Error reading from remote server apache

Ошибка прокси-сервера Apache2: ошибка чтения с удаленного сервера Сам сайт работает и работает нормально, я добавил много записей в базу данных, которую веб-сервер nanohttpd возвращает на некоторых конечных точках. Я понял, что это связано с длиной возвращаемого сайта, поскольку, когда я перемещаю записи из одного статуса в другой, тот, у которого много записей, всегда […]

Содержание

  1. Ошибка прокси-сервера Apache2: ошибка чтения с удаленного сервера
  2. Ошибка прокси-сервера Apache2: Ошибка чтения с удаленного сервера
  3. Ah01102 error reading status line from remote server
  4. Unable to login, Proxy Error — Error reading from remote server
  5. Proxy Error
  6. apache2 proxy recursion
  7. Apache reverse proxy? #378
  8. Comments
  9. gerroon commented Jan 24, 2019 •
  10. pcause commented Jan 24, 2019
  11. gerroon commented Jan 24, 2019
  12. zadam commented Jan 24, 2019
  13. pcause commented Jan 24, 2019
  14. zadam commented Jan 24, 2019
  15. gerroon commented Jan 24, 2019
  16. zadam commented Jan 24, 2019 •
  17. gerroon commented Jan 24, 2019
  18. gerroon commented Jan 24, 2019 •
  19. pcause commented Jan 26, 2019
  20. gerroon commented Mar 6, 2019
  21. truejelly commented Sep 25, 2019
  22. MetroWind commented Nov 22, 2019 •
  23. App behind mod_proxy is only partially reachable #14
  24. Comments
  25. jfmcbrayer commented Apr 17, 2015
  26. icing commented Apr 21, 2015
  27. Ошибка прокси 502 «Причина: ошибка чтения с удаленного сервера» с Apache 2.2.3 (Debian) mod_proxy и Jetty 6.1.18

Ошибка прокси-сервера Apache2: ошибка чтения с удаленного сервера

Сам сайт работает и работает нормально, я добавил много записей в базу данных, которую веб-сервер nanohttpd возвращает на некоторых конечных точках.

Я понял, что это связано с длиной возвращаемого сайта, поскольку, когда я перемещаю записи из одного статуса в другой, тот, у которого много записей, всегда будет выдавать мне эту ошибку.

Я уже немного осмотрелся и думаю, что это может быть проблема с тайм-аутом, но я добавил тайм-ауты на свой виртуальный хост, и эта проблема все еще сохраняется.

Мой текущий файл VirtualHost для этого:

Раньше я пробовал добавлять timeout=x и connectiontimeout=x за ProxyPass, но это, похоже, не помогло.

Редактировать: Поскольку ответа до сих пор нет, вот еще немного информации, я добавлю награду, как только получу право.

Как вы можете видеть в моем файле VirtualHost, я использую обратный прокси-сервер Apache, чтобы включить SSL для своего приложения.

Итак, мой маленький сервер nanohttpd в основном возвращает очень упрощенную html-страницу с таблицей и строкой для каждой записи базы данных. Если в конкретной категории более 100 записей, я получу сообщение об ошибке прокси-сервера.

На данный момент я совершенно уверен, что это связано с каким-то тайм-аутом, но я просмотрел так много сообщений и пытался добавить конфиги в свои, и (да, я перезапускал Apache2 после каждого изменения) пока ничего не работало.

Может ли это быть что-то на моем сервере nanohttpd, чего мне не хватает? Простой заголовок или файл cookie, на данный момент я не отправляю ни одного из них.

Если какая-либо необходимая информация отсутствует, пожалуйста, сообщите мне.

Источник

Ошибка прокси-сервера Apache2: Ошибка чтения с удаленного сервера

Сам сайт работает и работал нормально, я добавил в базу данных много записей, которые веб-сервер nanohttpd возвращает на некоторых конечных точках

Я выяснил, что это связано с длиной возвращаемого сайта, так как, когда я перемещаю записи из одного статуса в другой, тот, у которого много записей, всегда выдаст мне эту ошибку.

Я уже немного осмотрелся и думаю, что это может быть проблема тайм-аута, но я добавил тайм-ауты на свой виртуальный хост, и эта проблема все еще сохраняется

Мой текущий файл VirtualHost для этого:

Ранее я пытался добавить timeout = x и connectiontimeout = x за ProxyPass, но это, похоже, не помогло

Изменить: так как ответа пока нет, есть дополнительная информация, я добавлю вознаграждение, как только получу право.

Как вы можете видеть в моем файле VirtualHost, я использую обратный прокси-сервер Apache, чтобы включить SSL для моего приложения.

Так что мой маленький сервер nanohttpd в основном возвращает очень упрощенную HTML-страницу с таблицей и строкой для каждой записи базы данных. Если в конкретной категории более 100 записей, я получу сообщение об ошибке прокси.

На данный момент я совершенно уверен, что это связано с тайм-аутом, но я просмотрел так много постов и попытался добавить конфиги к своему и (да, я перезапускал Apache2 после каждого изменения), пока ничего не получалось.

Может ли быть что-то на моем сервере nanohttpd, что я пропускаю? Простой Заголовок или Cookie, я не отправляю ни одного из них на данный момент.

Если какая-либо необходимая информация отсутствует, пожалуйста, дайте мне знать.

