Re: balancer-manager and XML

2011-11-30 Thread Jim Riggs
On Nov 30, 2011, at 9:16 AM, Jim Jagielski wrote: The XML interface for the balancer manager has, admittedly, lagged behind... Anyone have cycles and/or talent to bring it up to snuff? If not, I'll try to muddle thru it ;) As I mentioned to Jim at ApacheCon, I have a 2.2 patch for this

Re: balancer-manager and XML

2011-11-30 Thread Jim Riggs
On Nov 30, 2011, at 10:26 AM, Jim Riggs wrote: On Nov 30, 2011, at 9:16 AM, Jim Jagielski wrote: The XML interface for the balancer manager has, admittedly, lagged behind... Anyone have cycles and/or talent to bring it up to snuff? If not, I'll try to muddle thru it ;) As I mentioned

mod_proxy_fcgi and EAGAIN (hacking)

2012-02-03 Thread Jim Riggs
Here is what I am testing: I am using (currently one) mod_proxy_fcgi member in a balancer to php-fpm. I have already run into some issues with fcgi:// as a balancer member as described in

Re: svn commit: r1242351 - in /httpd/httpd/trunk: docs/manual/mod/mod_proxy.xml modules/proxy/mod_proxy.c modules/proxy/mod_proxy.h modules/proxy/mod_proxy_fcgi.c server/util_script.c

2012-02-09 Thread Jim Riggs
On Feb 9, 2012, at 10:22 AM, Ruediger Pluem wrote: j...@apache.org wrote: Author: jim Date: Thu Feb 9 15:07:22 2012 New Revision: 1242351 URL: http://svn.apache.org/viewvc?rev=1242351view=rev Log: Handle cases, esp when using mod_proxy_fcgi, when we do not want SCRIPT_FILENAME to

Re: [PATCH] mod_log_forensic security considerations

2012-06-07 Thread Jim Riggs
On Jun 7, 2012, at 3:11 PM, Stefan Fritsch wrote: I share Williams concern that this makes mod_forensic potentially less useful. Maybe making the forensic log mode 600 by default would be a better idea? I have to agree with Jeff. I would rather have a more difficult or even impossible

Re: [PATCH] mod_log_forensic security considerations

2012-06-08 Thread Jim Riggs
On Jun 8, 2012, at 11:51 AM, Graham Leggett wrote: On 08 Jun 2012, at 5:45 PM, Joe Schaefer wrote: Well not quite, we'd still have had a problem with storing and archiving those logs even if we hadn't made them available to committers, because they violate our password retention policies.

New RewriteMap Help/Suggestions

2013-04-25 Thread Jim Riggs
I am in the process of preparing a patch to add a new RewriteMap type and could use some input from all of you on the best implementation. What I am creating is basically a clone of the txt map type, except that each line is a regexp followed by a replacement (with potential back-references).

Re: FreeBSD make

2013-12-20 Thread Jim Riggs
On 20 Dec 2013, at 07:04, Jim Jagielski j...@jagunet.com wrote: OK... this is weird, FreeBSD 9.2 make doesn't like http://svn.apache.org/viewvc?view=revisionrevision=1327907 gmake works fine. :/ (can't grab what the exact error is right now, but something like needs an operator

mod_proxy_ajp: ignoring flush before headers (again)

2011-08-02 Thread Jim Riggs
For some (old 2007) context, see: http://markmail.org/message/btwcnbl2i7ftwj4n https://community.jivesoftware.com/message/201787 I am proxying an app via AJP to Tomcat 6/7. In certain circumstances, it appears that the app (or possibly Tomcat) is erroneously sending a flush before the

Re: mod_proxy_ajp: ignoring flush before headers (again)

2011-08-03 Thread Jim Riggs
. Regards Rüdiger -Original Message- From: Jim Riggs Sent: Dienstag, 2. August 2011 18:03 To: dev@httpd.apache.org Subject: mod_proxy_ajp: ignoring flush before headers (again) For some (old 2007) context, see: http://markmail.org/message/btwcnbl2i7ftwj4n https

Re: mod_proxy_ajp: ignoring flush before headers (again)

