RE: Reverse Proxy issues Apache 2.2.3

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ok I must be leaving out something that's keeping folks from replying.  What
information is needed? 

I am running an Apache 2.2.3 server in a DMZ that allows only port 443 in
and port 7001 traffic out.  I have two back-end servers that it's
communicating with.  One is an TomCat 5.0 server and the other is an IIS6.0
server.  I use mod_proxy to create the reverse proxy setup described below.
The Tomcat serves content and the IIS6 serves images and javascript. During
testing, I receive both content and images successfully, but after loading
the pages a few times the content is served ok, but the images don't. I use
an AJP connector to TomCat and http to IIS6.



-----Original Message-----
From: Rod R [mailto:scruffeone@xxxxxxxxxxx] 
Sent: Thursday, November 23, 2006 10:20 AM
To: users@xxxxxxxxxxxxxxxx
Subject: RE:  Reverse Proxy woes

Thanks for the reply.  If you would please look at the complete request you
would see that I am using AJP to communicate to one host and http to
communicate with the other.  The AJP connection is working fine, it's the
http to the IIS6 machine that's problematical.

ProxyRequests Off
ProxyPreserveHost off
<Proxy *>
Order Deny,Allow
Allow from all
</Proxy>
ProxyPass /portal ajp://machine2:7001/portal ProxyPassReverse /portal
ajp://machine2:7001/portal ProxyPass /imageserver
http://image:7002/imageserver ttl=128 retry=300 ProxyPassReverse
/imageserver http://image:7002/imageserver
 

-----Original Message-----
From: William A. Rowe, Jr. [mailto:wrowe@xxxxxxxxxxxxx]
Sent: Wednesday, November 22, 2006 7:17 AM
To: users@xxxxxxxxxxxxxxxx
Subject: Re:  Reverse Proxy woes

"The backend image server is running IIS6"

IIS speaks http:, only Tomcat (and perhaps some Tomcat derived app servers)
can speak ajp:.


Rodolfo Rosado wrote:
>  
> 
> -----Original Message-----
> From: scruffeone@xxxxxxxxxxx [mailto:scruffeone@xxxxxxxxxxx]
> Sent: Friday, November 17, 2006 4:39 PM
> To: users@xxxxxxxxxxxxxxxx
> Subject:  Reverse Proxy woes
> 
> Hi All,
> 
>     Apache 2.2 -----reverse proxy ----------> IIS6/win2k3
> 
> Having a bit of an issue with keeping this connection alive.  It's a 
> simple
> set-up:
> 
> ProxyRequests Off
> #ProxyTimeout
> ProxyPreserveHost off
> <Proxy *>
> Order Deny,Allow
> Allow from all
> </Proxy>
> ######################################################################
> ###### ProxyPass /portal ajp://machine2:7001/portal ProxyPassReverse 
> /portal ajp://machine2:7001/portal ProxyPass /imageserver 
> http://image:7002/imageserver ttl=128 retry=300 ProxyPassReverse 
> /imageserver http://image:7002/imageserver
>     
> The ajp connection works just fine, the connection to image connects 
> and grabs images, but after awhile, images stop being served.
> 
> The backend image server is running IIS6 in standard mode on a windows
> 2003 OS.
> 
> Apache Httpd.log excerpt:
> 
> [Fri Nov 17 14:34:10 2006] [info] Initial (No.1) HTTPS request 
> received for child 498 (server portal.test.com:443) [Fri Nov 17 
> 14:34:10 2006] [debug]
> mod_proxy_http.c(54): proxy: HTTP: canonicalising URL 
> //image:7002/imageserver/plumtree/common/private/js/jsutil/LATEST/PTDa
> teForm
> ats.js
> [Fri Nov 17 14:34:10 2006] [debug] proxy_util.c(1378): [client 
> 192.168.17.130] proxy: http: found worker 
> http://image:7002/imageserver for 
> http://image:7002/imageserver/plumtree/common/private/js/jsutil/LATEST
> /PTDat eFormats.js, referer: https://portal.test.com/portal/server.pt?
> [Fri Nov 17 14:34:10 2006] [debug] mod_proxy.c(756): Running scheme 
> http handler (attempt 0) [Fri Nov 17 14:34:10 2006] [debug]
> mod_proxy_http.c(1662): proxy: HTTP: serving URL 
> http://image:7002/imageserver/plumtree/common/private/js/jsutil/LATEST
> /PTDat
> eFormats.js
> [Fri Nov 17 14:34:10 2006] [debug] proxy_util.c(1798): proxy: HTTP: 
> has acquired connection for (image) [Fri Nov 17 14:34:10 2006] [debug]
> proxy_util.c(1858): proxy: connecting
> http://image:7002/imageserver/plumtree/common/private/js/jsutil/LATEST
> /PTDat eFormats.js to image:7002 [Fri Nov 17 14:34:10 2006] [debug]
> proxy_util.c(1951): proxy: connected
> /imageserver/plumtree/common/private/js/jsutil/LATEST/PTDateFormats.js
> to
> image:7002 [Fri Nov 17 14:34:10 2006] [debug] proxy_util.c(2141): proxy:
> HTTP: connection complete to 192.168.17.131:7002 (image) [Fri Nov 17 
> 14:34:10 2006] [debug] mod_proxy_http.c(1541): proxy: header only [Fri 
> Nov
> 17 14:34:10 2006] [debug] proxy_util.c(1816): proxy: HTTP: has 
> released connection for (image) [Fri Nov 17 14:34:10 2006] [info] 
> [client 192.168.17.130] Connection closed to child 498 with unclean 
> shutdown (server
> portal.mda.mil:443) [Fri Nov 17 14:34:10 2006] [debug]
> mod_proxy_http.c(1541): proxy: header only [Fri Nov 17 14:34:10 2006] 
> [debug] proxy_util.c(1816): proxy: HTTP: has released connection for
> (image) [Fri Nov 17 14:34:10 2006] [info] [client 192.168.17.130] 
> Connection closed to child 496 with unclean shutdown (server
> portal.mda.mil:443)
> 
> 
> R. Rosado
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 
> 
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux