Web Server Problems

["Jay Himes" <j@xxxxxxxxxxx>]

I have been have problems with my HTTP server (original) which started when
I upgraded to V5R2.

The problem appears to be that connections are not being closed. The
symptoms are that there is no response from the HTTP server and a large
number
of connections in the FIN-wait-2 state with high idle times in the NETSTAT
screen. Restarting the HTTP Server or ending the connections from the
netstat screen allows it to operate normally again.

The machine is a 730 with V5R2 and the latest HIPERs and CUME.
(Installed this weekend)

An example from the NETSTAT Screen:
     Remote           Remote     Local
 Opt  Address          Port       Port       Idle Time  State
      10.22.60.79      2064       https      000:00:01  FIN-wait-2
     4.65.195.137     1520       https      001:57:20  FIN-wait-2
      24.49.40.82      1297       https      007:48:57  FIN-wait-2
    66.26.166.245    1071       https      000:03:37  FIN-wait-2
   148.63.234.108   2582       https      008:03:15  FIN-wait-2
   172.141.65.246   3137       https      000:00:16  FIN-wait-2
  208.224.183.154  1127       https      000:55:27  FIN-wait-2
  208.224.183.154  1133       https      000:49:32  FIN-wait-2

As you can see some of them are fairly normal, but others have long idle
times
(the HTTP server was restarted approx 9 hours before this data was
gathered).
The machine is not experiencing problems with this load but through the week
more and more unended connections will build up until the webserver will no
longer respond to incoming requests. There are no unusual messages in the
joblogs

Any ideas on what is causing this or how it could be fixed?

I am currently fixing it by restarting the webserver each night; but that is
not going
to be acceptable as an ongoing solution.

This is the configuration listing for the webserver:

00020     Protect /Usage* {
00030           PasswdFile %%SYSTEM%%
00040           ACLOverride Off
00050           GetMask All
00060           AuthType Cert_Or_Basic
00070           ServerID OS400ADM
00080     }
00090     Port    8080
00100     Enable GET
00110     Enable HEAD
00120     Enable OPTIONS
00130     Enable POST
00140     Enable PUT
00150     Enable TRACE
00160     Service /Usage* INTERNAL:UsageFn
00170     Pass    /images/*      /home/t2web/images/*
00180     Pass    /IMAGES/*      /home/t2web/images/*
00190     Pass    /includes/*    /home/t2web/includes/*
00200     Pass    /INCLUDES/*    /home/t2web/includes/*
00210     Pass    /help/*        /home/t2web/help/*
00220     Pass    /HELP/*        /home/t2web/help/*
00230     Map     /cgi-bin/*     /QSYS.LIB/LBUWEBAS.LIB/CALLDB2.P
00240     Map     /scripts/*     /QSYS.LIB/LBUWEBAS.LIB/CALLDB2.P
00250     Map     /CGI-BIN/*     /QSYS.LIB/LBUWEBAS.LIB/CALLDB2.P
00260     Map     /SCRIPTS/*     /QSYS.LIB/LBUWEBAS.LIB/CALLDB2.P
00270     Exec    /QSYS.LIB/LBUWEBAS.LIB/*
00280     Exec    /QSYS.LIB/CGIBIN.LIB/*
00290     CacheLocalMaxBytes     2M
00300     CacheLocalMaxFiles     200
00310     LiveLocalCache         OFF
00320     CacheLocalFile         /home/t2web/images/*
00330     CacheLocalFile         /home/t2web/includes/*.txt
00340     CacheLocalFile         /home/t2web/help/*.htm
00350     UseACLs protectonly
00360     UseMetaFiles Off
00370     DynamicCache On
00380     MinActiveThreads 15
00390     MaxActiveThreads 40
00400     PersistTimeout 6 Seconds
00410     MaxPersistRequest 30
00420     Map     /*             /home/t2web/root/*
00430     Pass    /home/t2web/root/*
00440     NormalMode On
00450     # Do not change or delete the following AppName directi   >
00460     AppName QIBM_HTTP_SERVER_T2WEB
00470     SSLMode On
00480     SSLPort 443
00490     SSLClientAuth Off
00500     CloseTimeout 60 Seconds
00510     InputTimeOut 2 minutes
00520     OutputTimeOut 20 minutes
00530     ScriptTimeOut 5 minutes
00540     DenialOfServicePenalty 10 20 Minutes
00550     DenialOfServiceThreshold 5 1 Minutes
00560     ErrorLog /home/logs/t2web/err.txt 2000 *DFT *DFT
00570     CgiErrorLog /home/logs/t2web/cgierr.txt 2000
00580     ErrorLogArchive Purge
00590     ErrorLogExpire 0
00600     ErrorLogSizeLimit 100
00610     Disable CONNECT
00620     Disable DELETE