ot; set so I assumed that only
timeouts would cause workers to go into Err.
However, when one of the IIS boxes returns a 500, this also seems to
trigger the Err state.
Two questions:
1. Is this expected behaviour?
2. If so, do any other HTTP response codes trigger the Err state as well?
Regard
ks Indexes".
You would also need to ensure that you either do not have the file
specified by DirectoryIndex (It defaults to index.html) or you set
DirectoryIndex to something you don't expect to see in that directory.
- --
Mark Watts BSc RHCE
Senior Systems Engineer, MSS Secure Managed Hosting
(netstat -aln | grep ESTABLISHED)
- - Compare above with number of hits in your access.log
- - Any errors in the error.log?
- - PHP->Database connection tuning?
(Database should be able to support MaxClients connections)
- - Whats the I/O load of the system?
(iostat)
Mark.
-
ookie with a sensible lifetime (~1 day).
If the cookie is set and valid allow the download, otherwise redirect to
the login page.
Mark.
- --
Mark Watts BSc RHCE
Senior Systems Engineer, MSS Secure Managed Hosting
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 10/27/2010 01:40 PM, lists.httpd-u...@duinheks.nl wrote:
> Hello,
>
> Regularly I see entries in the error log like: "GET
> http://98.126.64.106/judge123.php HTTP/1.1" 404
This is a test to see if you are running an open pr
ny, work in porting httpd to MPI
simply because scaling httpd is a solved problem.
As CPU core and thread counts grow, so httpd scales within the box.
If you're hitting the limits of your box, you add more and load balance.
Network load balancers (ipvsadm, F5 BigIP, Cisco etc) are one approach.
> across timeout but what I do not want is duplicate the request right now
> than each he gives 300 seconds, this does that the tomcat die .
sounds like a pretty unpleasant web-app.
Anyway, try increasing ProxyTimeout to something large:
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#pro
gt;> The easy tool for this
>
> Dammit, just overlooked the really easy ...
>
> Require file-owner
>
> which should be ideal since you don't have
> multiple authn files.
>
This isn't documented syntax; is it a 2.3 thing?
http://httpd.apache.org/docs/current/
are available: http://httpd.apache.org/download.cgi
It'll run on any version of Windows 2008. Common sense would suggest the
most recent version is probably best, 64bit or not.
Mark.
- --
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, IPR Secure Managed Hosting
www.QinetiQ.com
QinetiQ - Delivering custo
Apache server hostname.
>
> Best Regards,
> Tushar.
>
>
>
If they're proper 4xx or 5xx errors coming from the origin server, set:
ProxyErrorOverride on
This should allow you to return custom error documents on the proxy.
Mark.
- --
Mark Watts BSc RHCE MBCS
S
t seen by Apache
until after the SSL handshake.
There are exceptions to this: Wildcard certificates (for
"*.example.com") and "SNI" are two.
Mark.
- --
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, IPR Secure Managed Hosting
www.QinetiQ.com
QinetiQ - Delivering custom
here, since its part of the standard httpd
package.
http://httpd.apache.org/download.cgi
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
De
ssue
>
You need to give more information on what you are doing with the server
and how its configured.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
ion file(s) do you have these directives? (the
Files or FilesMatch block) ?
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Desc
g, use
"IndexIgnore"
http://httpd.apache.org/docs/2.2/mod/mod_autoindex.html#indexignore
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Description: This is a digitally signed message part
memory
caches would probably remove most server I/O bottle necks, leaving
Internet bandwidth as the main issue.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.in
ID stuck at 100%, it should give you some
insight into what apache is doing. If you are lucky, you can match the
PID with a client IP (netstat -p) which will allow you to look in your
logs to see what that client is doing.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpo
that you don't get to pick which URL your customers will
use, so you may get UK customers going to .com and vice-versa.
As already mentioned, mod_geoip will allow you to redirect clients to
the 'correct' URL, although you may wish to provide a mechanism to
override that in the event th
# Logging and other directives go here>
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Description: This is a digitally signed message part
ISIS
> 25 <-- CRISIS
> 55 <-- RECOVERY
> 98
> 93
> 101
>
> What can be the reason for this behaviour?
> Thank you very much for your help. Best regards!
What kind of Load Balancing?
Apache wouldn't log a ping, since its not a valid HTTP request, so I
don't kn
; Hope this to be useful
>
Stats here put IE usage at 66% with IE6 as 10% of that.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Descr
usually enough, although the actual upper limit
is dependant on memory usage of each request. Only you can tell that.
