Browser or APPS client may receive 503 TCPIP error from proxy but works fine without proxy.
search cancel

Browser or APPS client may receive 503 TCPIP error from proxy but works fine without proxy.

book

Article ID: 165434

calendar_today

Updated On:

Products

Advanced Secure Gateway Software - ASG ProxySG Software - SGOS

Issue/Introduction

These types of connection issues might be common when enterprises employ custom applications. Though the connection issues are related to the server, administrators might mistakenly conclude that the ProxySG is the source of the problem because of the issues' exception page from the proxy. When the option is enabled, the ProxySG essentially closes connections to clients upon a server connection error or timeout. If users or eval' customers see an exception page instead of the default browser error, they are more likely to think the proxy causes the connection failure even if the web server was at fault.

 

Resolution

In SGOS 5.5.1.1 or later this option can only be enabled/disabled through the Command Line Interface (CLI):

To enable:  SGOS#(config) http exception-on-network-error
To disable: SGOS#(config) http no exception-on-network-error
 
To prevent this problem, set to disable:

SGOS#(config) http no exception-on-network-error

Verify with:
SGOS#(config)show http

see result as:
exception-on-network-error: disabled


In this configuration, the proxy will pass the same network breakage from server to client, either a TCP FIN or RESET et c. with the client to handling it as though no proxy were present. The end result is the client (either browser or APPS) will continue to work.

Volume 2: Proxies and Proxy Services
Section C: Managing the HTTP Proxy Performance