q: transfer encoding request header "te: chunked"

Hi,

I found that some agents sent http request headers as follows:
te: chunked

questions:
1. What is the meaning of this header? I still didn't found any
description of it.
2. it looks like that this requests header (te: chunked) leads to
passing by request in respect to the apache cache, and all
request were send to the back-end web servers (like using
force reload in the browser). Can the header "te: chunked"
explain such behaviour or is there something else wrong?


regards
Harald Falkenberg

and requests always

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: q: transfer encoding request header "te: chunked"

On Thu, Oct 30, 2008 at 12:24 PM, Harald Falkenberg
wrote:
> Hi,
>
> I found that some agents sent http request headers as follows:
> te: chunked
>
> questions:
> 1. What is the meaning of this header? I still didn't found any
> description of it.

rfc 2616 section 3.6.1

> 2. it looks like that this requests header (te: chunked) leads to
> passing by request in respect to the apache cache, and all
> request were send to the back-end web servers (like using
> force reload in the browser). Can the header "te: chunked"
> explain such behaviour or is there something else wrong?

If it's a chunked request body, it's likely not a GET -- so it won't be cached.

See "what can be cached" here:
http://httpd.apache.org/docs/2.2/caching.html#overview


--
Eric Covener
covener@gmail.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: q: transfer encoding request header "te: chunked"

On Thu, 2008-10-30 at 17:24 +0100, Harald Falkenberg wrote:
> Hi,
>
> I found that some agents sent http request headers as follows:
> te: chunked

For some secret definition of some? Can we know which UAs send this?

>
> questions:
> 1. What is the meaning of this header? I still didn't found any
> description of it.

RTFRFC
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14 .39

> 2. it looks like that this requests header (te: chunked) leads to
> passing by request in respect to the apache cache, and all
> request were send to the back-end web servers (like using
> force reload in the browser). Can the header "te: chunked"
> explain such behaviour or is there something else wrong?

Doubt it. It simply negotiates how the client and server are prepared to
talk to each other, it shouldn't have any effect on cacheing. If the
exact same request is repeated, but without the TE header, does it then
hit the cache? telnet is your friend.

>
>
> regards
> Harald Falkenberg
>
> and requests always

Cheers

Tom


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

web servers behind a load-balancer

Hallo,

I like to study concepts of how to build up and run a farm of web servers
behind a load-balancer. What things I have to be aware and how to
administrate a farm of apache servers, to keep their configuration equal.

Please point me to recommandable nice how-tos or best-practice papers.

Thanks in advance
Harald

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Redirection from http to https and sslrequiressl in .htaccess

Hi,

I'm looking for a way to redirect parts of a url tree from a http talking
virtual host to a https talking virtual host. RedirectMatch or ReWrite
Rules work in principal, but I have also a .htaccess file with the rule
sslrequiressl
rule on the non https vh server, which is checked before a redirect or
rewrite rule starts its work. This is to prevent sending pws in clear
text.

Is there a workaround for this problem?

Thanks in advance
Harald

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: web servers behind a load-balancer

you might be interested to read through this web site
http://www.linuxvirtualserver.org/


----- Original Message -----
From: "Harald Falkenberg"
To:
Sent: Wednesday, February 11, 2009 11:16 AM
Subject: [users@httpd] web servers behind a load-balancer


> Hallo,
>
> I like to study concepts of how to build up and run a farm of web servers
> behind a load-balancer. What things I have to be aware and how to
> administrate a farm of apache servers, to keep their configuration equal.
>
> Please point me to recommandable nice how-tos or best-practice papers.
>
> Thanks in advance
> Harald
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: Redirection from http to https and sslrequiressl in

On Wed, Feb 11, 2009 at 11:24 AM, Harald Falkenberg
wrote:
> Hi,
>
> I'm looking for a way to redirect parts of a url tree from a http talking
> virtual host to a https talking virtual host. RedirectMatch or ReWrite
> Rules work in principal, but I have also a .htaccess file with the rule
> sslrequiressl
> rule on the non https vh server, which is checked before a redirect or
> rewrite rule starts its work. This is to prevent sending pws in clear
> text.
>

Don't use htaccess for things you really want restricted to a specific
virtualhost, or don't share a directory in the filesystem with your
http vhost if you don't want to server it.
--
Eric Covener
covener@gmail.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

RE: Redirection from http to https and sslrequiressl in .htaccess

You don't need the sslrequiressl in .htaccess anymore if in the http
vhost you're redirecting it to the https one all the time with a
redirect or whatever. It should never end up in the dir with http.

-Tony
---------------------------
Manager, IT Operations
Format Dynamics, Inc.
303-573-1800x27
abiacco@formatdynamics.com
http://www.formatdynamics.com


-----Original Message-----
From: Harald Falkenberg [mailto:harald.falkenberg@desy.de]=20
Sent: Wednesday, February 11, 2009 9:25 AM
To: users@httpd.apache.org
Subject: [users@httpd] Redirection from http to https and sslrequiressl
in .htaccess

Hi,

I'm looking for a way to redirect parts of a url tree from a http
talking
virtual host to a https talking virtual host. RedirectMatch or ReWrite
Rules work in principal, but I have also a .htaccess file with the rule
sslrequiressl
rule on the non https vh server, which is checked before a redirect or
rewrite rule starts its work. This is to prevent sending pws in clear
text.