2011-08-03 Thread Jim Riggs
tracker for 2.2.x. Regards Rüdiger -Original Message- From: Jim Riggs Sent: Mittwoch, 3. August 2011 16:48 To: dev@httpd.apache.org Subject: Re: mod_proxy_ajp: ignoring flush before headers (again) This does appear to work. Our automated tests are running right now

mod_proxy_fcgi + mod_proxy_balancer vs. php-fpm and query strings

2011-09-19 Thread Jim Riggs
I am having a couple of problems WRT using mod_proxy_fcgi inside a balancer proxied to php-fpm. There are lots of variables in this scenario, but I think I have narrowed the issues down. The setup looks like this: httpd - balancer - fcgi balancer members - php-fpm Issue 1: PHP-FPM does not

Re: RFE: Control of HTTP cache control headers within mod_rewrite rules

2011-10-27 Thread Jim Riggs
On Oct 27, 2011, at 3:35 PM, Stefan Fritsch wrote: On Tuesday 25 October 2011, Noah Robin wrote: I ran some tests on this and the following modified version will work: Header always set Cache-Control max-age=%{CACHE_LIFETIME}e env=CACHE_LIFETIME RewriteRule /example

mod_cache thundering herd bug

2014-04-08 Thread Jim Riggs
https://issues.apache.org/bugzilla/show_bug.cgi?id=50317 While we are at ApacheCon, I would love to address this nasty bug with someone familiar with 2.2's mod_cache. Our sites were brought down a few times last year before we finally tracked it down to being this particular bug. I am using a

Re: mod_cache thundering herd bug

2014-04-09 Thread Jim Riggs
On 9 Apr 2014, at 14:46, Eric Covener cove...@gmail.com wrote: r1023398 for 2.2: http://people.apache.org/~covener/patches/httpd-2.2.x-thunder.diff The remove_url() prevents other threads from serving a stale cached file during refresh of a slow response, but it's unnecessary to have a

Re: Configuration error handling after httpd restart

2014-04-11 Thread Jim Riggs
On 27 Mar 2014, at 14:16, Mike Rumph mike.ru...@oracle.com wrote: Hello all, I have been doing some testing on the results of httpd restart with configuration errors. This gave me some interesting results. For these tests I build httpd trunk with APR trunk on Linux using the following

Re: Configuration error handling after httpd restart

2014-04-14 Thread Jim Riggs
On 14 Apr 2014, at 10:38, Eric Covener cove...@gmail.com wrote: On Mon, Apr 14, 2014 at 11:15 AM, Mike Rumph mike.ru...@oracle.com wrote: If there is an unknown directive in the config file, simply ignore it with a warning. You can't do that. What if it was Reqiure? I agree with Eric. I

Re: mod_cache thundering herd bug

2014-04-21 Thread Jim Riggs
On 21 Apr 2014, at 06:38, Graham Leggett minf...@sharp.fm wrote: On 19 Apr 2014, at 10:26 PM, Eric Covener cove...@gmail.com wrote: Graham -- related subject brought up either in Denver or in the bug. It seems that when we serve a stale file while the cache is locked, the age headers are

[patch] regexp rewrite map

2014-05-05 Thread Jim Riggs
[Posting separately to both dev and users to see if anyone on either side sees value in getting this committed.] About a year ago, I had an idea for a new type of RewriteMap that would fill an important need for a few particular use cases that we have [1]. While we were at ApacheCon in Denver,

Re: Time for httpd 2.2.28??

2014-07-16 Thread Jim Riggs
If so, I can RM. PLEASE! We need those thundering herd fixes in mod_cache! :-)

Re: Time for httpd 2.2.28??

2014-07-16 Thread Jim Riggs
On 16 Jul 2014, at 08:19, Yann Ylavic ylavic@gmail.com wrote: On Wed, Jul 16, 2014 at 3:15 PM, Jim Riggs apache-li...@riggs.me wrote: If so, I can RM. PLEASE! We need those thundering herd fixes in mod_cache! :-) This has already been backported by http://svn.apache.org/r1608302. I

Re: ApacheCon Austin, httpd track

2014-12-02 Thread Jim Riggs
On 11/30/2014 11:08 AM, Jeff Trawick wrote: * deploying Python web apps under uWSGI behind mod_proxy_fcgi/scgi (some material here: http://emptyhammock.com/projects/info/pyweb/index.html) On 1 Dec 2014, at 19:15, Daniel Ruggeri drugg...@primary.net wrote: Similarly, I'm always up for giving

