Hi, I just finished to setup my production server. I'm using pound to provide HTTPS to the Varnish backend. Now that I put the sites on production, I detect a lot of errors on the pound logs file: ------------------- Apr 11 11:32:00 kwak pound: (7f32c626f700) error read from 85.201.217.135: Connection timed out Apr 11 11:32:01 kwak pound: (7f32c5702700) error copy server cont: Connection timed out Apr 11 11:32:02 kwak pound: (7f32c55bd700) error flush headers to 89.96.213.46: Connection reset by peer Apr 11 11:32:19 kwak pound: (7f32c6f21700) error read from 79.21.0.21: Connection timed out Apr 11 11:32:24 kwak pound: (7f32c5a90700) error read from 78.23.240.176: Connection timed out Apr 11 11:32:29 kwak pound: (7f32c6e9f700) error copy server cont: Broken pipe Apr 11 11:32:31 kwak pound: (7f32c64b8700) error copy server cont: Connection reset by peer Apr 11 11:32:31 kwak pound: (7f32c7812700) error copy server cont: Connection reset by peer Apr 11 11:32:31 kwak pound: (7f32c5437700) error copy server cont: Connection reset by peer Apr 11 11:32:39 kwak pound: (7f32c516c700) error copy server cont: Connection reset by peer Apr 11 11:32:42 kwak pound: (7f32c9bf9700) error read from 2.180.36.132: Connection reset by peer Apr 11 11:32:50 kwak pound: (7f32c6f21700) error read from 91.178.141.219: Connection timed out -------------------
I can't reproduce the problem by my self. Can you tell me if I have something wrong in my configuration. Here after the software versions and a piece of the pound configuration file. Debian's version: 6 Varnish's version: 3 Pound's version: 2.5 ## Logging: (goes to syslog by default) ## 0 no logging ## 1 normal ## 2 extended ## 3 Apache-style (common log format) LogLevel 1 ## check backend every X secs: Alive 30 ## use hardware-accelleration card supported by openssl(1): #SSLEngine "<hw>" # poundctl control socket Control "/var/run/pound/poundctl.socket" ##Increase the timeout from 15 to 60 seconds - some requests are too long on the TA backend # TimeOut 60 ###################################################################### ## listen, redirect and ... to: ListenHTTPS Address XXX.XXX.XXX.XXX Port 443 Cert "/etc/ssl/certs/sequentiel/seqfr.pem" ## allow PUT and DELETE also (by default only GET, POST and HEAD)?: xHTTP 0 Service BackEnd Address 127.0.0.1 Port 8080 End End End Thanks in advance for your support. Regards, Frederic