Is there a workaround for this problem?

Thanks in advance
Harald

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server
Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

observed delay for changing process owner

Hello,

I use apache 1.3.41 on a solaris sparc system.

Since quite a while I was wondering, why the httpd processes startup very
quickly, but do not serve any request for 60 until 90 seconds.

Now I observed, that it takes a long time to change the onwership of the
processes, which I set via the 'user' and 'grou' derictives in httpd.conf.
After the ownership changed, the processes serve immediately the requests.

Did anybody observe something simular and has an idea what might cause
this long delay in changing the ownership? Is it possible to to debug the
startup phase of the apache, to see were the processes spend their time?

Many thanks in advance
Harald

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: observed delay for changing process owner

On Mon, Feb 15, 2010 at 10:43 AM, Harald Falkenberg
wrote:
> Hello,
>
> I use apache 1.3.41 on a solaris sparc system.
>
> Since quite a while I was wondering, why the httpd processes startup very
> quickly, but do not serve any request for 60 until 90 seconds.
>
> Now I observed, that it takes a long time to change the onwership of the
> processes, which I set via the 'user' and 'grou' derictives in httpd.conf.
> After the ownership changed, the processes serve immediately the requests.
>
> Did anybody observe something simular and has an idea what might cause this
> long delay in changing the ownership? Is it possible to to debug the startup
> phase of the apache, to see were the processes spend their time?

Are you using something like LDAP or NIS for your systems user/group info?

--
Eric Covener
covener@gmail.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: observed delay for changing process owner

--0015175884d0d04f7e047fa5a9d3
Content-Type: text/plain; charset=ISO-8859-1

On Mon, Feb 15, 2010 at 10:43 AM, Harald Falkenberg <
harald.falkenberg@desy.de> wrote:
[ ... ]

> Now I observed, that it takes a long time to change the onwership of the
> processes, which I set via the 'user' and 'grou' derictives in httpd.conf.
> After the ownership changed, the processes serve immediately the requests.
>

I am not sure how you have observed this, but my suspiction is you are
observing a side-effect of the delay, not the cause of the delay itself.
One possibility is that your configuration requires a large number of DNS
resolutions; others have suggested other possibilities.

Apart from educated guessing, I unfortunately don't know of a better way to
debug this than to comment out parts of the configuration to see what is
causing the delay. I suspect if you start with a minimal configuration you
will find that the process user and group are changed very quickly.


> Did anybody observe something simular and has an idea what might cause this
> long delay in changing the ownership? Is it possible to to debug the startup
> phase of the apache, to see were the processes spend their time?
>

A tool to debug this would be extremely useful, but unfortunately I'm not
aware of any.

-----Scott.

--0015175884d0d04f7e047fa5a9d3
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Mon, Feb 15, 2010 at 10:43 AM, Harald Falkenberg <<=
a href=3D"mailto:harald.falkenberg@desy.de">harald.falkenberg@ desy.de&g=
t; wrote:

Re: observed delay for changing process owner

Hi,

yes, we use nis/pam on the machine, but the mentioned user and group is
placed local in /etc/passwd and /etc/group. Also I configured the system
to lookup first in files and then in nis.

I observed this behaviour simple via running several times ps and saw,
that it took quite a while that the ownership changes from root to the
configured user in httpd.conf.

regards
Harald


On Mon, 15 Feb 2010, Eric Covener wrote:

> On Mon, Feb 15, 2010 at 10:43 AM, Harald Falkenberg
> wrote:
>> Hello,
>>
>> I use apache 1.3.41 on a solaris sparc system.
>>
>> Since quite a while I was wondering, why the httpd processes startup very
>> quickly, but do not serve any request for 60 until 90 seconds.
>>
>> Now I observed, that it takes a long time to change the onwership of the
>> processes, which I set via the 'user' and 'grou' derictives in httpd.conf.
>> After the ownership changed, the processes serve immediately the requests.
>>
>> Did anybody observe something simular and has an idea what might cause this
>> long delay in changing the ownership? Is it possible to to debug the startup
>> phase of the apache, to see were the processes spend their time?
>
> Are you using something like LDAP or NIS for your systems user/group info?
>
> --
> Eric Covener
> covener@gmail.com
>


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: observed delay for changing process owner

On Mon, Feb 15, 2010 at 11:11 AM, Harald Falkenberg
wrote:
> Hi,
>
> yes, we use nis/pam on the machine, but the mentioned user and group is
> placed local in /etc/passwd and /etc/group. Also I configured the system to
> lookup first in files and then in nis.
>
> I observed this behaviour simple via running several times ps and saw, that
> it took quite a while that the ownership changes from root to the configured
> user in httpd.conf.
>

Try pstack a few times during the delay and pastebin + link the results here.

I still think getgroups() could hang like this, since it can't take a
shortcut and not consult NIS.

--
Eric Covener
covener@gmail.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org