Re: HTTP 400 from tcp half-open health checks

Correct me if I am wrong, but isn't such logging necessary to detect syn flood attacks(expected behavior)? On Thu, May 25, 2023 at 7:29 PM Mark Thomas wrote: > On 25/05/2023 09:14, Paul Baines wrote: > > Hello! We upgraded a Windows Tomcat instance from 8.5.41 to 8.5.84. This > Tomcat instance i

Re: HTTP 400 from tcp half-open health checks

On 25/05/2023 09:14, Paul Baines wrote: Hello! We upgraded a Windows Tomcat instance from 8.5.41 to 8.5.84. This Tomcat instance is behind a load balancer. Since the upgrade the Tomcat access log (AccessLogValve) has an "empty" entry with response 400 for every TCP half-open health check from the

HTTP 400 from tcp half-open health checks

Hello! We upgraded a Windows Tomcat instance from 8.5.41 to 8.5.84. This Tomcat instance is behind a load balancer. Since the upgrade the Tomcat access log (AccessLogValve) has an "empty" entry with response 400 for every TCP half-open health check from the load balancer. Because the health chec