On 07/03/2013 4:25 PM, "Christopher Schultz" <ch...@christopherschultz.net>
wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Igor,
>
> On 3/6/13 9:02 PM, Igor Cicimov wrote:
> > On Thu, Mar 7, 2013 at 3:03 AM, <dietmar.muel...@eurotours.at>
> > wrote:
> >
> >> hi all
> >>
> >> i setup apache <--> mod_jk <--> tomcat the firsttime with
> >> firewall. what i saw was a not working page. after search and
> >> read the mod_jk docs i see and found the reason. the firewall
> >> drop the jk connection. i try to set properties like keep_alive
> >> and ping but i never see with wireshark any package do exact the
> >> job, what i read from the doc (might i missunderstand something)
> >> --> send after some time a ping. i expect this on the ajp
> >> connection. i watch the complete traffic between apache and
> >> tomcat
> >>
> >> my config is stright forward:
> >>
> >> worker.list=jkstatus, tc
> >>
> >> worker.jkstatus.type=status
> >>
> >> worker.tc.type=lb worker.tc.balance_workers=1
> >>
> >> worker.1.type=ajp13 worker.1.host=192.168.13.50
> >> worker.1.port=8009 worker.1.socket_keepalive=1
> >> worker.1.ping_mode=A worker.1.ping_timeout=10000
> >> worker.1.connection_ping_interval=9000
> >> worker.1.connection_pool_size=1
> >>
> >> worker.2.type=ajp13 worker.2.host=192.168.13.51
> >> worker.2.port=8009 worker.2.socket_keepalive=1
> >> worker.2.ping_mode=A worker.2.ping_timeout=10000
> >> worker.2.connection_ping_interval=9000
> >> worker.2.connection_pool_size=1
> >>
> >> i play with the values but i never see something periodical at
> >> the network side.
> >>
> >> my system:
> >>
> >> redhat 6.4 / 64bit, apache 2.2.15 and mod_jk 1.2.37 --> tomcat
> >> latest
> >>
> >> any help / comment is wellcome
> >>
> >> thanks dietmar
> >
> > Well in this case I can think of only one reason of this not to
> > work: the firewall is dropping the ICMP packets. What kind of
> > firewall are we talking about here? Is it hardware one or the
> > iptables on tomcat server. Anyway, easy to test, switch off the
> > firewall and then check if you can see the pings.
>
> Wrong, mod_jk does not use ICMP to "ping" the backend server. It uses
> (not surprisingly) TCP/IP packets using the AJP protocol.
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEAREIAAYFAlE4IxgACgkQ9CaO5/Lv0PA0XwCgmx2kFWnfERmGvUWNhrNtPQt1
> yuUAn21J7iyaB8jyOEVv8+KC/tvJNfyB
> =s4Eq
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
