CSM : Rejected L7 Connections

[yves.haemmerli]

In the command "show module csm 1 stats", what is the exact meaning of the "Reached max parse len: 15708" under "L7 Rejected Connections" ?

L7 Rejected Connections:

Total: 15780, Parser: 0,

Reached max parse len: 15706, Cookie out of mem: 0,

Cfg version mismatch: 5, Bad SSL2 format: 0

L7 Rejected Connections:

Total: 15782, Parser: 0,

Reached max parse len: 15708, Cookie out of mem: 0,

Cfg version mismatch: 5, Bad SSL2 format: 0

Thank you

Yves Haemmerli

[syediahm · Accepted solution]

The "Reached max parse len" counters means that the CSM received an HTTP request header that was longer than 2000 bytes, which is what the CSM will inspect by default. To increase this use the "parse-length" command under the vserver to get you to 4000 bytes.

If you need more than 4000 bytes use the variable

MAX_PARSE_LEN_MULTIPLIER.

Hope it helps

Syed Iftekhar Ahmed