Re: mod_proxy_fcgi issues

2014-12-04 Thread Jim Riggs
On Thu, Dec 4, 2014 at 9:58 AM, Eric Covener cove...@gmail.com wrote: On Tue, Dec 2, 2014 at 4:14 PM, Jim Riggs apache-li...@riggs.me wrote: P.S. mod_proxy_balancer - mod_proxy_fcgi - php-fpm is really fun and interesting too! ;-) mod_proxy_fcgi seems to need a bit of work from what I

Re: Proposal/RFC: informed load balancing

2015-04-30 Thread Jim Riggs
On Wednesday, April 29, 2015, Jim Riggs apache-li...@riggs.me mailto:apache-li...@riggs.me wrote: Warn out from writing all of this and hopeful that someone other than me actually cares, I wish you all well today/tonight! *Worn* out, even! Boy, I was tired!

Re: *Match, RewriteRule POLA violation?

2015-04-30 Thread Jim Riggs
to not get slash-normalized URIs? On Mon, Apr 27, 2015 at 10:52 PM, Jim Riggs apache-li...@riggs.me wrote: This came up at ApacheCon a couple of weeks ago. I just took this knowledge for granted, as I have always accounted for it, but both Rich and Trawick were surprised. As I thought about

*Match, RewriteRule POLA violation?

2015-04-27 Thread Jim Riggs
This came up at ApacheCon a couple of weeks ago. I just took this knowledge for granted, as I have always accounted for it, but both Rich and Trawick were surprised. As I thought about it some more, it seems this may be a POLA violation. Thoughts? If we agree it should be fixed, I can make the

Re: *Match, RewriteRule POLA violation?

2015-05-02 Thread Jim Riggs
On 1 May 2015, at 10:52, André Malo n...@perlig.de wrote: * Niklas Edmundsson wrote: On Thu, 30 Apr 2015, Yann Ylavic wrote: On Thu, Apr 30, 2015 at 2:57 PM, Jim Riggs apache-li...@riggs.me wrote: Thanks, Yann. I remember looking at this code before. The question remains, though

Proposal/RFC: informed load balancing

2015-04-29 Thread Jim Riggs
[ Long message and proposal follows. Bear with me. There are a lot of words, but that is because we need a lot of help/input! ;-) ] So, this has come up in the past several times, and we discussed it again this year at ApacheCon: How do we get the load balancer to make smarter, more informed

Re: Listen on UDS

2015-04-28 Thread Jim Riggs
On 28 Apr 2015, at 10:20, Graham Leggett minf...@sharp.fm wrote: On 28 Apr 2015, at 5:17 PM, Jim Jagielski j...@jagunet.com wrote: Anyone looked into having httpd be able to Listen on a UDS, as well as scenarios where we may want that even? I have always wanted it - one thing it allows

ApacheCon Arrival

2015-04-10 Thread Jim Riggs
I just updated https://wiki.apache.org/httpd/Face2Face for Austin. If you are getting into town on Sunday and are interested in grabbing some dinner, let me know or update the page. Some of us got together last year on ApacheCon Eve and had a nice time. Also update the page if there are other

Re: 2.2 and 2.4 and 2.6/3.0

2015-05-28 Thread Jim Riggs
On 28 May 2015, at 14:30, Reindl Harald h.rei...@thelounge.net wrote: Am 28.05.2015 um 21:22 schrieb Rich Bowen: On 05/27/2015 05:38 PM, olli hauer wrote: - for long time there was no working mod_php module for 2.4, and changing to php-fpm was not for everyone a solution. In my

Re: A little nit

2017-08-02 Thread Jim Riggs
> On 2 Aug 2017, at 12:33, Jim Jagielski wrote: > > I'll be adding some code to allow for lbfactors to be > single decimal numbers (like 1.1, 2.5, etc...)... People > have asked "How do I change it so that machine B is like 10% > preferred" and I mention that "Well, you could

Re: 2.4.27

2017-07-11 Thread Jim Riggs
> On 11 Jul 2017, at 11:46, James Cloos wrote: > >> "JJ" == Jim Jagielski writes: > > JJ> *) mod_http2: disable and give warning when mpm_prefork is encountered. > The server will > JJ> continue to work, but HTTP/2 will no longer be negotiated.