Источник

Ah01102 error reading status line from remote server

Unable to login, Proxy Error — Error reading from remote server

Since this morning, without any change on the server and any change on the confluence app, I cannot loggin to the app.

confluence version: 5.3.1

I use Apache/2.4.7 with mod_proxy

I restart both confluence and apache without success.

Confluence is running, the disk is not full.

Each attempt result to the following http error:

Proxy Error

The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /confluence/dologin.action .

Reason: Error reading from remote server

On apache server log i found the following logs:

[Wed Feb 27 16:56:10.546387 2019] [proxy_http:error] [pid 3833] (70007)The timeout specified has expired: [client 193.248.40.185:59926] AH01102: error reading status line from remote server localhost:8090, referer: http://xxx/confluence/dologin.action
[Wed Feb 27 16:56:10.546451 2019] [proxy:error] [pid 3833] [client 193.248.40.185:59926] AH00898: Error reading from remote server returned by /confluence/dologin.action, referer: http://xxx/confluence/dologin.action
[Wed Feb 27 16:56:10.556796 2019] [proxy_http:error] [pid 1107] (70007)The timeout specified has expired: [client 193.248.40.185:59684] AH01102: error reading status line from remote server localhost:8090, referer: http://xxx/confluence/dologin.action
[Wed Feb 27 16:56:10.556843 2019] [proxy:error] [pid 1107] [client 193.248.40.185:59684] AH00898: Error reading from remote server returned by /confluence/dologin.action, referer: http://xxx/confluence/dologin.action

I tried to update the ProxyTimeout without success.

I don’t know where to search since I did not found any related issue.

apache2 proxy recursion

После установки веб-приложение создало конфиг apache и стало доступно по http://0.0.0.0/egroupware

Требуется сделать приложение доступным по DNS, причем приведенный конфиг нельзя править.

На такое в логеapache2/errror.log возмущение:

Погоди. Твой nginx слушает *:80 и выполняет проксирование на localhost:80 ? Ничего не смущает?

Где-то здесь и появился адский редирект. Возможно из-за того, что proxy_pass прямо в server, без location

И в логе apache какой-то прокси упомянут, хотя в конфиге его не вижу

Разнеси nginx и apache по разным портам, будет гораздо легче

Если это невозможно — по разным хостам

Ну в крайнем случае nginx на нестандартный порт и через iptables — редирект _внешних_ обращений на nginx

Потом уже можно будет смотреть в дампе, кто именно возвращает редиректы и дебажить

Где-то здесь и появился адский редирект. Возможно из-за того, что proxy_pass прямо в server, без location

приходит на nginx запрос

Он его проксирует на

, попадает на тот же самый nginx на _дефолтный_ сайт, и снова проксирует на

Где тут вклинился апач я не вижу, но редирект именно из-за того, что на nginx редирект на тот же самый nginx

попадает на тот же самый nginx на _дефолтный_ сайт, и снова проксирует на

Ну в крайнем случае nginx на нестандартный порт и через iptables — редирект _внешних_ обращений на nginx

Воот, это должно сработать.

Про nginx это меня переклинило, у тебя же один апач

Apache reverse proxy? #378

How can I run the docker install behind Apache reverse proxy?

I tried this line below under Apache and it does not work (Docker port is 8000 btw for me)

It works fine inside my network but I want to access it from outside

it redirects to /login

The text was updated successfully, but these errors were encountered:

Know they are different, but I am using ngix and this is what I have in my config file:

maybe something here gives you a hint at other directives you might need.

Thanks but I do not use nginx and I am not seeing anything in your lines that can be helpful with apache.

I’ve never tried Trilium with Apache, but there shouldn’t be any special setup required, just standard reverse proxy config.

@zadam perhaps when @gerroon posts what he did to get it working you could add a wiki page that has the nginx and apache config data.

Good idea, for now I added your config to https://github.com/zadam/trilium/wiki/Server-installation (I hope it’s ok for you)

See my first post, I have what I put in my apache config.

Entering URL/trilium redirects to URL/login so it breaks the url structure

Trilium redirect and all referencing is done with relative paths so proxy forwarding needs to be done to «trilium/» (notice slash at the end)

yeah it does not work

This kind of works , I can get to login screen but afterwords I get an error

Just after pressing login

thanks for the wiki update. hope it helps others.

I am still not getting any success with this 🙁 If anyone has any updated info on this, that would be great

I have also experienced some problems with running Trilium in docker behind Apache reverse proxy. Using config provided on wiki Apache-proxy-setup allows me to access my instance just fine, I can not however change note’s original type. Doing so gives me an error:
Error when calling PUT notes/xu9IvQFyCa1q/type/code/mime/text%2Fx-c%2B%2Bsrc: 404 — Not Found
After that, the note still behaves as if it was of the original type. That is changing note type from text to C++ does not result in the proper highlighting of c++ syntax. This issue does not occur on local network which leads me to believe that the problem is with my apache config. I’m running Apache 2.4.6 on CentOS 7.6.1810 Below are some more details:

Apache error log:

browser developer log:

Any help would be appreciated

My apache config is

Trilium server was running on port 8181. However after I got to the setup page, clicking “Finish setup” didn’t work. Looking at the HTTP requests in the browser dev tool, it’s this problem.

App behind mod_proxy is only partially reachable #14

This is, unfortunately, another vague-ish bug report.

