Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

> On 20 Apr 2018, at 09:52, Luca Toscano wrote: > 2018-04-20 16:27 GMT+02:00 Jim Riggs : > > On 20 Apr 2018, at 08:53, Jim Jagielski wrote: > > > > Sorry for coming in late, but what is the exact issue we are trying to > > solve again? My understanding was that if

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

> On 20 Apr 2018, at 08:53, Jim Jagielski wrote: > > Sorry for coming in late, but what is the exact issue we are trying to solve > again? My understanding was that if someone wanted something like > > ErrorLog "syslog-httpd.log" > > that the current implementation would, incorrectly, se

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

> On 20 Apr 2018, at 01:42, Luca Toscano wrote: > 2018-04-19 17:49 GMT+02:00 Jim Riggs : > Luca - > > Here's the same thing standardizing on strn?cmp(). Not that you couldn't have > done it yourself, but since I had it up, maybe this will save you 30 seconds. &

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

vel]:[tag] (see #60525) */ const char *tag; > On 18 Apr 2018, at 13:32, Luca Toscano wrote: > > Thanks a lot Jim! I like your code change and the extra checks, but I'd > prefer to use strncmp if possible, also in log.c. > Feel free to amend the patch, or I&#

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

ror_fname could be [level]:[tag] (see #60525) */ const char *tag; > On 18 Apr 2018, at 13:32, Luca Toscano wrote: > > Thanks a lot Jim! I like your code change and the extra checks, but I'd > prefer to use strncmp if possible, also in log.c. > Feel free to amend th

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

Fair enough. I'm fine standardizing either way. strn?cmp() is probably more "correct". As it stands, though, the check in core is not actually checking everything that log.c will handle. > On 18 Apr 2018, at 10:15, William A Rowe Jr wrote: > > On Wed, Apr 18, 20

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

I didn't think of this before, but there is one edge case this would miss: if someone (for whatever reason) wants a relative ErrorLog *file* named `syslog*', for example `ErrorLog "syslog-httpd.log"' or `ErrorLog "syslog.log"'. It appears that this is already broken in server/log.c, though. Also

Future of hot standby in balancers [was Re: svn commit: r1828890 - in /httpd/httpd/trunk: ./ docs/log-message-tags/ docs/manual/howto/ docs/manual/mod/ modules/proxy/ modules/proxy/balancers/]

On 11 Apr 2018, at 07:11, jhri...@apache.org wrote: > > Author: jhriggs > Date: Wed Apr 11 12:11:05 2018 > New Revision: 1828890 > > URL: http://svn.apache.org/viewvc?rev=1828890&view=rev > Log: > mod_proxy_balancer: Add hot spare member type and corresponding flag (R). Hot > spare members are >

Re: svn commit: r1828890 - in /httpd/httpd/trunk: ./ docs/log-message-tags/ docs/manual/howto/ docs/manual/mod/ modules/proxy/ modules/proxy/balancers/

> On 11 Apr 2018, at 08:28, Yann Ylavic wrote: > > On Wed, Apr 11, 2018 at 2:11 PM, wrote: >> Author: jhriggs >> Date: Wed Apr 11 12:11:05 2018 >> New Revision: 1828890 >> >> URL: http://svn.apache.org/viewvc?rev=1828890&view=rev >> Log: >> mod_proxy_balancer: Add hot spare member type and cor

Re: A little nit

> On 3 Aug 2017, at 08:30, Jim Jagielski wrote: > > It's just GUI magic... Basically, it will internally take '1.1' and > convert it to 11, 1.0 to 10, etc... If that's the case, I would recommend going 2 decimal places (1.1 = 100, 1.25 = 125, etc.) to allow using percentages. I could see people

Re: A little nit

> On 2 Aug 2017, at 12:33, Jim Jagielski wrote: > > I'll be adding some code to allow for lbfactors to be > single decimal numbers (like 1.1, 2.5, etc...)... People > have asked "How do I change it so that machine B is like 10% > preferred" and I mention that "Well, you could make one a > 10 and

Re: 2.4.27

> On 11 Jul 2017, at 11:46, James Cloos wrote: > >> "JJ" == Jim Jagielski writes: > > JJ> *) mod_http2: disable and give warning when mpm_prefork is encountered. > The server will > JJ> continue to work, but HTTP/2 will no longer be negotiated. [Stefan > Eissing] > > Why break h2

Re: svn commit: r20021 - /dev/httpd/

I don't know that it really matters, but this guy is in there twice (in each CHANGES doc), once with the PR # and once without: > + *) mod_proxy: Allow the per-request environment variable "no-proxy" to > + be used as an alternative to ProxyPass /path !. This is primarily > + to set exce

