Description of problem: HAProxy's default request buffer configuration only allows 8192 bytes for headers in incoming requests. This limit is too low. haproxy-config.template does not specify tune.bufsize or tune.maxrewrite. The default value for tune.bufsize is 16384 bytes. The default value for tune.maxrewrite is half of tune.bufsize. Incoming request headers are limited to the difference, tune.bufsize - tune.maxrewrite, thus 8192 bytes, by default. Version-Release number of selected component (if applicable): v3.4.1.9 Steps to reproduce: The problem can be demonstrated with the following command: curl "http://${some_route}/" -H "X-Foo: $(perl -e 'print "x"x8192')" Actual results: HAProxy responds with "400 Bad request". Expected results: HAProxy should return a 200 response.
PR: https://github.com/openshift/ose/pull/715
This has been merged into ocp and is in OCP v3.4.1.18 or newer.
verified this bug on v3.4.1.18 steps: 1. Create app/service/route. eg. route=service-unsecure-default.0421-tsj.qe.rhcloud.com 2. curl "http://${route}/" -H "X-Foo: $(perl -e 'print "x"x8192')" Hello-OpenShift-1 http-8080
Can we do a release note talking about the non-trivial amount of increased memory usage documented in the github issue? https://github.com/openshift/origin/pull/13792#issuecomment-297079755
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1129