You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Bumbernick, Tom" <to...@hpe.com> on 2016/01/25 19:13:25 UTC
[users@httpd] Help Needed to add Connectiontimeout to ProxyPass
I am attempting to add connectiontimeout to my httpd.conf file. When I add it to the "ProxyPass / balancer://Screens_Dev/" statement, it takes an error: ProxyPass unknown Balancer parameter.
My Apache HTTP Server is at 2.4.18.
Any assistance is greatly appreciated. Thanks.
[Mon Jan 25 12:37:43.269317 2016] [proxy_balancer:debug] [pid 9456:tid 2472] mod_proxy_balancer.c(669): [client nnn.nnn.nnn.nnn:23896] AH01176: proxy_balancer_post_request for (balancer://screens_dev), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [ssl:debug] [pid 9456:tid 2472] ssl_engine_kernel.c(347): [client nnn.nnn.nnn.nnn:23896] AH02034: Subsequent (No.3) HTTPS request received for child 246 (server servername.com:443), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [authz_core:debug] [pid 9456:tid 2472] mod_authz_core.c(834): [client nnn.nnn.nnn.nnn:23896] AH01628: authorization result: granted (no directives), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [lbmethod_byrequests:debug] [pid 9456:tid 2472] mod_lbmethod_byrequests.c(95): AH01207: proxy: Entering byrequests for BALANCER (balancer://screens_dev)
[Mon Jan 25 12:37:43.675592 2016] [lbmethod_byrequests:debug] [pid 9456:tid 2472] mod_lbmethod_byrequests.c(142): AH01208: proxy: byrequests selected worker "https://servername.com:8443/Client_Dev" : busy 0 : lbstatus 0
[Mon Jan 25 12:37:43.675592 2016] [proxy_balancer:debug] [pid 9456:tid 2472] mod_proxy_balancer.c(614): [client nnn.nnn.nnn.nnn:23896] AH01172: balancer://screens_dev: worker (https://servername.com:8443/Client_Dev) rewritten to https://servername.com:8443/Client_Dev/RPS, referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(1783): AH00924: worker https://servername.com:8443/Client_Dev shared already initialized
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(1825): AH00926: worker https://servername.com:8443/Client_Dev local already initialized
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] mod_proxy.c(1158): [client nnn.nnn.nnn.nnn:23896] AH01143: Running scheme balancer handler (attempt 0), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2158): AH00942: HTTPS: has acquired connection for (servername.com)
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2212): [client nnn.nnn.nnn.nnn:23896] AH00944: connecting https://servername.com:8443/Client_Dev/RPS to servername.com:8443, referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2421): [client nnn.nnn.nnn.nnn:23896] AH00947: connected /Client_Dev/RPS to servername.com:8443, referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.909945 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2173): AH00943: https: has released connection for (servername.com)
[Mon Jan 25 12:37:43.909945 2016] [proxy_balancer:debug] [pid 9456:tid 2472] mod_proxy_balancer.c(669): [client nnn.nnn.nnn.nnn:23896] AH01176: proxy_balancer_post_request for (balancer://screens_dev), referer: https://servername.com:20443/
[Mon Jan 25 12:37:49.411899 2016] [ssl:info] [pid 9456:tid 2472] (OS 10060)A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. : [client nnn.nnn.nnn.nnn:23896] AH01991: SSL input filter read failed.
