Hi Maksym,
First you can test Naviserver bei doing the curl requests direct to the
IP address and port where Naviserver is listening. You can add the Host
header via the -H switch.
If you get the right responses for the different hosts, then the
following might help:
https://stackoverflow.com/questions/9914792/logging-proxy-activity-in-nginx
This describes how to configure backend logging in Nginx:
|log_format upstreamlog '[$time_local] $remote_addr - $remote_user -
$server_name to: $upstream_addr: $request upstream_response_time
$upstream_response_time msec $msec request_time $request_time';
access_log /var/log/nginx/access.log upstreamlog; |
Configure something along these lines in nginx and check what nginx
sends to Naviserver.
Regards,
Georg
On 3/5/24 15:20, Maksym Zinchenko wrote:
I think it's still smth with Naviserver. When there is no domain name
on request, even if I send a Host, the default server will always respond.
For example:
curl -v -H "Host: dummy1.daidze.com <http://dummy1.daidze.com>"
http://172.17.0.1:8080
* Trying 172.17.0.1:8080...
* Connected to 172.17.0.1 (172.17.0.1) port 8080 (#0)
> GET / HTTP/1.1
> Host: dummy1.daidze.com <http://dummy1.daidze.com>
> User-Agent: curl/7.81.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Server: NaviServer/5.0.0a
< Date: Tue, 05 Mar 2024 14:14:46 GMT
< Content-Type: text/html; charset=utf-8
< Content-Length: 94
< Connection: keep-alive
<
dev server</br>
Host: dummy1.daidze.com <http://dummy1.daidze.com> </br>
User-Agent: curl/7.81.0 </br>
Accept: */* </br>
* Connection #0 to host 172.17.0.1 left intact
On Tue, Mar 5, 2024 at 12:39 PM Georg Lehner <jorge...@magma-soft.at>
wrote:
Hello Maksym,
we can see two requests, the lines starting with "Ns_SockAccept"
and ending with "[0] end of job". I singled them out from your
message below.
However, we do not know the request you sent in each case.
What we can see: they are only https requests, since only nsssl
is involved, and both of them go to the default virtual server:
the lines after "driver:nssl" have "conn:dev.daidze.org:default:"
in them.
Please:
- do the tests again with http requests.
- check on your own if the results show a different picture
- check the nginx logs, to see if the requests are really done to
different hosts. If needed add logging to nginx to see the backend
used for the proxy requests
Regards,
Georg
On 3/5/24 14:19, Maksym Zinchenko wrote:
Ive added debug, here is my log:
...
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: Ns_SockAccept returns sock 6, err NONE [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: nssock(6): option TCP_NODELAY activated [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) ERROR_WANT_READ got:0 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:0 sockState:80 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: Ns_SockAccept returns sock -1, err Resource
temporarily unavailable [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) ERROR_WANT_READ got:0 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:0 sockState:80 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) got:418 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:418 sockState:01 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### Request SetUrl calls Ns_UrlPathDecode
'/' [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### decoded path '/' [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: === length < avail (length 0, avail 0) tfd 0
tfile (nil) chunkStartOff 0 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: driver sets reqPtr->content (len 0) to '' [0m
[1;32m[05/Mar/2024:12:16:35][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: [0] dequeue thread connPtr 0x55d4804627f0
idle 1 state 4 create 0 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: ns:interptrace[dev.daidze.org
<http://dev.daidze.org>]: allocate ns:tcltrace ns_init [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;39mNotice: ns_perm_load:
/opt/ns/modules/nsperm/passwd: / ns_perm_adduser [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: --- ns_perm_adduser
/opt/ns/modules/nsperm/passwd / {{""} {} {} {} {} {} {}} [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: --- ns_perm_adduser
/opt/ns/modules/nsperm/passwd / {nsadmin ubphBI5lDzSYc {} {}
{} {} {}} [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: --- ns_perm_adduser
/opt/ns/modules/nsperm/passwd / {nobody {} {} {} {} {} {}} [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: --- ns_perm_adduser
/opt/ns/modules/nsperm/passwd / {} [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: ### Request SetUrl calls Ns_UrlPathDecode
'/index.adp' [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: ### decoded path '/index.adp' [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: AdpPageRequest for
