Jeremy and @pbchou reported having a TLS client send a client-notify and FIN 
but ATS would continue sending data back.  This sounded like a bad side effect 
of the half-open logic in HttpSM.  If the underlying protocol is just TCP it 
could be legitimate to sending back traffic after the client sends a FIN.  The 
client may still be listening.  But if the underlying protocol is TLS, this 
half-open scenario makes no sense.

For HTTP2, we always disable the HttpSM half open logic.  This PR extends that 
logic for HTTP1 if the client_vc is a SSLNetVConn.

Jermey did some initial testing with a patch against 7.1.x and this solves the 
problem.   The patch is a little different for master since that already 
includes the setting to turn of the half open logic entirely.

[ Full content available at: https://github.com/apache/trafficserver/pull/4213 ]
This message was relayed via gitbox.apache.org for [email protected]

Reply via email to