Re: Ideas from ApacheCon

> On 2 Jun 2017, at 07:20, Jim Jagielski wrote: > >> On Jun 1, 2017, at 1:29 PM, Jim Riggs wrote: >> >> Regardless, even worst case, we are looking at what, iterating 6 pointers >> instead of 3 or 10 instead of 5? We probably have some lower hanging fruit >&g

Implement hot spares in mod_proxy_balancer [was Re: Ideas from ApacheCon]

> On 1 Jun 2017, at 17:15, Yann Ylavic wrote: > > On Thu, Jun 1, 2017 at 10:48 PM, Jim Riggs wrote: >>> On 1 Jun 2017, at 15:25, Yann Ylavic wrote: >>> >>> On Thu, Jun 1, 2017 at 10:22 PM, Yann Ylavic >>> wrote: >>>> On Thu, Jun 1, 201

Re: Ideas from ApacheCon

> On 1 Jun 2017, at 15:25, Yann Ylavic wrote: > > On Thu, Jun 1, 2017 at 10:22 PM, Yann Ylavic wrote: >> On Thu, Jun 1, 2017 at 7:29 PM, Jim Riggs wrote: >>>> On 1 Jun 2017, at 07:55, Jim Jagielski wrote: >>>> 2. I understand the logic behind creati

Re: Ideas from ApacheCon

eemed to add unnecessary complexity. Regardless, even worst case, we are looking at what, iterating 6 pointers instead of 3 or 10 instead of 5? We probably have some lower hanging fruit across the request lifecycle code to increase performance than saving some arithmetic on a handful of structs,

Re: Ideas from ApacheCon

> On 23 May 2017, at 09:16, Jim Riggs wrote: > >> On 18 May 2017, at 13:22, Rainer Jung wrote: >> >> Am 18.05.2017 um 19:46 schrieb Jim Jagielski: >>> Based on feedback from various sessions: >>> >>> o A new-kind of "hot standby" in

Broken OCSP Stapling

This was mentioned in today's Bulletproof TLS newsletter (https://www.feistyduck.com/bulletproof-tls-newsletter/issue_28_lets_encrypt_downtime.html): https://blog.hboeck.de/archives/886-The-Problem-with-OCSP-Stapling-and-Must-Staple-and-why-Certificate-Revocation-is-still-broken.html It discusse

Re: Ideas from ApacheCon

> On 18 May 2017, at 12:46, Jim Jagielski wrote: > > Based on feedback from various sessions: > > o A new-kind of "hot standby" in mod_proxy which kicks >in whenever a worker moves out of the pool (ie, doesn't >wait until all workers are out)... ala a redundant >hard drive. > > o

Re: Ideas from ApacheCon

> On 18 May 2017, at 13:22, Rainer Jung wrote: > > Am 18.05.2017 um 19:46 schrieb Jim Jagielski: >> Based on feedback from various sessions: >> >> o A new-kind of "hot standby" in mod_proxy which kicks >> in whenever a worker moves out of the pool (ie, doesn't >> wait until all workers are o

Re: Ideas from ApacheCon

> On 22 May 2017, at 06:45, Jim Jagielski wrote: > > I'll let Jim Riggs answer that...it came up during his mod_cache > talk. >> On May 18, 2017, at 2:25 PM, Eric Covener wrote: >> >> On Thu, May 18, 2017 at 2:22 PM, Rainer Jung wrote: >>>> o L

ACNA Miami: Who? When?

So, who all will be in Miami? From what I've seen on Sched and messages here: Yes : jimjag, rich, jfc, ruggeri, me No : rowe, covener There are several other ACNA regulars who have been quiet around here lately. Anyone else coming in? I'll be there Sunday evening through Friday morning. I woul

Re: 2.2 and 2.4 and 2.6/3.0

> On 28 May 2015, at 14:30, Reindl Harald wrote: > > Am 28.05.2015 um 21:22 schrieb Rich Bowen: >> On 05/27/2015 05:38 PM, olli hauer wrote: >>> - for long time there was no working mod_php module for 2.4, and >>> changing to >>> php-fpm was not for everyone a solution. >> >> In my experience,

Re: *Match, RewriteRule POLA violation?

> On 1 May 2015, at 10:52, André Malo wrote: > > * Niklas Edmundsson wrote: > >> On Thu, 30 Apr 2015, Yann Ylavic wrote: >>> On Thu, Apr 30, 2015 at 2:57 PM, Jim Riggs > wrote: >>>> Thanks, Yann. I remember looking at this code before. The question &g

Re: *Match, RewriteRule POLA violation?

ot;wrong"? Does it need to be "fixed", or was this distinction made intentionally? Is there a specific use case that requires the regex-matching directives to not get slash-normalized URIs? > On Mon, Apr 27, 2015 at 10:52 PM, Jim Riggs wrote: >> This came up at ApacheCon

Re: Proposal/RFC: "informed" load balancing

On Wednesday, April 29, 2015, Jim Riggs mailto:apache-li...@riggs.me>> wrote: Warn out from writing all of this and hopeful that someone other than me actually cares, I wish you all well today/tonight! *Worn* out, even! Boy, I was tired!

