[us...@httpd] Apache 2.2.11 mod_proxy returns 503 (service unavailable) under load
We are running a high volume portal that uses Apache 2.2.11 mod_proxy to reverse proxy content from downstream apache-> application servers, we recently started observing 503 errors on the Apache which happen sporadically throughout the day during activity on random requests. The requests returned with 503 don't appear on the backend apache access logs at all, there are no 503 failures on backend apache.Network traces of connectivity between frontend apache & the backend don't reveal anything either. An interesting pattern is the failed requests always take ~3-4 seconds Frontend Apache: Error log: [Wed Jul 14 15:59:46 2010] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 1xx.7x.xxx.xxx:80 (web.mycompany.net) failed [Wed Jul 14 15:59:46 2010] [error] ap_proxy_connect_backend disabling worker for (web.mycompany.net) Access log: "USER13" xx.xx.xxx.xxx - [14/Jul/2010:15:59:43 -0400] "GET /myapp/web/css/ext-all.css HTTP/1.1" 503 1030 3041412 Backend: This request never reached the backend server & doesn't shows up in the access logs of backend server All the failing requests like the above take ~3 seconds so i guess its like a timeout but i can't find any such configuration. Is there some known Apache bug for this behavior? We have retry=0 & disablereuse on for all proxy pass directives What kind of starvation should i look for in Apache we have mod_status enabled, file descriptor limit set a 64K, CPU is almost always idle & 25 Gig memory free on the server. Thanks - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] 2 reverse proxy to serve an application
Ok I am trying what you said. The original error as Tom suggested in application was http://www.spinics.net/lists/apache-users/msg95596.html its not possible to configure the application to generate absolute URLs. I just mentioned the above thread if you want to know what exactly I am trying. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] How to ignore common name during client certificate verification?
All Apache needs is to trust the CA which issued the client cert SR On Thu, Jul 15, 2010 at 10:29 PM, galaft wang wrote: > Hi, > > I am not sure I got your idea...Do you mean: with such configuration: > "SSLEngine on and SSLVerifyClient require", Apache doesn't deny request from > client whose IP(or FQDN) doesn't match its certificate CN? > > But according to my experiments, Apache will deny request with such > configuration. > > Could you please tell me more details about "SSLVerifyClient require". How > does mod_ssl verify client certificate? There are many content in a > certificate, e.g. Issuer, Time Validity, Subject CN, Subject Public Key > Info, etc. Will Apache verify each content? > > > Br, Jason > > > On Wed, Jul 14, 2010 at 6:59 PM, Eric Covener wrote: > >> On Tue, Jul 13, 2010 at 10:21 PM, galaft wang wrote: >> > Hi, >> > Normally, CN would be IP address of the client, if client IP do not >> match >> > its certificate CN, Apache would deny its request. This is used in >> highly >> > secured network. >> >> Not with just SSLEngine on and SSLVerifyClient require it doesn't. >> >> >> -- >> Eric Covener >> cove...@gmail.com >> >> - >> The official User-To-User support forum of the Apache HTTP Server Project. >> See http://httpd.apache.org/userslist.html> for more info. >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org >> " from the digest: users-digest-unsubscr...@httpd.apache.org >> For additional commands, e-mail: users-h...@httpd.apache.org >> >> >
Re: [us...@httpd] How to ignore common name during client certificate verification?
