My Oracle Support Banner

Oracle iPlanet Web Proxy Server: Increasing the idle timeout (from default of 120 seconds) for SSL connections (Doc ID 1007506.1)

Last updated on JULY 20, 2021

Applies to:

Oracle iPlanet Web Proxy Server - Version 3.6 to 3.6 [Release 3.6]
All Platforms

Goal

When SSL traffic is 'tunneled' through the Proxy Server, it is possible for the connection to timeout if the Origin Server takes longer than 120 seconds to respond with data.

This tends to occur when the Origin Server has to produce the content dynamically, using CGI for example.

When this happens, an error, similar to the one below, is reported in the error log:

[03/May/1999:14:41:31] info: for host <IP> trying to CONNECT connect://HOSTNAME:PORT, pump-mainloop reports: connection timed out after 120 seconds idle


The Proxy Server handles SSL tunneling differently from how it handles other proxy requests. For this reason, SSL tunneling has its own timeout value. This value controls how long a read or write process will wait before the server closes the SSL tunnel.

If a read or write process takes longer than the default timeout value of 120 seconds, the server will close the SSL tunnel before the process has finished.

For example, timeouts can occur if a user uploads large files through the tunnel to a slow server or if a user is running a CGI script on the secure server that takes a while to return data.

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.