[jira] [Commented] (TS-4116) DNS failure prohibits use of client target address

[ASF GitHub Bot (JIRA)]

[ 
https://issues.apache.org/jira/browse/TS-4116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15255397#comment-15255397
 ] 

ASF GitHub Bot commented on TS-4116:


GitHub user ushachar opened a pull request:

https://github.com/apache/trafficserver/pull/599

TS-4116: DNS failure prohibits use of client target address

Refactor handling of use_client_target_addr=1 when DNS resolving fails.

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ushachar/trafficserver fix_ts_4116

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/trafficserver/pull/599.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #599


commit d48cea41ae9d5f192944357e18c1f3472e66a3ed
Author: Uri Shachar 
Date:   2016-04-23T21:48:30Z

TS-4116: DNS failure prohibits use of client target address

Refactor handling of use_client_target_addr=1 when DNS resolving fails




> DNS failure prohibits use of client target address
> --
>
> Key: TS-4116
> URL: https://issues.apache.org/jira/browse/TS-4116
> Project: Traffic Server
>  Issue Type: Bug
>  Components: HTTP
>Affects Versions: 5.3.2
>Reporter: Kalin Krastanov
>Assignee: Thomas Jackson
> Fix For: sometime
>
>
> When ATS is set up to use client target address in transparent mode and there 
> is DNS error (i.e. the OS name is resolvable only on the client machine) 502 
> error is returned instead of using the client target address.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Commented] (TS-4116) DNS failure prohibits use of client target address

[Uri Shachar (JIRA)]

[ 
https://issues.apache.org/jira/browse/TS-4116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15094359#comment-15094359
 ] 

Uri Shachar commented on TS-4116:
-

Ok - I wasn't aware of TS-2954 (been a while since I had transparent 
deployments :-) )
I'll take a look

> DNS failure prohibits use of client target address
> --
>
> Key: TS-4116
> URL: https://issues.apache.org/jira/browse/TS-4116
> Project: Traffic Server
>  Issue Type: Bug
>  Components: HTTP
>Affects Versions: 5.3.2
>Reporter: Kalin Krastanov
> Fix For: 6.2.0
>
>
> When ATS is set up to use client target address in transparent mode and there 
> is DNS error (i.e. the OS name is resolvable only on the client machine) 502 
> error is returned instead of using the client target address.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Commented] (TS-4116) DNS failure prohibits use of client target address

[Uri Shachar (JIRA)]

[ 
https://issues.apache.org/jira/browse/TS-4116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15088447#comment-15088447
 ] 

Uri Shachar commented on TS-4116:
-

When ATS is configured to use client target address it shouldn't do any DNS 
resolution (since it's supposed to use the dst address from the incoming 
connection).
Are you sure that you have enabled transparency correctly (Enable debug logging 
and check the logs for errors on startup)?
If you think you have - can you share the values of the following configs:
proxy.config.http.use_client_target_addr
proxy.config.http.use_client_source_port
proxy.config.http.server_ports

> DNS failure prohibits use of client target address
> --
>
> Key: TS-4116
> URL: https://issues.apache.org/jira/browse/TS-4116
> Project: Traffic Server
>  Issue Type: Bug
>  Components: HTTP
>Affects Versions: 5.3.2
>Reporter: Kalin Krastanov
>
> When ATS is set up to use client target address in transparent mode and there 
> is DNS error (i.e. the OS name is resolvable only on the client machine) 502 
> error is returned instead of using the client target address.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Commented] (TS-4116) DNS failure prohibits use of client target address

[Kalin Krastanov (JIRA)]

[ 
https://issues.apache.org/jira/browse/TS-4116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15088851#comment-15088851
 ] 

Kalin Krastanov commented on TS-4116:
-

This is from working installation and there are no errors in the config, 

proxy.config.http.use_client_target_addr INT 1
proxy.config.http.use_client_source_port INT 1
proxy.config.http.server_ports STRING 3128:ip-in=127.0.0.1 
8081:ip-in=127.0.0.1:tr-full:tr-pass

When proxy.config.http.use_client_target_addr is 1 in transparent mode ATS does 
DNS resolution to validate the client target address. In case the client target 
address is not in the IP pool for the domain name the address is considered 
invalid and the content is not stored in cache. See TS-2954 which added this 
behaviour.

So the client target address is used, but storing the content in the cache 
depends on if the supplied IP is valid.

Being unable to resolve the OS host name must be considered as if the client 
target address is not valid, i.e. content must not be stored in the cache. 
However instead we get 502 result.

> DNS failure prohibits use of client target address
> --
>
> Key: TS-4116
> URL: https://issues.apache.org/jira/browse/TS-4116
> Project: Traffic Server
>  Issue Type: Bug
>  Components: HTTP
>Affects Versions: 5.3.2
>Reporter: Kalin Krastanov
>
> When ATS is set up to use client target address in transparent mode and there 
> is DNS error (i.e. the OS name is resolvable only on the client machine) 502 
> error is returned instead of using the client target address.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)