|
Hello, I have changed our main reverse proxy server on our network from an old debian woody server with apache httpd 1 to a debian lenny with apache httpd version 2.2.9-10+lenny6. Before, our customer had no problem with the reverse proxy, but now, some of them can no longer use our proxied website, or it's so slow that the timeout is reached. The problem always happen for user with corporate proxy contacting our own reverse proxy (without a proxy before our reverse proxy, everything works just fine), but when I told those customer that the problem come from their proxy configuration, I have trouble explaining why it worked before and why we are the only website they have trouble with... Bellow is my reverse proxy vhost : (using http or https doesn't matter to have the problem) <IfModule mod_ssl.c> <VirtualHost xx.xx.xx.xx:443> ServerName support.enterprise.com ServerAdmin support@xxxxxxxxxxxxxx SSLEngine On SSLCertificateFile /etc/apache2/ssl/wildcard-enterprise.crt SSLCertificateKeyFile /etc/apache2/ssl/wildcard-enterprise.key ProxyRequests Off <Proxy *> Order Deny,Allow Allow from all </Proxy> ProxyPass / http://srv-53.enterprise.com:10000/ ProxyPassReverse / http://srv-53.enterprise.com:10000/ </VirtualHost> </IfModule> <VirtualHost xx.xx.xx.xx:80> ServerName support.enterprise.com ServerAdmin support@xxxxxxxxxxxxxx ProxyRequests Off <Proxy *> Order Deny,Allow Allow from all </Proxy> ProxyPass / http://srv-53.enterprise.com:10000/ ProxyPassReverse / http://srv-53.enterprise.com:10000/ </VirtualHost> The error I got in the error.log are (http access) : For customer A : [error] (104)Connection reset by peer: proxy: prefetch request body failed to 172.16.15.53:10000 (srv-53.enterprise.com) from yy.yy.yy.yy () For customer B & C : [error] (70007)The timeout specified has expired: proxy: prefetch request body failed to 172.16.15.53:10000 (srv-53.enterprise.com) from zz.zz.zz.zz () For customer B, they told me they are using "squid/2.5.STABLE7-NT" and customer C is using "squid/2.7.STABLE6" (on Solaris for customer C), I don't know what proxy is used by customer A except that it's not squid. Customer B client side error : --------- ERROR The requested URL could not be reieved While trying to retrieve the URL: [no URL] The following error was encountered: - Read Timeout The system returned: [No Error] A Timeout occured while waiting to read data from the network. the netwokr or server may be down or congested. Please retry your request. Generated by client-B-squid-server.com (squid/2.5.STABLE7-NT) --------- Customer C client side error : --------- Bad Request Your browser sent a request that this server could not understand. Apache/2.2.9 (Debian) proxy_html/3.0.0 mod_ssl/2.2.9 OpenSSL/0.9.8g Server at support.enterprise.com Port 80 --------- Any idea how to fix this ? Jeremie --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See |
|