Hi, I am not sure I got your idea...Do you mean: with such configuration: "SSLEngine on and SSLVerifyClient require", Apache doesn't deny request from client whose IP(or FQDN) doesn't match its certificate CN? But according to my experiments, Apache will deny request with such configuration. Could you please tell me more details about "SSLVerifyClient require". How does mod_ssl verify client certificate? There are many content in a certificate, e.g. Issuer, Time Validity, Subject CN, Subject Public Key Info, etc. Will Apache verify each content? Br, Jason On Wed, Jul 14, 2010 at 6:59 PM, Eric Covener wrote: > On Tue, Jul 13, 2010 at 10:21 PM, galaft wang wrote: > > Hi, > > Normally, CN would be IP address of the client, if client IP do not match > > its certificate CN, Apache would deny its request. This is used in highly > > secured network. > > Not with just SSLEngine on and SSLVerifyClient require it doesn't. > > > -- > Eric Covener > cove...@gmail.com > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > >
[us...@httpd] fastcgi
Hi, I fellow instruction to install mod_fcgid-2.3.5, but how can I know fastcgi is running instead of cgi? Thanks Dong - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] mod_proxy: ProxyPass max parameter has no effect
On Thu, Jul 15, 2010 at 2:26 PM, Alessandro Vernet wrote: > Jeff, > > On Thu, Jul 15, 2010 at 10:53 AM, Jeff Trawick wrote: >> AFAIK the only thing you can do with prefork to avoid overrunning the >> backend is to set MaxClients no higher than the maximum number of >> backend connections. But that's useless when you expect httpd to >> forward only a subset of requests to the backend. > > And even if all the requests go to backend servers, that wouldn't > satisfy the requirement of "max per back-end server", MaxClients would > only be a "overall max". (I.e. if I have 4 back-end servers, and want > 4 max concurrent connections per server, I could set MaxClients to 16, > but Apache could at some point in time send more than 4 concurrent > connection to a given back-end server.) oh, right > >> Upcoming httpd 2.4 has loadable MPMs that can be switched out just >> like regular modules. I hope that vendors provide 2-3 MPMs on Unix, >> with a switch as easy as changing the LoadModule directive and >> checking the default config for the new MPM. >> >> But yes, until then this may be a pain to change. > > Then I'm looking forward to 2.4! > > Alex > -- > Orbeon Forms - Web forms, open-source, for the Enterprise - > http://www.orbeon.com/ > My Twitter: http://twitter.com/avernet > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > -- Born in Roswell... married an alien... - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] 2 reverse proxy to serve an application
On Thu, Jul 15, 2010 at 2:40 PM, Tapas Mishra wrote: > Exactly you actually got the core of my configuration.I have done > exactly what you have said. > I got problem in having such a thing.Some that had not worked.The > problem was with the application generating the URLs which had > path as /portal > /library etc > on their documentation page of the application they have not given the > complete thing. > They access it as http://localhost:9090/portal > but when I checked apache response headers I found application was giving URLs > /library/path/to/css > in addition to any element with path /portal > there are many other such html elements in that applicationl. > I asked this question on their community and their documentation was > wrong which I mailed them. > After which no reply came. > I had gone through complete apache2 documentation in this process in > past 10 days many many times. > > So I was going through RFC http://www.ietf.org/rfc/rfc2616.txt > which has described a situation where multiple proxies in a chain are > used for an HTTP_REQUEST > So I wanted to try that on apache2. ProxyVia is how you would use a forward proxy from your reverse proxy, IIUC. But it won't help the absolute URLs. see third-party mod_proxy_html maybe? -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] Custom ErrorDocument
Hi expert, where I can insert the ErrorDocument directive in my ssl.conf virtualhost ? this is my virtualhost directive NameVirtualHost myserver:443 ServerName myserver ProxyRequests off ProxyPass / https://10.173.100.117:8443/ ProxyHTMLURLMap https://10.173.100.117:8443 / ProxyPassReverse https://10.173.100.117:8443/ ProxyHTMLEnable On ProxyHTMLURLMap / / RequestHeaderunset Accept-Encoding ..SSL Directive.. if I insert this directive: DocumentRoot /var/www/error Options Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all ErrorDocument 503 /test.html this is the entry in my apache log (wrong): ictservices_ssl_error_log:[Thu Jul 15 20:58:46 2010] [debug] mod_proxy_http.c(56): proxy: HTTP: canonicalising URL // 10.173.100.117:8443/prova.html ictservices_ssl_error_log:[Thu Jul 15 20:58:46 2010] [debug] proxy_util.c(1488): [client 10.173.202.139] proxy: https: found worker https://10.173.100.117:8443/ for https://10.173.100.117:8443/prova.html ictservices_ssl_error_log:[Thu Jul 15 20:58:46 2010] [debug] mod_proxy_http.c(1960): proxy: HTTP: serving URL https://10.173.100.117:8443/prova.html I want that if the backend application is down (https://10.173.100.117:8443/) the proxy send to client the local file /var/www/error/test.html many thanks for any sugget. Cheers, Mauri