Other tunables such as StartServers and Max/MinSpareServers simply
control the ramp-up rate for preforking new workers.
'ab' is a basic testing tool and should come wit
till be applicable after all the proxying work
> is done (it wouldn't with ProxyPass, but it might since you had
> mod_rewrite in htaccess)
>
>
Eric - what makes [P] valid in an htaccess, but not
ProxyPass/ProxyPassReverse ?
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer,
ch vhost so I don't need to
setup any filters. YMMV.
The template and template_escape stuff ensures that the log entry on the
log servers disk is the exact same format as you'd get directly from
Apache using normal logs. You won't get syslog timestamps with this.
Mark.
--
Mark W
.@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
http://wiki.apache.org/httpd/DistrosDefaultLayout#Debian.2C_Ubuntu_.28Apache_2.29:
/etc/apache2/sites-available/default contains the default VirtualHost
and thus the default DocumentRoot.
Mark.
--
Mar
icensed for two
machines, you can use the same Key/Certificate pair on both machines.
You would *not* create one Key for use with multiple CSR requests for
different hostnames.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Deliv
o
> start up. The only thing in the error_log file is a complaint about the
> PID file was overwritten:
Apache has a perfectly good Windows version already. Why are you
throwing that away for a hacked version on top of a hacked Unix
environment for Windows?
--
Mark Watts BSc RHCE MBC
cer here
and /balancer-status is telling me that exactly 1/2 of my requests are
going to each of my 2 back-end servers.
If you could paste some actual numbers, that would help.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Deliverin
#
> # The following directives modify normal HTTP response behavior to
> # handle known problems with browser implementations.
> #
> BrowserMatch "Mozilla/2" nokeepalive
> BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0
> force-response-1.0
> Brow
s; worker's limits are
> 2 child processes and 2 threads per process
>
> (expect to hit system limits long before that)
We usually hit bandwidth limits first :)
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Deliv
"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_LOCKFILE="logs/accept.lock"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Description: This is a digitally signed message part
/awstatsclasses "/usr/share/awstats/wwwroot/classes/"
Alias /awstatscss "/usr/share/awstats/wwwroot/css/"
Alias /awstatsicons "/usr/share/awstats/wwwroot/icon/"
ScriptAlias /awstats/ "/usr/share/awstats/wwwroot/cgi-bin/"
the custom page but with a 200.
Naturally, this means that logs from the proxy never include 404's,
which isn't the case. (I can't really use logs from the back-end server,
since they don't reflect the true source IP).
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems E
eleasing the server resources to be
reused for another client (assuming the child process/thread isn't
reaped at that time).
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http
t, I reload the web page of mod_status and
> busy_worker = 30.
>
>
> After 5 seconds, busy_worker was like 1.
>
Keepalives?
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Ke
.
It is a module only available on 2.2.x and later.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Description: This is a digitally signed message part
e_module modules/mod_rewrite.so
> LoadModule setenvif_module modules/mod_setenvif.so
> #LoadModule speling_module modules/mod_speling.so
> #LoadModule ssl_module modules/mod_ssl.so
> #LoadModule stat
BalancerMember http://10.x.x.x:5102
BalancerMember http://10.x.x.x:5103
BalancerMember http://10.x.x.x:5104
ProxyPass / balancer://127.0.0.1:8001/
ProxyPass / balancer://127.0.0.1:8002/
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engin
x27;t working for you?
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Description: This is a digitally signed message part
e mode 400 and owned by root.
This should be all you need to do, aside from any other mod_ssl
configuration you need.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-
On Wed, 2009-11-11 at 21:07 -0500, Rich Bowen wrote:
> Collecting unscientific statistics in the interest of the future. A
> show of hands: Are you using mod_imagemap?
No.
I've had to refer to both the httpd docs and Wikipedia to find out what
it does.
Mark.
--
Mark Watts BS
l servers) as one single
site to clients.
ServeName"www.example.com"
DocumentRoot "/var/www/html"
ProxyPass/order/ http://backend-order-server/order/
ProxyPassReverse /order/ http://backend-order-server/order/
etc...
--
Mark Watt
gs or disable
back-end servers.
Cheers,
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manpower
www.QinetiQ.com
QinetiQ - Delivering customer-focused solutions
GPG Key: http://www.linux-corner.info/mwatts.gpg
signature.asc
Description: This is a digitally signed me
L at all.
