Re: [VOTE] Release Apache HTTP server 2.2.10

2008-10-15 Thread Bing Swen
William A. Rowe, Jr. [EMAIL PROTECTED] wrote on 2008-10-14 23:06 Tom Donovan wrote: William A. Rowe, Jr. wrote: I noticed a few little things building 2.2.10 with VC9 on Windows: * the windows source .zip is missing most of apr-iconv - only the .mak and .dep files are present. With

Re: svn commit: r704883 - /httpd/httpd/trunk/Apache.dsw

2008-10-15 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: Author: tdonovan Date: Wed Oct 15 05:24:25 2008 New Revision: 704883 URL: http://svn.apache.org/viewvc?rev=704883view=rev Log: Windows: add apr_dbd_odbc project to Visual Studio workspace .dsw file Hmmm? Guess I'm confused, we trigger _try_dbd in Makefile.win for

Re: CRL verification in mod_ssl

2008-10-15 Thread Dr Stephen Henson
Dirk-Willem van Gulik wrote: On Aug 28, 2008, at 9:41 PM, Nicob wrote: Hello, I'm actually trying to setup a SSL reverse-proxy based on Apache 2.x and mod_ssl and it seems there's a bug in the verification of the CRL. If a CA changes its keys before expiration, the CRL is now signed by

Re: ProxyIOBufferSize less than greater than

2008-10-15 Thread jean-frederic clere
Graham Leggett wrote: Mladen Turk wrote: None ;) 64K comes from its usage for max AJP packet size. 8K is minimum/default AJP packet size. However, larger then 64K sizes are probably usable for setting non-ajp buffer sizes (think this is propagated down to the socket layer) So, in any way the

Re: ProxyIOBufferSize less than greater than

2008-10-15 Thread Graham Leggett
jean-frederic clere wrote: Where is the 64k limit enforced? in mod_proxy_ajp? By the AJP protocol. What I meant was, what the can the user expect to happen if they choose a limit greater than 64k? There is no enforcement of range in the set_io_buffer_size() function apart from the lower

Re: ProxyIOBufferSize less than greater than

2008-10-15 Thread Mladen Turk
Graham Leggett wrote: jean-frederic clere wrote: Where is the 64k limit enforced? in mod_proxy_ajp? By the AJP protocol. What I meant was, what the can the user expect to happen if they choose a limit greater than 64k? There is no enforcement of range in the set_io_buffer_size() function

Re: ProxyIOBufferSize less than greater than

2008-10-15 Thread Mladen Turk
Graham Leggett wrote: Hi all, According to the docs at http://httpd.apache.org/docs/trunk/mod/mod_proxy.html#proxyiobuffersize, the default value is ProxyIOBufferSize 8192, which so far is correct. The docs then say The size must be less or equal 65536. There doesn't seem to be anything

Re: ProxyIOBufferSize less than greater than

2008-10-15 Thread Graham Leggett
Mladen Turk wrote: Nope, it'll silently ALIGN(ProxyIoBufferSize, 1024) from 8K to 64K regardless of ProxyIoBufferSize provided So would it be accurate to say if AJP is used, the ProxyIOBufferSize is set to 64k, and the value for ProxyIOBufferSize is ignored? Regards, Graham -- smime.p7s

Re: proxy_ajp connect timeout fix.

2008-10-15 Thread Ruediger Pluem
On 10/15/2008 07:39 AM, Mladen Turk wrote: Ruediger Pluem wrote: I guess this leaves us to the question whether we need to be able to set connectiontimeouts below one second. Right now we are using a simple atoi for parsing those config values. Some more advanced function for parsing the

Re: ProxyIOBufferSize less than greater than

2008-10-15 Thread Graham Leggett
Mladen Turk wrote: None ;) 64K comes from its usage for max AJP packet size. 8K is minimum/default AJP packet size. However, larger then 64K sizes are probably usable for setting non-ajp buffer sizes (think this is propagated down to the socket layer) So, in any way the docs should be updated

Re: ProxyIOBufferSize less than greater than

2008-10-15 Thread Mladen Turk
Graham Leggett wrote: Mladen Turk wrote: Nope, it'll silently ALIGN(ProxyIoBufferSize, 1024) from 8K to 64K regardless of ProxyIoBufferSize provided So would it be accurate to say if AJP is used, the ProxyIOBufferSize is set to 64k, and the value for ProxyIOBufferSize is ignored? Nope.

