JK Connector & SYN packet for established connection

2004-03-10 Thread CONANT,PATRICK (HP-FtCollins,ex1)
I'm running into an issue with our JK communications being interrupted by our firewall. Any help would be appreciated... Our firewall is reporting that the JK Connector is sending SYN packets for connections that are already established. The firewall is configured to drop connections that are i

Re: JK Connector & SYN packet for established connection

2004-03-10 Thread David Rees
CONANT,PATRICK (HP-FtCollins,ex1) wrote, On 3/10/2004 7:58 AM: Our workers.properties file is pretty simple: worker.list=frontend worker.frontend.host=X.XXX.hp.com worker.frontend.type=ajp13 worker.frontend.port=8007 Try setting the socket_keepalive and socket_timeout options and see if that h

RE: JK Connector & SYN packet for established connection

2004-03-11 Thread CONANT,PATRICK (HP-FtCollins,ex1)
hanks, Pat. -Original Message- From: David Rees [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 9:47 AM To: Tomcat Users List Subject: Re: JK Connector & SYN packet for established connection CONANT,PATRICK (HP-FtCollins,ex1) wrote, On 3/10/2004 7:58 AM: > > Our worker

RE: JK Connector & SYN packet for established connection

2004-03-11 Thread David Rees
CONANT,PATRICK (HP-FtCollins,ex1) wrote: > Thanks for the proposal. We made the change, but to no avail. When the > IIS server came back up, we saw the same problem start almost immediately. > > The only other report of this problem I could find was for a different > product (http://www.firewall-

Re: JK Connector & SYN packet for established connection

2004-03-11 Thread Antonio Fiol Bonnín
That won't help. socket_timeout tells Apache to CLOSE connections that have been unused for that time, but only WHEN it needs it. So that will cause problems on the Tomcat side. What we did (but our problem was slightly different) was: Set the tcp keepalive sysctl of the web server (it is a Li

Re: JK Connector & SYN packet for established connection

2004-03-11 Thread David Rees
Antonio Fiol Bonnín wrote: > That won't help. I think it will, see below. > socket_timeout tells Apache to CLOSE connections that have been unused > for that time, but only WHEN it needs it. > > So that will cause problems on the Tomcat side. Why will it cause problems on the Tomcat side? IMO,

Re: JK Connector & SYN packet for established connection

2004-03-11 Thread Antonio Fiol Bonnín
socket_timeout tells Apache to CLOSE connections that have been unused for that time, but only WHEN it needs it. So that will cause problems on the Tomcat side. Why will it cause problems on the Tomcat side? See below. IMO, it has a good chance of fixing the problem as Apache/mod_jk will

Re: JK Connector & SYN packet for established connection

2004-03-12 Thread David Rees
Antonio Fiol Bonnín wrote, On 3/11/2004 11:11 PM: Tomcat will detect the closed connection and return that JK thread back to the pool for later use. It won't. If the firewall has already dropped the connection, Tomcat will not notice it being closed. OK, so if the conn is dropped, TC won't know wh