Re: the wheel of httpd-dev life is surely slowing down, solutions please

2003-11-13 Thread Matthieu Estrade
MATHIHALLI,MADHUSUDAN (HP-Cupertino,ex1) wrote: Disclaimer : Not targetting any one individual I don't think there is target here, i consider it more as an open discussion. I have a question to the people have lots of time to write such long mails and responses - why can't you instead spend

Re: consider reopening 1.3

2003-11-16 Thread Matthieu Estrade
Hi, I understand many people still are with 1.3 and don't want to change because it's stable. But Coding modules with 1.3 is definitively not easy and require many time core patch. Apache 2.0 was design to give many really good features like threaded mpm, filters etc... When you look others web

Re: consider reopening 1.3

2003-11-17 Thread Matthieu Estrade
You are right, apache 2.0 pre fork is apache 1.3 prefork... But one nice feature of apache 2.0 is to provide other mpm more powerfull. worker mpm is apache 1.3. If you look all benchmark of web server, you will see that all are now providing threaded architectures because it's more stable and

Re: Bug in mod_cache?

2003-11-18 Thread Matthieu Estrade
mod_cache is not caching / because of negotiate problem, if i remember well. We discuss many times to why not caching, and never find really a good reason to not cache /. Brian Akins wrote: mod_cache never caches anything ending in / (ie, www.cnn.com/) but will cache /index.html. Is this on

[PATCH] bug #18756 ldap cache and shared memory - cache init

2003-12-10 Thread Matthieu Estrade
Hi, Here is a little patch, fixing the ldap cache using shared memory. After the fix for plateform using SHM or not, it was a problem with cache init, unable to get it's rmm address to alloc memory. I modified the cache alloc for the two cases, with and without SHM, now not using more

Re: [PATCH] bug #18756 ldap cache and shared memory - cache init

2003-12-11 Thread Matthieu Estrade
a basic alloc functions. Jeff Trawick wrote: Matthieu Estrade wrote: Here is a little patch, fixing the ldap cache using shared memory. After the fix for plateform using SHM or not, it was a problem with cache init, unable to get it's rmm address to alloc memory. why is st-cache_rmm not filled

Re: [PATCH] bug #18756 ldap cache and shared memory - cache init

2003-12-12 Thread Matthieu Estrade
util_ald_alloc to receive now util_ald_cache_t and no more apr_rmm_t. As we are just before the cache alloc, it's impossible to give util_ald_alloc a cache object, that's why there, i did a basic alloc functions. Jeff Trawick wrote: Matthieu Estrade wrote: Here is a little patch, fixing

Re: mod_ldap/util_ldap Issues...

2004-02-11 Thread Matthieu Estrade
Hi, About ldap cache + shm: I tested all these patch on linux and it was working well, seems it work well too on FreeBSD. I heard problem on solaris (PR #18756) but i am not sure these bugs are from ldap cache, but more from the changes done with ldap lib and TLS. Considering the module is

Re: mod_cache: allowing urls ending in / to be cached

2004-07-16 Thread Matthieu Estrade
Pier Fumagalli wrote: On 16 Jul 2004, at 15:13, Graham Leggett wrote: Brian Akins wrote: If it works, I say commit the patch. Can think of no reason why we should not cache an URL ending is /. Because the cache_in filter gets added in the quick_handler. The fast_internal_redirect in mod_dir

httpd 2.2 cache - disable and enable

2006-10-11 Thread Matthieu Estrade
Hi, I would like to make disable and enable work with regular expression. Something like CacheDisableMatch and CacheEnableMatch or working with location tags. Does somebody have more preferences to one method ? Matthieu

Re: httpd 2.2 cache - disable and enable

2006-10-11 Thread Matthieu Estrade
Colm MacCarthaigh a écrit : On Wed, Oct 11, 2006 at 05:04:21PM +0200, Matthieu Estrade wrote: Hi, I would like to make disable and enable work with regular expression. Something like CacheDisableMatch and CacheEnableMatch or working with location tags. Does somebody have more preferences

