An existing connection was forcibly closed by the remote host (net::ERR_HTTP2_PROTOCOL_ERROR) - apache

I have unique apache http server which deliver html/css/js ressources for all clients.
each client access to his private account with subdomain
client-1.myurl.com
client-2.myurl.com
And I use mod_macro with ProxyPass to map request of a subdomain url to an external ip server:
by example
https://pastebin.com/Xp8ydjZD
But sometimes i got net::ERR_HTTP2_PROTOCOL_ERROR in my console while navigating on my website and a lot 503 errors, here is my apache log error file : https://pastebin.com/PjU7D3Py
Various error in apache log :
An existing connection was forcibly closed by the remote host. ...
AH01102: error reading status line from remote server at.myurl.com:8082, referer: https://at.myurl....
No connection could be made because the target machine actively refused it. : AH00957: HTTPS: attempt to connect to zzz.zz.zzz.zz:8082 (ij.myurl.com) failed....
AH01114: HTTP: failed to make connection to backend: ij.myurl.com, referer:...
Screenshot

Related

Getting connection error while deploying using Webdeploy

Getting error while deploying:
Verbose: Pre-authenticating to remote agent URL 'https://server:8172/MsDeploy.axd' as 'someuser'.
Error: Could not complete the request to remote agent URL 'https://server:8172/MsDeploy.axd'.
Error: The underlying connection was closed: An unexpected error occurred on a send.
Error: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host.
Error: An existing connection was forcibly closed by the remote host
Error count: 1.
I can telnet on 8172 port, have installed web management/web deployment services and they are running. Even its not giving authentication error if i give incorrect creds, so assuming its failing before authentication.
Destination Server is 2016 Datacenter
Enable TLS 1.0 and 1.1 on Destination server

SSL handshake failed using wget, no error message from log

I am trying to wget a file from a https server using the command wget -d --no-check-certificate https://abcde.com/test.tar.gz
This is the log i obtained
Setting --check-certificate (checkcertificate) to 0
DEBUG output created by Wget 1.17.1 on linux-gnu.
Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
URI encoding = ‘UTF-8’
--2018-08-20 19:02:44-- https://abcde.com/test.tar.gz
Resolving proxy.png.mycompany.com (proxy.png.mycompany.com)... 172.xx.x.17x
Caching proxy.png.mycompany.com => 172.xx.x.17x
Connecting to proxy.png.mycompany.com (proxy.png.mycompany.com)|172.xx.x.17x|:911... connected.
Created socket 3.
Releasing 0x0000560ce6ef84f0 (new refcount 1).
---request begin---
CONNECT abcde.com:443 HTTP/1.1
User-Agent: Wget/1.17.1 (linux-gnu)
Host: abcde.com:443
---request end---
proxy responded with: [HTTP/1.1 200 Connection established
]
Initiating SSL handshake.
SSL handshake failed.
Closed fd 3
Unable to establish SSL connection.
Saving HSTS entries to /root/.wget-hsts

With Fidder Running all connections to ssl sites fail

I have just recently installed fiddler, to watch calls made to my web API project from an office web App. These calls are sent over SSL so I enabled fiddler to decrypt HTTPS traffic. Installed the fiddler root certificate into my Firefox browser following these steps:
http://www.telerik.com/blogs/configuring-firefox-for-fiddler
When connecting to any HTTPS site with fiddler running I receive this error.
HTTP/1.1 200 Connection Established
FiddlerGateway: Direct
StartTime: 10:06:51.230
Connection: close
fiddler.network.https> HTTPS handshake to mail.ionstaging.com (for #7) failed.
System.Security.Cryptography.CryptographicException Unspecified error

What is 502 Proxy error? How to Resolve it

When i try to login into Artifactory web appliaction ,its showing proxy error. The Error message is below.
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /artifactory/webapp/login.html.
Reason: Error reading from remote server
Apache/2.2.15 (CentOS) Server at XX.XX.XX.XX Port 80
Any Solution for this?

(103) Software caused connection abort: proxy: pass request body failed

The following errors are being logged in our proxy Apache logs while processing the request with Tomcat Server:
(103)Software caused connection abort: proxy: pass request body failed
proxy: pass request body failed
We've a Apache reverse proxy which serves the request for the client from our Tomcat Server. Sometimes, the request from the proxy returns 502 with the above error. There are no error logs in Tomcat Server Logs correlated with the above errors in Proxy. Also, the request didn't timeout since some of the requests response time is 1 sec and our default timeout is 120 sec.
We've added ProxyBadHeader Ignore to our httpd configuration [Ref: 502 Proxy Error / Uploading from Apache (mod_proxy) to Tomcat 7] and still didn't see any errors in our Tomcat logs.
Have anyone seen this issue earlier?
We recently had this issue after upgrading one of our machines from Tomcat 6 to 7. Someone forgot to change the default apache-tomcat/conf/tomcat-users.xml file from our standard one and so the wrong password was getting checked by the server. Interestingly this results in the 502 Error you saw above. This can be avoided with some decent logging to determine it is actually an auth problem.