Re: [us...@httpd] 2 reverse proxy to serve an application
Exactly you actually got the core of my configuration.I have done exactly what you have said. I got problem in having such a thing.Some that had not worked.The problem was with the application generating the URLs which had path as /portal /library etc on their documentation page of the application they have not given the complete thing. They access it as http://localhost:9090/portal but when I checked apache response headers I found application was giving URLs /library/path/to/css in addition to any element with path /portal there are many other such html elements in that applicationl. I asked this question on their community and their documentation was wrong which I mailed them. After which no reply came. I had gone through complete apache2 documentation in this process in past 10 days many many times. So I was going through RFC http://www.ietf.org/rfc/rfc2616.txt which has described a situation where multiple proxies in a chain are used for an HTTP_REQUEST So I wanted to try that on apache2. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] mod_proxy: ProxyPass max parameter has no effect
Jeff, On Thu, Jul 15, 2010 at 10:53 AM, Jeff Trawick wrote: > AFAIK the only thing you can do with prefork to avoid overrunning the > backend is to set MaxClients no higher than the maximum number of > backend connections. But that's useless when you expect httpd to > forward only a subset of requests to the backend. And even if all the requests go to backend servers, that wouldn't satisfy the requirement of "max per back-end server", MaxClients would only be a "overall max". (I.e. if I have 4 back-end servers, and want 4 max concurrent connections per server, I could set MaxClients to 16, but Apache could at some point in time send more than 4 concurrent connection to a given back-end server.) > Upcoming httpd 2.4 has loadable MPMs that can be switched out just > like regular modules. I hope that vendors provide 2-3 MPMs on Unix, > with a switch as easy as changing the LoadModule directive and > checking the default config for the new MPM. > > But yes, until then this may be a pain to change. Then I'm looking forward to 2.4! Alex -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] 2 reverse proxy to serve an application
> then how should I write a ProxyPass rule so that the request can pass > 2 reverse proxies in this scenario. I couldn't make much sense of your lengthy post. If system A is a reverse proxy, and system B is an origin server that also listens on localhost:9090 with other content, you'd setup one vhost on system B to proxy to localhost:9090. You'd have to make up a context root or hostname on system A to differentiate the vhost that you hit on system B. -- Eric Covener cove...@gmail.com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] 2 reverse proxy to serve an application
Let us take following scenario Server A ---Server B with Public IP On LAN both A and B are on same subnet an application on B is accessible when you are having a GUI on B and that too only as http://localhost:9090/portal the configuration is ProxyPass / http://localhost:9090/portal ProxyPassReverse / http://localhost:9090/portal Now I have server A which has public IP and following websites are Reverse Proxied from A http://site1.exampleserver.com http://site2.exampleserver.com http://site3.exampleserver.com http://site4.exampleserver.com None of the website is on A they are on different IPs internally. Each of these site1 to site 4 is made accessible via reverse proxy at A. i.e. a request to site2.exampleserver.com is served by an apache vhost as follows ServerAdmin webmas...@localhost ServerName site2.exampleserver.com ProxyRequests off Order deny,allow Allow from all ProxyPreserveHost Off ProxyPass / http://site2.exampleserver.com ProxyPassReverse / http://site2.exampleserver.com Note in above configuration which is vhost for site2 at A, DocumentRoot is missing since the root of the website / has been proxied to some internal IP on which actual site will be served to internet as http://site2.exampleserver.com but to the user it will appear as if http://site2.example.com is coming from A only and user does not knows about presence of B. And on internal server B where the site2.exampleserver.com is actually hosted the server configuration is ServerAdmin webmas...@localhost ServerName site2.exampleserver.com DocumentRoot /var/www Options FollowSymLinks AllowOverride None Options Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all So the main site i.e. site2.example.com is itself running on a ReverseProxy now if I have an application on site2.example.com to access that I have to open a browser on it and type http://localhost:9090/portal then how should I write a ProxyPass rule so that the request can pass 2 reverse proxies in this scenario. -- Tapas - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] mod_proxy: ProxyPass max parameter has no effect