Re: httpd 2.2 cache - disable and enable

2006-10-12 Thread Matthieu Estrade
Bart van der Schans a écrit : Matthieu Estrade wrote: Colm MacCarthaigh a écrit : I agree on this point, but people using this directive choose to loose time on this regexp check. The problem i have is many people wants to enable cache on .gif and .jpeg and .pdf, but they don't know

Re: Vote: Support of OCSP in mod_ssl - bug 41123

2007-01-30 Thread Matthieu Estrade
We are using this patch in production on many platform for one year now, and we don't have problem.+1 for integration in trunk.MatthieuMarc Stern lt;[EMAIL PROTECTED]gt; wrote: gt; gt; gt; gt;gt;gt; gt; gt; I ported the patch to 2.2.4, including the doc. gt; These are exactly the

Re: What do you want in HTTPD 2.4/3.0/X/GREEN?

2005-12-04 Thread Matthieu Estrade
Paul Querna wrote: My intention is for this to be a wide open brainstorming thread. I expect that we will be able to discuss several ideas in much more detail at the Hackathon next week, but I really want to get all ideas 'on the table'. I have a few things I would like to see, but I am

Re: Apache proxy behaviour...

2006-02-02 Thread Matthieu Estrade
The reverse proxy read a brigade, then forward it to the client. It should not buffer the response but forward block of data. Maybe it's because of deflate or mod_security... But this behaviour is not normal imho. Matthieu On Thursday 02 February 2006 16:13, CASTELLE Thomas wrote: Hi there,

Re: [PATCH] setenvif filter

2006-06-03 Thread Matthieu Estrade
Brian Akins wrote: Francois PESCE wrote: I've discussed about a patch for mod_setenvif 2 years ago, and have coded it at that time, it is successfully used on various host in production since. You need to handle content type specially by checking r-content_type. For some reason, just doing

Re: People still using v1.3 - finding out why

2004-11-18 Thread Matthieu Estrade
I think people rely on apache 1.3 stability and security. many people consider httpd-2.0 as too young and don't try to understand why it's better. Does somebody have some percentage about 1.3 use and 2.0 ? I don't think 1.3 is still here because of modules, there is too many modules and too

Re: People still using v1.3 - finding out why

2004-11-18 Thread Matthieu Estrade
Brett Lentz (Excell Data Corporation) wrote: Please don't forget: 1. Solaris 10 is shipping with 1.3.31 Redhat is shipping 2.0 for long time now 2. OpenBSD's fork of 1.3 openbsd and the theocracy ?? hahaha cool let them continue with 1.3 --Brett. Systems Administrator, RHCE -Original

Re: 2.1.1 tarballs posted...

2004-11-22 Thread Matthieu Estrade
Justin Erenkrantz wrote: http://httpd.apache.org/dev/dist/ Grab the 2.1.1 tarballs while they're fresh. Please start testing these releases - they should have the intent of becoming the beginning of the 2.2.x series modulo all of the cleanup work we'll have to do after we branch. For now,

netscape 4.x and SSL

2004-12-09 Thread Matthieu Estrade
Hi, Does somebody know old issues with Netscape 4.x and SSL keepalive ? I actually have an httpd-2.0 reverse proxy, and an IIS backend. Netscape connected directly on IIS is runnig well, keepalive is ok. Netscape connected throught a netscape proxy is running well, keepalive is ok. Netscape

modssl - ocsp - crl

2004-12-15 Thread Matthieu Estrade
I'm close to finish the ocsp feature on mod_ssl, but when i look the entire client auth system, there is some little point not really clean. For example, when somebody today setup a SSLVerifyClient require and put CA and CRL, with SSLCARevocationPath, if no CRL is correct inside the path,

Re: [VOTE] 2.1.3 as beta

2005-02-23 Thread Matthieu Estrade
Justin Erenkrantz wrote: --On Wednesday, February 23, 2005 5:55 PM +0200 Graham Leggett [EMAIL PROTECTED] wrote: As soon as you install httpd + APR in a system location, you no longer can install subversion + APR in a system location. This was the basis of getting vendor packaging files (like

Re: Mod_MEM_cache doesn't use Pools to allocate cache objects???