Re: A little nit

2017-08-04 Thread Jim Riggs
> On 3 Aug 2017, at 08:30, Jim Jagielski wrote: > > It's just GUI magic... Basically, it will internally take '1.1' and > convert it to 11, 1.0 to 10, etc... If that's the case, I would recommend going 2 decimal places (1.1 = 100, 1.25 = 125, etc.) to allow using percentages.

Re: Ideas from ApacheCon

2017-05-23 Thread Jim Riggs
> On 18 May 2017, at 12:46, Jim Jagielski wrote: > > Based on feedback from various sessions: > > o A new-kind of "hot standby" in mod_proxy which kicks >in whenever a worker moves out of the pool (ie, doesn't >wait until all workers are out)... ala a redundant >

Re: Ideas from ApacheCon

2017-05-23 Thread Jim Riggs
> On 22 May 2017, at 06:45, Jim Jagielski <j...@jagunet.com> wrote: > > I'll let Jim Riggs answer that...it came up during his mod_cache > talk. >> On May 18, 2017, at 2:25 PM, Eric Covener <cove...@gmail.com> wrote: >> >> On Thu, May 18, 2017 at 2:2

Re: Ideas from ApacheCon

2017-05-23 Thread Jim Riggs
> On 18 May 2017, at 13:22, Rainer Jung wrote: > > Am 18.05.2017 um 19:46 schrieb Jim Jagielski: >> Based on feedback from various sessions: >> >> o A new-kind of "hot standby" in mod_proxy which kicks >> in whenever a worker moves out of the pool (ie, doesn't >>

Broken OCSP Stapling

2017-05-31 Thread Jim Riggs
This was mentioned in today's Bulletproof TLS newsletter (https://www.feistyduck.com/bulletproof-tls-newsletter/issue_28_lets_encrypt_downtime.html): https://blog.hboeck.de/archives/886-The-Problem-with-OCSP-Stapling-and-Must-Staple-and-why-Certificate-Revocation-is-still-broken.html It

Implement hot spares in mod_proxy_balancer [was Re: Ideas from ApacheCon]

2017-06-01 Thread Jim Riggs
> On 1 Jun 2017, at 17:15, Yann Ylavic <ylavic@gmail.com> wrote: > > On Thu, Jun 1, 2017 at 10:48 PM, Jim Riggs <apache-li...@riggs.me> wrote: >>> On 1 Jun 2017, at 15:25, Yann Ylavic <ylavic@gmail.com> wrote: >>> >>> On Thu, Jun

Re: Ideas from ApacheCon

2017-06-02 Thread Jim Riggs
> On 2 Jun 2017, at 07:20, Jim Jagielski <j...@jagunet.com> wrote: > >> On Jun 1, 2017, at 1:29 PM, Jim Riggs <apache-li...@riggs.me> wrote: >> >> Regardless, even worst case, we are looking at what, iterating 6 pointers >> instead of 3 or 10 instead

Re: Ideas from ApacheCon

2017-05-31 Thread Jim Riggs
> On 23 May 2017, at 09:16, Jim Riggs <apache-li...@riggs.me> wrote: > >> On 18 May 2017, at 13:22, Rainer Jung <rainer.j...@kippdata.de> wrote: >> >> Am 18.05.2017 um 19:46 schrieb Jim Jagielski: >>> Based on feedback from various sessions: >&g

Re: Ideas from ApacheCon

2017-06-01 Thread Jim Riggs
y complexity. Regardless, even worst case, we are looking at what, iterating 6 pointers instead of 3 or 10 instead of 5? We probably have some lower hanging fruit across the request lifecycle code to increase performance than saving some arithmetic on a handful of structs, no? ;-) >&g

Re: Ideas from ApacheCon

2017-06-01 Thread Jim Riggs
> On 1 Jun 2017, at 15:25, Yann Ylavic <ylavic@gmail.com> wrote: > > On Thu, Jun 1, 2017 at 10:22 PM, Yann Ylavic <ylavic@gmail.com> wrote: >> On Thu, Jun 1, 2017 at 7:29 PM, Jim Riggs <apache-li...@riggs.me> wrote: >>>> On 1 Jun 2017, at

Re: svn commit: r20021 - /dev/httpd/

2017-06-13 Thread Jim Riggs
I don't know that it really matters, but this guy is in there twice (in each CHANGES doc), once with the PR # and once without: > + *) mod_proxy: Allow the per-request environment variable "no-proxy" to > + be used as an alternative to ProxyPass /path !. This is primarily > + to set

ACNA Miami: Who? When?