On Thu, Jul 15, 2010 at 12:46 PM, Alessandro Vernet wrote: > Jeff, > > On Thu, Jul 15, 2010 at 5:53 AM, Jeff Trawick wrote: >>> Does this sound about right? >> >> worker or event >> ThreadsPerChild == MaxClients (and may as well set ServerLimit to 1) >> >> One child process is the simplest/most obvious case. I think it will >> still work close enough to the desired goal if you have 2-3 child >> processes which share the workload and connection quota. > > Thank you for the precisions, this is very useful information. For > folks on UNIX who have a prefork MPM and can't easily change to an > worker or event MPM, do you know of an alternative way to achieve the > same result? Or should they just bite the bullet, and switch to a > worker or event MPM? AFAIK the only thing you can do with prefork to avoid overrunning the backend is to set MaxClients no higher than the maximum number of backend connections. But that's useless when you expect httpd to forward only a subset of requests to the backend. Upcoming httpd 2.4 has loadable MPMs that can be switched out just like regular modules. I hope that vendors provide 2-3 MPMs on Unix, with a switch as easy as changing the LoadModule directive and checking the default config for the new MPM. But yes, until then this may be a pain to change. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] mod_proxy: ProxyPass max parameter has no effect
Jeff, On Thu, Jul 15, 2010 at 5:53 AM, Jeff Trawick wrote: >> Does this sound about right? > > worker or event > ThreadsPerChild == MaxClients (and may as well set ServerLimit to 1) > > One child process is the simplest/most obvious case. I think it will > still work close enough to the desired goal if you have 2-3 child > processes which share the workload and connection quota. Thank you for the precisions, this is very useful information. For folks on UNIX who have a prefork MPM and can't easily change to an worker or event MPM, do you know of an alternative way to achieve the same result? Or should they just bite the bullet, and switch to a worker or event MPM? Alex -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] failing to determine servers fully qualified doamin name
> Eg, if your server is called 'bob', then put 'ServerName bob' in the > apache config, and add a line '192.168.1.5 bob' to /etc/hosts. Also what you are saying in these lines if you read first message when I started this thread I had done these changes which you have suggested before pasting the question here on the list in /etc/hosts and ServerName does exists in /etc/apache2/apache2.conf so I had posted the question. The server has different domain names meaning. if one is ending in .edu and another fqdn on same server is ending in .com - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] failing to determine servers fully qualified doamin name
I forgot to mention in previous message the error message line on the manual I was not able to understand if it is please copy paste the specific text from that page I will try to understand again, - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] failing to determine servers fully qualified doamin name
I had read the manual can you tell me which line specifically you are referring to on this page http://httpd.apache.org/docs/2.2/mod/core.html#servername -- Tapas - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] failing to determine servers fully qualified doamin name
On Thu, Jul 15, 2010 at 2:41 PM, Tapas Mishra wrote: > My hostname and fqdns are different. > Did you read the manual entry I linked you to? It was specificly chosen to illustrate why apache emits that error message, and what you can do to fix the problem: """ If no ServerName is specified, then the server attempts to deduce the hostname by performing a reverse lookup on the IP address. """ So it tries to do a PTR (reverse) lookup for your IP, 192.168.1.5, which obviously doesn't return correctly, and so apache emits the error. So to fix it, you must supply a ServerName (in the main config, not a vhost) which apache can resolve. To make sure apache can resolve it, simply add the hostname to /etc/hosts Eg, if your server is called 'bob', then put 'ServerName bob' in the apache config, and add a line '192.168.1.5 bob' to /etc/hosts. (Wondering why I bother.) Tom - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
[us...@httpd] a chain of proxy servers
I am looking for an example of use of Proxvia directive given herehttp://httpd.apache.org/docs/2.0/mod/mod_proxy.html#proxyvia
[us...@httpd] using Apache as a front end
I am looking for an example to use Apache as a front end to two tomcat servers running on different ports on same machine.ProxyPass /site1 http://site1.local.com:8080/ProxyPassReverse /site1 http://site1.local.com:8080/ as in Apache there is Document Root to serve webpages I found Tomcat uses webapps folder and I need to put in my application there.Which I have done.But how do I configure a ReverseProxy so that some one can reach from internet.I tried looking the ProxyPass documentation but I am not clear with how does it rewrites headers or requests.