I have ownCloud running in a kvm-qemu VM. The host machine is running my main apache server, to which I’ve just added mod_h2. The VM’s apache is proxied like this:

Most of the resources load, but for a few, I am getting a 502 Bad Gateway error.

The errors in the ssl_errors.log on the host machine look like

There are no errors in the error_log on the guest machine (the one behind the proxy), and the access_log on the guest machine is showing either 200 or 304 results for all of those requests.

After disabling mod_h2, things work normally.

Again, I’m sorry if this bug report is not very helpful. I think mod_h2 is a great thing and I’m really looking forward to being able to use it.

The text was updated successfully, but these errors were encountered:

Thanks for the update. Yes, that would make sense.

In the meantime I installed rainloop and did some rework of the header conversions and input handling. The initial login problems appear for me now sometimes, most of the times the admin login works. It looks ok from my side, but I do not know what to expect of rainloop. If you could give the current github master a try and report your experience, that’d be nice.

If you continue to have problems, could reproduce this with
LogLevel h2:trace1
and send the the error log? Thanks!

This appears to be fixed as of 6b44c55, probably thanks to the Host header fixes. It’s still not possible to log in to this ownCloud site, but that’s probably the same issue as #13.


Reply to this email directly or view it on GitHub.

bytes GmbH
Hafenweg 16, 48155 Münster, Germany
Phone: +49 251 2807760. Amtsgericht Münster: HRB5782

Ошибка прокси 502 «Причина: ошибка чтения с удаленного сервера» с Apache 2.2.3 (Debian) mod_proxy и Jetty 6.1.18

Apache получает запросы через порт 80 и передает их в Jetty через порт 8080

Моя дилемма: все работает нормально (быстрые запросы, несколько секунд или несколько десятков секунд, запросы обрабатываются нормально ). Проблемы возникают, когда обработка запроса занимает много времени (несколько минут?).

Если я вместо этого выдаю запрос непосредственно в Jetty через порт: 8080, запрос обрабатывается ОК. Так что проблема, скорее всего, находится где-то между Apache и Jetty, где я использую mod_proxy . Как это решить?

Я уже попробовал некоторые «хитрости», связанные с настройками KeepAlive, но без удачи. Вот моя текущая конфигурация, есть предложения?

Вот также журнал отладки из ошибочного запроса:

Я решил проблему. Keepalive=On Должен быть вставлен в ProxyPass конфигурации линии:

там? Это критично;)

Вы пробовали установку setenv proxy-initial-not-pooled 1 ?

Эта ошибка также может произойти, если вы не заканчиваете свой URL прокси с / . Либо оба пути должны заканчиваться / или ни тем, ни другим.

Глядя на журнал, есть время ожидания 5 минут (= 300 секунд). Это довольно долго ждать ответа. Когда вы обращаетесь к серверу Jetty напрямую, действительно ли этот ресурс занимает столько времени для получения ответа?

Если пять минут действительно находятся в пределах возможного времени ответа, вы можете попробовать настроить директиву конфигурации ProxyTimeout.

В зависимости от настроек вашей сети, вполне может быть, что нет никакой причины даже пытаться использовать какую-либо систему поддержки активности (существует ли межсетевой экран между сервером приложений и прокси-сервером, который может быть настроен для удаления сеансов, которые простаивают слишком долго?) , но ProxyTimeout повлияет на поведение самого прокси.

Если тот же прокси-сервер также обслуживает другие бэкэнды, было бы лучше сохранить текущий ProxyTimeout и настроить время ожидания в директиве ProxyPass (см. Документацию mod_proxy).

Если, однако, ответы без прокси-сервера постоянно меньше, чем пять минут, которые мы здесь рассматриваем как предел отсечения, тогда между прокси-сервером и сервером приложений могут существовать некоторые странные помехи, но вы ничего не предоставляете значение для определения того, что это может быть.

Для меня удаление значения заголовка Transfer-Encoding» (binary) в моем приложении-сервере (PHP) решило проблему для:

[proxy_http: ошибка] [pid 17623] (22) Недопустимый аргумент: [клиент 127.0.0.1:44929] AH01102: ошибка чтения строки состояния с удаленного сервера 0.0.0.0:80

Все остальные предложения понравились SetEnv proxy-initial-not-pooled или Keep-Alive не сделали.

Если вышеприведенные решения не работают, можно попробовать включить все ваши модули apache, чтобы убедиться, что нет нужного вам модуля, который каким-то образом случайно отключен.

Например, я обнаружил, что причиной моей проблемы была замена всех экземпляров #LoadModule на LoadModule во всех моих конфигурационных файлах Apache. Так как это решило проблему для меня, поэтому я знал, что моя проблема не была отсутствующим аргументом директивы KeepAlive, а скорее моей проблемой была отсутствующая зависимость.

Потому что, помните, .so файлы — это в основном статические библиотеки. Включение модуля не означает, что он привыкнет, но его отключение означает, что он не может быть использован, и поэтому все, что от него зависит, обязательно потерпит неудачу.

Примечание: этот ответ получил некоторые отрицательные голоса из-за того, что мой первоначальный ответ, казалось, предлагал оставить все модули включенными, навсегда. Хотя теоретически вы можете сделать это, не обязательно что-то сломать, очевидно, что это не лучшее практическое решение.

Поэтому, пожалуйста, поймите, я просто предлагаю это как шаг устранения неполадок, а не окончательное решение.

