Great Circle Associates Firewalls
(July 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Please help: http/tcp server failing (looping), service terminated
From: Klaus Lichtenwalder <Klaus . Lichtenwalder @ WebForum . DE>
Date: Tue, 15 Jul 1997 10:01:29 +0100 (WET DST)
To: Greg Harp <gh @ dfwnet . sbms . sbc . com>
Cc: firewalls @ GreatCircle . COM
In-reply-to: <33CADC5D . 19FE @ dfwnet . sbms . sbc . com>

On Mon, 14 Jul 1997, Greg Harp wrote:

> [...]
> For reference, the system in question is a FWTK 1.2/1.3 based bastion
> host which serves as an Intranet firewall.  Internet connectivity is
> achieved via other means, on a more up-to-date, secure system.  The
> Intranet firewall is there mainly for policy and local user
> authentication reasons.
> 
> I'm running into a problem where http-gw causes a "server failing
> (looping), service terminated" message on my bastion host (SunOS
> 4.1.3_U1 with lotsa patches).  The gateway isn't actually failing --
> it's just running several instances in rapid succession.  This usually
> occurs on more "busy" pages, or when several users are hitting the
> Intranet at the same time.
> 

Well, you might consider running your http daemon as a daemon, not
started by inetd, performance-wise. Inet keeps track on how many
instances in a given time frame it may start. If there are more it just
stops serving them, for the sake of the machine... You can tune the
parameter, though, via a number of the allowed maximum instances, after
the {no}wait parameter, if memory serves. But there's always a man page. 

Klaus
________________________________________________________________________
 Klaus Lichtenwalder, Dipl. Inform., PGP Key: email to key @
 Four11 .
 com
 Lichtenwalder @
 ACM .
 org, http://www.wp.com/Klaus, fax: +49-89-91072699
     Need a (virtual) vacation? Go check: http://www.bavaria.com
     No wonder nobody comes here--it's too crowded. -Yogi Berra



References:
Indexed By Date Previous: Re: Tunneling tools with 128 bit encryption outside US?
From: Claudio Telmon <claudio @ DI . Unipi . IT>
Next: Re: top secret
From: Brian Nunes <bpnunes @ insync . net>
Indexed By Thread Previous: Re: Please help: http/tcp server failing (looping), service terminated
From: Greg Harp <gh @ dfwnet . sbms . sbc . com>
Next: Re: Please help: http/tcp server failing (looping), service terminated
From: Todd Martin <Todd . Martin @ tus . ssi1 . COM>

Google
 
Search Internet Search www.greatcircle.com