Am 2020-05-21 um 23:36 schrieb Mark Thomas:
On 21/05/2020 21:45, Osipov, Michael wrote:
Am 2020-05-21 um 11:02 schrieb Mark Thomas:
On 20/05/2020 17:57, Osipov, Michael wrote:
Is there an option to proxy via HTTP/2? That should be able to handle
these sorts of situations more gracefully.
This seems to be broken for some reason in another way:
<snip/>
What now?
Turn on debug logging for o.a.coyote.http2 for both.
For httpd, disable/relax the overhead protection although it would we
worth looking at what httpd is doing to trigger that.
I did now the tests with h2/h2c direct and via proxy. Will send output
privately.
What explicit overhead protection in HTTPd are you referring?
mod_proxy_http2 does not provide any options. Please note that clients
talk to HTTPd via HTTP/1.1 only.
Plese tell the exact tunable and I will retry.
Sorry, I meant for the httpd as a proxy test, relax/disable Tomcat's
HTTP/2 overhead protection.
Done. Set overheadCountFactor="0".
$ time curl -X POST --anyauth -u : --upload-file inputs.zip -H "Content-Type: application/zip"
https://<hostname>/content-dev/api/documents --verbose -H "Expect:" --trace trace.proxy
Warning: --trace overrides an earlier trace/verbose option
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>503 Service Unavailable</title>
</head><body>
<h1>Service Unavailable</h1>
<p>The server is temporarily unable to service your
request due to maintenance downtime or capacity
problems. Please try again later.</p>
<hr>
<address>Apache Server at <hostname> Port 443</address>
</body></html>
real 0m53,683s
user 0m9,948s
sys 0m0,821s
The execution time has exploded for real. Direct was with HTTP/1.1 6
seconds, via proxy 12 s, now a minute.
The worst I can see is that requests are physically replayed twice:
2020-05-22T00:11:29 WARNUNG [http-apr-127.0.1.2-8083-exec-9]
net.sf.michaelo.tomcat.authenticator.SpnegoAuthenticator.doAuthenticate The
Negotiate (SPNEGO) authentication token is invalid: YIIRjAY...
GSSException: Failure unspecified at GSS-API level (Mechanism level:
Request is a replay (34))
2020-05-22T00:11:55 WARNUNG [http-apr-127.0.1.2-8083-exec-5]
net.sf.michaelo.tomcat.authenticator.SpnegoAuthenticator.doAuthenticate The
Negotiate (SPNEGO) authentication token is invalid: YIIRjQYGKwYBBQU...
GSSException: Failure unspecified at GSS-API level (Mechanism level:
Request is a replay (34))
Output will be sent privately.
Thanks,
Michael
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
