NONE/- text/html -
>	1401184422.460 0 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 424 GET
>http:///sds - NONE/- text/html -
>	1401184425.293 0 2a01:798:0:30:0:de:face:d ERR_CONNECT_FAIL/301 421 GET
>http:/// - NONE/- text/html -
>	1401184427.428 0 213.167.104.143 ERR_CONNECT_FAIL/301 418 GET http:/// -
>NONE/- text/html -
>	1401184430.086 0 213.167.104.143 ERR_CONNECT_FAIL/301 425 GET
>http:///hdshdsh - NONE/- text/html -
>
>"extended" logs looks more like what we expect:
>
>	213.167.104.143 - - [27/May/2014:11:53:20 +0100] "GET
>http://example2.no/ HTTP/1.1" 301 0 000 0 0 0 169 418 0 0 0
>	213.167.104.143 - - [27/May/2014:11:53:22 +0100] "GET
>http://example2.no/hdshdsh HTTP/1.1" 301 0 000 0 0 0 176 425 0 0 0
>	213.167.104.143 - - [27/May/2014:11:53:30 +0100] "GET
>http://example2.no/ HTTP/1.1" 301 0 000 0 0 0 169 418 0 0 0
>	213.167.104.143 - - [27/May/2014:11:53:33 +0100] "GET
>http://example2.no/hdshdsh HTTP/1.1" 301 0 000 0 0 0 176 425 0 0 0
>	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:36 +0100] "GET
>https://example.no/ HTTP/1.1" 301 0 000 0 0 0 173 421 0 0 0
>	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:39 +0100] "GET
>https://example.no/sds HTTP/1.1" 301 0 000 0 0 0 176 424 0 0 0
>	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:42 +0100] "GET
>http://example.no/sds HTTP/1.1" 301 0 000 0 0 0 175 424 0 0 0
>	2a01:798:0:30:0:de:face:d - - [27/May/2014:11:53:45 +0100] "GET
>http://example.no/ HTTP/1.1" 301 0 000 0 0 0 172 421 0 0 0
>	213.167.104.143 - - [27/May/2014:11:53:47 +0100] "GET
>http://example2.no/ HTTP/1.1" 301 0 000 0 0 0 169 418 0 0 0
>	213.167.104.143 - - [27/May/2014:11:53:50 +0100] "GET
>http://example2.no/hdshdsh HTTP/1.1" 301 0 000 0 0 0 176 425 0 0 0
>
>
>Shouldn't %<crc> contain a non ERR message, and also, why is the
>hostname dropped from %<cquuc> ?
>
>
>BTW: this is with ATS 4.1.2, and
>proxy.config.url_remap.pristine_host_hdr=1.
>
>
>  -jf

Re: ERR_CONNECT_FAIL/301 on all redirects?

Posted by Jan-Frode Myklebust <ja...@tanso.net>.
On Tue, May 27, 2014 at 10:54:04AM +0000, Luca Rea wrote:
> It seems that your ATS instance is using the method CONNECT (https) to establish
> a connection to your http backend, perhaps you should configure SSL termination on the proxy side...

No, we're terminating SSL on ATS. Backend is
"http://webfrontend.example.net/", which https://www.example2.no/ is
mapped to:


        redirect       http://example2.no                          https://www.example2.no
        redirect       https://example2.no                         https://www.example2.no
        redirect       http://www.example2.no                      https://www.example2.no
        map             https://www.example2.no/                    http://webfrontend.example.net/

But it's these redirects that are triggering ERR_CONNECT_FAIL/301 logs.
AFAIK ATS shouldn't need to go to a backend to serve the "HTTP/1.1 301 Redirect"
for these. 


 -jf

RE: ERR_CONNECT_FAIL/301 on all redirects?

Posted by Luca Rea <lu...@contactlab.com>.
It seems that your ATS instance is using the method CONNECT (https) to establish a connection to your http backend, perhaps you should configure SSL termination on the proxy side...

Re: ERR_CONNECT_FAIL/301 on all redirects?

Posted by Jan-Frode Myklebust <ja...@tanso.net>.
On Tue, May 27, 2014 at 10:29:55AM +0000, Luca Rea wrote:
> What are your remap rules?

Only simple rules like:

	redirect       http://example2.no                          https://www.example2.no
	redirect       https://example2.no                         https://www.example2.no
	redirect       http://www.example2.no                      https://www.example2.no
	map             https://www.example2.no/                    http://webfrontend.example.net/



  -jf

RE: ERR_CONNECT_FAIL/301 on all redirects?

Posted by Luca Rea <lu...@contactlab.com>.
What are your remap rules?