Re: proxy_ajp connect timeout fix.

2008-10-15 Thread Mladen Turk
Ruediger Pluem wrote: This would be similar what we have for parsing some file sizes across the conf (1024, 1K, 1M, ...) I'm not aware of any standard defining that, but since we underneath use apr_time anything from 1us should be valid time (weather it makes sense is a different story).

Re: proxy_ajp connect timeout fix.

2008-10-15 Thread Jess Holle
Mladen Turk wrote: Ruediger Pluem wrote: This would be similar what we have for parsing some file sizes across the conf (1024, 1K, 1M, ...) I'm not aware of any standard defining that, but since we underneath use apr_time anything from 1us should be valid time (weather it makes sense is a

Re: strange usage pattern for child processes

2008-10-15 Thread Eric Covener
On Wed, Oct 15, 2008 at 7:55 AM, Lars Eilebrecht [EMAIL PROTECTED] wrote: Hi, The first odd thing is that I would have expected that Apache uses all child processes about equally. Especially I would have expected that there are at least 25 threads for the second process in state _ (waiting

Re: svn commit: r704906 - /httpd/httpd/branches/2.2.x/STATUS

2008-10-15 Thread Graham Leggett
[EMAIL PROTECTED] wrote: + rpluem says: These revisions cause conflicts for every single file they patch + please provide a patch that works with 2.2.x. Two of the three files are CHANGES and ap_mmn.h, which will conflict by definition. The third is a one line change to Makefile.in,

Re: strange usage pattern for child processes

2008-10-15 Thread Ruediger Pluem
On 10/15/2008 01:55 PM, Lars Eilebrecht wrote: Hi, I'm trying to debug a performance issue on an Apache infrastructure using 2.2.9 as reverse proxies. The Apache servers don't do much except for ProxyPass'ing data from others backend servers, and caching the content using mod_mem_cache.

ProxyIOBufferSize less than greater than

2008-10-15 Thread Graham Leggett
Hi all, I was asked to clarify the case with the ProxyIOBufferSize, where the documentation and the code don't agree. According to mod_proxy.c, the effective size of the buffer is the greater of AP_IOBUFSIZE or the user specified value: psf-io_buffer_size = ((s AP_IOBUFSIZE) ? s :

Re: svn commit: r704726 - /httpd/httpd/trunk/Makefile.in

2008-10-15 Thread Graham Leggett
Ruediger Pluem wrote: Hm. Doesn't this require a minor bump? We add the contents of mod_rewrite.h to our public API now. Initially I though no, as technically nothing has changed, although now that I think about it again you are right, it should get a minor bump. And if we add to our

Re: CRL verification in mod_ssl

2008-10-15 Thread Dr Stephen Henson
Erwann ABALEA wrote: Hello Mr Henson, 2008/10/15 Dr Stephen Henson [EMAIL PROTECTED]: Dirk-Willem van Gulik wrote: On Aug 28, 2008, at 9:41 PM, Nicob wrote: [...] While I haven't reviewed this specific patch I have a general comment. There is currently some questionable behaviour in

Re: strange usage pattern for child processes

2008-10-15 Thread Lars Eilebrecht
Ruediger Pluem wrote: Is it really a good idea to use mod_mem_cache? Keep in mind that mod_mem_cache uses local caches per process and cannot use sendfile to send cached data. It seems that mod_disk_cache with a cache root on a ram disk could be more efficient here. No, it really isn't a

Re: strange usage pattern for child processes

2008-10-15 Thread Dirk-Willem van Gulik
On 15 Oct 2008, at 14:41, Ruediger Pluem wrote: On 10/15/2008 01:55 PM, Lars Eilebrecht wrote: I'm trying to debug a performance issue on an Apache infrastructure using 2.2.9 as reverse proxies. The Apache servers don't do much except for ProxyPass'ing data from others backend servers, and