[Mon Jan 25 12:37:49.411899 2016] [ssl:debug] [pid 9456:tid 2472] ssl_engine_io.c(1012): [client nnn.nnn.nnn.nnn:23896] AH02001: Connection closed to child 246 with standard shutdown (server servername.com:443)
#
# Proxy
#
ProxyRequests Off
<Proxy \*>
Order deny,allow
Deny from all
</Proxy>
#
<Proxy balancer://Screens_Dev>
# Servername.com Dev Server
BalancerMember https://servername.com:8443/Client_Dev
#
#
Order allow,deny
Allow from all
</Proxy>
ProxyPass / balancer://Screens_Dev/
<VirtualHost *:443>
ServerName servername.com
SSLEngine on
SSLProxyEngine on
SSLCertificateFile "D:\Apache24\certs\Clientserver.com.cer"
SSLCertificateKeyFile "D:\Apache24\certs\Clientserver.com.key"
SSLProtocol -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2
ProxyPass / balancer://Screens_Dev/
ProxyPassReverse / balancer://Screens_Dev/ stickysession=JSESSIONID
</VirtualHost>
<VirtualHost *:20443>
ServerName servername.com
SSLEngine on
SSLProxyEngine on
SSLCertificateFile "D:\Apache24\certs\servername.com.cer"
SSLCertificateKeyFile "D:\Apache24\certs\servername.com.key"
SSLProtocol -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2
ProxyPass / balancer://Screens_Dev/
ProxyPassReverse / balancer://Screens_Dev/ stickysession=JSESSIONID
</VirtualHost>
Thanks,
Tom
Thomas S. Bumbernick
HPE Enterprise Services - Americas
Transformation Consulting
tom.bumbernick@hpe.com<ma...@hpe.com>
Office +1 404-648-7580
Mobile +1 717-659-0662
Hewlett Packard Enterprise
[hpe-logo-medium]
RE: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by "Bumbernick, Tom" <to...@hpe.com>.
I don’t know what configuration is at the client site. We will be discussing tomorrow with them.
I have tried to look up what this message is attempting to describe. It’s an informational message but not sure what it’s telling me. What would be the potential causes that would trigger this message?
[Mon Jan 25 12:37:49.411899 2016] [ssl:info] [pid 9456:tid 2472] (OS 10060)A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. : [client nnn.nnn.nnn.nnn:23896] AH01991: SSL input filter read failed.
I did see where in the * in the Virtual Host definition should be an IP address. Could this be my issue? I am not sure which IP address this should be.
<VirtualHost *:443>
ServerName server.name.com
Thanks,
Tom
Thomas S. Bumbernick
HPE Enterprise Services - Americas
Transformation Consulting
tom.bumbernick@hpe.com<ma...@hpe.com>
Office +1 404-648-7580
Mobile +1 717-659-0662
Hewlett Packard Enterprise
[hpe-logo-medium]
From: Eric Covener [mailto:covener@gmail.com]
Sent: Monday, January 25, 2016 2:07 PM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
On Mon, Jan 25, 2016 at 1:57 PM, Bumbernick, Tom <to...@hpe.com>> wrote:
[Mon Jan 25 12:37:49.411899 2016] [ssl:info] [pid 9456:tid 2472] (OS 10060)A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. : [client nnn.nnn.nnn.nnn:23896] AH01991: SSL input filter read failed.
It's informational only and talking about your frontend connection seconds after the response is complete. Do your external users come through via some kind of ssl terminating proxy and you don't?
--
Eric Covener
covener@gmail.com<ma...@gmail.com>
Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by Eric Covener <co...@gmail.com>.
On Mon, Jan 25, 2016 at 1:57 PM, Bumbernick, Tom <to...@hpe.com>
wrote:
> [Mon Jan 25 12:37:49.411899 2016] [ssl:info] [pid 9456:tid 2472] (OS
> 10060)A connection attempt failed because the connected party did not
> properly respond after a period of time, or established connection failed
> because connected host has failed to respond. : [client
> nnn.nnn.nnn.nnn:23896] AH01991: SSL input filter read failed.
>
>
It's informational only and talking about your frontend connection seconds
after the response is complete. Do your external users come through via
some kind of ssl terminating proxy and you don't?
--
Eric Covener
covener@gmail.com
RE: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by "Bumbernick, Tom" <to...@hpe.com>.
