Re: [PROPOSAL] Remove persistent storage for HostDB

2023-09-05 Thread David Carlin
These settings are for /etc/hosts - are their removal required to get rid of persistent storage? proxy.config.hostdb.host_file.path proxy.config.hostdb.host_file.interval Using /etc/hosts is very useful for troubleshooting, so I can point to a specific origin server temporarily and still

Re: [Discuss, Proposal] Plugins promotions, deprecations and removals for ATS v10.0.0

2023-08-08 Thread David Carlin
I was testing statichit plugin as replacement for healthchecks, and I noticed the "@pparam=--max-age" option doesn't apply to failure-code response cases. The healthchecks plugin always includes "Cache-Control: no-cache" for either 200 or 404 cases to prevent any intermediate devices from caching

Re: connection attempts timeout difference b/w GET and POST requests in trafficserver

2018-08-22 Thread David Carlin
There is a bug for these settings where the timeout was actually TTFB and not a timeout for completion of three-way handshake: https://issues.apache.org/jira/browse/TS-242 https://github.com/apache/trafficserver/pull/4028 One reason to set POST timeouts much longer than GET timeouts is due to the

Re: help with origin redirect configuration

2016-03-11 Thread David Carlin
Check out these settings: https://trafficserver.readthedocs.org/en/latest/admin-guide/files/records.config.en.html#http-redirection proxy.config.http.redirection_enabled proxy.config.http.number_of_redirections They will enable ATS to follow the redirection instead of returning 302 to user agent.

Re: [VOTE] Release v4.1.0

2013-11-11 Thread David Carlin
I've been running it on a busy production host since Thursday without issues - RHEL 6.4 David On 11/7/13 9:40 AM, "Igor Galić" wrote: > >Hi folks, > >I've prepared a release for v4.1.0, which is a bug fix release >following our new release process and Versioning scheme: > >https://cwiki.apa

ATS 3.2.4 and TS-1363 - SSL chain cert not being sent

2013-02-15 Thread David Carlin
I downloaded ATS 3.2.4 and noticed the release notes failed to mention TS-1363 being fixed. This is a bug where the SSL chain cert isn't sent. I've previous applied the patch attached to TS-1363 to fix this in 3.2.0. I applied the patch to the 3.2.4 release and the chain cert was sent twice! I t

Strange segfault in 3.2.0

2012-06-21 Thread David Carlin
ATS 3.2.0 crashed on one of my boxes, and the log entries are quite strange. At the time of the crash, the box was doing around 4K qps, 19K connections, 370 mbps. >From traffic.out: [Jun 20 00:24:25.702] Server {0x2aaafb0c0700} WARNING: connect by disallowed client 66.87.131.100, closing [J

Re: [VOTE] Release v3.2.0

2012-06-18 Thread David Carlin
+1 Running on two hosts since Friday afternoon: Host #1) 5K QPS and 25K current connections Host #2) 100 QPS and 1.2K current connections Both are running fine. On 6/14/12 6:54 PM, "Leif Hedstrom" wrote: >Hi all, > >I've prepared a release for v3.2.0, this release has no significant >changes

Re: syn flooding

2012-06-06 Thread David Carlin
Bryan call recently fixed this in 3.1.4: https://issues.apache.org/jira/browse/TS-1211 You need to increase proxy.config.net.listen_backlog in records.config and also the sysctl value net.ipv4.tcp_max_syn_backlog - I am using 16384. Sent from my Verizon Wireless Phone