Many BADREQ and NOSRV entries in the log

2011-11-16 Thread Mariano Guezuraga

Hello list,

I'm getting some (~400 per hour) NOSRV ...BADREQ entries in my log 
file. I've tried temporarely accept-invalid-http-request with no 
success, also I've set the timeout http-request parameter to 30s, with 
no difference.


Partial log of the BADREQ: http://pastebin.com/uHJ2qztb

My haproxy.cfg file: http://pastebin.com/EJi18bqV

The only error I've spotted trough the socket is:

root@loadbalancer-1:/var/log# echo show errors | socat 
unix-connect:/tmp/haproxy stdio


[16/Nov/2011:14:46:46.506] frontend balancer (#1): invalid request
  src 92.242.138.134, session #4196, backend balancer (#1), server 
NONE (#-1)

  request length 73 bytes, error at position 14:

  0  GET /s/camisa da marca reserva/15 HTTP/1.0\r\n
  00044  Host: www.example.com.br\r\n
  00071  \r\n

I don't know if I should ignore this, or what to try. I would appreciate 
any hint!




Re: Many BADREQ and NOSRV entries in the log

2011-11-16 Thread Baptiste
Hi,

Your request does not seem to be RFC compliant because of the blank char.
It should have been encoded with a %20.

cheers

On Wed, Nov 16, 2011 at 4:24 PM, Mariano Guezuraga mguezur...@gmail.com wrote:
 Hello list,

 I'm getting some (~400 per hour) NOSRV ...BADREQ entries in my log file.
 I've tried temporarely accept-invalid-http-request with no success, also
 I've set the timeout http-request parameter to 30s, with no difference.

 Partial log of the BADREQ: http://pastebin.com/uHJ2qztb

 My haproxy.cfg file: http://pastebin.com/EJi18bqV

 The only error I've spotted trough the socket is:

 root@loadbalancer-1:/var/log# echo show errors | socat
 unix-connect:/tmp/haproxy stdio

 [16/Nov/2011:14:46:46.506] frontend balancer (#1): invalid request
  src 92.242.138.134, session #4196, backend balancer (#1), server NONE
 (#-1)
  request length 73 bytes, error at position 14:

  0  GET /s/camisa da marca reserva/15 HTTP/1.0\r\n
  00044  Host: www.example.com.br\r\n
  00071  \r\n

 I don't know if I should ignore this, or what to try. I would appreciate any
 hint!