11 messages in ru.sysoev.nginxRE: nginx + cookies + firefox = 400 B...
FromSent OnAttachments
Oliver PestringDec 14, 2008 4:26 am 
Maxim DouninDec 14, 2008 4:56 pm 
Jim OhlsteinDec 14, 2008 6:16 pm 
Maxim DouninDec 14, 2008 7:43 pm 
Jim OhlsteinDec 14, 2008 8:59 pm 
Oliver PestringDec 15, 2008 2:46 am 
Neil ShethDec 15, 2008 5:58 pm 
Igor SysoevDec 16, 2008 12:21 am 
Neil ShethDec 16, 2008 1:34 am 
Neil ShethDec 19, 2008 12:36 am 
Igor SysoevDec 19, 2008 2:44 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:RE: nginx + cookies + firefox = 400 Bad RequestActions...
From:Jim Ohlstein (jim.@gmail.com)
Date:Dec 14, 2008 6:16:39 pm
List:ru.sysoev.nginx

It might be but I don't have that problem with my moderately busy vBulletin board and 31% of my visitors (including myself) use Firefox. The difference is that I use php-fcgi not Apache. Looking at Google search the problem appears with other apps but the common denominator in most cases seems to be when nginx is being used as a reverse proxy and only with Firefox. The problem is more likely with Firefox than with vBulletin. As for number of cookies, my browser has 11 from my vBulletin installation. The average user has one fewer since they don't have an admin control panel cookie. In contrast, I have 28 cookies from CNN.com (which uses nginx to serve some of the content that I browse), 30 from VerizonWireless (my cell phone company), and 16 from American Express, so 11 (or 10 as a typical user might have) does not seem "enormous".

Consider a brief test proxying your php requests to php-cgi (I use php-fpm but you can use spawn-fcgi from lighttpd and you probably won't need to recompile php for this test). There are lots of "recipes" online for doing so. If the problem resolves then you can make a more informed decision. It appears that the problem has existed in at least some versions of nginx 0.7.x - see http://www.linuxquestions.org/questions/project.php?issueid=30 so a recompile may not help. I don't know if it's been rectified at that site but I have visited it without issue. They are still using nginx but how it is configured I do not know. If you decide to do this, also consider running some benchmarks using a simple php script: Apache alone, nginx as reverse proxy to Apache, nginx using fastcgi.

Good luck!

Jim

-----Original Message----- From: owne@sysoev.ru [mailto:owne@sysoev.ru] On Behalf Of Maxim Dounin Sent: Sunday, December 14, 2008 7:57 PM To: ngi@sysoev.ru Subject: Re: nginx + cookies + firefox = 400 Bad Request

Hello!

On Sun, Dec 14, 2008 at 01:26:59PM +0100, Oliver Pestring wrote:

Hi guys, this week is was about to move partially to nginx for all static content. The full switch was planned in about a month on a new server. I followed this guide http://www.dikant.de/2008/07/10/nginx-as-a-reverse-proxy-for-apache/ and it worked instantly. After some minutes I got some t-calls about saying that the page isnt reachable with a 400 - Bad Request for them. It runs a vbulletin-forum and a Mantis-Bugtracker, it happens on both.

Some hours later I could nail that problem down to nginx (same with 0.5x from etch and 0.632 from lenny) and firefox users (versions 2&3). It works again if the related domain-cookies are deleted. apache2 doesnt cause any trouble, same for IE/Opera-users.

Tried a quick google search and I found endless posts on a lot of sites with the same 400 problem and ff after they switched to nginx (even famous ones like electronicarts). Sadly none if these contain a solution besides cleaning the cookies but that doesnt seem to help for long according to that posts.

As I have over 60% FF-users Im a little afraid of the results and switched back to pure apache for the moment. Is there any known solution to this problem on serverside? May a selfcompiled-0.7-version help on this? Couldnt find anything related in the changelog.

You should tune large_client_header_buffers in your nginx config, see http://wiki.codemongers.com/NginxHttpCoreModule#large_client_header_buffers for details.

The problem AFAIK is vbulletin which sets enormous number of various cookies.