Также обратите внимание: я использую специальный проект git для отслеживания всех файлов конфигурации apache моей локальной машины. Таким образом, я могу выполнять такие виды глобальных операций поиска и замены в моем рабочем каталоге конфигурации Apache, как этап устранения неполадок. Если включение всех модулей выполнено успешно, попробуйте отключить их снова один за другим и перезапустить apache между ними, пока не найдете нужный модуль, который нужно оставить включенным. Как только вы это выясните, верните репо в исходное состояние и включите только тот модуль, который должен быть включен.

Вы также обнаружите, что использование git для отслеживания ваших конфигурационных файлов apache очищает эти каталоги, так как вам больше не понадобятся эти старомодные файлы .bak и .default.

Источник

We’re running a web app on Tomcat 6 and Apache mod_proxy 2.2.3. Seeing a lot of 502 errors like this:

Bad Gateway!
The proxy server received an invalid response from an upstream server.

The proxy server could not handle the request GET /the/page.do.

Reason: Error reading from remote server

If you think this is a server error, please contact the webmaster.

Error 502

Tomcat has plenty of threads, so it’s not thread-constrained. We’re pushing 2400 users via JMeter against the app. All the boxes are sitting inside our firewall on a fast unloaded network, so there shouldn’t be any network problems.

Anyone have any suggestions for things to look at or try? We’re heading to tcpdump next.

UPDATE 10/21/08: Still haven’t figured this out. Seeing only a very small number of these under load. The answers below haven’t provided any magical answers…yet. :)

1

Just to add some specific settings, I had a similar setup (with Apache 2.0.63 reverse proxying onto Tomcat 5.0.27).

For certain URLs the Tomcat server could take perhaps 20 minutes to return a page.

I ended up modifying the following settings in the Apache configuration file to prevent it from timing out with its proxy operation (with a large over-spill factor in case Tomcat took longer to return a page):

Timeout 5400
ProxyTimeout 5400

Some backgound

ProxyTimeout alone wasn’t enough. Looking at the documentation for Timeout I’m guessing (I’m not sure) that this is because while Apache is waiting for a response from Tomcat, there is no traffic flowing between Apache and the Browser (or whatever http client) — and so Apache closes down the connection to the browser.

I found that if I left the Timeout setting at its default (300 seconds), then if the proxied request to Tomcat took longer than 300 seconds to get a response the browser would display a «502 Proxy Error» page. I believe this message is generated by Apache, in the knowledge that it’s acting as a reverse proxy, before it closes down the connection to the browser (this is my current understanding — it may be flawed).

The proxy error page says:

Proxy Error

The proxy server received an invalid
response from an upstream server. The
proxy server could not handle the
request GET.

Reason: Error reading from remote server

…which suggests that it’s the ProxyTimeout setting that’s too short, while investigation shows that Apache’s Timeout setting (timeout between Apache and the client) that also influences this.

5

So, answering my own question here. We ultimately determined that we were seeing 502 and 503 errors in the load balancer due to Tomcat threads timing out. In the short term we increased the timeout. In the longer term, we fixed the app problems that were causing the timeouts in the first place. Why Tomcat timeouts were being perceived as 502 and 503 errors at the load balancer is still a bit of a mystery.

2

You can use
proxy-initial-not-pooled

See http://httpd.apache.org/docs/2.2/mod/mod_proxy_http.html :

If this variable is set no pooled connection will be reused if the client connection is an initial connection. This avoids the «proxy: error reading status line from remote server» error message caused by the race condition that the backend server closed the pooled connection after the connection check by the proxy and before data sent by the proxy reached the backend. It has to be kept in mind that setting this variable downgrades performance, especially with HTTP/1.0 clients.

We had this problem, too. We fixed it by adding

SetEnv proxy-nokeepalive 1
SetEnv proxy-initial-not-pooled 1

and turning keepAlive on all servers off.

mod_proxy_http is fine in most scenarios but we are running it with heavy load and we still got some timeout problems we do not understand.

But see if the above directive fits your needs.

1

I know this does not answer this question, but I came here because I had the same error with nodeJS server. I am stuck a long time until I found the solution. My solution just adds slash or /in end of proxyreserve apache.

my old code is:

ProxyPass / http://192.168.1.1:3001
ProxyPassReverse / http://192.168.1.1:3001

the correct code is:

ProxyPass / http://192.168.1.1:3001/
ProxyPassReverse / http://192.168.1.1:3001/

2

Sample from apache conf:

#Default value is 2 minutes
**Timeout 600**
ProxyRequests off
ProxyPass /app balancer://MyApp stickysession=JSESSIONID lbmethod=bytraffic nofailover=On
ProxyPassReverse /app balancer://MyApp
ProxyTimeout 600
<Proxy balancer://MyApp>
    BalancerMember http://node1:8080/ route=node1 retry=1 max=25 timeout=600
    .........
</Proxy>

I’m guessing your using mod_proxy_http (or proxy balancer).

Look in your tomcat logs (localhost.log, or catalina.log) I suspect your seeing an exception in your web stack bubbling up and closing the socket that the tomcat worker is connected to.

answered Oct 4, 2008 at 3:17

Dave Cheney's user avatar

1

You can avoid global timeouts or having to virtual hosts by specifying the proxy timeouts in the ProxyPass directive as follows:

ProxyPass /svc http://example.com/svc timeout=600
ProxyPassReverse /svc http://example.com/svc timeout=600

Notice timeout=600 seconds.

