[Fri Dec 10 12:02:36.039407 2021] [proxy_balancer:error] [pid 92187:tid 139705253582592] [client 192.168.56.1:28366] AH10187: ignoring params in balancer-manager cross-site access
From curl localhost and outside with the Browser i trigger on error Log entry. So why "cross-site access" with an connection from/with/in localhost? The LB Manager in the Browser is working. I can change load, disable machines etc. without further error Log entries.
I got a same first error Log entry. But the LB Manager ist not Working i can not change things load etc. The Second "Change GUI Part" is not visible and every tray to klick will create a error log entry.
I compile/update further one to apache 2.4.51 without no luck. LB Manager reached from the Proxy Machine will not Working.
I came across from here
https:/ /bugs.launchpad .net/ubuntu/ +source/ apache2/ +bug/1939678
After Update from Ubuntu 18.04 apache2 2.4.29 to Ubuntu 20.04 apache2 2.4.41
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
To Reproduce i create two new Virtual Box VMs on my local Machine and compile apach2 from the sources 2.4.38 -> 2.4.51
-------------
|Bastian Host |
|Apache Proxy | -----------> LB Apache Balancer Manger
-------------
Debian 11 -> Bastion Host (Proxy) / 192.168.56.70
Ubuntu 20.04 -> LB Manager / 192.168.56.170
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
I use the Proxy as Bastion Host to reache several LB Manager from one Point.
Debian 11 Proxy strip down config for reproduce the issue.
:~# apt-get install apache2
~# vim /etc/apache2/ sites-enabled/ 000-default. conf
ProxyPass http:// 192.168. 56.170: 81/balancer- manager
ProxyPassReve rse http:// 192.168. 56.170: 81/balancer- manager
SetOutputFilt er INFLATE;SUBSTITUTE
Substitute "s|http:// 192.168. 56.70:81|http:// 192.168. 56.170|i"
[...]
<Location /balancer-manager>
</Location>
[...]
:~# a2enmod proxy_http substitute
:~# systemctl restart apache2
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Second VM with Ubuntu 20.04 for testing and reproduction. I compile apache from the sources. I Start with apache 2.4.38
wget http:// archive. apache. org/dist/ httpd/httpd- 2.4.38. tar.gz
configure / make / make install
:~# vim /usr/local/ apache2/ conf/httpd. conf apache2"
ServerRoot "/usr/local/
ServerName "localhost"
ServerAdmin <email address hidden>
Listen 80
Listen 81
Listen 8100
LoadModule authn_file_module modules/ mod_authn_ file.so mod_authn_ core.so mod_authz_ host.so _module modules/ mod_authz_ groupfile. so mod_authz_ user.so mod_authz_ core.so compat_ module modules/ mod_access_ compat. so mod_auth_ basic.so mod_reqtimeout. so mod_filter. so mod_substitute. so mod_log_ config. so mod_headers. so mod_setenvif. so mod_version. so mod_proxy. so mod_proxy_ http.so module modules/ mod_proxy_ balancer. so mod_slotmem_ shm.so byrequests_ module modules/ mod_lbmethod_ byrequests. so bybusyness_ module modules/ mod_lbmethod_ bybusyness. so mod_unixd. so mod_status. so mod_autoindex. so mod_alias. so
LoadModule authn_core_module modules/
LoadModule authz_host_module modules/
LoadModule authz_groupfile
LoadModule authz_user_module modules/
LoadModule authz_core_module modules/
LoadModule access_
LoadModule auth_basic_module modules/
LoadModule reqtimeout_module modules/
LoadModule filter_module modules/
LoadModule substitute_module modules/
LoadModule mime_module modules/mod_mime.so
LoadModule log_config_module modules/
LoadModule env_module modules/mod_env.so
LoadModule headers_module modules/
LoadModule setenvif_module modules/
LoadModule version_module modules/
LoadModule proxy_module modules/
LoadModule proxy_http_module modules/
LoadModule proxy_balancer_
LoadModule slotmem_shm_module modules/
LoadModule lbmethod_
LoadModule lbmethod_
LoadModule unixd_module modules/
LoadModule status_module modules/
LoadModule autoindex_module modules/
LoadModule dir_module modules/mod_dir.so
LoadModule alias_module modules/
<IfModule unixd_module>
User daemon
Group daemon
</IfModule>
<Directory />
AllowOverride none
Require all denied
</Directory>
DocumentRoot "/usr/local/ apache2/ htdocs" apache2/ htdocs" >
<Directory "/usr/local/
Options Indexes FollowSymLinks
AllowOverride None
Require all granted
</Directory>
<IfModule dir_module>
DirectoryIndex index.html
</IfModule>
ErrorLog "logs/error_log"
LogLevel warn
<IfModule log_config_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