2017-05-08 Thread Jim Riggs
So, who all will be in Miami? From what I've seen on Sched and messages here: Yes : jimjag, rich, jfc, ruggeri, me No : rowe, covener There are several other ACNA regulars who have been quiet around here lately. Anyone else coming in? I'll be there Sunday evening through Friday morning. I

Re: svn commit: r1828890 - in /httpd/httpd/trunk: ./ docs/log-message-tags/ docs/manual/howto/ docs/manual/mod/ modules/proxy/ modules/proxy/balancers/

2018-04-11 Thread Jim Riggs
> On 11 Apr 2018, at 08:28, Yann Ylavic wrote: > > On Wed, Apr 11, 2018 at 2:11 PM, wrote: >> Author: jhriggs >> Date: Wed Apr 11 12:11:05 2018 >> New Revision: 1828890 >> >> URL: http://svn.apache.org/viewvc?rev=1828890=rev >> Log: >>

Future of hot standby in balancers [was Re: svn commit: r1828890 - in /httpd/httpd/trunk: ./ docs/log-message-tags/ docs/manual/howto/ docs/manual/mod/ modules/proxy/ modules/proxy/balancers/]

2018-04-11 Thread Jim Riggs
On 11 Apr 2018, at 07:11, jhri...@apache.org wrote: > > Author: jhriggs > Date: Wed Apr 11 12:11:05 2018 > New Revision: 1828890 > > URL: http://svn.apache.org/viewvc?rev=1828890=rev > Log: > mod_proxy_balancer: Add hot spare member type and corresponding flag (R). Hot > spare members are >

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

2018-04-18 Thread Jim Riggs
I didn't think of this before, but there is one edge case this would miss: if someone (for whatever reason) wants a relative ErrorLog *file* named `syslog*', for example `ErrorLog "syslog-httpd.log"' or `ErrorLog "syslog.log"'. It appears that this is already broken in server/log.c, though.

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

2018-04-18 Thread Jim Riggs
On Wed, Apr 18, 2018 at 7:17 AM, Jim Riggs <jim...@riggs.me> wrote: >> I didn't think of this before, but there is one edge case this would miss: >> if someone (for whatever reason) wants a relative ErrorLog *file* named >> `syslog*', for example `ErrorLog "syslog-

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

2018-04-20 Thread Jim Riggs
> On 20 Apr 2018, at 09:52, Luca Toscano <toscano.l...@gmail.com> wrote: > 2018-04-20 16:27 GMT+02:00 Jim Riggs <jim...@riggs.me>: > > On 20 Apr 2018, at 08:53, Jim Jagielski <j...@jagunet.com> wrote: > > > > Sorry for coming in late, but what is the exa

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

2018-04-19 Thread Jim Riggs
tag; > On 18 Apr 2018, at 13:32, Luca Toscano <toscano.l...@gmail.com> wrote: > > Thanks a lot Jim! I like your code change and the extra checks, but I'd > prefer to use strncmp if possible, also in log.c. > Feel free to amend the patch, or I'll do it tomorrow (I forgot the

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

2018-04-19 Thread Jim Riggs
/ const char *tag; > On 18 Apr 2018, at 13:32, Luca Toscano <toscano.l...@gmail.com> wrote: > > Thanks a lot Jim! I like your code change and the extra checks, but I'd > prefer to use strncmp if possible, also in log.c. > Feel free to amend the patch, or I'll d

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

2018-04-20 Thread Jim Riggs
> On 20 Apr 2018, at 01:42, Luca Toscano <toscano.l...@gmail.com> wrote: > 2018-04-19 17:49 GMT+02:00 Jim Riggs <j...@riggs.me>: > Luca - > > Here's the same thing standardizing on strn?cmp(). Not that you couldn't have > done it yourself, but since I had it u

Re: svn commit: r1829430 - /httpd/httpd/patches/2.4.x/core-check_errorlog_dir_syslog.patch

2018-04-20 Thread Jim Riggs
> On 20 Apr 2018, at 08:53, Jim Jagielski wrote: > > Sorry for coming in late, but what is the exact issue we are trying to solve > again? My understanding was that if someone wanted something like > > ErrorLog "syslog-httpd.log" > > that the current implementation