Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Mod_proxy SSO Slow After a Week

$
0
0

Greetz,

We have: Apache 2.2.3 CentOS 5.5 x86_64 Splunk 5.0.2

I only know the basics but Apache has been serving us very well with the below config and only after about a week did pages refresh very slowly, up to a minute to reload sometimes.

I tailed both httpd and splunkd logs and saw a consistent delay of 30s between proxy and origin server (both on same host) along with plenty of 304s, followed by what appeared to be some timeout and then slowly the 200s started coming back in.

A restart of httpd cleared up the issue.

I'm lost, please help. Could this be a caching problem? Thank you.

<virtualhost *:443=""> SSLEngine on SSLCertificateFile /etc/httpd/conf/server.crt SSLCertificateKeyFile /etc/httpd/conf/server.key SSLProxyEngine On SSLCACertificateFile /etc/httpd/conf/gsoc.pem SSLProtocol all -SSLv2 SSLVerifyClient require SSLVerifyDepth 1 SSLOptions +StrictRequire

RequestHeader set X-Remote-User %{REMOTE_USER}s

    ServerName      dashboards.gsoc.co.za:443
ServerAdmin admin@gsoc.co.za
    DocumentRoot    /srv/http/gdf/
    CustomLog       /var/log/httpd/gdf/access combined
    ErrorLog        /var/log/httpd/gdf/error
LogLevel    debug

ProxyRequests Off
ProxyPreserveHost Off
ProxyPass /gdf https://172.20.67.2:8000/gdf
ProxyPassReverse /gdf https://172.20.67.2:8000/gdf<Directory />
    SSLRequireSSL
        AllowOverride none
    AuthName "GDF"
    AuthType Basic
    AuthDigestProvider file
    AuthUserFile /etc/httpd/conf/passwd
    Require ssl-verify-client
    Require valid-user
    Require ssl
    Satisfy All
    </Directory>

    <Location /gdf>
    SSLRequireSSL
    AuthName "GDF"
    AuthType Basic
    AuthDigestProvider file
    AuthUserFile /etc/httpd/conf/passwd
    Require ssl-verify-client
    Require valid-user
    Require ssl
    Satisfy All
    </Location>
</virtualhost>

Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>