RE: [squid-users] Error:header-request-too-large

Is it just one client making large header requests, or are you seeing these
errors from multiple sources?

To view standard header requests, surf over to http://web-sniffer.net/ and
use the web form to make a request. It will show you the HTTP Request
Header as well as the HTTP Response Header. You can see how small HTTP
Request Headers usually are.

It's quite useful for informational purposes.

Chris

-----Original Message-----
From: Ali Abbas [mailto:ali.abbas@go4b.net]
Sent: Wednesday, November 10, 2004 10:07 AM
To: 'Chris Robertson'; squid-users@squid-cache.org
Subject: RE: [squid-users] Error:header-request-too-large

That I can understand and I am using the latest version of Squid 2.5 Stable
7. I tried getting over this problem by specifying larger header size but
then even somehow I started receiving the header size larger than that.

Mohammed Ali Abbas
Asst. CMTS Engineer

-----Original Message-----
From: Chris Robertson [mailto:crobertson@gci.com]
Sent: Wednesday, November 10, 2004 11:43 PM
To: squid-users@squid-cache.org
Subject: RE: [squid-users] Error:header-request-too-large

From squid.conf (squid2.5.STABLE7):

# TAG: reply_header_max_size (KB)
# This specifies the maximum size for HTTP headers in a reply.
# Reply headers are usually relatively small (about 512 bytes).
# Placing a limit on the reply header size will catch certain
# bugs (for example with persistent connections) and possibly
# buffer-overflow or denial-of-service attacks.
#
#Default:
# reply_header_max_size 20 KB

Previous versions of Squid had a default max size of 10 KB (which is what
you are seeing).

Chris

-----Original Message-----
From: Ali Abbas [mailto:ali.abbas@go4b.net]
Sent: Wednesday, November 10, 2004 9:22 AM
To: squid-users@squid-cache.org
Subject: [squid-users] Error:header-request-too-large

I am getting error:header-request-too-large messages in access logs of my
servers. Can anybody elaborate over the header size and what are the reasons
behind such request from the client side. Although for the time being the
errors is being monitored at the OS level by blocking the IP access to the
server of the client generating such requests. Is there anyway squid can
handle such issue itself. Its quiet obvious that Squid does not serve such
request however if I let the request pass squid directly to the gateway
router will the request be responded by the web server?

I am pasting the logs generated by access log and cache log file

Access Log Entry:

1100147107.366 3 xxxxxxxxx NONE/413 1612 NONE error:request-too-large -
NONE/- text/html

Cache Log Entries

2004/11/10 20:25:44| Config 'request_header_max_size'= 10240 bytes.
2004/11/10 20:25:44| Request header is too large (11680 bytes)
Received on Wed Nov 10 2004 - 12:40:52 MST