topic WEB Server Upgrade from 2.2 to 2.4 in Administration and Deployment

WEB Server Upgrade from 2.2 to 2.4

sandeep_reddy — Fri, 11 Oct 2019 01:10:38 GMT

Hello All,

Recently I have upgraded SAS Webserver from 2.2 to 2.4 version and I am getting below issues.

client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23):

2) We have configured Load Balancer before it hits to the Web server . I have kept backup of 2.2 version and when i start the service from 2.2, I am not getting above issue.

3) I have configured all SSL certificates in place.

4) The upgraded version is not able to detect the Load balancer request but able to grant if it is a direct hostname URL.

Please let me know in which i can update the known host details if a connection coming through Load balancer

Thanks in Advance,

Sandeep

Re: WEB Server Upgrade from 2.2 to 2.4

AnandVyas — Fri, 11 Oct 2019 09:26:40 GMT

Hi @sandeep_reddy

I could find this bug raised for similar issue. It was closed by giving two options to solve this issue.

You can either use HttpProtocolOptions Unsafe or set Host header to some value.

I would not suggest to use the HttpProtocolOptions unsafe. It would be better if you raise this request directly to SAS TS as this something related to CVEs

Re: WEB Server Upgrade from 2.2 to 2.4

sandeep_reddy — Mon, 14 Oct 2019 05:06:27 GMT

Hi Anand,

Thanks Very Much for your reply.

I have replicated the issue and in our F5 load balancer there was a null host header.

I have asked my network team to assign a value for host and the issue is resolved now.

Thanks & Regards,
Sandeep