Hi Willy, thanks a lot for the detailed explanation. I had the dontlognull option enabled, so now they at least show up.
The termination flags will generally be "cR" (client timeout during > Request). > I see cR and CR equally. You should probably increase your http-request timeout if users are > experiencing issues. 5s allows for one TCP retransmit (3s) and 2 > extra seconds. Considering that some slow links (satellite, GPRS) > already exhibit several hundreds of ms of RTT, You're very likely > shooting the connection too fast from time to time. > > I suggest that you increase it to 10s first. Similarly, it may be > worth increasing your keep-alive timeout (eg: 5-10s). > Something still doesn't seem right, I increased the timeout to 10s but still get around 2/sec of these 408s in the log. The few times we managed to see this error ourself, it happened almost immediately, definitely not waiting for 10s. Could the SSL termination be involved in this? I'm currently running stud, but will try stunnel tomorrow to see if it make a difference. thanks, Florian