Re: [us...@httpd] List loaded modules in 2.0.63
Hello, On Wed, Jul 14, 2010 at 04:20:39PM -0400, Eric Covener wrote: > On Wed, Jul 14, 2010 at 4:14 PM, Michael Powe wrote: > > Hello, > > > > Is there a way for me to list out the loaded shared modules in Apache > > 2.0.63? `./httpd -l' lists the compiled-in modules but other methods > > I've tried do not work, e.g. `./httpd -t -D DUMP_MODULES' and the -M > > option apparently wasn't invented at the time of this version. > > You can use something external like lsof/pmap/gdb to just look at what > libs are loaded. Thank you. `lsof | grep httpd | grep modules' did the trick. httpd 6613 www-data mem REG8,1 18192 136074 /opt/IBMIHS/modules/mod_mime.so httpd 6613 www-data mem REG8,1 8541 136062 /opt/IBMIHS/modules/mod_env.so httpd 6613 www-data mem REG8,1 53780 136061 /opt/IBMIHS/modules/mod_log_config.so httpd 6613 www-data mem REG8,1 33950 136072 /opt/IBMIHS/modules/mod_proxy_ftp.so httpd 6613 www-data mem REG8,1 54147 136068 /opt/IBMIHS/modules/mod_unique_id.so httpd 6614 www-data mem REG8,1 7215 136836 /opt/IBMIHS/modules/mod_helloworld.so httpd 6614 www-data mem REG8,1 9929 136052 /opt/IBMIHS/modules/mod_access.so httpd 6614 www-data mem REG8,1 33419 136077 /opt/IBMIHS/modules/mod_autoindex.so httpd 6614 www-data mem REG8,1 34531 136080 /opt/IBMIHS/modules/mod_cgid.so httpd 6614 www-data mem REG8,1 10914 136053 /opt/IBMIHS/modules/mod_auth.so httpd 6614 www-data mem REG8,1800527 136840 /opt/IBMIHS/modules/mod_jk.so Much appreciated. mp -- Michael Powemich...@trollope.orgNaugatuck CT USA The only advice I can give anybody who is about to go out into the world is this: Don't do it. I have been out there. It is a mess. -- Russell Baker, commencement address, Gould Academy, 2003 pgpZtxYF8l5VY.pgp Description: PGP signature
Re: [us...@httpd] failing to determine servers fully qualified doamin name
My hostname and fqdns are different. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] what does 0 mean of serving time
On Wed, Jul 14, 2010 at 11:56 AM, Hu Hailin wrote: > the os of my box is CentOS 5.3 and httpd is the built-in one. > >> it may mean that the requests didn't take long to server AND the clock >> is not high resolution > > I thought so as well, but about 90% of the requests are around > 10_000-100_000µs. Meanwhile 0µs requests are about 5%. > It's hard to believe that is a resolution issue. > Also the rate of 0µs request goes up with server's load going up, not > a good sign, I guess. > > A, it might be something like the requests under 1000µs goes to > 0µs into log file by chance? no idea what you are encountering I just tried %D with built-in httpd on CentOS 5.4 on VMWare on Windows 7 and saw requests in the 3-400 microsecond range, seemingly with microsecond resolution. > > On Thu, Jul 15, 2010 at 12:20 AM, Jeff Trawick wrote: >> On Wed, Jul 14, 2010 at 10:19 AM, Hu Hailin wrote: >>> Hi, >>> >>> http://httpd.apache.org/docs/2.2/en/mod/mod_log_config.html#formats >>> >>> I'm using %D to log the time taken to serve requests. >>> I found the time might be 0 in nonspecific requests. The rate of 0 >>> serving time goes the same trend with server load. >>> >>> Does it mean some kind of timeout? >> >> no >> >> it may mean that the requests didn't take long to server AND the clock >> is not high resolution >> >> is this Windows? if I understand correctly, expensive (in CPU) >> mechanisms are required to get good resolution on Windows >> >> - >> The official User-To-User support forum of the Apache HTTP Server Project. >> See http://httpd.apache.org/userslist.html> for more info. >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org >> " from the digest: users-digest-unsubscr...@httpd.apache.org >> For additional commands, e-mail: users-h...@httpd.apache.org >> >> > > > > -- > islue > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > -- Born in Roswell... married an alien... - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache Process Consuming High CPU resources