Re: CRL verification in mod_ssl

2008-10-15 Thread Steve Marquess
Dr Stephen Henson wrote: ... CRL refresh has some performance issues particularly in multi-process servers. For example a CRL might be 500K or more and be reloaded on each new connection. OpenSSL 0.9.9 does have some reload support though. If CRL processing was delegated to OpenSSL it would

Re: strange usage pattern for child processes

2008-10-15 Thread Ruediger Pluem
On 10/15/2008 08:25 PM, Lars Eilebrecht wrote: Ruediger Pluem wrote: Is it really a good idea to use mod_mem_cache? Keep in mind that mod_mem_cache uses local caches per process and cannot use sendfile to send cached data. It seems that mod_disk_cache with a cache root on a ram disk could

Re: svn commit: r704992 - /httpd/httpd/branches/2.2.x/STATUS

2008-10-15 Thread Graham Leggett
[EMAIL PROTECTED] wrote: + rpluem says: The patch to ap_mmn.h does only contain the comment, but does + not change the #define. Once this is fixed I am +1. Fixed. Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature

Re: svn commit: r704988 - in /httpd/site/trunk: docs/index.html xdocs/index.xml

2008-10-15 Thread Sander Temme
On Oct 15, 2008, at 11:33 AM, [EMAIL PROTECTED] wrote: * This should be 2.2.10 instead of 2.2.9 Shall I pull this down onto minotaur or will you? S. -- Sander Temme [EMAIL PROTECTED] PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF smime.p7s Description: S/MIME cryptographic

Re: [VOTE] Release Apache HTTP server 2.2.10

2008-10-15 Thread William A. Rowe, Jr.
Tom Donovan wrote: William A. Rowe, Jr. wrote: .msi*'s to direct at /dist/httpd/binaries/win32/, -symbols.zip*'s to direct at archive.apache.org/dist/httpd/binaries/win32/symbols/, and the usual httpd-2.2.10-win32-src.zip* files are all in the usual /dev/dist/ location. *

Re: svn commit: r704988 - in /httpd/site/trunk: docs/index.html xdocs/index.xml

2008-10-15 Thread Ruediger Pluem
On 10/15/2008 09:27 PM, Sander Temme wrote: On Oct 15, 2008, at 11:33 AM, [EMAIL PROTECTED] wrote: * This should be 2.2.10 instead of 2.2.9 Shall I pull this down onto minotaur or will you? Already svn up'ed on minotaur and visible on live site in the meantime. Regards Rüdiger

Re: strange usage pattern for child processes

2008-10-15 Thread Graham Leggett
Lars Eilebrecht wrote: The second odd thing is that the connections/threads in W state seem to be hanging, i.e., no data is being transferred over the connection and these threads/connection time out after about 256 seconds. However, the general Timeout setting is 30s so why isn't the

Re: svn commit: r704988 - in /httpd/site/trunk: docs/index.html xdocs/index.xml

2008-10-15 Thread Sander Temme
On Oct 15, 2008, at 12:50 PM, Ruediger Pluem wrote: Shall I pull this down onto minotaur or will you? Already svn up'ed on minotaur and visible on live site in the meantime. Mild cache busting action in my browser makes me see this, too. Thanks, S. -- Sander Temme [EMAIL PROTECTED]

Re: strange usage pattern for child processes

2008-10-15 Thread Graham Leggett
Ruediger Pluem wrote: Something else to try is to look at the ProxyIOBufferSize parameter. The proxy reads from the backend in blocks, and as soon as a block is not full (ie it's the last block), the proxy will complete and terminate the backend request before sending the last block on to the

Re: svn commit: r704883 - /httpd/httpd/trunk/Apache.dsw

2008-10-15 Thread Tom Donovan
William A. Rowe, Jr. wrote: [EMAIL PROTECTED] wrote: Author: tdonovan Date: Wed Oct 15 05:24:25 2008 New Revision: 704883 URL: http://svn.apache.org/viewvc?rev=704883view=rev Log: Windows: add apr_dbd_odbc project to Visual Studio workspace .dsw file Hmmm? Guess I'm confused, we trigger