Re: Is Apache Proxy Half-Duplex?

2002-05-22 Thread Igor Sysoev
mod_accel uses temporary files if backend reponse or client POST is bigger then memory buffer. Igor Sysoev http://sysoev.ru

Re: [SECURITY] Remote exploit for 32-bit Apache HTTP Server known

2002-06-21 Thread Igor Sysoev
deal with clients body mod_proxy does not support client's chunked request. Of course, unpatched frontend is still vulnerable. Igor Sysoev http://sysoev.ru

mod_deflate

2001-12-20 Thread Igor Sysoev
Russian only. Sorry. Some features: It patches Apache 1.3.x so it allows to compress content without temporary files as mod_gzip does. It allows two encoding - gzip and deflate. It has some workarounds for buggy browsers. On FreeBSD it can check CPU idle to disable compression. Igor Sysoev

Re: [PATCH] mod_deflate

2002-02-16 Thread Igor Sysoev
browser. application/x-shockwave-flash FlashPlayer plugin for NN4 for Windows does not understand it compressed. Although plugin for Linux NN4 work correctly. text/rtf MSIE 4.x-6.x understand correctly them application/msword when compressed. NN and Opera does not. application/vnd.ms-excel application/vnd.ms-powerpoint Igor Sysoev

Re: [PATCH] mod_deflate

2002-02-16 Thread Igor Sysoev
On Sat, 16 Feb 2002, Eli Marmor wrote: > Igor Sysoev wrote: > > > > On Sat, 16 Feb 2002, Zvi Har'El wrote: > > > > ... > > > > In my mod_deflate module (for Apache 1.3.x) I'd enabled by default > > "text/html" only. You can add

Re: [PATCH] mod_deflate

2002-02-16 Thread Igor Sysoev
ectly handle compressed response - MSIE 4.x and Mozilla 0.9.1. The main problem is proxies, especially Squid (~70% of all proxies) Proxies can store compressed response and return it to browser that does not understand gzipped content. So you should by default disable encoding for requests with "Via" header and HTTP/1.0 requests (HTTP/1.1-compatible proxy must set "Via" header, HTTP/1.0-compatible should but not have). Igor Sysoev

Re: [PATCH] mod_deflate

2002-02-18 Thread Igor Sysoev
On Sun, 17 Feb 2002, Graham Leggett wrote: > Igor Sysoev wrote: > > > The main problem is proxies, especially Squid (~70% of all proxies) > > Proxies can store compressed response and return it to browser > > that does not understand gzipped content. > > Is this

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-19 Thread Igor Sysoev
On Tue, 19 Feb 2002, Fowler, Brian wrote: > Due to a requirement on a project we are currently working on involving > using Apache as a caching reverse proxy server to WebLogic. > > We are considering implementing the > > Cache-Control: no-cache= > > for the Apache 1.3 mod_proxy module so

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-19 Thread Igor Sysoev
On Tue, 19 Feb 2002, Graham Leggett wrote: > Igor Sysoev wrote: > > > mod_proxy is very ancient module and it's hard to maintain it. > > Er, mod_proxy _was_ a very ancient module, but has been largely > overhauled in v1.3 and completely rewritten in v2.0 in both case

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-19 Thread Igor Sysoev
On Tue, 19 Feb 2002, Graham Leggett wrote: > Igor Sysoev wrote: > > > The main problem with mod_proxy is that it reads backend response > > to 8K buffer and than sends it to client. When it have sent it > > to client it reads again from backend. After it have sent whole

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-21 Thread Igor Sysoev
On Wed, 20 Feb 2002, Graham Leggett wrote: > Igor Sysoev wrote: > > > 1.3.23 mod_proxy calls ap_proxy_send_fb() and than closes backend. > > But ap_proxy_send_fb() flushes output to client so it can hang > > for a long time. > > I have come up with a patch to

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-21 Thread Igor Sysoev
he 2.0 stabilzation. As to mod_proxy, I've wrote replacement for mod_proxy because it's to difficult to hack it. It was much simpler to write module from scratch. Igor Sysoev

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-21 Thread Igor Sysoev
On Thu, 21 Feb 2002, Igor Sysoev wrote: > On Thu, 21 Feb 2002, Joseph Wayne Norton wrote: > > > After I read your posting, I downloaded but haven't tried to install > > the mod_accel. From you description, it looks like a very, powerful > > module with pretty much

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-23 Thread Igor Sysoev
On Wed, 20 Feb 2002, Graham Leggett wrote: > Igor Sysoev wrote: > > > 1.3.23 mod_proxy calls ap_proxy_send_fb() and than closes backend. > > But ap_proxy_send_fb() flushes output to client so it can hang > > for a long time. > > I have come up with a patch to