On Thu, Jul 15, 2010 at 1:20 PM, Sakthi Esakiappan wrote: > > Hello Amol, > > Don't be innocent, never attach the configuration file in the group message. > It is too risky!!! > Where's the harm in that config file? I might have anonymised the company name, and server admin, but what else in there, precisely, do you think it is harmful for the list to see? Indeed, without the config file we may never have known that SSI are enabled, etc.. Cheers Tom - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] failing to determine servers fully qualified doamin name
On Thu, Jul 15, 2010 at 1:15 PM, Tapas Mishra wrote: > I do not have access to a DNS. > I have a machine on which apache2 is installed on Ubuntu10.04 > I have 2 domain names (both internal) > site1.domain.com > and site2.domain.com > > and 2 vhost files for both of them. > configuration of site1.domain.com is > http://pastebin.com/6yzMzUbS > and configuration of site2.domain.com is > http://pastebin.com/9iE8gG1b > > in /etc/hosts > I have > 192.168.1.5 site1.domain.com site2.domain.com > > now when I am restarting apache2 I am getting following > > apache2: Could not reliably determine the server's fully qualified > domain name, using 192.168.1.5 for ServerName > ... waiting apache2: Could not reliably determine the server's fully > qualified domain name, using 192.168.1.5 for ServerName > > > What do I need to check ? The manual? http://httpd.apache.org/docs/2.2/mod/core.html#servername Google? http://lmgtfy.com/?q=Could+not+reliably+determine+the+server%27s+fully+qualified+domain+name Tom - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] mod_proxy: ProxyPass max parameter has no effect
On Wed, Jul 14, 2010 at 9:53 PM, Alessandro Vernet wrote: > Jeff, > > Thank you for the precisions, and for the updated documentation. Let > me make sure I understand this correctly. > > The use case: > > Simply put, when using Apache as a load balancer, I'd like to limit > the number of connections Apache makes to back-end servers. When > processing requests requires a fair amount memory on back-end servers, > there often isn't much benefit in going over 2 concurrent requests per > core per back-end servers, and or performance might even degrade when > going well over this. So I'd like to tell Apache: "don't send more > than, say, 4 concurrent requests per back-end server; if you have more > (e.g. because all back-end servers are busy, or you need to send the > request to a specific one because of the sticky session, and that guy > is already handling 4 concurrent requests), just queue it". > > How to do it: > > 1. The config looks like (assuming AJP is used to Tomcat): > > ProxyPass / balancer://mycluster/ stickysession=JSESSIONID|jsessionid > > BalancerMember ajp://192.168.0.100:8009 max=4 > BalancerMember ajp://192.168.0.101:8009 max=4 > BalancerMember ajp://192.168.0.102:8009 max=4 > BalancerMember ajp://192.168.0.103:8009 max=4 > > > 2. Prefork MPM can't be used for this. correct, any time you want to allow fewer backend connections than client connections > 3. On Windows, we're all good as winnt MPM creates only one process. > 4. On UNIX, we need to use worker MPM, and need to make sure there is > only one process. This means we need to set ServerLimit to 1 (?). > [This point is a rather drastic requirements, as many organizations > won't want to recompile or use a different Apache than the one they > already have, which is likely to be the prefork on UNIX.] > > Does this sound about right? worker or event ThreadsPerChild == MaxClients (and may as well set ServerLimit to 1) One child process is the simplest/most obvious case. I think it will still work close enough to the desired goal if you have 2-3 child processes which share the workload and connection quota. > > Alex > > On Wed, Jul 14, 2010 at 4:17 AM, Jeff Trawick wrote: >> On Tue, Jul 13, 2010 at 8:42 PM, Alessandro Vernet wrote: >>> Igor, >>> >>> I am running Apache 2.2.14. Re-reading the documentation for "max", I see: >>> >>> The default for a Hard Maximum for the number of connections is the >>> number of threads per process in the active MPM. In the Prefork MPM, >>> this is always 1, while with the Worker MPM it is controlled by the >>> ThreadsPerChild. >>> >>> So the default of max in prefork MPM is 1, which doesn't make any >>> sense unless you understand this as "1 per Apache process". So