[squid-users] Proxy Server closes the connection to http server before transferring all application data to http client

[Amos Jeffries]

On 15/12/20 4:21 pm, Zhang, Lily (USD) wrote:
> Hi
> 
> I installed 4.13 squid proxy server. See attachment, http server 
> (10.250.16.46) sends FIN, ACK to tells that response is finished.  Proxy 
> server (10.244.102.133) sends FIN, ACK back to http server 
> (10.250.16.46) before "Application Data" is transferred to http client 
> (10.245.166.20).
> 
> Would you please help me on questions below:
> 
>  1. Is it normal that proxy server sends FIN, ACK to http server before
>     http client finishes receiving  all the “Application Data” ?

That depends on the transaction which is being performed.

If it is a normal HTTP request-response transaction then yes. Once Squid 
has the response the server connection is done with - it may be closed 
or re-used for other transactions.

If it is a tunnel containing non-HTTP traffic then no. Squid should only 
close the server connection when the client closes its end of the tunnel.

Also, note that FIN+ACK in a single packet is a *response* to a FIN 
having come from the server itself. Not initiated by the proxy.



>  2. Does proxy server have option to stop item 1?
> 

In general: No. This is something that is supposed to happen (or not) 
according to the relevant protocol requirements.

In specific, there may be some options that can be configured to change 
how the protocol behaves. Preventing it needing a close. You will have 
to find out what the cause actually is to determine where to look for 
solutions.


Amos