'/opt/ns/clients/dev/client/pages/index.adp' access ok [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: nslog called with driver pattern '(null)'
via driver 'nsssl' req: GET / HTTP/1.0 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: ns:interptrace[dev.daidze.org
<http://dev.daidze.org>]: deallocate nsdb:releasehandles
a:(nil) [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: ns:interptrace[dev.daidze.org
<http://dev.daidze.org>]: deallocate ns:tcltrace ns_cleanup [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: Ns_ConnClose 0x55d4804627f0 stream 000000
chunk 000000 via writer 000000 sockPtr 0x7feac400f180 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: ### SSL close(6) shutdown returned 1 err 0 [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: ### SSL close(6) socket [0m
[1;32m[05/Mar/2024:12:16:35][189217.7feadab59640][-conn:dev.daidze.org:default:0:0-]
[0m [0;34mDebug: [0] end of job, waiting 0 current 1 idle 0
ncons 9999 fromQueue 0 start 1709644595.046559
1709644595.051673 accept 0.005114 queue 0.018141 filter
0.004938 run 0.008062 netrun 0.003124 total 0.026203 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: Ns_SockAccept returns sock 6, err NONE [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: nssock(6): option TCP_NODELAY activated [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) ERROR_WANT_READ got:0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:0 sockState:80 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: Ns_SockAccept returns sock -1, err Resource
temporarily unavailable [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) ERROR_WANT_READ got:0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:0 sockState:80 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) ERROR_WANT_READ got:0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:0 sockState:80 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) ERROR_WANT_READ got:0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:0 sockState:80 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: SSL_read(6) got:417 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### SSL_read(6) return:417 sockState:01 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### Request SetUrl calls Ns_UrlPathDecode
'/' [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: ### decoded path '/' [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: === length < avail (length 0, avail 0) tfd 0
tfile (nil) chunkStartOff 0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: driver sets reqPtr->content (len 0) to '' [0m
[1;32m[05/Mar/2024:12:16:37][189217.7fead19fd640][-driver:nsssl:0-]
[0m [0;34mDebug: [0] dequeue thread connPtr 0x55d4804627f0
idle 1 state 4 create 0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: ns:interptrace[dev.daidze.org
<http://dev.daidze.org>]: allocate ns:tcltrace ns_init [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: ### Request SetUrl calls Ns_UrlPathDecode
'/index.adp' [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: ### decoded path '/index.adp' [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: AdpPageRequest for
'/opt/ns/clients/dev/client/pages/index.adp' access ok [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: nslog called with driver pattern '(null)'
via driver 'nsssl' req: GET / HTTP/1.0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: ns:interptrace[dev.daidze.org
<http://dev.daidze.org>]: deallocate nsdb:releasehandles
a:(nil) [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: ns:interptrace[dev.daidze.org
<http://dev.daidze.org>]: deallocate ns:tcltrace ns_cleanup [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: Ns_ConnClose 0x55d4804627f0 stream 000000
chunk 000000 via writer 000000 sockPtr 0x7feac400f180 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: ### SSL close(6) shutdown returned 1 err 0 [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: ### SSL close(6) socket [0m
[1;32m[05/Mar/2024:12:16:37][189217.7feadab59640][-conn:dev.daidze.org:default:0:1-]
[0m [0;34mDebug: [0] end of job, waiting 0 current 1 idle 0
ncons 9998 fromQueue 0 start 1709644597.687847
1709644597.692653 accept 0.004806 queue 0.000205 filter
0.000253 run 0.000971 netrun 0.000718 total 0.001176 [0m
...
On Tue, Mar 5, 2024 at 12:05 PM Georg Lehner
<jorge...@magma-soft.at> wrote:
Hello Maksym,
The information you sent clarifies most questions.
Please copy also the logs when you do a https request to each
of the
domains. I recommend e.g. running curl -v
https://dummy1.daidze.org,
pasting its output and then pasting the respective part of
the log, then
the next.
You need to enable debugging in the server logs:
ns_section ns/parameters {
...
ns_param logdebug true
}
Regards,
Georg
On 3/5/24 13:27, Maksym Zinchenko wrote:
> Hello, here is my dz_nsd.tcl
...
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