maybe >>> with prefork, the value of max is per process. Since my understanding >>> is that in prefork there each concurrent request is handled by a >>> different process, that max parameter would be useless in prefork MPM. >>> (Hopefully my understanding is not correct!) >>> >>> Alex >>> >>> On Fri, Jul 9, 2010 at 5:10 PM, Igor Cicimov wrote: H I had to read the documentation again my self and I can't find any mention of what type of MPM is supported in this case. All it says is "Apache will never create more than the Hard Maximum connections to the backend server" so it makes me expect that max parameter should be in force no matter what MPM is in use. But having in mind Eric's comment looks like this is not communicated across different processes and since every thread is a new process in MPM prefork the max setting will fail. >> >> I'm not sure how successful I was, but I recently tried to clarify >> this multi-process issue in the trunk documentation >> (http://httpd.apache.org/docs/trunk/mod/mod_proxy.html#proxypass). It >> seems to be a common confusion, regardless of the level of experience >> of the user. >> >> In fact proxy *could* share the pool limits across MPM child >> processes. However, it wouldn't be practical to share the connection >> pool itself, and I think it would be harmful to share the limits >> without sharing the pool. So this proxy connection pool is probably a >> permanent consideration for the choice between one child process with >> lots of threads vs. multiple child processes with smaller numbers of >> threads. 2-3 child processes with a somewhat large number of threads >> is probably close enough to the simplest/one-child-process solution to >> be able to reasonably configure the pool to match the backend >> capacity. But as there is usually no fairness in the utilization of >> httpd front-end processes, except when the capacity closely matches >> the client load, increasing the number of httpd child processes, and >> thus the number of connection pools, results in underutilized pools, >> or underutilized slices of the overall capacity. >> >> - >> The official User-To-User support f
Re: [us...@httpd] Apache Process Consuming High CPU resources
Hello Amol, Don't be innocent, never attach the configuration file in the group message. It is too risky!!! checkout how may apache process is running the server using netstat netstat -tlpan | grep :80 and check the memory usage for each client. On 15 July 2010 17:40, Amol Puglia wrote: > Hello Mark, > > > > Thanks for the reply. > > > > Our apache is configured with cgi bin scripts which will fetch data from > the database when > > requested by the users. > > > > Attaching the httpd.conf file for your reference. > > > > > > --- On *Thu, 7/15/10, Mark Watts * wrote: > > > From: Mark Watts > Subject: Re: [us...@httpd] Apache Process Consuming High CPU resources > To: users@httpd.apache.org > Date: Thursday, July 15, 2010, 4:57 PM > > > On Thu, 2010-07-15 at 03:54 -0700, Amol Puglia wrote: > > Hello Team, > > > > We have recently installed apache and it is consuming high cpu > > resources. > > > > Apache Version :- 2.0.59 > > > > Operating System : Solaris Sparc 5.10 > > > > kindly help us to troubleshoot issue > > > > You need to give more information on what you are doing with the server > and how its configured. > > > -- > Mark Watts BSc RHCE MBCS > Senior Systems Engineer, Managed Services Manpower > www.QinetiQ.com > QinetiQ - Delivering customer-focused solutions > GPG Key: http://www.linux-corner.info/mwatts.gpg > > > > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > -- With Regards, Sakthi Esakiappan.M Server Administrator MercuryMinds Technologies Pvt Ltd www.mercuryminds.com "An E-Commerce mentor" +91 44 45588587 sakthi.esakiap...@mercuryminds.com www.mercuryminds.com Disclaimer: This message is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you have received this message in error, you are hereby notified that we do not consent to any reading, dissemination, distribution or copying of this message. If you have received this communication in error, please notify the sender immediately and destroy the transmitted information.