2005-03-08 Thread Matthieu Estrade
luca regini wrote: Taking a look at mod_mem_cache source code i have seen that it doesn't use pools to allocate cache objects but i does so by means of reference counting and simple calloc/free calls. I have also seen that this module requires a Threaded apr to work. If you use prefork, each

Re: more mod_smtpd stuff [was Summer of Code]

2005-07-01 Thread Matthieu Estrade
Jem Berkes wrote: To address one of the points brought up on IRC, if there is actually a non-experimental target for this software any time soon it would make more sense to support the 2.0 server as I think few production servers would be running 2.1? I am not sure all of this smtp stuff

Re: mod_smtpd design.

2005-07-01 Thread Matthieu Estrade
I agree with you, but when i tried to do this in the module you can find in www.apache.org/~mestrade/ , i found many dependencies in some *http* files. request_rec is defined in httpd.h and i think it will not be clean to handle some smtp data in a file with a name containing http, that's why i

Re: Initial mod_smtpd code.

2005-07-18 Thread Matthieu Estrade
Hi Rian, I like how the code is done. I am not sure a hook for each smtp command is the good solution. Adding a new command here is very simple and quick. the problem i found when i did my poc is when there is in the command, different destination email. It's difficult here to keep the

[PATCH] Bug #18756: fix many problems about ldap cache using shared memory

2003-09-12 Thread Matthieu Estrade
Hi, This is my second and new patch for ldap cache using shared memory. I am using ldap cache with linux redhat and worker mpm. The problems i found: 1) All shm cache information (shm addr, rmm addr, lock) are declared as global. -- in worker mpm, many strange problems happen. 2) shm

Re: [PATCH] Bug #18756: fix many problems about ldap cache using shared memory

2003-09-20 Thread Matthieu Estrade
comment on bugzilla), but i haven't a solaris box to test and debug... And i don't know if i will be able to reproduce the bug if i install a sol9 x86. Matthieu Jeff Trawick a écrit: Matthieu Estrade wrote: This is my second and new patch for ldap cache using shared memory. I am using ldap cache

Re: mod_ldap Cache Issues

2003-10-03 Thread Matthieu Estrade
Hi Jess, Did you used the patch i did and i posted here and on bugzilla for bug #18756 ? For your first issue, the problem should be that all memory allocation are not controlled in the code, i mean if it return NULL or an address to the memory, it's the same. So maybe when you are at user

Can't use handler + reverse proxy

2003-10-21 Thread Matthieu Estrade
Hi, I am actually using apache as a reverse proxy, and i am trying to use a handler with... and it doesn't work. When i setup my SetHandler on a local virtualhost, it works well, but when i setup it on a virtualhost doing reverse proxy, it's never called. any ideas ? Matthieu

Re: Can't use handler + reverse proxy

2003-10-21 Thread Matthieu Estrade
I am using Apache 2.0 and what i want to do is a applicative authentication using a form i wanted sent by the reverse proxy. But i think i will do another way, looking into mod_mem_cache how it's disable mod_proxy when it want to serve data directly from his cache... Cliff Woolley wrote: On

Re: Can't use handler + reverse proxy

2003-10-21 Thread Matthieu Estrade
I have to look what this quick handler do exactly, but i work well and seems to be able to act as normal handler. ap_hook_quick_handler(cache_url_handler, NULL, NULL, APR_HOOK_FIRST); Cliff Woolley wrote: On Tue, 21 Oct 2003, Cliff Woolley wrote: What exactly are you trying to do, and with

Re: mod_ldap SEGV while caching on FreeBSD 4.8-STABLE

2003-11-03 Thread Matthieu Estrade
Hi Albert, Could you try this little patch posted on bugzilla: http://nagoya.apache.org/bugzilla/showattachment.cgi?attach_id=8185 It works under linux but still not work with solaris... i never tested it on FreeBSD. You can also find information about the bug which is #18756. Albert Chin

