https://bz.apache.org/bugzilla/show_bug.cgi?id=61499
Bug ID: 61499
Summary: TCP healthchecks failing falsely / not actually
checking
Product: Apache httpd-2
Version: 2.4.27
Hardware: PC
OS: Linux
Status: NEW
Severity: major
Priority: P2
Component: mod_proxy_hcheck
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
TCP based healthchecks that functioned in 2.4.25 are failing as of 2.4.27
Configuration example:
<Proxy balancer://default>
ProxyHCTemplate tcpvarnish hcmethod=tcp hcinterval=2 hcpasses=3 hcinterval=2
BalancerMember http://172.28.211.254:6081 loadfactor=95 hctemplate=tcpvarnish
BalancerMember http://172.28.212.107:6081 loadfactor=5 hctemplate=tcpvarnish
</Proxy>
ProxyPass "/balancer-manager" !
ProxyPass "/" "balancer://default/"
ProxyPassReverse "/" "balancer://default/"
ProxyPreserveHost on
<Location '/balancer-manager'>
SetHandler balancer-manager
Require all denied
Require ip 172.16.0.0/12
</Location>
Config worked perfectly in 2.4.25 and prior. After updating to 2.4.27, the
balancer manager shows "Init HcFl" for both balancer members. I do not see the
TCP health checks actually attempting to run if I examine via tcpdump.
Reverting to 2.4.25 fixes issue.
Happens in amzn-linux build as well as a build from source.
tcpdump on the host that should be receiving the check is showing no activity.
Debug logs show the following:
[Wed Sep 06 17:40:51.549378 2017] [proxy:debug] [pid 4058:tid 140411104278272]
proxy_util.c(2156): AH00942: HCTCP: has acquired connection for
(172.28.211.254)
[Wed Sep 06 17:40:51.549380 2017] [proxy:debug] [pid 4058:tid 140411028743936]
proxy_util.c(2156): AH00942: HCTCP: has acquired connection for
(172.28.212.107)
[Wed Sep 06 17:40:51.549382 2017] [proxy:debug] [pid 4058:tid 140411104278272]
proxy_util.c(2171): AH00943: HCTCP: has released connection for
(172.28.211.254)
[Wed Sep 06 17:40:51.549384 2017] [proxy:debug] [pid 4058:tid 140411028743936]
proxy_util.c(2171): AH00943: HCTCP: has released connection for
(172.28.212.107)
[Wed Sep 06 17:40:51.549396 2017] [proxy_hcheck:debug] [pid 4058:tid
140411104278272] mod_proxy_hcheck.c(561): AH03251: Health check TCP Status (-1)
for 562e10aa0f40.
[Wed Sep 06 17:40:51.549399 2017] [proxy_hcheck:debug] [pid 4058:tid
140411028743936] mod_proxy_hcheck.c(561): AH03251: Health check TCP Status (-1)
for 562e10aa1520.
[email protected] (testwaf) [httpd]# nmap -p 6081 172.28.212.107
Starting Nmap 6.40 ( http://nmap.org ) at 2017-09-06 17:55 UTC
Nmap scan report for ip-172-28-212-107.ec2.internal (172.28.212.107)
Host is up (0.0013s latency).
PORT STATE SERVICE
6081/tcp open unknown
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
