|
Hello,
I have a server that has been reaching max clients serveral times per day. When I look at apache-status, 90% of the children are in "Reading Request" state. Most of them stay in that state until the apache "Timeout" is reached. However, some of the children stay reading until I restart http. Since this causes my server to become unresponsive, I've lowered the Timeout to 200, which helps somewhat, but we still have the problem. Here is server status of a couple of stuck processes:
Why do the processes stay "reading" when they have surpassed the timeout? I've seen other people post about this problem but no one ever responds. Here is the ssl log for these "stuck" processes and it usually ends with "SSL handshake timed out" [05/Mar/2004 05:52:08 21978] [info] Connection to child 10 established (server www3.homecu.net:443, client 66.153.14.11) [05/Mar/2004 05:52:08 21978] [info] Seeding PRNG with 1160 bytes of entropy [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Handshake: start [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Loop: before/accept initialization [05/Mar/2004 05:52:08 21978] [trace] Inter-Process Session Cache: request=GET status=FOUND id=AABA019681BD42892F8E6F1B30AA9AD295FC1ED0FEEA47F5AB13FB427087CE5C (session reuse) [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Loop: SSLv3 read client hello A [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Loop: SSLv3 write server hello A [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Loop: SSLv3 write change cipher spec A [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Loop: SSLv3 write finished A [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Loop: SSLv3 flush data [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Loop: SSLv3 read finished A [05/Mar/2004 05:52:08 21978] [trace] OpenSSL: Handshake: done [05/Mar/2004 05:52:08 21978] [info] Connection: Client IP: 66.153.14.11, Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits) [05/Mar/2004 05:52:09 21978] [info] Initial (No.1) HTTPS request received for child 10 (server www3.homecu.net:443) [05/Mar/2004 05:52:09 21978] [info] Connection to child 10 closed with unclean shutdown (server www3.homecu.net:443, client 66.153.14.11) [05/Mar/2004 05:52:12 21978] [info] Connection to child 10 established (server www3.homecu.net:443, client 66.153.14.11) [05/Mar/2004 05:52:12 21978] [info] Seeding PRNG with 1160 bytes of entropy [05/Mar/2004 05:52:12 21978] [trace] OpenSSL: Handshake: start [05/Mar/2004 05:52:12 21978] [trace] OpenSSL: Loop: before/accept initialization [05/Mar/2004 05:52:13 21978] [trace] OpenSSL: Loop: SSLv3 read client hello A [05/Mar/2004 05:52:13 21978] [trace] OpenSSL: Loop: SSLv3 write server hello A [05/Mar/2004 05:52:13 21978] [trace] OpenSSL: Loop: SSLv3 write change cipher spec A [05/Mar/2004 05:52:13 21978] [trace] OpenSSL: Loop: SSLv3 write finished A [05/Mar/2004 05:52:13 21978] [trace] OpenSSL: Loop: SSLv3 flush data [05/Mar/2004 05:52:13 21978] [trace] OpenSSL: Loop: SSLv3 read finished A [05/Mar/2004 05:52:13 21978] [trace] OpenSSL: Handshake: done [05/Mar/2004 05:52:13 21978] [info] Connection: Client IP: 66.153.14.11, Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits) [05/Mar/2004 05:52:13 21978] [info] Initial (No.1) HTTPS request received for child 10 (server www3.homecu.net:443) [05/Mar/2004 05:52:13 21978] [info] Connection to child 10 closed with unclean shutdown (server www3.homecu.net:443, client 66.153.14.11) [05/Mar/2004 05:52:32 21978] [info] Connection to child 10 established (server www3.homecu.net:443, client 66.153.14.11) [05/Mar/2004 05:52:32 21978] [info] Seeding PRNG with 1160 bytes of entropy [05/Mar/2004 05:52:32 21978] [trace] OpenSSL: Handshake: start [05/Mar/2004 05:52:32 21978] [trace] OpenSSL: Loop: before/accept initialization [05/Mar/2004 05:55:53 21978] [trace] OpenSSL: Exit: error in SSLv2/v3 read client hello A [05/Mar/2004 05:55:53 21978] [error] SSL handshake timed out (client 66.153.14.11, server www3.homecu.net:443) This is a redhat 7.2 box with: openssl-0.9.6b-35.7 mod_ssl-2.8.12-3 apache-1.3.27-3.7.2 Config file SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 Any ideas where to go from here to determine why this is happening? Thanks, Joe Pearson |
- RE: SSL Handshake time out Joe Pearson
- RE: SSL Handshake time out John . Airey
- Re: SSL Handshake time out Joe Pearson
