https://bugzilla.wikimedia.org/show_bug.cgi?id=51700
--- Comment #4 from Antoine "hashar" Musso <[email protected]> --- On varnish, to debug the queries made to login.wikimedia.beta.wmflabs.org, use the varnishlog utility and filter by host header: Doing a curl "https://login.wikimedia.beta.wmflabs.org/wiki/Main_Page?date=`date +%s`" with: varnishlog -n frontend -b -m TxHeader:login.wikimedia.beta.wmflabs 13 BackendOpen b ipv4_127_0_0_1 127.0.0.1 14366 127.0.0.1 3128 13 TxRequest b GET 13 TxURL b /wiki/Main_Page?date=1374487021 13 TxProtocol b HTTP/1.1 13 TxHeader b Host: login.wikimedia.beta.wmflabs.org 13 TxHeader b X-Real-IP: 88.X.X.X 13 TxHeader b User-Agent: curl/7.21.4 (universal-apple-darwin11.0) libcurl/7.21.4 OpenSSL/0.9.8x zlib/1.2.5 13 TxHeader b Accept: */* 13 TxHeader b X-Forwarded-For: 127.0.0.1 13 TxHeader b X-Forwarded-Proto: http 13 TxHeader b X-Varnish: 1498894934 13 TxHeader b Accept-Encoding: gzip 13 RxProtocol b HTTP/1.1 13 RxStatus b 301 13 RxResponse b Moved Permanently 13 RxHeader b Server: Apache 13 RxHeader b Location: https://login.wikimedia.beta.wmflabs.org/wiki/Main_Page?date=1374487021 13 RxHeader b Content-Type: text/html; charset=iso-8859-1 13 RxHeader b Content-Length: 279 13 RxHeader b Accept-Ranges: bytes 13 RxHeader b Date: Mon, 22 Jul 2013 09:56:59 GMT 13 RxHeader b X-Varnish: 52212372 13 RxHeader b Age: 0 13 RxHeader b Via: 1.1 varnish 13 RxHeader b Connection: keep-alive 13 RxHeader b X-Cache: deployment-cache-text1 miss (0) 13 Fetch_Body b 4(length) cls 0 mklen 1 13 Length b 279 13 BackendReuse b ipv4_127_0_0_1 Backend: varnishlog -b -m TxHeader:login.wikimedia.beta.wmflabs 15 TxRequest b GET 15 TxURL b /wiki/Main_Page?date=1374486920 15 TxProtocol b HTTP/1.1 15 TxHeader b Host: login.wikimedia.beta.wmflabs.org 15 TxHeader b X-Real-IP: 88.X.X.X 15 TxHeader b User-Agent: curl/7.21.4 (universal-apple-darwin11.0) libcurl/7.21.4 OpenSSL/0.9.8x zlib/1.2.5 15 TxHeader b Accept: */* 15 TxHeader b X-Varnish: 1498894871 15 TxHeader b X-Forwarded-For: 127.0.0.1 15 TxHeader b X-Varnish: 52212225 15 TxHeader b Accept-Encoding: gzip 15 RxProtocol b HTTP/1.1 15 RxStatus b 301 15 RxResponse b Moved Permanently 15 RxHeader b Date: Mon, 22 Jul 2013 09:55:18 GMT 15 RxHeader b Server: Apache 15 RxHeader b Location: https://login.wikimedia.beta.wmflabs.org/wiki/Main_Page?date=1374486920 15 RxHeader b Content-Length: 279 15 RxHeader b Content-Type: text/html; charset=iso-8859-1 15 Fetch_Body b 4(length) cls 0 mklen 1 15 Length b 279 15 BackendReuse b ipv4_10_4_0_187 As seen in the frontend log, nginx set "X-Fowarded-Proto: http" header. It is not included in the request made by the varnish backend. From the backend vcl, the header is stripped out whenever the client ip is not part of allow_xff or opera_mini access lists which are: acl allow_xff { "91.198.174.0"/24; "208.80.152.0"/22; "2620:0:860::"/46; "10.0.0.0"/8; } acl opera_mini { // bunch of opera requests } So I guess adding 127.0.0.1 in allow_xff would fix the issue. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