Proposal/RFC: "informed" load balancing

[ Long message and proposal follows. Bear with me. There are a lot of words, but that is because we need a lot of help/input! ;-) ] So, this has come up in the past several times, and we discussed it again this year at ApacheCon: How do we get the load balancer to make smarter, more informed de

Re: Listen on UDS

> On 28 Apr 2015, at 10:20, Graham Leggett wrote: > > On 28 Apr 2015, at 5:17 PM, Jim Jagielski wrote: > >> Anyone looked into having httpd be able to Listen on a UDS, as >> well as scenarios where we may want that even? > > I have always wanted it - one thing it allows us to do is reverse pro

*Match, RewriteRule POLA violation?

This came up at ApacheCon a couple of weeks ago. I just took this knowledge for granted, as I have always accounted for it, but both Rich and Trawick were surprised. As I thought about it some more, it seems this may be a POLA violation. Thoughts? If we agree it should be fixed, I can make the b

ApacheCon Arrival

I just updated for Austin. If you are getting into town on Sunday and are interested in grabbing some dinner, let me know or update the page. Some of us got together last year on ApacheCon Eve and had a nice time. Also update the page if there are other

Re: mod_proxy_fcgi issues

> On Thu, Dec 4, 2014 at 9:58 AM, Eric Covener wrote: >> >> On Tue, Dec 2, 2014 at 4:14 PM, Jim Riggs wrote: >>> P.S. mod_proxy_balancer -> mod_proxy_fcgi -> php-fpm is really fun and >>> interesting too! ;-) >> >> mod_proxy_fcgi seems to ne

Re: ApacheCon Austin, httpd track

On 11/30/2014 11:08 AM, Jeff Trawick wrote: > * deploying Python web apps under uWSGI behind mod_proxy_fcgi/scgi > (some material > here: http://emptyhammock.com/projects/info/pyweb/index.html) On 1 Dec 2014, at 19:15, Daniel Ruggeri wrote: > Similarly, I'm always up for giving my proxy talk if

Re: Time for httpd 2.2.28??

On 16 Jul 2014, at 08:19, Yann Ylavic wrote: > On Wed, Jul 16, 2014 at 3:15 PM, Jim Riggs wrote: >>> If so, I can RM. >> >> PLEASE! We need those thundering herd fixes in mod_cache! :-) >> > > This has already been backported by http://svn.apache.org/r

Re: Time for httpd 2.2.28??

> If so, I can RM. PLEASE! We need those thundering herd fixes in mod_cache! :-)

[patch] regexp rewrite map

[Posting separately to both dev and users to see if anyone on either side sees value in getting this committed.] About a year ago, I had an idea for a new type of RewriteMap that would fill an important need for a few particular use cases that we have [1]. While we were at ApacheCon in Denver,

Re: mod_cache thundering herd bug

On 21 Apr 2014, at 06:38, Graham Leggett wrote: > On 19 Apr 2014, at 10:26 PM, Eric Covener wrote: > >> Graham -- related subject brought up either in Denver or in the bug. >> It seems that when we serve a stale file while the cache is locked, >> the age headers are small instead of large. I go

Re: Configuration error handling after httpd restart

On 14 Apr 2014, at 10:38, Eric Covener wrote: > On Mon, Apr 14, 2014 at 11:15 AM, Mike Rumph wrote: >> If there is an unknown directive in the config file, simply ignore it with a >> warning. > > You can't do that. What if it was "Reqiure"? I agree with Eric. I would not want unknown directiv

Re: Configuration error handling after httpd restart

On 27 Mar 2014, at 14:16, Mike Rumph wrote: > Hello all, > > I have been doing some testing on the results of httpd restart with > configuration errors. > This gave me some interesting results. > > For these tests I build httpd trunk with APR trunk on Linux using the > following configure: >

Re: mod_cache thundering herd bug

On 9 Apr 2014, at 14:46, Eric Covener wrote: > r1023398 for 2.2: > > http://people.apache.org/~covener/patches/httpd-2.2.x-thunder.diff > > The remove_url() prevents other threads from serving a stale cached > file during refresh of a slow response, but it's unnecessary to have a > separate pa

mod_cache thundering herd bug

https://issues.apache.org/bugzilla/show_bug.cgi?id=50317 While we are at ApacheCon, I would love to address this nasty bug with someone familiar with 2.2's mod_cache. Our sites were brought down a few times last year before we finally tracked it down to being this particular bug. I am using a c