<IfModule logio_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
</IfModule>
CustomLog "logs/access_log" common
</IfModule>
<IfModule headers_module>
RequestHeader unset Proxy early
</IfModule>
<IfModule mime_module> x-compress .Z
TypesConfig conf/mime.types
AddType application/
AddType application/x-gzip .gz .tgz
</IfModule>
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>
<VirtualHost 192.168.56.170:81 127.0.0.1:81>
Servername 127.0.0.1
ServerAdmin root@localhost
<Location /balancer-manager>
SetHandler balancer-manager
Require all granted
</Location>
LogLevel warn t_error. log" access. log" combined
ErrorLog "logs/managemen
CustomLog "/management_
</VirtualHost>
<Proxy "balancer://test"> 192.168. 168.130/ test" 192.168. 168.131/ test" status=+H
BalancerMember "http://
BalancerMember "http://
ProxySet lbmethod=bybusyness
</Proxy>
<VirtualHost 127.0.0.1:8100>
ServerAdmin root@localhost
ServerName testapp01
ServerAlias 127.0.0.1:8100
ProxyPass "/test" "balancer://test"
ProxyPassReverse "/test" "balancer://test"
CustomLog "logs/test- access. log" combined error.log"
ErrorLog "logs/test-
</VirtualHost>
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Direct connection with curl in the Console from the LB Machine
:~# curl http:// 127.0.0. 1:81/balancer- manager
from outside with the Browser
http:// 192.168. 56.170: 81/balancer- manager
and simultaneously looking in the log
:~# tail -f /usr/local/ apache2/ logs/management _error. log
-> no error Log entry LB Manager in Browser is working
Now Over Debian 11 Proxy VM
http:// 192.168. 56.70/balancer- manager
-> LB Manager is working as expected
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
wget http:// archive. apache. org/dist/ httpd/httpd- 2.4.39. tar.gz
configure / make / make install
Update to 2.4.39 everything is working as expected like above
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
wget http:// archive. apache. org/dist/ httpd/httpd- 2.4.41. tar.gz
configure / make / make install
But Now with the Update to Version 2.4.41
Direct connection with curl in the Console from the LB Machine
:~# curl http:// 127.0.0. 1:81/balancer- manager
from outside with the Browser
http:// 192.168. 56.170: 81/balancer- manager
and simultaneously looking in the log
:~# tail -f /usr/local/ apache2/ logs/management _error. log balancer: error] [pid 92187:tid 139705270384384] [client 127.0.0.1:52138] AH10187: ignoring params in balancer-manager cross-site access
[Fri Dec 10 12:02:15.015978 2021] [proxy_
[Fri Dec 10 12:02:36.039407 2021] [proxy_ balancer: error] [pid 92187:tid 139705253582592] [client 192.168.56.1:28366] AH10187: ignoring params in balancer-manager cross-site access
From curl localhost and outside with the Browser i trigger on error Log entry. So why "cross-site access" with an connection from/with/in localhost? The LB Manager in the Browser is working. I can change load, disable machines etc. without further error Log entries.
BUT Now Over Debian 11 Proxy VM
http:// 192.168. 56.70/balancer- manager
[Fri Dec 10 12:03:27.341921 2021] [proxy_ balancer: error] [pid 92187:tid 139705236780800] [client 192.168. 56.70:57986] AH10187: ignoring params in balancer-manager cross-site access
[Fri Dec 10 12:03:43.425885 2021] [proxy_ balancer: error] [pid 92189:tid 139705245181696] [client 192.168. 56.70:57988] AH10187: ignoring params in balancer-manager cross-site access, referer: http:// 192.168. 56.70/balancer- manager balancer: error] [pid 92189:tid 139705236780800] [client 192.168. 56.70:57988] AH10187: ignoring params in balancer-manager cross-site access, referer: http:// 192.168. 56.70/balancer- manager? b=test& w=http: //192.168. 168.130/ test&nonce= bb418b73- 73df-208e- 0eb3-343ac2e4d3 d6 balancer: error] [pid 92189:tid 139705228379904] [client 192.168. 56.70:57988] AH10187: ignoring params in balancer-manager cross-site access, referer: http:// 192.168. 56.70/balancer- manager? b=test& w=http: //192.168. 168.131/ test&nonce= bb418b73- 73df-208e- 0eb3-343ac2e4d3 d6
[Fri Dec 10 12:03:44.978644 2021] [proxy_
[Fri Dec 10 12:03:46.721392 2021] [proxy_
I got a same first error Log entry. But the LB Manager ist not Working i can not change things load etc. The Second "Change GUI Part" is not visible and every tray to klick will create a error log entry.
I compile/update further one to apache 2.4.51 without no luck. LB Manager reached from the Proxy Machine will not Working.
Any suggestion is appreciated.
Thx Horst