In my architecture, there is Nginx (1.7.4) server as a proxy, delegating requests to Tomcat server.

I noticed that for some requests, for some reason, http version arriving to Tomcat contains weird version: "HTTP/1.1^M". As a result, I getting 505 error - "version not supported".

Apparently, it looks like Nginx is the one who doing that - but I not sure.


From my investigations, it looks like specific kind of GET request causing to the problem (removed sensitive info):

/xxx/xxx/offeringPage/000000?TENANTID=000000000&LWMDSSO_NRM=8eSKtxi106sVrMYuzyROf6JARwtky_5NZdAZDBmBJch6zOdh4dYeYK6uNDT6k-OInD-wWs34LoXWZoxqTM9CjFzSscB-VRnn9vBirHhywLYpna_SFQ66X07PZ4Dm0GHj1AnNRGMQ0tmu2eM4DNgEJAqmLiJLcLX7Dn5gcEeFVPmKEKfi_yhtton8LlP_Qrxv9xKw_SKlmeBnRMexWakWGYHwbIxa2hSRG_3YkODfjrWQlJEEPQHVtICl0NmDYpwldICN_arnjcTiusIZ83nR62mcthLP8XEU8eA8_opfd3_SebfwRzWjxIKxD1VSYqDO8ZL6kMVhj-4cjrtCnRhCBKgKJu2jLrx9vUruOGDczi_dItD6L7epW3GJ3br1Xn8PLCJLbRCJ8qKdipNmxptjwkBNZJYMD8YwMzy1PUNozFtOJAnLdTwSWbFl0pijwUeji-Yq8W2k6vxqCJvF0aohWA9e5FP98NxcihjdWCL_64F_fdvMq8z9uGWw3XPcoiXX4bslwvexPTOYMu9SsPu_WiHnz8HRXwo7EVluK-MvI4mgdIwU2_-ZayymYdIkMcUWrK7sDx7cwLW529Ol7d1xOAhHl_aTjC5cszH0-ikfEP2_rGqpQlzHoJ3F2MArDs-JRFaWO3gas7Ne4bPGoFpoteVkNIU-EtdXz5fXib29DUgV0IY7re1Krn_AiA2QmaxENq5SCV8EjK5Ac67Y1QKdns3Xb6vz3bpqGllq7JGiasaZUX3Mv791xWyC0fPT7NwI43huAyLx-B4OfqtOi8o5p5OD5toGt9ZToRYiVsxz3YD5RQauVAGOXPBklq31x3LFrHpDbtL8p7YLedSptmMSFKoIeFAP7fussz7xzgKlpApsW3ZJ4etiKiEld6Wl6SMu-bPWaXjnJRFrr7GZ6WuoZuG0mzLopXGsIMtTGpTblloUQeCIwSC9LW81uOVj1akOIPH6aIq0MQTiGBbucQhNB0i84xx2o0PXGO6QfdTLsGceCTVxGqD8qUGcSfd8ySzeU0Nfc3xf3KEm-ztWn-FvGqXI8mIiGBuPqKOMWE__wc8NPHI1jeXMkG8mNl-WwzV0IuMfDNeDUcElmdT0yTH__9_r07__g43pNwDH7_m3XlIOLyDijHkNj5qwK-aNN9aNU6ZgK7924TuDLdg3yLrH_vatREeyYOZyxj7v58TJgvYoNYB-enma7jB2ofSleb0vnoc_zTI9AeRM9TQ9ssGNiZaa13FHo_gpLMDnyemagmRvcoX3asOEmcQ2leFQuFnKgIqD6DEjCHE1xKOoWGXrzdv8-y8Al1bTpU9CYc_l8d4.&idpId=http://xxxx.xxxx.xxx.xx/xxxx/services/trust



I reviewed my access logs, and only logs with error 505 contain "new line" right after version. So, probably somehow it related. Another thing: the problem is not consistent. With exactly same request, it reproducing about 3/5 of time.


Any ideas? I totally lost with this...

P.S. I think it may be somehow relate to length of the URL. In case I adding something - it looks like problem disappears.

Thanks!

1.7.4 is rather old, try the latest stable version and see if this solves the issue.

---
nginx for Windows http://nginx-win.ecsds.eu/

Hi,

I realize that this version is old. The problem is that I working in huge enterprise organization, and upgrading Nginx is the process that might take several months...

At least, I need to know that the problem indeed in Nginx and in that specific version.


Is this known issue? Something fixed recently?

Several months? do you have a sign outside your building saying "welcome hackers, do come in the backdoors are open" ?
Never heard of DTAP ? (development, test, acceptance, production), get yourself free virtualization software, virtualise your production system and start testing, get your RFC ready for your CAB before this problem becomes the least of your worries.

---
nginx for Windows http://nginx-win.ecsds.eu/