Re: FreeBSD make

On 20 Dec 2013, at 07:04, Jim Jagielski wrote: > OK... this is weird, FreeBSD 9.2 make doesn't like > > http://svn.apache.org/viewvc?view=revision&revision=1327907 > > gmake works fine. :/ > > (can't grab what the exact error is right now, but something > like needs an operator or someth

New RewriteMap Help/Suggestions

I am in the process of preparing a patch to add a new RewriteMap type and could use some input from all of you on the best implementation. What I am creating is basically a clone of the txt map type, except that each line is a regexp followed by a replacement (with potential back-references). "

Re: [PATCH] mod_log_forensic security considerations

On Jun 8, 2012, at 11:51 AM, Graham Leggett wrote: > On 08 Jun 2012, at 5:45 PM, Joe Schaefer wrote: > >> Well not quite, we'd still have had a problem with storing and archiving >> those logs even if we hadn't made them available to committers, because >> they violate our password retention poli

Re: [PATCH] mod_log_forensic security considerations

On Jun 7, 2012, at 3:11 PM, Stefan Fritsch wrote: > I share Williams concern that this makes mod_forensic potentially less > useful. > > Maybe making the forensic log mode 600 by default would be a better > idea? I have to agree with Jeff. I would rather have a more difficult or even impossi

Re: svn commit: r1242351 - in /httpd/httpd/trunk: docs/manual/mod/mod_proxy.xml modules/proxy/mod_proxy.c modules/proxy/mod_proxy.h modules/proxy/mod_proxy_fcgi.c server/util_script.c

On Feb 9, 2012, at 10:22 AM, Ruediger Pluem wrote: > j...@apache.org wrote: >> Author: jim >> Date: Thu Feb 9 15:07:22 2012 >> New Revision: 1242351 >> >> URL: http://svn.apache.org/viewvc?rev=1242351&view=rev >> Log: >> Handle cases, esp when using mod_proxy_fcgi, when we do not >> want SCRIPT_

mod_proxy_fcgi and EAGAIN (hacking)

Here is what I am testing: I am using (currently one) mod_proxy_fcgi member in a balancer to php-fpm. I have already run into some issues with fcgi:// as a balancer member as described in

Re: balancer-manager and XML

On Nov 30, 2011, at 10:26 AM, Jim Riggs wrote: > On Nov 30, 2011, at 9:16 AM, Jim Jagielski wrote: > >> The XML interface for the balancer manager has, admittedly, lagged >> behind... >> >> Anyone have cycles and/or talent to bring it up to snuff? If not,

Re: balancer-manager and XML

On Nov 30, 2011, at 9:16 AM, Jim Jagielski wrote: > The XML interface for the balancer manager has, admittedly, lagged > behind... > > Anyone have cycles and/or talent to bring it up to snuff? If not, > I'll try to muddle thru it ;) As I mentioned to Jim at ApacheCon, I have a 2.2 patch for this

Re: RFE: Control of HTTP cache control headers within mod_rewrite rules

On Oct 27, 2011, at 3:35 PM, Stefan Fritsch wrote: > On Tuesday 25 October 2011, Noah Robin wrote: >> I ran some tests on this and the following modified version will >> work: >> >> Header always set Cache-Control max-age=%{CACHE_LIFETIME}e >> env=CACHE_LIFETIME >> RewriteRule /example http://www

mod_proxy_fcgi + mod_proxy_balancer vs. php-fpm and query strings

I am having a couple of problems WRT using mod_proxy_fcgi inside a balancer proxied to php-fpm. There are lots of variables in this scenario, but I think I have narrowed the issues down. The setup looks like this: httpd -> balancer -> fcgi balancer members -> php-fpm Issue 1: PHP-FPM does not

Re: mod_proxy_ajp: ignoring flush before headers (again)

ckport > tracker for 2.2.x. > > Regards > > Rüdiger > >> -Original Message- >> From: Jim Riggs >> Sent: Mittwoch, 3. August 2011 16:48 >> To: dev@httpd.apache.org >> Subject: Re: mod_proxy_ajp: ignoring flush before headers (again) >

Re: mod_proxy_ajp: ignoring flush before headers (again)

; > -apr_brigade_cleanup(output_brigade); > } > } > else { > > Currently the code sends an empty brigade in your case which also triggers > the sending of headers by httpd. > > Regards > &g

mod_proxy_ajp: ignoring flush before headers (again)

For some (old 2007) context, see: http://markmail.org/message/btwcnbl2i7ftwj4n https://community.jivesoftware.com/message/201787 I am proxying an app via AJP to Tomcat 6/7. In certain circumstances, it appears that the app (or possibly Tomcat) is erroneously sending a flush before the header