OPNWAF - AH00898 Err reading from remote server return xxx.xhtml after 30 sec.

Started by Wuensch-AG-Adm, March 31, 2025, 04:21:09 PM

Previous topic - Next topic
Dear OPNsense Community,

for one week every request that are longer as 30 sec are reset or finalized and we are receiving an AH00989 from the OPNWAF Business plugin. The service is active on an official Deciso OPNsense appliance. If it's less than 30 sec, it will work. I've setup on the location a connection timeout of 300 secs. I've no clue what could reset the connection every time after 30 secs. It seems that some FIN packets are send from the OPNsense OPNWAF to quickly. There's another error but it's less often: AH01102: error reading status line from remote server xx.xx.xx.xx:xxx. My colleagues have confirmed that there's an error in Edge browser 502 proxy error after 30 secs.
I've checked the status of the application server. The server responds and is available for the OPNWAF. The system has flawlessly worked without OPNsense during more than 3 years (It was an apache proxy-system too), that's why I'm a little perplex with this case. The worst for us. That's a system already in production.

Could you please give me a hint where I can look in OPNsense to fix this?

Thank you ahead,
Regards,
Joel.

I've found there is no ProxyPass Timeout global parameter. Is it possible to implement the parameter?
Is there a command to restart only one of the proxy and not all at once?

Thank you ahead.

Regards,

Joel.

If there's something missing please open a feature request in the plugins repository and we see what we can do.

https://github.com/opnsense/plugins
Hardware:
DEC740