However this does not always work when you have load balancer. In that case you must add the timeouts in both the places (tested in Apache 2.2.31)

Load Balancer example:

<Proxy "balancer://mycluster">
     BalancerMember "http://member1:8080/svc" timeout=600
     BalancerMember "http://member2:8080/svc" timeout=600
</Proxy> 

ProxyPass /svc "balancer://mycluster" timeout=600
ProxyPassReverse /svc "balancer://mycluster" timeout=600

A side note: the timeout=600 on ProxyPass was not required when Chrome was the client (I don;t know why) but without this timeout on ProxyPass Internet Explorer (11) aborts saying connection reset by server.

My theory is that the :

ProxyPass timeout is used between the client(browser) and the Apache.

BalancerMember timeout is used between the Apache and the backend.

To those who use Tomcat or other backed you may also want to pay attention to the HTTP Connector timeouts.

you should be able to get this problem resolved through a timeout and proxyTimeout parameter set to 600 seconds. It worked for me after battling for a while.

Most likely you should increase Timeout parameter in apache conf (default value 120 sec)

If you want to handle your webapp’s timeout with an apache load balancer, you first have to understand the different meaning of timeout.
I try to condense the discussion I found here: http://apache-http-server.18135.x6.nabble.com/mod-proxy-When-does-a-backend-be-considered-as-failed-td5031316.html :

It appears that mod_proxy considers a backend as failed only when the
transport layer connection to that backend fails. Unless failonstatus/failontimeout is used. …

So, setting failontimeout is necessary for apache to consider a timeout of the webapp (e.g. served by tomcat) as a fail (and consecutively switch to the hot spare server). For the proper configuration, note the following misconfiguration:

ProxyPass / balancer://localbalance/ failontimeout=on timeout=10 failonstatus=50

This is a misconfiguration because:

You are defining a balancer here, so the timeout parameter relates to
the balancer (like the two others).
However for a balancer, the timeout parameter is not a connection
timeout (like the one used with BalancerMember), but the maximum time
to wait for a free worker/member
(e.g. when all the workers are busy
or in error state, the default being to not wait).

So, a proper configuration is done like this

  1. set timeout at the BalanceMember level:
 <Proxy balancer://mycluster>
     BalancerMember http://member1:8080/svc timeout=6 
 ... more BalanceMembers here
</Proxy>
  1. set the failontimeout on the balancer
ProxyPass /svc balancer://mycluster failontimeout=on

Restart apache.

I am not a server admin, so I do not configure Apache Servers on a daily basis.

But I want to use Gitlab on our server with SSL and Apache 2.4.6. (httpd on CentOS 7).

So far I have added the certificates (.pem) and turned on SSL.

head -30 /opt/gitlab/embedded/service/gitlab-rails/config/gitlab.yml

gitlab:
    ## Web server settings (note: host is the FQDN, do not include http://)
    host: gitlab.my-domain.org
    port: 443
    https: true

    # The maximum time unicorn/puma can spend on the request. This needs to be smaller than the worker timeout.
    # Default is 95% of the worker timeout
    max_request_duration_seconds: 57

I do not understand the <location> part of my Apache Config in:

<IfModule mod_ssl.c>
<VirtualHost *:443>  
  ServerName gitlab.my-domain.org
  ServerSignature Off

  ProxyPreserveHost On
  ProxyTimeout 60
  AllowEncodedSlashes NoDecode

  SSLEngine on
  SSLProxyEngine on
  SSLCertificateFile /etc/letsencrypt/live/some-original-domain/cert.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/some-original-domain/privkey.pem
  Include /etc/letsencrypt/options-ssl-apache.conf
  SSLCertificateChainFile /etc/letsencrypt/live/some-original-domain/chain.pem

  <Location />
    # New authorization commands for apache 2.4 and up
    # http://httpd.apache.org/docs/2.4/upgrading.html#access
    Require all granted
    ProxyPassReverse http://127.0.0.1:8080
    ProxyPassReverse https://gitlab.my-domain.org/
  </Location>

  RewriteEngine on
  RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f [OR]
  RewriteCond %{REQUEST_URI} ^/uploads/.*
  RewriteRule .* https://127.0.0.1:8080%{REQUEST_URI} [P,QSA]

  RequestHeader set X_FORWARDED_PROTO 'https'
  RequestHeader set X-Forwarded-Ssl on

  # needed for downloading attachments
  DocumentRoot /opt/gitlab/embedded/service/gitlab-rails/public

  #Set up apache error documents, if back end goes down (i.e. 503 error) then a maintenance/deploy page is thrown up.
  # ErrorDocument 404 /404.html
  # ErrorDocument 422 /422.html
  # ErrorDocument 500 /500.html
  # ErrorDocument 503 /deploy.html

  LogFormat "%{X-Forwarded-For}i %l %u %t "%r" %>s %b" common_forwarded
  ErrorLog  /var/log/httpd/gitlab.my-domain_error.log
  CustomLog /var/log/httpd/gitlab.my-domain_forwarded.log common_forwarded
  CustomLog /var/log/httpd/gitlab.my-domain_access.log combined env=!dontlog
  CustomLog /var/log/httpd/gitlab.my-domain.log combined

</VirtualHost>
</IfModule>

There must be some misconfiguration, I only see:

 [proxy_http:error] [pid 18466] (103)Software caused connection abort: [client {IP}:32906] AH01102: error reading status line from remote server 127.0.0.1:8080
[proxy:error] [pid 18466] [client {IP}:32906] AH00898: Error reading from remote server returned by /

Also for wget http://localhost:8080/api/v3/internal/check on the server

{....} connection refused
ERROR 410: Gone.