Re: mod_ldap SEGV while caching on FreeBSD 4.8-STABLE

2003-11-04 Thread Matthieu Estrade
- From: Matthieu Estrade [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 12:37 AM To: [EMAIL PROTECTED] Subject: Re: mod_ldap SEGV while caching on FreeBSD 4.8-STABLE Hi Albert, Could you try this little patch posted on bugzilla: http://nagoya.apache.org/bugzilla/showattachment.cgi?attach_id

Re: the wheel of httpd-dev life is surely slowing down, solutionsplease

2003-11-13 Thread Matthieu Estrade
Hi, I would like to speak a little about all this slow answer or review problems. i will take example of my last patch about ldap-cache. I started doing it 5 month ago, and posted few patch many times on [EMAIL PROTECTED] Nobody answered on the list, i posted about 4 or 5 times the same

Some mod_cache + Reverse proxy problems

2002-09-10 Thread Matthieu Estrade
Hi, I'am trying to use the cache module with reverse proxy, and i have few problems. When i'am using a browser with data in cache, like the file test.gif. If the picture is in my browser cache before my first try with the reverse proxy, mod_cache is unable to cache the data, because on the

mod_proxy + mod_cache problem, loosing EOS bucket

2002-09-23 Thread Matthieu Estrade
Hi, i'am working on mod_cache and mod_mem_cache + mod_proxy i found a problem with EOS Bucket. mod_cache is inserting his cache_in filter in output_filter when he wants to insert data in the cache. when mod_cache is used with mod_proxy, the cache_in filter is called after mod_proxy call

Re: mod_proxy + mod_cache problem, loosing EOS bucket

2002-09-23 Thread Matthieu Estrade
brigade with a part of data. Do you think it's better to modify how proxy is passing data to the output_filter or to modify the way mod_cache is getting his data from bucket_brigade ? Matthieu Matthieu Estrade wrote: Hi, i'am working on mod_cache and mod_mem_cache + mod_proxy i found a problem

Patch mod_proxy: mod_proxy + mod_cache problem

2002-09-23 Thread Matthieu Estrade
Hi again :) I did a patch modifiying mod_proxy to pass the entire data (response from backend server) to output_filter, unstead of brigade per brigade. it seems to work well... Matthieu Matthieu Estrade wrote: Hi again, the problem seems to be in the proxy. When proxy read the data

Re: Patch mod_proxy: mod_proxy + mod_cache problem

2002-09-23 Thread Matthieu Estrade
hi bill, I agree with you about the proxy... Do you think it's possible to force the cache filter, be runned after all the proxy filters ? Matthieu Bill Stoddard wrote: Hi again :) I did a patch modifiying mod_proxy to pass the entire data (response from backend server) to output_filter,

Re: Patch mod_proxy: mod_proxy + mod_cache problem

2002-09-23 Thread Matthieu Estrade
by the backend server. regards, Matthieu Graham Leggett wrote: Matthieu Estrade wrote: I agree with you about the proxy... Do you think it's possible to force the cache filter, be runned after all the proxy filters ? The cache filter is supposed to run after all the filters for maximum caching

Re: Patch mod_proxy: mod_proxy + mod_cache problem

2002-09-23 Thread Matthieu Estrade
buffer a *huge* amount of data. The answer is that the cache code currently only caches responses that arrive in one brigade. Proxy isn't the problem. Matthieu Estrade wrote: Hi graham, the problem is the filter is called between two ap_pass_brigade by the reverse proxy... like: proxy

Re: mod_cache and brigade

2002-09-24 Thread Matthieu Estrade
Hi again, Just to say when i put my mozilla/netscape in HTTP/1.0, i don't have the bug i speak about in my last mail. Matthieu

RE : mod_proxy support for exchange 2000

2002-10-03 Thread Matthieu Estrade
Hi, I had this problem (proxying Exchange) few month ago, when apache 2.0 was just released... I was unable with apache 1.3 to proxy my OWA (outlook web access). When i sniffed the connection, i saw that for the login/pass process, Exchange was sending a 401 until he found a valid

Re: Mod_cache and multiple brigade problem.

