Oracle iPlanet Web Proxy Server: Increasing the idle timeout (from default of 120 seconds) for SSL connections (Doc ID 1007506.1)

Last updated on JULY 25, 2024

Applies to:

Goal

When SSL traffic is 'tunneled' through the Proxy Server, it is possible for the connection to timeout if the Origin Server takes longer than 120 seconds to respond with data.

This tends to occur when the Origin Server has to produce the content dynamically, using CGI for example.

When this happens, an error, similar to the one below, is reported in the error log:

The Proxy Server handles SSL tunneling differently from how it handles other proxy requests. For this reason, SSL tunneling has its own timeout value. This value controls how long a read or write process will wait before the server closes the SSL tunnel.

If a read or write process takes longer than the default timeout value of 120 seconds, the server will close the SSL tunnel before the process has finished.

For example, timeouts can occur if a user uploads large files through the tunnel to a slow server or if a user is running a CGI script on the secure server that takes a while to return data.

Solution