Finally gitlab-rake gitlab:check:

Checking GitLab subtasks ...

Checking GitLab Shell ...

GitLab Shell: ... GitLab Shell version >= 13.7.0 ? ... OK (13.7.0)
Running /opt/gitlab/embedded/service/gitlab-shell/bin/check
Internal API available: OK
Redis available via internal API: OK
gitlab-shell self-check successful

Checking GitLab Shell ... Finished

Checking Gitaly ...

Gitaly: ... default ... OK

Checking Gitaly ... Finished

Checking Sidekiq ...

Sidekiq: ... Running? ... yes
Number of Sidekiq processes ... 1

Checking Sidekiq ... Finished

Checking Incoming Email ...

Incoming Email: ... Reply by email is disabled in config/gitlab.yml

Checking Incoming Email ... Finished

Checking LDAP ...

LDAP: ... LDAP is disabled in config/gitlab.yml

Checking LDAP ... Finished

Checking GitLab App ...

Git configured correctly? ... yes
Database config exists? ... yes
All migrations up? ... yes
Database contains orphaned GroupMembers? ... no
GitLab config exists? ... yes
GitLab config up to date? ... yes
Log directory writable? ... yes
Tmp directory writable? ... yes
Uploads directory exists? ... yes
Uploads directory has correct permissions? ... yes
Uploads directory tmp has correct permissions? ... skipped (no tmp uploads folder yet)
Init script exists? ... skipped (omnibus-gitlab has no init script)
Init script up-to-date? ... skipped (omnibus-gitlab has no init script)
Projects have namespace: ... 
GitLab Instance / Monitoring ... yes
sdp-dev / sdp-services ... yes
sdp-dev / co2compass-app ... yes
sdp-dev / sdp-api ... yes
sdp-dev / sdp-ops ... yes
Redis version >= 4.0.0? ... yes
Ruby version >= 2.5.3 ? ... yes (2.6.6)
Git version >= 2.24.0 ? ... yes (2.28.0)
Git user has default SSH configuration? ... yes
Active users: ... 3
Is authorized keys file accessible? ... yes
GitLab configured to store new projects in hashed storage? ... yes
All projects are in hashed storage? ... yes

Checking GitLab App ... Finished


Checking GitLab subtasks ... Finished

I think it is not a timeout issue, because the whole request from my browser takes ~150ms. I was able to reach the Gitlab instance via http before.
Any idea?

Hello members,
We have Apache 1.3.31 on Oracle Application Server 10.1.2.3 release and it is serving as a reverse proxy to IIS at a remote location. This Oracle application server and Apache are on Windows 2003 server platform.

We can test a simple test.gif or hello.html page on the remote IIS server from application server machine (our local machine that is hosting apache)

I am replacing actual servernames with localserver and remoteserver to illustrate my example:

Ex: https://remoteserver/appnet/test.gif
https://remoteserver/appnet/hello.html

Both the above links work fine.

However if I test the actual applictaion link that uses apache as a proxy server, it is throwing out the error pasted below.

———— Error ————

Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /appnet/Login.aspx.

Reason: Error reading from remote server

The actual application link is : https://remoteserver/appnet/document/login.aspx

It hangs first and then it will automatically change itself to https://localserver/appnet/document/login.aspx (because of the proxy setup) and then shows the above error.

Also pasted below is our ssl.conf file. I’ve again replaced the apache proxy server names as localserver and remote IIS machine as remoteserver. I have also removed some commented lines in the file to make it small. The code is enclosed inside the <code> tags.

Can someone please tell why this error is showing up? Any replies willl be much appreciated. Thank you very much.

<code>

<IfDefine SSL>
## SSL Global Context
##
## All SSL configuration in this context applies both to
## the main server and all SSL-enabled virtual hosts.
##

# Pass Phrase Dialog:
# Configure the pass phrase gathering process.
# The filtering dialog program (`builtin’ is a internal

#
# Some MIME-types for downloading Certificates and CRLs
#
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
##
## SSL Support

Listen 444

<VirtualHost default:444>
# General setup for the virtual host
DocumentRoot «D:oracleoracleasApacheApachehtdocs»
ServerName localserver
#ServerAlias
#ServerAdmin
ErrorLog «|D:oracleoracleasApacheApachebinrotatelogs logs/error_log 43200»
TransferLog «|D:oracleoracleasApacheApachebinrotatelogs logs/access_log 43200»
Port 443
# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine on
# SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate.
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
# Server Wallet:
# The server wallet contains the server’s certificate, private key
# and trusted certificates. Set SSLWallet at the wallet directory
# using the syntax: file:<path-to-wallet-directory>
SSLWallet file:c:wallet

# Certificate Revocation Lists (CRL):
# Set the CA revocation path where to find CA CRLs for client
# authentication or alternatively one huge file containing all
#SSLCARevocationPath confssl.crl
#SSLCARevocationFile confssl.crlca-bundle.crl

