I raised the chunks limit blindly from 1000 to 1500 with no success. Where I can see the actually number of chunks without capturing the traffic? After disabling the funktion "Unparsable request content" Upload went through without a problem. But from the notice I would stick this on?
Note that disabling this check can result in losing many enforcement features in the ASM.
Sametime I get the following syslogs:
ASM out of memory error: event code X242 Exceeded maximum memory assigned for XML/JSON processing
Cannot allocate 27415074 more bytes for XML parser. current memory size 837505174 (in bytes)
As you can see I raised the available memory for XML request from 450MB (default) to nearly the double.
yep checked that already. It feels that the additinal required memory is raising over time. So I changed the value already to nearly the double and everytime the message appears it wants about 20-30mb more and raising.
Hi, yes seems a bit strange to me. No other logs than posted above. Since this error did not occure the last days, logs were pruned. Since we are still on the 14.x branche with this device, I consider switchting to 15.x ... maybe this gets solved magicaly
It happens 2-3times a day and we are already at 1GB but keep getting
BD_XML|ERR |Sep 20 12:11:39.672|26884|xml_validation.cpp:0244|Cannot allocate 22474662 more bytes for XML parser. current memory size 1002457583 (in bytes)
Nope. Same issue every few days and still on 14.x but I cant imagine that this is a bug and will be fixed with 15.x
I think the messages doesnt come from the application I suspect rather a other one. How can I track this? Some fancy iRule to log this big XML requests? I can imagine that this is coming from a total different application where Im not informed about xml/soap requests.
Thanks, hopefully he can help me out... maybe i need to deploy something like this on all vservers to find that black sheep
when HTTP_REQUEST {
#Check if the request is a POST, with a content type of text and size over 10MB
if {[HTTP::has_responded]} {
return
}
elseif {[HTTP::method] eq "POST"}{
if {[HTTP::header value "Content-Type"] contains "xml" or [HTTP::header value "Content-Type"] contains "json"}{
if {[HTTP::header value "Content-Length"] >= 10000000}{
log local0. "This is the HTTP Path: [HTTP::path]"
log local0. "Client [IP::client_addr] This is the HTTP Host [HTTP::host]"
log local0. "Client [IP::client_addr] accessed [virtual]"
log local0. "Query string of URI: [HTTP::uri] is [URI::query [HTTP::uri]]"
log local0. "HTTP Content Length Header = [HTTP::header value "content-length"]"
log local0. "HTTP Content Type Header = [HTTP::header value "content-type"]"
}
}
}
}
Okay I maybe give up. Should I raise a support ticket? I put the iRule Logging on every vserver I think of such uploads but there were only one match in the near of a event log but that cant be a problem:
Sep 30 14:59:22 .dmz.local info tmm1[21243]: Rule /Common/URL_Logging <HTTP_REQUEST>: HTTP Content Length Header = 11019932
Sep 30 14:59:22 .dmz.local info tmm1[21243]: Rule /Common/URL_Logging <HTTP_REQUEST>: HTTP Content Type Header = application/soap+xml; charset=utf-8
BD_XML|ERR |Sep 30 15:03:51.849|26888|xml_validation.cpp:0244|Cannot allocate 19503077 more bytes for XML parser. current memory size 1008875463 (in bytes)
And 4 min later;
Broadcast message from systemd-journald@.dmz.local (Fri 2022-09-30 15:03:52 CEST):
perl[26640]: 01310003:0: ASM out of memory error: event code X242 Exceeded maximum memory assigned for XML/JSON processing
2022 Sep 30 15:03:52 .dmz.local perl[26640]: 01310003:0: ASM out of memory error: event code X242 Exceeded maximum memory assigned for XML/JSON processing
