Hi all,
We're trying to mount a reverse proxy cluster using two apache
severs (httpd v2.2.14) balanced by a hardware load balancer (CISCO).
This balancer distribute the incoming requests to each reverse proxy.
The implented system seems to work well with most of the applications
but we have found some problems with an SSL application when somebody
wants to upload files: the error 413 use to appears (not always):
Request Entity Too Large. We have no clue about the problem. The thing
is with only one server active of the cluster the application works
perfectly.
The configuration is shared between proxys and the reverse-proxy is
implemented using name virtual hosts.
Any idea?
Regards,
Regards,
Manuel Vicente.
VirtualHost Configuration
<VirtualHost *:443>
ServerName plataform-temp.example.com:443
ErrorLog "/usr/local/apache2/logs/error_plataform_ssl.log"
CustomLog "/usr/local/apache2/logs/access_plataform_ssl.log"
combined
KeepAlive On
KeepAliveTimeOut 15
Include conf/ssl.conf
<Location />
SSLRequireSSL
SSLVerifyClient require
SSLVerifyDepth 1
SSLRequire %{SSL_CLIENT_VERIFY} eq "SUCCESS"
SSLOptions +ExportCertData +OptRenegotiate
#Weblogic module configuration
SetHandler weblogic-handler
WebLogicHost sxpa1.example.com
WebLogicPort 8057
MatchExpression *.jsp
PathPrepend /siplex/
</Location>
</VirtualHost>
ssl.conf:
SSLEngine On
SSLProxyEngine On
<Directory />
SSLRequireSSL
</Directory>
SSLProtocol -all +TLSv1 +SSLv3
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/wildcard.pem
SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/wildcard.key
SSLCACertificateFile /usr/local/apache2/conf/ssl.crt/ca-bundle.crt
SSLOptions +FakeBasicAuth +StrictRequire
SSLVerifyClient none
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
" from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
