Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I run several apache web servers on CentOS 5.x and they all seem to have the same problem. It is typically fast but at times the browser will just sit there waiting forever and it never fails or goes through. Typically if you open a new tab and try again it goes through. I have keepalive turned off in httpd.conf. The servers that have this issue are behind a Cisco ASA firewall.

Has anyone else seen these problems? Is it worth trying to turn on KeepAlive? It doesn't happen all the time but I have noticed every night at about 7 PM for about 5 minutes the one web server is unavailable.

share|improve this question
There could be a million reasons why this could be happening. Random guesses as to whether Keep Alive might help won't be very useful -- if you have a hypothesis, test it. – womble Aug 21 '11 at 2:42
any clue on log files ? – Luciano Facchinelli Aug 21 '11 at 3:29
Sounds like your keep-alive was disabled before the issue occured? Why? – Shane Madden Aug 21 '11 at 4:31

I have seen this problem before with Cisco ASAs where the fixup was killing the connection because it thought data in the connection was trying to cause an exploit. You can pretty easily prove this by running tcpdump on either side of the ASA (possibly with a SPAN port off your switch). You can also try just turning off fixup/inspect on the ASA temporarily and see if it goes away. Here is more info from cisco on the inspect command on the ASA:

share|improve this answer
I think it is ASA related but i'm not sure. It almost seems like apache still thinks it is connected to the mysql server but when the ASA gets the packet it is saying there is no connection. – memoryisram Aug 24 '11 at 15:49
Did you try to turn off inspect yet? – polynomial Aug 24 '11 at 22:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.