Reason being, many browsers (particularly those from Redmond) will
confuse the user with requests to load "insecure items" when they
encounter http://example.com/foo.jpg> tags and suchlike.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Services Manp
Can someone point
> me to some documentation for that? Googling for "?C=M;O=a" gets hundreds of
> examples but no docs.
>
This is mod_autoindex
http://httpd.apache.org/docs/2.2/mod/mod_autoindex.html#query
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Serv
gt; i'm realyy stuck, any idea!!
A list of compiled-in modules is pretty useless.
Please provide a better description of your problem, including error
messages, configuration information and anything else relevant.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer, Managed Servic
72.16.20.11 - - [14/Oct/2009:11:08:30 +] "GET / HTTP/1.1" 302 229
"-" "Wget/1.10.2"
172.16.20.11 - - [14/Oct/2009:11:08:30 +]
"GET /output/uk-home-page.html HTTP/1.1" 200 15750 "-" "Wget/1.10.2"
Can anyone help me understand
wd");
>
>
>
> how to solve these problems?
>
> Thank's
chmod 700 /etc/passwd
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted Solutions and Services Group
GPG Key: http://keyserver.veridis.com:11371/search?q=0x455420ED
pgp98SCjjUSgi.pgp
Description: PGP signature
y=$1
Rewriting to an external host (which is what an http:// URL is) forces an
implicit redirect.
The originally suggested RewriteRule did not use http://%{HTTP_HOST} for this
reason.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted So
> I want to redirect visitors from http://www.foo.com/folder/index.html to
> http://folder.foo.com/index.html
>
> What is the best way to accomplish this?
RedirectMatch permanent /([^/]*)/index.html http://$1.foo.com/index.html
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Syst
4 {} \;
# find -type -d -exec chmod 755 {} \;
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted Solutions and Services Group
GPG Key: http://keyserver.veridis.com:11371/search?q=0x455420ED
pgpeftyHW1XXp.pgp
Description: PGP signature
> In Apache, is there a way to serve images from memory instead of disk?
>
> -Cathy
> www.nachofoto.com
If you are using Linux, the kernel aggressively tries to keep file in cache
(ram). So after the first access, most files are cached in ram anyway.
Mark.
--
Mark Watts BSc RHCE
n" elsewhere in your config.
Set it to Off and see if that helps.
http://httpd.apache.org/docs/2.0/mod/core.html#usecanonicalname
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted Solutions and Services Group
GPG Key: http://keyserver.veridis.com:11371/search?q=0x455420ED
pgppyoqGnbQto.pgp
Description: PGP signature
AllowOverride None
>
> Options None
This may be overriding the ScriptAlias stuff. Try changing it to "+ExecCGI"
instead of "None"
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted Solutions and Services Group
GPG Key: http://keyserver.veridis.com:11371/search?q=0x455420ED
pgpw9ub8BiVss.pgp
Description: PGP signature
> Hi, I need to download 1.3 version for windows but i do not see it on the
> apache.org site. It has only 2.0 and higher version. Can someone please
> help how and where i can download the 1.3 version.
> Thankyou
http://archive.apache.org/dist/httpd/binaries/win32/
--
Mark Wa
> On 6/15/07, Mark Watts <[EMAIL PROTECTED]> wrote:
> > > On 6/15/07, Boyle Owen <[EMAIL PROTECTED]> wrote:
> > > > I'd try it and see - I think the worst that can happen is that you
> > > > see no effect; ie, things don't get any bett
an "experimental" module might do to my
> webserver's stability (which has so far been rock solid).
>
> Krist
If you have no problems, why are you looking to introduce another module to
add negligible benefit?
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
Qi
ur CustomLog directives accordingly, or if you change the
"combined" format, you ensure that your CustomLog directives are configured
to use it.
Mark.
--
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted Solutions and Services Group
GPG Key: http://keyserver.veridis.com:11371/search?q=0x455420ED
pgpbH1STOUOG7.pgp
Description: PGP signature
tions.
> What is better, espacially concerning the security ?
> - linking with symlinks from htdocs to the other partition and allowing
> symlinks ?
> - or using alias ?
Move the DocumentRoot directory to the other filesystem and change the
DocumentRoot (and applicable ) settings as appr
59 matches
Mail list logo