Like this? This is from the internal non-client side…
[Mon Jan 25 12:37:43.269317 2016] [proxy_balancer:debug] [pid 9456:tid 2472] mod_proxy_balancer.c(669): [client nnn.nnn.nnn.nnn:23896] AH01176: proxy_balancer_post_request for (balancer://screens_dev), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [ssl:debug] [pid 9456:tid 2472] ssl_engine_kernel.c(347): [client nnn.nnn.nnn.nnn:23896] AH02034: Subsequent (No.3) HTTPS request received for child 246 (server servername.com:443), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [authz_core:debug] [pid 9456:tid 2472] mod_authz_core.c(834): [client nnn.nnn.nnn.nnn:23896] AH01628: authorization result: granted (no directives), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [lbmethod_byrequests:debug] [pid 9456:tid 2472] mod_lbmethod_byrequests.c(95): AH01207: proxy: Entering byrequests for BALANCER (balancer://screens_dev)
[Mon Jan 25 12:37:43.675592 2016] [lbmethod_byrequests:debug] [pid 9456:tid 2472] mod_lbmethod_byrequests.c(142): AH01208: proxy: byrequests selected worker "https://servername.com:8443/Client_Dev" : busy 0 : lbstatus 0
[Mon Jan 25 12:37:43.675592 2016] [proxy_balancer:debug] [pid 9456:tid 2472] mod_proxy_balancer.c(614): [client nnn.nnn.nnn.nnn:23896] AH01172: balancer://screens_dev: worker (https://servername.com:8443/Client_Dev) rewritten to https://servername.com:8443/Client_Dev/RPS, referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(1783): AH00924: worker https://servername.com:8443/Client_Dev shared already initialized
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(1825): AH00926: worker https://servername.com:8443/Client_Dev local already initialized
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] mod_proxy.c(1158): [client nnn.nnn.nnn.nnn:23896] AH01143: Running scheme balancer handler (attempt 0), referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2158): AH00942: HTTPS: has acquired connection for (servername.com)
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2212): [client nnn.nnn.nnn.nnn:23896] AH00944: connecting https://servername.com:8443/Client_Dev/RPS to servername.com:8443, referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.675592 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2421): [client nnn.nnn.nnn.nnn:23896] AH00947: connected /Client_Dev/RPS to servername.com:8443, referer: https://servername.com:20443/
[Mon Jan 25 12:37:43.909945 2016] [proxy:debug] [pid 9456:tid 2472] proxy_util.c(2173): AH00943: https: has released connection for (servername.com)
[Mon Jan 25 12:37:43.909945 2016] [proxy_balancer:debug] [pid 9456:tid 2472] mod_proxy_balancer.c(669): [client nnn.nnn.nnn.nnn:23896] AH01176: proxy_balancer_post_request for (balancer://screens_dev), referer: https://servername.com:20443/
[Mon Jan 25 12:37:49.411899 2016] [ssl:info] [pid 9456:tid 2472] (OS 10060)A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. : [client nnn.nnn.nnn.nnn:23896] AH01991: SSL input filter read failed.
[Mon Jan 25 12:37:49.411899 2016] [ssl:debug] [pid 9456:tid 2472] ssl_engine_io.c(1012): [client nnn.nnn.nnn.nnn:23896] AH02001: Connection closed to child 246 with standard shutdown (server servername.com:443)
Thanks,
Tom
Thomas S. Bumbernick
HPE Enterprise Services - Americas
Transformation Consulting
tom.bumbernick@hpe.com<ma...@hpe.com>
Office +1 404-648-7580
Mobile +1 717-659-0662
Hewlett Packard Enterprise
[hpe-logo-medium]
From: Eric Covener [mailto:covener@gmail.com]
Sent: Monday, January 25, 2016 1:53 PM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
On Mon, Jan 25, 2016 at 1:51 PM, Bumbernick, Tom <to...@hpe.com>> wrote:
What’s interesting the app works for me (even with the message) but doesn’t work for the client. Something perhaps in their network?
Good point, maybe need to see it in context with more verbose log level. It's not even a proxy message.
--
Eric Covener
covener@gmail.com<ma...@gmail.com>
Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by Eric Covener <co...@gmail.com>.