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-26 Thread Igor Sysoev
ntent. For example it can replace '11111' number in http://host/path1?place=1&key=1234&rand=1";> with random value. Igor Sysoev

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-27 Thread Igor Sysoev
backends. This would allow apache to return a customized error page > for individual backends for cases when the backend is not reachable, > etc. mod_accel allows it. It seems that mod_proxy in 1.3.23 allows it too but I'm not sure. Igor Sysoev

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-02-27 Thread Igor Sysoev
On Wed, 27 Feb 2002, Joseph Wayne Norton wrote: > At Wed, 27 Feb 2002 11:57:46 +0300 (MSK), > Igor Sysoev wrote: > > > > I do not understand why do you want that the backend will serve > > response directly to the client ? If ithe client is slow then it will &

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-03-02 Thread Igor Sysoev
On Fri, 1 Mar 2002, Graham Leggett wrote: > Igor Sysoev wrote: > > > mod_proxy can not do many things that mod_accel can. Some of > > them can be easy implemented, some not. > > Keep in mind that mod_proxy is exactly that - a proxy. It does not try > to dupl

RE: Allocating a buffer efficiently...?

2002-03-02 Thread Igor Sysoev
; Specifically which pool is being used. You see all context - Graham have quoted almost whole my email. As to pool I had tried to make big allocation from r->connection->client->pool. Keep-alives were off. > > > I use malloc for big allocations, store addresses in array > > > allocated from pool and set cleanup for this array. > > > In cleanup I free addresses if they is not free already. > > > > Comments...? Igor Sysoev

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-03-07 Thread Igor Sysoev
ich is a bad idea. > > > > Probably but Apache 1.3.x has not such module and I needed it too much > > in mod_accel. > > You should have created a separate module for this, and run it alongside > mod_accel. This can still be done though. I did not use mod_cgi and Java. > > > This is the job of mod_rewrite. > > > > mod_rewrite can not do it. > > Then rewrite should be patched to do it. Your phrase is like 'mod_rewrite should be patched to do some SSI job' mod_rewrite works with URLs and filenames only. It can not change content. mod_randban changes content on the fly. Igor Sysoev

Re: mod_proxy Cache-Control: no-cache= support Apache1.3

2002-03-09 Thread Igor Sysoev
On Fri, 8 Mar 2002, Graham Leggett wrote: > Igor Sysoev wrote: > > > > > *) make simple fault-tolerance with dns-balanced backends. > > > > > > mod_proxy does this already. > > > > No. mod_proxy tries it but code is broken. If connection faile

FreeBSD sendfile

2002-03-28 Thread Igor Sysoev
ld encounter problem. So I think that better way is not to use FreeBSD 4.x sendfile() capability to send header but use emulatation of header transmition instead. Igor Sysoev

Re: Does Solaris qsort suck

2002-04-06 Thread Igor Sysoev
d.jsp?forum=4&thread=7231 > > Don't know if those cases would be seen by Solaris users of Apache > 2.0.x, but it might be useful to snarf FreeBSD's qsort.c and link Apache > to it if a Solaris platform is detected I think Apache does not sort more then ten items so this bug does not affect Apache. Igor Sysoev

Re: Does Solaris qsort suck

2002-04-08 Thread Igor Sysoev
detected > > Solaris 8 included a huge increase in qsort performance. What version are > you using? I see this bug on SunOS X 5.8 Generic_108529-07 i86pc i386 i86pc But this bug does not affect Apache. Igor Sysoev

Re: Does Solaris qsort suck

2002-04-08 Thread Igor Sysoev
On Mon, 8 Apr 2002, Justin Erenkrantz wrote: > On Mon, Apr 08, 2002 at 01:53:13PM +0400, Igor Sysoev wrote: > > I see this bug on > > > > SunOS X 5.8 Generic_108529-07 i86pc i386 i86pc > > You are sorely out-of-date on your kernel version. Download >

Re: mod_proxy distinguish cookies?

2004-04-25 Thread Igor Sysoev
rrently rather limited. > > Also, if this is actually addressed to the wrong list for some reason > then a pointer would be much appreciated... mod_accel ( http://sysoev.ru/en/ ) allows to take cookies into account while caching: AccelCacheCookie some_cookie_name another_cookie_name You can set it on per-location basis. Besides, my upcoming light-weight http and reverse proxy server nginx will allow to do it too. Igor Sysoev http://sysoev.ru/en/

Re: mod_proxy distinguish cookies?

2004-04-26 Thread Igor Sysoev
On Mon, 26 Apr 2004, Graham Leggett wrote: > Igor Sysoev wrote: > > > mod_accel ( http://sysoev.ru/en/ ) allows to take cookies into account while > > caching: > > > > AccelCacheCookie some_cookie_name another_cookie_name > > > > You can set it on per-lo

Re: mod_proxy distinguish cookies?

