proxied requests hang when DNS response has wrong ident

[Jason Woods]

Hi,

On 16 Jul 2014, at 03.01, Pramod Korathota <pkorathota at atlassian.com> wrote:

> On 15 July 2014 21:41, Ruslan Ermilov <ru at nginx.com> wrote:
>  
>  
> diff --git a/src/core/ngx_resolver.c b/src/core/ngx_resolver.c
> --- a/src/core/ngx_resolver.c
> +++ b/src/core/ngx_resolver.c
> 
> <snip>
> 
> Thanks for the quick response and patch, Ruslan. I have tested a build incorporating this patch, and it behaves as expected, the resolver retrying rather than blocking behind the first request.
> 
> I will get this build out to our  production environment this week. Will report back if there are any issues.
> 
> Thanks again!
> 
> Pramod,
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx

I'm experiencing a similar issue.

I get a couple of ident mismatch errors in the error log, and then gradually over time I begin to see thousands of ESTABLISHED connections stuck with no activity.
Eventually worker_connections is exhausted. I believe it could be related to this.

I'm using package nginx-1.6.1-1.el6.ngx.x86_64, which is the latest stable. Has this fix been ported to 1.6.x stable yet?
Is there a workaround?

Thanks,

Jason
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20140818/060922f5/attachment.html>