Proxy issue
I'm behind squid proxy. Updating profile or submitting the ticket takes ages to complete and finally fail (due to timeout). When I switch off the proxy I can work normally.
Discussions are closed to public comments.
If you need help with Lighthouse please
start a new discussion.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
1 Posted by Will Duncan on 09 Mar, 2009 10:25 PM
I'm not fully familiar with a squid proxy, or know the reason why it would cause Lighthouse to timeout.
One of our coworkers is behind a squid proxy and has no issues with Lighthouse response times. Is it possible that your proxy might be misconfigured somehow?
We'll continue to investigate on our end in the meantime.
2 Posted by Will Duncan on 09 Mar, 2009 10:27 PM
Out of curiosity, do you know what version the proxy is? My coworker told me they "have a fairly stock 2.6.stable14 install and LH is fine"
3 Posted by Courtenay on 09 Mar, 2009 10:49 PM
We run these extensions on our squid
extension_methods REPORT MERGE MKACTIVITY CHECKOUTIt works fine with Lighthouse (we have 5+ users using it)
4 Posted by lighthouse27060... on 10 Mar, 2009 01:06 AM
I'm using somewhat archaic squid version 2.5.14, but I've limited possibility to perform an upgrade.
I've obtained dumps of traffic just before it hits the Internet with proxy turned on and off.
Proxy turned on (the traffic is dumped after squid):
Proxy turned off -- LH works good:
After the last request there is normal HTTP response, like this:
5 Posted by Nicole on 14 Mar, 2009 01:31 PM
Were our suggestions helpful? Are you still experiencing this problem? Let us know and we'll be happy to help. Thanks!
Nicole closed this discussion on 14 Mar, 2009 01:31 PM.
lighthouse270608 re-opened this discussion on 14 Mar, 2009 03:23 PM
6 Posted by lighthouse27060... on 14 Mar, 2009 03:23 PM
No, the issue is still unresolved. I've tried twice to submit http headers of my request thru this forum, but it appears my posts were filtered.
7 Posted by Rick on 16 Mar, 2009 07:12 AM
Oh you're talking about Tender, not Lighthouse. help.lighthouseapp.com is our Tender Support site. Have you been using squid with Lighthouse without problems? I'm not sure why it'd work in one and not the other. I don't do anything special with http caching. I find it odd that it's sending cache-control header on a POST. As far as I know, POST requests are never cached.
8 Posted by lighthouse27060... on 16 Mar, 2009 10:44 AM
test using http/1.0
9 Posted by lighthouse27060... on 16 Mar, 2009 10:47 AM
test http/1.0, squid turned off, dumping traffic
10 Posted by lighthouse27060... on 16 Mar, 2009 11:02 AM
test http/1.0 + X-Forwared-For, squid off
11 Posted by lighthouse27060... on 16 Mar, 2009 11:05 AM
test http/1.0 + X-Forwared-For, squid off once again
12 Posted by lighthouse27060... on 16 Mar, 2009 11:07 AM
once again spamming this forum for testing purposes
13 Posted by lighthouse27060... on 16 Mar, 2009 11:14 AM
squid off again, "Connection" header filtered
14 Posted by lighthouse27060... on 16 Mar, 2009 11:38 AM
again3
15 Posted by lighthouse27060... on 16 Mar, 2009 11:43 AM
test
16 Posted by lighthouse27060... on 16 Mar, 2009 11:53 AM
mtu 1000
17 Posted by lighthouse27060... on 16 Mar, 2009 11:58 AM
mtu 1480
18 Posted by lighthouse27060... on 16 Mar, 2009 11:58 AM
1490
19 Posted by lighthouse27060... on 16 Mar, 2009 11:59 AM
1492
20 Posted by lighthouse27060... on 16 Mar, 2009 11:59 AM
1495
21 Posted by lighthouse27060... on 16 Mar, 2009 12:00 PM
1493
22 Posted by lighthouse27060... on 16 Mar, 2009 12:00 PM
1494
23 Posted by lighthouse27060... on 16 Mar, 2009 12:18 PM
Solved!
The issue was quite low level. It has nothing to do with HTTP, it is MTU related.
Your servers have MTU lower than 1500. When big TCP packets was being sent (such as packets generated by posting a form) your routers generated ICMP fragmentation needed packet. This packet travelled across the Internet to my router which was incorectly routing it directly to my computer instead of the proxy. This is because the proxy works in fully transparent mode -- the router forward all TCP port 80 traffic to/from it. However it was misconfigured -- ICMP was not forwared to proxy.
Now it is solved. I've modified MTU setting on my proxy to 1492 (sorry for spamming forum with test messages) which is the MTU your servers/routers use. Long term fix it to restore MTU to 1500 and set my router to forward ICMP packets related to http traffic to proxy.
Your suggestions wasn't related to the root of the problem, but they motivated me to dig into it, so thank you :)
24 Posted by Rick on 16 Mar, 2009 05:10 PM
That's hardcore! I've filed an issue with our hosting company. I personally don't know much about proper MTU configuration (clearly!)
25 Posted by Rick on 16 Mar, 2009 08:00 PM
Resolved the issue to block the stupid spam. Our host did come back and say the MTU for lighthouseapp.com is 1500, but I'm having them check on tenderapp.com (which is where help.lighthouseapp.com really goes).
Rick closed this discussion on 16 Mar, 2009 08:00 PM.
lighthouse270608 re-opened this discussion on 16 Mar, 2009 09:41 PM
26 Posted by lighthouse27060... on 16 Mar, 2009 09:41 PM
Oh man!
I've checked on my router and found the real cause of the problem.
Of course the problem was completely on my side, your MTU is probably ok.
The problem is with my connection to the Internet. I've recently switched to PPPoE and completely forget about it. PPP encapsulation causes MTU to drop to 1492:
ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,10000> mtu 1492 qdisc tbf qlen 3
So the fragmentation needed ICMP packets was generated by my own router!
So... I feel like an idiot. Sorry for taking your time...
But on the other hand -- this issue was interesting, wasn't it? ;-)
27 Posted by Will Duncan on 17 Mar, 2009 11:20 AM
Out of curiosity, what type of router was it?
28 Posted by Rick on 17 Mar, 2009 04:12 PM
Ha, that's exactly what our host said yesterday. Don't you just love computers?
Rick closed this discussion on 17 Mar, 2009 04:12 PM.
lighthouse270608 re-opened this discussion on 17 Mar, 2009 10:04 PM
29 Posted by lighthouse27060... on 17 Mar, 2009 10:04 PM
@rick: I love computers, but computers sometimes hate me.
@will: I use a system of custom build linux routers. If you are looking for something to put in your knowledge base then use this sentence: "When the problem looks unsolvable it is probably MTU related"
brandi closed this discussion on 29 Jun, 2012 10:10 PM.