Re: proxy:ajp 'client denied by server configuration' when too many simultaneous requests happen

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




----- Original Message -----
> httpd error log:
> client denied by server configuration:
> proxy:ajp://localhost:8009/geoserver/gwc/service/wms
> 
> This happens under 'high' load only (pages usually display

How high? Are we talking high demand, or high CPU?

> fine...there's no specific bad URL here).

Interesting.. usually this is caused by configuration mistakes:
http://wiki.apache.org/httpd/ClientDeniedByServerConfiguration

> 
> httpd snippet:
> ProxyPreserveHost on
> RewriteRule ^/geoserver/(.*)$ ajp://localhost:8009/geoserver/$1 [P]
> ProxyPassReverse /geoserver ajp://localhost:8009/geoserver/

Why are you doing that? It doesn't make *any* sense.

Why not use

ProxyPass /geoserver/ ajp://localhost:8009/geoserver/
ProxyPassReverse /geoserver ajp://localhost:8009/geoserver/

See: http://wiki.apache.org/httpd/WhenNotToUseRewrite
And: http://www.apachetutor.org/admin/reverseproxies

Please change it accordingly, and see report back whether
it's still happening or not.
 
> <LocationMatch "^(/[\w_]*/geoserver/.*)">
>     Order Allow,Deny
>     Allow from all
>   </LocationMatch>
> 
> I have tried this without any apparent difference:
> <Proxy ajp://localhost:8009>
>     ProxySet keepalive=On timeout=15 ttl=60
> </Proxy>
> 
> Happens even with 'Allow from all' in proxy.conf (in fact nothing in
> that file makes any difference, presumably as it only affects Forward
> proxies.

You should probably delete that file.

Or see:
http://wiki.apache.org/httpd/DebianDeb0rkification


> Back-end is GeoServer in Tomcat 6 (exactly same thing happened with
> 5.5) on Debian Squeeze 64-bit & current Sun JVM.
>
> Nothing in the logs at the back-end, though, seems to be a problem
> with the Connector.
> Same thing whether or not using the 'APR based Apache Tomcat Native
> library 1.1.20' or not.
> I tried putting in a connectionTimeout into server.xml, but it makes
> no difference:
> <Connector port="8009" protocol="AJP/1.3" redirectPort="8443"
> connectionTimeout="60000" />
> 
> Only web posts I've seen are the on/off conditions rather than
> erratic ones.
> 
> Many thanks, for any suggestions :)
> 
> Fran.


i

-- 
Igor GaliÄ

Tel: +43 (0) 664 886 22 883
Mail: i.galic@xxxxxxxxxxxxxx
URL: http://brainsware.org/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux