https://bz.apache.org/bugzilla/show_bug.cgi?id=65079
Bug ID: 65079
Summary: SSL Handshake failure causes requests to not be sent
to load balanced application
Product: Apache httpd-2
Version: 2.4.43
Hardware: PC
OS: Linux
Status: NEW
Severity: major
Priority: P2
Component: mod_proxy_http
Assignee: bugs@httpd.apache.org
Reporter: dbetterton@agileassets.com
Target Milestone: ---
We have a reverse proxy setup in AWS that is getting regular attacks. For some
of the attacks we get an SSL Handshake error - see below, when this happens the
proxy stops sending traffic to that server for around 15 minutes.
[Thu Dec 03 07:44:29.063701 2020] [proxy:error] [pid 3139:tid 139723423061760]
(20014)Internal error (specific information not available): [client
193.16.9.98:53038] AH01084: pass request body failed to 10.21.0.252:8443
(<redacted>.com)
[Thu Dec 03 07:44:29.063720 2020] [proxy:error] [pid 3139:tid 139723423061760]
[client 193.16.9.98:53038] AH00898: Error during SSL Handshake with remote
server returned by /spip/
[Thu Dec 03 07:44:29.063724 2020] [proxy_http:error] [pid 3139:tid
139723423061760] [client 193.16.9.98:53038] AH01097: pass request body failed
to 10.21.0.252:8443 (<redacted>.com) from 193.16.9.98 ()
At one point we were getting this error (All workers are in error state),
however this is no longer appearing, but the application server is seeing the
same effect
[Fri Dec 18 06:10:04.804824 2020] [proxy:error] [pid 20740:tid 140712213456640]
(20014)Internal error (specific information not available): [client
54.234.1.200:51298] AH01084: pass request body failed to 10.21.0.252:8443
(ukuappc2.agileassets.com)
[Fri Dec 18 06:10:04.804850 2020] [proxy:error] [pid 20740:tid 140712213456640]
[client 54.234.1.200:51298] AH00898: Error during SSL Handshake with remote
server returned by /.env
[Fri Dec 18 06:10:04.804853 2020] [proxy_http:error] [pid 20740:tid
140712213456640] [client 54.234.1.200:51298] AH01097: pass request body failed
to 10.21.0.252:8443 (ukuappc2.agileassets.com) from 54.234.1.200 ()
[Fri Dec 18 06:10:06.284584 2020] [proxy_balancer:error] [pid 20657:tid
140712548968192] [client 90.248.114.57:52517] AH01167: balancer://mybalancer:
All workers are in error state for route (worker2), referer:
https://cps.agileassets.com/ams_m25_prd/Kernel/w_work.jsp?AA_SID=0376d5de-d09c-4d6d-8c5f-63fa0b1684f8&window_id=14_br_inspection_manage
[Fri Dec 18 06:10:11.761057 2020] [proxy_balancer:error] [pid 20740:tid
140712347674368] [client 90.248.114.57:52520] AH01167: balancer://mybalancer:
All workers are in error state for route (worker2), referer:
https://cps.agileassets.com/ams_m25_prd/Kernel/w_work.jsp?AA_SID=0376d5de-d09c-4d6d-8c5f-63fa0b1684f8&window_id=14_br_inspection_manage
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
Bug ID: 65079
Summary: SSL Handshake failure causes requests to not be sent
to load balanced application
Product: Apache httpd-2
Version: 2.4.43
Hardware: PC
OS: Linux
Status: NEW
Severity: major
Priority: P2
Component: mod_proxy_http
Assignee: bugs@httpd.apache.org
Reporter: dbetterton@agileassets.com
Target Milestone: ---
We have a reverse proxy setup in AWS that is getting regular attacks. For some
of the attacks we get an SSL Handshake error - see below, when this happens the
proxy stops sending traffic to that server for around 15 minutes.
[Thu Dec 03 07:44:29.063701 2020] [proxy:error] [pid 3139:tid 139723423061760]
(20014)Internal error (specific information not available): [client
193.16.9.98:53038] AH01084: pass request body failed to 10.21.0.252:8443
(<redacted>.com)
[Thu Dec 03 07:44:29.063720 2020] [proxy:error] [pid 3139:tid 139723423061760]
[client 193.16.9.98:53038] AH00898: Error during SSL Handshake with remote
server returned by /spip/
[Thu Dec 03 07:44:29.063724 2020] [proxy_http:error] [pid 3139:tid
139723423061760] [client 193.16.9.98:53038] AH01097: pass request body failed
to 10.21.0.252:8443 (<redacted>.com) from 193.16.9.98 ()
At one point we were getting this error (All workers are in error state),
however this is no longer appearing, but the application server is seeing the
same effect
[Fri Dec 18 06:10:04.804824 2020] [proxy:error] [pid 20740:tid 140712213456640]
(20014)Internal error (specific information not available): [client
54.234.1.200:51298] AH01084: pass request body failed to 10.21.0.252:8443
(ukuappc2.agileassets.com)
[Fri Dec 18 06:10:04.804850 2020] [proxy:error] [pid 20740:tid 140712213456640]
[client 54.234.1.200:51298] AH00898: Error during SSL Handshake with remote
server returned by /.env
[Fri Dec 18 06:10:04.804853 2020] [proxy_http:error] [pid 20740:tid
140712213456640] [client 54.234.1.200:51298] AH01097: pass request body failed
to 10.21.0.252:8443 (ukuappc2.agileassets.com) from 54.234.1.200 ()
[Fri Dec 18 06:10:06.284584 2020] [proxy_balancer:error] [pid 20657:tid
140712548968192] [client 90.248.114.57:52517] AH01167: balancer://mybalancer:
All workers are in error state for route (worker2), referer:
https://cps.agileassets.com/ams_m25_prd/Kernel/w_work.jsp?AA_SID=0376d5de-d09c-4d6d-8c5f-63fa0b1684f8&window_id=14_br_inspection_manage
[Fri Dec 18 06:10:11.761057 2020] [proxy_balancer:error] [pid 20740:tid
140712347674368] [client 90.248.114.57:52520] AH01167: balancer://mybalancer:
All workers are in error state for route (worker2), referer:
https://cps.agileassets.com/ams_m25_prd/Kernel/w_work.jsp?AA_SID=0376d5de-d09c-4d6d-8c5f-63fa0b1684f8&window_id=14_br_inspection_manage
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org