Question

I m having a problem with HTTPS that I can t seem to solve on my own or with any amount of research. Occasionally, an HTTPS request will timeout and result in a "No Data Received" error. This generally happens when I m using a virtual host redirect from HTTP to HTTPS. It does not happen every time, bot maybe 1 in 8 times, it just sits until it times out. I am passing this through an Amazon Load Balancer then on to the server (EC2) running Apache 2 on Ubuntu 10.04. I can t tell whether this is a redirect issue, although it doesn t seem to be. It s most likely a setup issue, so I m going to put my setup below so you can see it.

I d like to solve this problem as quickly as possible to any help would be greatly appreciated. Thanks in advance!

Virtual Host file in sites-enabled for myurl.com . This should force HTTPS on everything except for deploy.php.



<VirtualHost *:80>
ServerName myurl.com
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteCond %{THE_REQUEST} !^[A-Z]+s/deploy.php [NC]
RewriteRule !^deploy.php https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L]
</VirtualHost>




Virtual Host file for  myurl-ssl  in sites-enabled.


<VirtualHost *:80>
        ServerName www.myurl.com
        RewriteCond %{HTTPS} !=on
    RewriteCond %{THE_REQUEST} !^[A-Z]+s/deploy.php [NC]
    RewriteRule !^depoy.php https://%{HTTP_HOST}%{REQUEST_URI} [NC,R=301,L]
    NameVirtualHost *:443
    </VirtualHost> 

    <IfModule mod_ssl.c> 
    <VirtualHost *:443>
        SSLEngine on
        ServerAdmin [email protected]
        ServerName myurl.com
        SSLCertificateFile /etc/apache2/certs/myurl.pem
        SSLCertificateKeyFile /etc/apache2/certs/private.key
        SSLCertificateChainFile /etc/apache2/certs/AddTrustExternalCARoot.crt
    SSLProtocol all
    SSLCipherSuite HIGH:MEDIUM
        DocumentRoot /var/www

        ErrorLog /var/log/apache2/error.log
        LogLevel info
        CustomLog /var/log/apache2/access.log combined
    </VirtualHost>




同样,这个问题似乎属于我的设置或我的间接权力,迫使我“没有收到数据”错误(324英亩),但这一问题在每一个浏览器都发生。 我确实认为,它与我们在某个地方建立起来的皇家警察部队有关,但我可以列举一下它是什么。

感谢!

Answer 1

长期以来,我一直遭受这一问题的困扰,而这一问题并非依赖。在任何浏览器上复制比较容易。

问题之所以存在,是因为国家航空航天局的路由表很容易超支,因为它只能同时处理这么多的连接。现代日本宇宙航空研究开发机构的网站,例如Facebook和Twitter使用抽签和许多链接。由于大多数此类地点现在都使用SSL连接,这一问题更加严重。

为什么会加剧这一问题?

由于SSL的连接在手脚后相对永久,如果NAT路由人放弃routing,浏览器不能真正处理这种情况,并且用NODATA或类似的错误打断了SSL长时间的时间。然而,即便如此,由于SSL的举手如此缓慢,即使现在似乎也未能适当重新连接和重新连接主要浏览器中的SSL连接,但浏览器却试图尽可能重复现有的连接,而没有认识到与连接有关的NAT航道不复存在。

此外,同一SSL服务器的多个表格似乎都重复了同样的TCP连接,因此仅关闭一个定点,实际上没有关闭连接。

因此,一项工作是,在一定程度上减少SSLNO DATA的停机,并可能固定浏览器,以便这实际上抹去对先前存在的SSL联线的任何和所有知识,开启全新的TCP联线,使NAT航道快乐和复修。

我尚未找到解决这一问题的切实办法,但上述两点显然与此有关,但似乎象 Chrome工程师那样理解根本原因。

友情链接