RE: RST on TCP level sent by Tomcat

2020-05-21 Thread Arshiya Shariff
Hi Mark , 1.Currently we have configured max http2 threads as 40 , but tomcat is allowing more than 300 connections , is there a way to check how many http2 connections tomcat will allow ? 2. Is maxThreads the maxConnections Or is there any other way to set max connections ? We are setting pro

RE: Http2 tomact server taking time in responding when 1st StreamId is a large integer value like 2147483641

2020-05-21 Thread Prateek Kohli
Thanks Mark. Do we need to raise a bug for this? Regards, Prateek Kohli -Original Message- From: Mark Thomas Sent: Thursday, May 21, 2020 8:43 PM To: users@tomcat.apache.org Subject: Re: Http2 tomact server taking time in responding when 1st StreamId is a large integer value like 2147

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-21 Thread Osipov, Michael
Am 2020-05-21 um 23:36 schrieb Mark Thomas: On 21/05/2020 21:45, Osipov, Michael wrote: Am 2020-05-21 um 11:02 schrieb Mark Thomas: On 20/05/2020 17:57, Osipov, Michael wrote: Is there an option to proxy via HTTP/2? That should be able to handle these sorts of situations more gracefully.

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-21 Thread Mark Thomas
On 21/05/2020 21:45, Osipov, Michael wrote: > > > Am 2020-05-21 um 11:02 schrieb Mark Thomas: >> On 20/05/2020 17:57, Osipov, Michael wrote: >> Is there an option to proxy via HTTP/2? That should be able to handle these sorts of situations more gracefully. >>> >>> This seems to be broke

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-21 Thread Osipov, Michael
Am 2020-05-21 um 11:02 schrieb Mark Thomas: On 20/05/2020 17:57, Osipov, Michael wrote: Is there an option to proxy via HTTP/2? That should be able to handle these sorts of situations more gracefully. This seems to be broken for some reason in another way: What now? Turn on debug lo

Re: Tomcat 8.5 appends null characters

2020-05-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tuukka, On 5/20/20 14:25, Tuukka Ilomäki wrote: > On 5/19/20 09:50, Martin Grigorov wrote: >>> Hi, >>> >>> On Tue, May 19, 2020 at 3:32 PM Tuukka Ilomäki >>> wrote: >>> Dear collective wisdom, as the EOL of Tomcat 7 is looming, we are mig

Re: Tomcat and Qualsys QID: 87413

2020-05-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jon, On 5/18/20 18:37, jonmcalexan...@wellsfargo.com.INVALID wrote: > -Original Message- From: Mark Thomas > Sent: Monday, May 18, 2020 5:29 PM To: users@tomcat.apache.org > Subject: Re: Tomcat and Qualsys QID: 87413 > > On 18/05/2020 21:45

Re: Http2 tomact server taking time in responding when 1st StreamId is a large integer value like 2147483641

2020-05-21 Thread Mark Thomas
On 21/05/2020 13:30, Prateek Kohli wrote: > Hi, > > I debugged this further and the problem seems to be because of the below code > in Http2UpgradeHandler class: > > private void closeIdleStreams(int newMaxActiveRemoteStreamId) throws > Http2Exception { > for (int i = maxActiveRemo

RE: Http2 tomact server taking time in responding when 1st StreamId is a large integer value like 2147483641

2020-05-21 Thread Prateek Kohli
Hi, I debugged this further and the problem seems to be because of the below code in Http2UpgradeHandler class: private void closeIdleStreams(int newMaxActiveRemoteStreamId) throws Http2Exception { for (int i = maxActiveRemoteStreamId + 2; i < newMaxActiveRemoteStreamId; i += 2) {

Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence

2020-05-21 Thread emma davis
Hi, When I run  dns leaktest  https://www.dnsleaktest.com/I have a setup  which shows 32 Servers identifying my origin.All from  different continents If some one  did  pen test or ethical hacking with same setup as myself using these tools for bug bounties on Tomcat. How what is the defence agai

Re: Http2 tomact server taking time in responding when 1st StreamId is a large integer value like 2147483641

2020-05-21 Thread Manuel Dominguez Sarmiento
I must say that we're also seeing weird, seemingly random response delays from Tomcat on HTTP/2 We haven't looked into it at such a low level though. We're currently on 9.0.35 but we've been seeing this on previous versions as well. *Manuel Dominguez Sarmiento* On 21/05/2020 05:32, Prateek Koh

RE: RST on TCP level sent by Tomcat

2020-05-21 Thread Arshiya Shariff
Hi All, 1. How to set max connections and keepalive timeout in http2 ? The remaining properties are being set through IntrospectionUtils . Embedded Tomcat : 9.0.22 Thanks and Regards Arshiya Shariff -Original Message- From: Mark Thomas Sent: Wednesday, May 20, 2020 3:42 PM

Re: maxSwallowSize and misbehaving clients (e.g., mod_proxy_http)

2020-05-21 Thread Mark Thomas
On 20/05/2020 17:57, Osipov, Michael wrote: >> Is there an option to proxy via HTTP/2? That should be able to handle >> these sorts of situations more gracefully. > > This seems to be broken for some reason in another way: > What now? Turn on debug logging for o.a.coyote.http2 for both. For

Http2 tomact server taking time in responding when 1st StreamId is a large integer value like 2147483641

2020-05-21 Thread Prateek Kohli
Hello, Tomcat version : 9.0.29 We are running a Tomcat Http2 Server and a Jetty http2 client. When we send 1st request from Jetty client to tomcat server with streamId number as 1, tomcat sends the WINDOW_UPDATE header and the response in 1~2 milliseconds. Packet number 164 is the response in