Bug 1894156

Summary: TCP healthchecks failing falsely / not actually checking
Product: Red Hat Enterprise Linux 8 Reporter: Luboš Uhliarik <luhliari>
Component: httpdAssignee: Luboš Uhliarik <luhliari>
Status: CLOSED NOTABUG QA Contact: RHEL Stacks Subsystem QE <rhel-stacks-subsystem-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.4CC: bnater, hokuda, jorton, luhliari
Target Milestone: rc   
Target Release: 8.4   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1607737 Environment:
Last Closed: 2020-11-03 23:29:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1607737    
Bug Blocks:    

Comment 2 Luboš Uhliarik 2020-11-03 23:29:16 UTC
In the end I found out, this issue has been fixed upstream in httpd 2.4.35. Packets are not send to the backend server because of SELinux settings in RHEL-8:

[Tue Nov 03 12:02:28.623717 2020] [proxy:error] [pid 30419:tid 140260253030144] (13)Permission denied: AH00957: HCTCP: attempt to connect to 10.4.204.55:80 (redhat.com) failed
[Tue Nov 03 12:02:28.623737 2020] [proxy:debug] [pid 30419:tid 140260253030144] proxy_util.c(2327): AH00943: HCTCP: has released connection for (redhat.com)
[Tue Nov 03 12:02:28.623746 2020] [proxy_hcheck:debug] [pid 30419:tid 140260253030144] mod_proxy_hcheck.c(581): AH03251: Health check TCP Status (-1) for 5638751a0d90.

I will adjust the test -> closing as NOTABUG.