[us...@httpd] failing to determine servers fully qualified doamin name
I do not have access to a DNS. I have a machine on which apache2 is installed on Ubuntu10.04 I have 2 domain names (both internal) site1.domain.com and site2.domain.com and 2 vhost files for both of them. configuration of site1.domain.com is http://pastebin.com/6yzMzUbS and configuration of site2.domain.com is http://pastebin.com/9iE8gG1b in /etc/hosts I have 192.168.1.5 site1.domain.com site2.domain.com now when I am restarting apache2 I am getting following apache2: Could not reliably determine the server's fully qualified domain name, using 192.168.1.5 for ServerName ... waiting apache2: Could not reliably determine the server's fully qualified domain name, using 192.168.1.5 for ServerName What do I need to check ? -- Tapas - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache Process Consuming High CPU resources
Hello Mark, Thanks for the reply. Our apache is configured with cgi bin scripts which will fetch data from the database when requested by the users. Attaching the httpd.conf file for your reference. --- On Thu, 7/15/10, Mark Watts wrote: From: Mark Watts Subject: Re: [us...@httpd] Apache Process Consuming High CPU resources To: users@httpd.apache.org Date: Thursday, July 15, 2010, 4:57 PM On Thu, 2010-07-15 at 03:54 -0700, Amol Puglia wrote: > Hello Team, > > We have recently installed apache and it is consuming high cpu > resources. > > Apache Version :- 2.0.59 > > Operating System : Solaris Sparc 5.10 > > kindly help us to troubleshoot issue > You need to give more information on what you are doing with the server and how its configured. -- Mark Watts BSc RHCE MBCS Senior Systems Engineer, Managed Services Manpower www.QinetiQ.com QinetiQ - Delivering customer-focused solutions GPG Key: http://www.linux-corner.info/mwatts.gpg ServerName gordonvcp1.sw.ericsson.se Listen gordonvcp1.sw.ericsson.se:80 User Wgordon Group Wgordon ServerRoot "/opt/web/apache/app/gordon" ServerAdmin w...@dbcc.ericsson.se include /opt/pgm/isuf/1.3/apache/includes/httpd2.std include /opt/pgm/isuf/1.3/apache/includes/mod_ssl2.inc LoadModule ssl_module modules/mod_ssl.so CauchoConfigFile /opt/app/gordon/resin/conf/resin.conf AddType text/html .shtml AddHandler server-parsed .shtml DirectoryIndex index.html index.htm DocumentRoot "/opt/app/gordon/docs" CustomLog "|/opt/web/apache/app/gordon/bin/rotatelogs /opt/web/apache/app/gordon/logs/access_log 86400" combined ErrorLog logs/error_log Options -Indexes +FollowSymLinks -MultiViews AllowOverride None Order allow,deny Allow from all ScriptAlias /cgi-bin/ "/opt/app/gordon/cgi-bin/" AllowOverride None Options +FollowSymLinks Order allow,deny Allow from all Listen gordonvcp1.sw.ericsson.se:443 DocumentRoot "/opt/app/gordon/docs" ServerAdmin w...@dbcc.ericsson.se SSLEngine on SSLCertificateFileconf/ssl.crt/gordon.ericsson.se.crt SSLCertificateKeyFile conf/ssl.key/gordon.ericsson.se.key # SSLCertificateFileconf/ssl.crt/gordonvcp1.sw.ericsson.se.crt # SSLCertificateKeyFile conf/ssl.key/gordonvcp1.sw.ericsson.se.key SSLCipherSuite !ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL SSLOptions +StdEnvVars SSLOptions +StdEnvVars SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response -1.0 SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown ScriptLog logs/userlogs/scriptlog ScriptSock /opt/web/apache/app/gordon/logs/userlogs/scriptsock PassEnv LD_LIBRARY_PATH - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
Re: [us...@httpd] Apache Process Consuming High CPU resources
On Thu, 2010-07-15 at 03:54 -0700, Amol Puglia wrote: > Hello Team, > > We have recently installed apache and it is consuming high cpu > resources. > > Apache Version :- 2.0.59 > > Operating System : Solaris Sparc 5.10 > > kindly help us to troubleshoot issue > You need to give more information on what you are doing with the server and how its configured. -- Mark Watts BSc RHCE MBCS Senior Systems Engineer, Managed Services Manpower www.QinetiQ.com QinetiQ - Delivering customer-focused solutions GPG Key: http://www.linux-corner.info/mwatts.gpg signature.asc Description: This is a digitally signed message part
[us...@httpd] Apache Process Consuming High CPU resources
Hello Team, We have recently installed apache and it is consuming high cpu resources. Apache Version :- 2.0.59 Operating System : Solaris Sparc 5.10 kindly help us to troubleshoot issue
