Nginx Overflow ? status 18446744073709551615

[Jadjay]

On Wednesday 23 March 2016 12:22:29 Jadjay wrote:

> Hi,
>
> We have a problem with a front nginx acting as rproxy for 6 windows IIS6
> backends,
>
> Sometimes it seems it overflows :
>
> In logs the status value is 18446744073709551615 (aka the max 64-bit value)
>
> e.g :
>
> 88.XXX.XXX.138 - - [23/Mar/2016:12:14:16 +0100] "GET
> /soin-amincissant-...XXX...-la-fontaine.aspx HTTP/1.1"
> 18446744073709551615 0
> "http://www.___XXX___.fr/soin-amincissant-...XXX...-la-fontaine.aspx"
> "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML,
> like Gecko) Chrome/49.0.2623.87 Safari/537.36" "-" "range:-"
>
> 151.XXX.221 - - [23/Mar/2016:08:15:11 +0100] "HEAD
> /Catalogue_XXXX-Bleu.aspx HTTP/1.1" 18446744073709551615 0 "-"
> "Java/1.8.0_60" "-"
>
>
> It's seems that one on 5 times it breaks nginx, by overflowing memory.
>
> Did you have any clue on that ?
>
>> Do you use any 3-rd party modules or patches?
>>
>>   wbr, Valentin V. Bartenev
Yes we have some 3-rd party modules :

/usr/local/usr/sbin/nginx -V

nginx version: nginx/1.6.0
built by gcc 4.4.7 20120313 (Red Hat 4.4.7-4) (GCC)
TLS SNI support enabled
configure arguments: --prefix=/usr/local/
--sbin-path=/usr/local/usr/sbin/nginx
--conf-path=/usr/local/etc/nginx/nginx.conf
--error-log-path=/usr/local/var/log/nginx/error.log
--http-log-path=/usr/local/var/log/nginx/access.log
--http-client-body-temp-path=/usr/local/var/lib/nginx/tmp/client_body
--http-proxy-temp-path=/usr/local/var/lib/nginx/tmp/proxy
--http-fastcgi-temp-path=/usr/local/var/lib/nginx/tmp/fastcgi
--http-uwsgi-temp-path=/usr/local/var/lib/nginx/tmp/uwsgi
--http-scgi-temp-path=/usr/local/var/lib/nginx/tmp/scgi
--pid-path=/usr/local/var/run/nginx.pid
--lock-path=/usr/local/var/lock/subsys/nginx --user=nginx --group=nginx
--with-file-aio --with-ipv6 --with-http_ssl_module
--with-http_spdy_module --with-http_realip_module
--with-http_addition_module --with-http_xslt_module
--with-http_image_filter_module --with-http_geoip_module
--with-http_sub_module --with-http_dav_module --with-http_flv_module
--with-http_mp4_module --with-http_gunzip_module
--with-http_gzip_static_module --with-http_random_index_module
--with-http_secure_link_module --with-http_degradation_module
--with-http_stub_status_module --with-http_perl_module --with-mail
--with-mail_ssl_module --with-pcre --with-debug

--add-module=/root/rpmbuild//BUILD/nginx-1.6.0/modsecurity-2.8.0/nginx/modsecurity

--add-module=/root/rpmbuild//BUILD/nginx-1.6.0/ngx_cache_purge-2.1
--add-module=/root/rpmbuild//BUILD/nginx-1.6.0/ngx_http_substitutions_filter_module


--with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic'
--with-ld-opt=-Wl,-E

But only modsecurity is used,


-- 
Jadjay
jadjay at rachetjay.fr