[sr-dev] Some question about auth_identity module

Klaus Darilion klaus.mailinglists at pernau.at
Wed Feb 23 19:05:27 CET 2011



Am 23.02.2011 13:20, schrieb Iñaki Baz Castillo:
>> Try it. ;-)
> I plan to try the module soon, but cannot do it now, please tell me :)
> NOTE: I mean the case in which the HTTP server has a DROP rule in its
> firewall, so the TCP connection would take long time to return error.
> I know that curl uses a configurable timer for the HTTP/TCP connection
> operation, but even 1-2 seconds could be enough to leave a proxy
> unusable (imagine 100 calls at the same time containing Indentity-Info
> pointing to 100 different domains with DROP rule).

Short: I do not know :-)

I never tested it. The timeout could also happen before, e.g. lame DNS
delegation.

regards
Klaus





More information about the sr-dev mailing list