At first guess it seems like your server intra-8.lan is dropping connections for the new server. Does intra-8.lan restrict connections from certain IPs? On Thu, Dec 17, 2009 at 11:54 PM, Jérémie G <aceslash@xxxxxxxxx> wrote: > Hello, > > I have to migrate a working reverse proxy from apache-ssl > 1.3.33-6sarge3 to apache2 2.2.9-10+lenny6 with ssl but I encounter a > critical issue : when I try to access the website from behind a proxy, > it's working with apache 1.3 but not with apache 2.2 (without proxy, > it's working fine for both version). > > The error displayed in the error.log is : [error] (104)Connection > reset by peer: proxy: prefetch request body failed to 192.168.20.8 > (intra-8.lan) from a.b.c.d () > > Both server have IP address in the same subnet and have only this > virtual host enabled. > > I have tried some tweak in the configuration but I'm clueless to find > any parameter correcting this behavior. Bellow is the apache-ssl 1.3 > config vhost file : > <VirtualHost *> > ServerName extranet.enterprise.com > ServerAdmin support@xxxxxxxxxxxxxx > SSLCertificateFile /etc/apache-ssl/ssl/ip-13.crt > SSLCertificateKeyFile /etc/apache-ssl/ssl/ip-13.key > ProxyPass / http://intra-8.lan/ > ProxyPassReverse / http://intra-8.lan/ > </VirtualHost> > > An here is the apache 2.2 config file : > <IfModule mod_ssl.c> > <VirtualHost xx.xx.xx.xx:443> > ServerName extranet-new.enterprise.com > ServerAdmin support@xxxxxxxxxxxxxx > SSLEngine On > SSLCertificateFile /etc/apache2/ssl/ip-14.crt > SSLCertificateKeyFile /etc/apache2/ssl/ip-14.key > ProxyRequests Off > <Proxy *> > Order Deny,Allow > Allow from all > </Proxy> > ProxyPass / http://intra-8.lan/ > ProxyPassReverse / http://intra-8.lan/ > </VirtualHost> > </IfModule> > > I really need to migrate this website to the new server, any idea ? > > Jeremie > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > -- "The secret impresses no-one, the trick you use it for is everything" - Alfred Borden (The Prestiege) --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|