osdir.com

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Bug in mod_ratelimit?


Hi Luca,

So far we’ve not seen much in the logs of our customer reports, however I was
able to get the following settings:

<IfModule mod_ratelimit.c>
<Location />
SetOutputFilter RATE_LIMIT
SetEnv rate-limit 512
SetEnv rate-initial-burst 625
</Location>
</IfModule>

When removed/commented out and/or removing mod_ratelimit the site would begin to work again.

When in a broken state we would see things like the following when visiting the page:

HTTP/1.1 200 OK
Date: Thu, 19 Jul 2018 13:33:05 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
X-Pingback: 
http://XXXXXXXX/xmlrpc.php

Link: <
http://XXXXXXXXX/wp-json/>; rel="https://api.w.org/";, <http://XXXXXXXXX/>;
 rel=shortlink
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
….
….
<source code> 

We are working internally to attempt to get more of these answers.. having trouble so far reproducing in house.

Sorry I don’t have more info but I will reply again if we can get it reproducible. 

Thanks for your quick response! 
Cory McIntire
Release Manager - EasyApache 
cPanel, Inc.

 
> On Jul 19, 2018, at 10:32 AM, Luca Toscano <toscano.luca@xxxxxxxxx> wrote:
> 
> Hi Cory,
> 
> 2018-07-19 16:10 GMT+02:00 Cory McIntire <cory@xxxxxxxxxx>:
> Hello all,
> 
> We’re starting to see some issues where mod_ratelimit change here:
> 
>   *) mod_ratelimit: fix behavior when proxing content. PR 62362.
>      [Luca Toscano, Yann Ylavic]
> 
> Is causing some sites to load in plain text/source code…
> 
> We haven’t found the connection beyond unloading mod_ratelimit which resolves the issue,
>  and its not happening everywhere, just curious if anyone else is seeing this?
> 
> I’ll report back once I have more info on further factors involved. 
> 
> Thanks a lot for reporting this. Can you add a bit more info about how to reproduce (httpd config I mean)? Anything relevant in the error logs?
> 
> Luca 
> 

Attachment: smime.p7s
Description: S/MIME cryptographic signature