From owner-freebsd-apache@FreeBSD.ORG Wed May 25 06:17:04 2005 Return-Path: X-Original-To: freebsd-apache@freebsd.org Delivered-To: freebsd-apache@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 53ED916A41C for ; Wed, 25 May 2005 06:17:04 +0000 (GMT) (envelope-from chip@force-elite.com) Received: from utopia.in.force-elite.com (force-elite.com [216.255.199.145]) by mx1.FreeBSD.org (Postfix) with ESMTP id CAB7743D1D for ; Wed, 25 May 2005 06:17:03 +0000 (GMT) (envelope-from chip@force-elite.com) X-AuthUser: chip@force-elite.com Received: from [10.0.0.42] (10.0.0.42:52688) by utopia.in.force-elite.com with [XMail 1.17 (Linux/Ix86) ESMTP Server] id for from ; Tue, 24 May 2005 23:17:02 -0700 Message-ID: <4294185E.9090701@force-elite.com> Date: Tue, 24 May 2005 23:17:02 -0700 From: Paul Querna User-Agent: Mozilla Thunderbird 1.0.2 (Macintosh/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Harald Schmalzbauer References: <200504032125.12115@harrymail> <200504042218.19970@harrymail> <200505171753.45433@harrymail> <200505250812.56398@harrymail> In-Reply-To: <200505250812.56398@harrymail> X-Enigmail-Version: 0.91.0.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: freebsd-apache@freebsd.org Subject: Re: connect-to-listener problem in 5.4-Jail with 2.0.54 [Was: Re: Massive 2.0.53 errors on 5.4-PRE] X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 May 2005 06:17:04 -0000 Harald Schmalzbauer wrote: > Am Dienstag, 17. Mai 2005 17:53 schrieb Harald Schmalzbauer: > >>Am Montag, 4. April 2005 22:18 schrieb Emanuel Strobl: >> >>>Am Montag, 4. April 2005 21:38 schrieb Clement Laforet: >>> >>>>On Mon, Apr 04, 2005 at 07:16:36PM +0200, Emanuel Strobl wrote: >>>> >>>>>Am Sonntag, 3. April 2005 23:50 schrieb Clement Laforet: >>>>> >>>>>>On Sun, Apr 03, 2005 at 09:24:59PM +0200, Emanuel Strobl wrote: >>>>>> >>>>>>>I see the following line in the error log every second! >>>>>>>[Sun Apr 03 21:07:15 2005] [warn] (61)Connection refused: >>>>>>>connect to listener >>> >>>[...] >>> >>> >>>>Thanks, I presume pf and altq are running on this machine. >>>>How many request per second do you have? >>> >>>Well, the error gets logged every second without any request! But if >>>you're interested in general load, this machine will stay quiet idle, >>>at least regarding http reverse-proxy requests. I never checked, it >>>belongs to a friend with a small company, I'd guess about 1k >>>requests/_day_. And you're right, pf is running, but not at high load, >>>only two 3MB/s lines are to feed, mainly with some reply-to rules. >>> >>> >>>>>I'm absolutely no apache guru and like i said, this is a >>>>>productive machine, so I don't know where to start finding out the >>>>>meaning of the error. >>>> >>>>From source, httpd-2.0.53/server/mpm_common.c ;-) >>> >>>;) >>> >>> >>>>Does sysctl oid net.inet.ip.intr_queue_drops increase when these >>>>warnings occur? if yes: >>>>- increase net.inet.ip.intr_queue_maxlen to see if it solve the >>>> problem or limit the rate of error. >>>>- does apache compiled with WITH_KQUEUE_SUPPORT fix the problem? >>>> >>>>OTOH, it can come from you sslmutex configuration which may prevent >>>>apache to work correctly in a jail. >>> >>>Hmm, while trying to regenerate the problem to check the sysctl oid >>>you mentioned (which I never noticed before, and alwas is 0 here) I >>>can't reproduce the error after I altered the $/etc/apache2/ssl.conf >>>(but I could see it before, so it was reproducable today!). I changed >>>the errorlog from httpd-error to httpdssh-error (after I had reenabled >>>the "LoadModule ssl_module" line inside the ifdefined in httpd.con) >>>and the error logging stopped. After rediting ssl.conf (to httpd-error >>>again instead of httpdssh-error) the error doesn't occur any more !?! >> >>Hello, the error is still bugging me, very regularly every two weeks the >>log is full and the proxy doesn't respond. Extremely annoying. >>Right now, after a apachectl restart, it's logging one per second but >>net.inet.ip.intr_queue_drops is 0. After I killed apache and restarted >>it no errors occur, but I'm sure it'll start again in two weeks and >>fills the errorlog until it doesn't work anymore. >> >>I'll recompile apache with WITH_KQUEUE_SUPPORT and give some feedback. >>Has anyone else had luck to observe this problem in the meantime? > > > This time httpd-error gets flooded with these lines, one every second: > [Wed May 25 08:09:37 2005] [warn] (61)Connection refused: connect to > listener on 0.0.0.0:80 > [Wed May 25 08:09:38 2005] [warn] (61)Connection refused: connect to > listener on 0.0.0.0:80 > > The difference is that now an address is shown, 0.0.0.0. Whatever this > sould mean. Could you report this in detail upstream at http://issues.apache.org/bugzilla/ Thanks, -Paul Querna Apache HTTPD Developer