# Client Authentication (Type):
# Client certificate verification type and depth. Types are
# none, optional and require
#SSLVerifyClient require

# Access Control:
# With SSLRequire you can do per-directory access control based
# for more details.
#<Location />
#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/
# and %{SSL_CLIENT_S_DN_O} eq «Snake Oil, Ltd.»
# and %{SSL_CLIENT_S_DN_OU} in {«Staff», «CA», «Dev»}
# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5
# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 )
# or %{REMOTE_ADDR} =~ m/^192.76.162.[0-9]+$/
#</Location>

# SSL Engine Options:
# Set various options for the SSL engine.
# o FakeBasicAuth:
# Translate the client X.509 into a Basic Authorisation. This means that
# the standard Auth/DBMAuth methods can be used for access control. The

#SSLOptions FakeBasicAuth ExportCertData CompatEnvVars StrictRequire
<Files ~ «.(cgi|shtml)$»>
SSLOptions +StdEnvVars
</Files>

<Directory «D:oracleoracleasApacheApachecgi-bin»>
SSLOptions +StdEnvVars
</Directory>

SetEnvIf User-Agent «.*MSIE.*» nokeepalive ssl-unclean-shutdown
# Per-Server Logging:
# The home of a custom SSL log file. Use this when you want a
# compact non-error SSL logfile on a virtual host basis.
CustomLog D:oracleoracleasApacheApachelogsssl_request_log «%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x «%r» %b»
RewriteEngine on
RewriteOptions inherit

<IfModule mod_proxy.c>
ProxyRequests Off
ProxyPass /appnet/ https://remoteserver:443/appnet/
ProxyPassReverse /appnet/ https://remoteserver:443/appnet/
ProxyPass /appnetjava/ https://remoteserver:443/appnetjava/
ProxyPassReverse /appnetjava/ https://remoteserver:443/appnetjava/
ProxyPass /test/ https://remoteserver:443/test/
ProxyPassReverse /test/ https://remoteserver:443/test/
#SetEnv force-proxy-request-1.0 1
#SetEnv proxy-nokeepalive 1
#RewriteEngine On
#RewriteRule ^/cmsdms/(.*) https://remoteserver:443/$1 [P]
SSLProxyCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
SSLProxyWallet file:C:wallet
</IfModule>

</VirtualHost>

</IfDefine>

</code>

Problem

Testing a datasource in Administration Console fails with

Proxy Error

The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /ibmcognos/bi/v1/disp.

Reason: Error reading from remote server

image-20190528101100-1

Symptom

Proxy Error

The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /ibmcognos/bi/v1/disp.

Reason: Error reading from remote server

Cause

Testing the datasource takes longer than the defined timeout on Apache Webserver.

Environment

IBM Cognos Analytics with Gateway installation

Apache 2.2 or 2.4 as Webserver

Resolving The Problem

In the Apache Webserver configuration (ie. cognos.conf) increase or set the TimeOut parameter.

By default the TimeOut is set to 60 seconds.

Example:

KeepAliveTimeout 5
TimeOut 120

A restart of Apache Webserver is required after saving the changed configuration.

For more information refer to the Apache Webserver documentation: https://httpd.apache.org/docs/2.4/en/mod/core.html#timeout

Related Information

Document Location

Worldwide

[{«Business Unit»:{«code»:»BU059″,»label»:»IBM Software w/o TPS»},»Product»:{«code»:»SSTSF6″,»label»:»IBM Cognos Analytics»},»Component»:»»,»Platform»:[{«code»:»PF025″,»label»:»Platform Independent»}],»Version»:»»,»Edition»:»»,»Line of Business»:{«code»:»LOB10″,»label»:»Data and AI»}}]

Click here follow the steps to fix Proxy Error Reading From Remote Server Returned By /users/sign_in and related errors.

Instructions

 

To Fix (Proxy Error Reading From Remote Server Returned By /users/sign_in) error you need to
follow the steps below:

Step 1:

 
Download
(Proxy Error Reading From Remote Server Returned By /users/sign_in) Repair Tool
   

Step 2:

 
Click the «Scan» button
   

Step 3:

 
Click ‘Fix All‘ and you’re done!
 

Compatibility:
Windows 7, 8, Vista, XP

Download Size: 6MB
Requirements: 300 MHz Processor, 256 MB Ram, 22 MB HDD

Limitations:
This download is a free evaluation version. To unlock all features and tools, a purchase is required.

Proxy Error Reading From Remote Server Returned By /users/sign_in Error Codes are caused in one way or another by misconfigured system files
in your windows operating system.

If you have Proxy Error Reading From Remote Server Returned By /users/sign_in errors then we strongly recommend that you

Download (Proxy Error Reading From Remote Server Returned By /users/sign_in) Repair Tool.

This article contains information that shows you how to fix
Proxy Error Reading From Remote Server Returned By /users/sign_in
both
(manually) and (automatically) , In addition, this article will help you troubleshoot some common error messages related to Proxy Error Reading From Remote Server Returned By /users/sign_in error code that you may receive.

Note:
This article was updated on 2023-02-03 and previously published under WIKI_Q210794

Contents

  •   1. What is Proxy Error Reading From Remote Server Returned By /users/sign_in error?
  •   2. What causes Proxy Error Reading From Remote Server Returned By /users/sign_in error?
  •   3. How to easily fix Proxy Error Reading From Remote Server Returned By /users/sign_in errors

What is Proxy Error Reading From Remote Server Returned By /users/sign_in error?