2004-05-05 Thread Igor Sysoev
he such responses only if the URL has a ".html" or ".htm" extentions. There are probably other cachable extentions. MSIE 4.x always sends "If-Modified-Since" for these cached responses. Igor Sysoev http://sysoev.ru/en/

Re: mod_proxy distinguish cookies?

2004-05-05 Thread Igor Sysoev
Cache" disables a client's "Pragma: no-cache", "Cache-Control: no-cache" and "Cache-Control: max-age=" headers. The "AccelIgnoreExpires" disables a backend's "Expires", "Cache-Control: no-cache" and "Cache-Control: max-age=" headers. Igor Sysoev http://sysoev.ru/en/

Re: mod_proxy reverse proxy optimization/performance question

2004-10-21 Thread Igor Sysoev
On Thu, 21 Oct 2004, Roman Gavrilov wrote: > so what would you suggest I should do ? > implement it by myself ? No, just look at http://sysoev.ru/mod_accel/ It's Apache 1.3 module as you need. Igor Sysoev http://sysoev.ru/en/ > Bill Stoddard wrote: > > > Graham Legget

Re: mod_proxy reverse proxy optimization/performance question

2004-10-21 Thread Igor Sysoev
On Thu, 21 Oct 2004, Roman Gavrilov wrote: > after checking the mod_accel I found out that it works only with http, > we need the cache & proxy to work both with http and https. > What was the reason for disabling https proxying & caching ? How do you think to do https reverse

Re: mod_proxy reverse proxy optimization/performance question

2004-10-21 Thread Igor Sysoev
; > > ProxyPass /foo/bar https:/mydomain/foobar/ > ProxyPassReverse https:/mydomain/foobar/ /foo/bar > > I'll be more then glad to discuss it with you. So proxy should decrypt the stream, find URI, then encrypt it, and pass it encrypted to backend ? Igor Sysoev http://sysoev.ru/en/

Re: mod_proxy reverse proxy optimization/performance question

2004-10-21 Thread Igor Sysoev
s server and returns the answer to the client > of course after caching it. Well, it's the same as I described. No, mod_accel can not connect to backend using https. > Roman > > Igor Sysoev wrote: > > >On Thu, 21 Oct 2004, Roman Gavrilov wrote: > > > > > > >

Re: deflate in mod_deflate

2002-12-25 Thread Igor Sysoev
slightly different > than with gzip, but I really haven't sat down to look at the > relevant RFCs. It might be easy, but it might be hard. MSIE, Mozilla and Opera do not understand RFC 1950 'deflate' method, i.e. they want RFC 1951 only deflated stream without any zlib header and Adler32 checksum trailer. Igor Sysoev http://sysoev.ru/en/

Re: mod_deflate -- File size lower bound needed?

2003-04-02 Thread Igor Sysoev
able or disable compressing if idle time is low. But I found this limitation is almost usefullness on modern CPU and small ehough responses (about < 100K). Much more limiting factor is memory overhead that zlib required for compressing - 256K-384K. So I have directive to disable a compressing to avoid an intensive swapping if a number of Apache processes is bigger then specified. Igor Sysoev http://sysoev.ru/en/

Re: 1.3 Wishlist: (Was: Re: consider reopening 1.3)

2003-11-17 Thread Igor Sysoev
3... > > How about support for chunked compressed responses right in > src/main/buff.c where it belongs (given we don't have filters in Apache1) There's mod_deflate module for Apache 1.3.x that patches buff.c and compesses a response on the fly. It's available at http://sysoev.ru/en/ Igor Sysoev http://sysoev.ru/en/

Re: mod_deflate Vary header

2005-11-07 Thread Igor Sysoev
has the same problem(s). I don't use Netscape anymore. Anyone know for sure if Netscape actually stores "variants" correctly in local browser cache? Actually, MSIE 5.5+ will cache the response with any "Vary" header if it also has "Content-Encoding: gzip" or &quo

Re: mod_deflate Vary header

2005-11-08 Thread Igor Sysoev
On Tue, 8 Nov 2005 [EMAIL PROTECTED] wrote: Igor Sysoev wrote Actually, with MSIE 5.5+ appearance the chances that client can not decompress the response from downstream cache have increased. If MSIE 5.5 is configured to work via proxy with HTTP/1.0, then MSIE will never send "Accept-Enc

Re: Question about memory in httpd

2005-12-04 Thread Igor Sysoev
t have any chance of handling it. Read a whole blog post about it: http://baus.net/memory-management Igor Sysoev http://sysoev.ru/en/