2002-10-10 Thread Matthieu Estrade
Hi, I worked more on debug in mod_cache. what i found is: when the bug is happening, and it's not all the time: the request are served from cache 1/2 times so: first request is cached, the second one served from the cache, the third one is cached. find_entry function in cache_hash is unable

Problem with cache+proxy and multiple brigade

2002-10-13 Thread Matthieu Estrade
Hi, I found a problem with mod_cache and mod_proxy... when cache is storing the data + headers in memory, it doesn't care about Transfert-Encoding... So if reverse proxy receive a response by multiple brigade, with the header Transfert-Encoding=chunked, mod_cache store it in mobj-header_out.

Re: Problem with cache+proxy and multiple brigade

2002-10-14 Thread Matthieu Estrade
Graham Leggett wrote: Matthieu Estrade wrote: I found a problem with mod_cache and mod_proxy... when cache is storing the data + headers in memory, it doesn't care about Transfert-Encoding... AFAIK proxy should always dechunck any chunked data it receives before passing it up

Re: RFC: extracting the mod_ssl session cache interface

2008-02-26 Thread Matthieu Estrade
Joe Orton wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex interface, but that's next on my hit list. Is there

ProxyIOBufferSize wrong behavior

2008-03-07 Thread Matthieu Estrade
Hello, I've found something strange in the mod_proxy (httpd 2.0.63) setup: The following directive says: http://httpd.apache.org/docs/2.0/mod/mod_proxy.html#proxyiobuffersize The |ProxyIOBufferSize| directive adjusts the size of the internal buffer, which is used as a scratchpad for the data

Re: ProxyIOBufferSize wrong behavior

2008-03-07 Thread Matthieu Estrade
Takashi Sato wrote: On Fri, 07 Mar 2008 12:13:14 +0100 Matthieu Estrade [EMAIL PROTECTED] wrote: I actually need this directive to work better with some stream data. Can somebody confirm the modification must be done in the code and not in the documentation ? ProxyIOBufferSize

Re: Mitigating the Slowloris DoS attack

2009-06-22 Thread Matthieu Estrade
Hi, How about coding a module looking how many bytes are read and if there is too little chunk of data, close the connection. Something like a MinDataReadSize. If the read() function read too little data, close() the socket... Dunno if it's possible to hook directly in connection hook to do

Re: Mitigating the Slowloris DoS attack

2009-06-24 Thread Matthieu Estrade
The problem could happen also if a CL is sent and not enough data is posted. So i don't think control for complete headers will solve the entire problem. I'm actually playing with dynamic timeout considering time between request line and first header to adapt future timeout of the socket, but it

Re: Mitigating the Slowloris DoS attack

2009-06-24 Thread Matthieu Estrade
I totally agree with you. This first point the lack of tunning of httpd.conf, this kind of attack crash default setup of httpd.conf but a well setup server is harder to kill, specially if you have decreased timeout. With 5 seconds as timeout and a good tuning, slowloris fail... More granular

Re: Httpd 3.0 or something else

2009-11-13 Thread Matthieu Estrade
Woow =) Very nice and interesting thread =) It's very hard to think how to design httpd 3.0 before knowing what is the real aim of this new webserver. Many feedback here are from very spoted problems. I've started at the end of 1.3 and the beta release of 2.0, and i must say that applicative

ap_process_request_internal, unescape_url, reverse proxy and %00

2010-07-28 Thread Matthieu Estrade
Hi, When apache is used with mod_proxy as reverse proxy and not proxy, and when there is a %00 in the url, the request is directly refused by the reverse proxy. In the code, in ap_process_request_internal function (server/request.c): /* Ignore embedded %2F's in path for proxy requests */