On Mon, Jan 25, 2016 at 1:51 PM, Bumbernick, Tom <to...@hpe.com>
wrote:
> What’s interesting the app works for me (even with the message) but
> doesn’t work for the client. Something perhaps in their network?
>
>
Good point, maybe need to see it in context with more verbose log level.
It's not even a proxy message.
--
Eric Covener
covener@gmail.com
RE: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by "Bumbernick, Tom" <to...@hpe.com>.
What’s interesting the app works for me (even with the message) but doesn’t work for the client. Something perhaps in their network?
Thanks,
Tom
Thomas S. Bumbernick
HPE Enterprise Services - Americas
Transformation Consulting
tom.bumbernick@hpe.com<ma...@hpe.com>
Office +1 404-648-7580
Mobile +1 717-659-0662
Hewlett Packard Enterprise
[hpe-logo-medium]
From: Eric Covener [mailto:covener@gmail.com]
Sent: Monday, January 25, 2016 1:44 PM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
On Mon, Jan 25, 2016 at 1:42 PM, Bumbernick, Tom <to...@hpe.com>> wrote:
[Mon Jan 25 13:37:16.792971 2016] [ssl:info] [pid 25764:tid 2500] (OS 10060)A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. : [client nnn.nnn.nnn.nnn:23916] AH01991: SSL input filter read failed.
Firewall? Might need a packet capture to confirm.
--
Eric Covener
covener@gmail.com<ma...@gmail.com>
Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by Eric Covener <co...@gmail.com>.
On Mon, Jan 25, 2016 at 1:42 PM, Bumbernick, Tom <to...@hpe.com>
wrote:
> [Mon Jan 25 13:37:16.792971 2016] [ssl:info] [pid 25764:tid 2500] (OS
> 10060)A connection attempt failed because the connected party did not
> properly respond after a period of time, or established connection failed
> because connected host has failed to respond. : [client
> nnn.nnn.nnn.nnn:23916] AH01991: SSL input filter read failed.
Firewall? Might need a packet capture to confirm.
--
Eric Covener
covener@gmail.com
RE: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by "Bumbernick, Tom" <to...@hpe.com>.
Hi Eric,
That worked and the parm is now in place.
However, the error message is still being displayed.
[Mon Jan 25 13:37:16.792971 2016] [ssl:info] [pid 25764:tid 2500] (OS 10060)A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. : [client nnn.nnn.nnn.nnn:23916] AH01991: SSL input filter read failed.
Any thoughts on what might be causing the error? I am new to HTTPServer.
Thanks,
Tom
Thomas S. Bumbernick
HPE Enterprise Services - Americas
Transformation Consulting
tom.bumbernick@hpe.com<ma...@hpe.com>
Office +1 404-648-7580
Mobile +1 717-659-0662
Hewlett Packard Enterprise
[hpe-logo-medium]
From: Eric Covener [mailto:covener@gmail.com]
Sent: Monday, January 25, 2016 1:32 PM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
On Mon, Jan 25, 2016 at 1:13 PM, Bumbernick, Tom <to...@hpe.com>> wrote:
I am attempting to add connectiontimeout to my httpd.conf file. When I add it to the “ProxyPass / balancer://Screens_Dev/” statement, it takes an error: ProxyPass unknown Balancer parameter.
Try specifying it at the BalancerMember level
--
Eric Covener
covener@gmail.com<ma...@gmail.com>
Re: [users@httpd] Help Needed to add Connectiontimeout to ProxyPass
Posted by Eric Covener <co...@gmail.com>.
On Mon, Jan 25, 2016 at 1:13 PM, Bumbernick, Tom <to...@hpe.com>
wrote:
> I am attempting to add connectiontimeout to my httpd.conf file. When I
> add it to the “ProxyPass / balancer://Screens_Dev/” statement, it takes an
> error: ProxyPass unknown Balancer parameter.
>
>
Try specifying it at the BalancerMember level
--
Eric Covener
covener@gmail.com