2016-02-10 8:17 GMT+01:00 Willy Tarreau <[email protected]>:

> On Tue, Feb 09, 2016 at 06:10:01PM +0100, [email protected] wrote:
> > Hi,
> >
> > i'm currently testing 1.6.3 and request body logging. I'm wondering that
> > logging of req body even works without setting "option
> > http-buffer-request". Also "no option http-buffer-request" seems to have
> no
> > effect.
> >
> >
> > Is this intended or have i missed something?
>
> you're playing with fire, it just happens to work by pure luck. When
> you capture it you're lucky that the POST data were already there. The
> purpose of the aforementionned option is to wait for the data before
> proceeding. Try to connect using telnet and send your POST request by
> hand, you'll see the difference between the two modes :-)
>
> You may also force your client to send "Expect:100-continue" before
> sending the body, chances are that you'll never have the data in time.
>
> Willy
>



Hi Willy,

thanks for quick reply.


Would it be more "safe" / less error-prone to warn the user if "req.body"
is found in configuration without "option http-buffer-request" is set? (Or
do not consider req.body at all in this case?)



-------------
Best Regards

Bjoern

Reply via email to