The Proxy Error Reading From Remote Server Returned By /users/sign_in error is the Hexadecimal format of the error caused. This is common error code format used by windows and other windows compatible software and driver vendors.

This code is used by the vendor to identify the error caused. This Proxy Error Reading From Remote Server Returned By /users/sign_in error code has a numeric error number and a technical description. In some cases the error may have more parameters in Proxy Error Reading From Remote Server Returned By /users/sign_in format .This additional hexadecimal code are the address of the memory locations where the instruction(s) was loaded at the time of the error.

What causes Proxy Error Reading From Remote Server Returned By /users/sign_in error?

The Proxy Error Reading From Remote Server Returned By /users/sign_in error may be caused by windows system files damage. The corrupted system files entries can be a real threat to the well being of your computer.

There can be many events which may have resulted in the system files errors. An incomplete installation, an incomplete uninstall, improper deletion of applications or hardware. It can also be caused if your computer is recovered from a virus or adware/spyware
attack or by an improper shutdown of the computer. All the above actives
may result in the deletion or corruption of the entries in the windows
system files. This corrupted system file will lead to the missing and wrongly
linked information and files needed for the proper working of the
application.

How to easily fix Proxy Error Reading From Remote Server Returned By /users/sign_in error?

There are two (2) ways to fix Proxy Error Reading From Remote Server Returned By /users/sign_in Error:

Advanced Computer User Solution (manual update):

1) Start your computer and log on as an administrator.

2) Click the Start button then select All Programs, Accessories, System Tools, and then click System Restore.

3) In the new window, select «Restore my computer to an earlier time» option and then click Next.

4) Select the most recent system restore point from the «On this list, click a restore point» list, and then click Next.

5) Click Next on the confirmation window.

6) Restarts the computer when the restoration is finished.

Novice Computer User Solution (completely automated):

1) Download (Proxy Error Reading From Remote Server Returned By /users/sign_in) repair utility.

2) Install program and click Scan button.

3) Click the Fix Errors button when scan is completed.

4) Restart your computer.

How does it work?

This tool will scan and diagnose, then repairs, your PC with patent
pending technology that fix your windows operating system registry
structure.
basic features: (repairs system freezing and rebooting issues , start-up customization , browser helper object management , program removal management , live updates , windows structure repair.)

  • Home
  • Forum
  • The Ubuntu Forum Community
  • Ubuntu Specialised Support
  • Ubuntu Servers, Cloud and Juju
  • Server Platforms
  • [SOLVED] Apache2 reversy proxy fail to pass to connection to backend with ssl

  1. Apache2 reversy proxy fail to pass to connection to backend with ssl

    Hi,

    im having this problems almost a week now, and i have no idea how to solve this,

    i have a apache2 reverse proxy (with ssl) passing the connection to another server running tomcat with ssl. i keep getting this error message on browser

    Proxy Error

    The proxy server received an invalid response from an upstream server.
    The proxy server could not handle the request GET /.

    Reason: Error reading from remote server

    on the error logs it says

    [Mon Sep 29 11:29:43.494799 2014] [proxy_http:error] [pid 2221:tid 140582592702208] (103)Software caused connection abort: [client 192.168.12.94:37724] AH01102: error reading status line from remote server xxx.xxx.xxx:443
    [Mon Sep 29 11:29:43.494992 2014] [proxy:error] [pid 2221:tid 140582592702208] [client 192.168.12.94:37724] AH00898: Error reading from remote server returned by /

    however it works if i passed it through non ssl tomcat.. need help on this matter.. below is the setting for my proxy configuration

    Code:

    SSLSessionCache        shmcb:/home/gpki/ssl_scache(512000)
    SSLSessionCacheTimeout  300
    Servername xxx.xxx.xxx
    
    <VirtualHost *:443>
    
        SSLEngine On
        SSLProxyEngine On
    
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerExpire off
    SSLProxyCheckPeerName off
    
    SSLProxyProtocol all
    SSLProxyVerify optional_no_ca
    
        ProxyRequests Off
        ProxyPreserveHost On
    
        SSLCertificateFile /etc/apache2/ssl/server.crt
        SSLCertificateKeyFile /etc/apache2/ssl/serverkey.key
        SSLCACertificateFile /etc/apache2/ssl/verisign.crt
    
    #    ProxyHTMLInterp On
    #    ProxyHTMLExtended On
    
        ProxyPass / https://xxx.xxx.xxx/
        ProxyPassReverse / https://xxx.xxx.xxx/
    
        SetEnv proxy-initial-not-pooled
        SetEnv proxy-nokeepalive 1
    
    
    </VirtualHost>

    thanks

    Last edited by lesbianpenguin; September 29th, 2014 at 11:20 AM.

    Reason: solve


  2. Re: Apache2 reversy proxy fail to pass to connection to backend with ssl

    managed to solve it… need to configure tomcat to allow only sslv3 to make it work


Bookmarks

Bookmarks


Posting Permissions

Понравилась статья? Поделить с друзьями:
  • Error reading from file bitrix
  • Error processing tar file exit status 1 archive tar invalid tar header
  • Error reading from database shutting down bitcoin core
  • Error processing request contact your application administrator
  • Error processing performance parameter file 203a