tomcat maxHttpHeaderSize 設定不夠大導致 SSO 登入失敗

標籤：app   失敗   reads   rac   soc   div   toc   ade   socket   

2016-11-06 xxxx org.apache.coyote.http11.Http11Processor - Error parsing HTTP request header Note: further occurrences of HTTP header parsing errors will be logged at DEBUG level.java.lang.IllegalArgumentException: Request header is too large    at org.apache.coyote.http11.InternalInputBuffer.fill(InternalInputBuffer.java:512)    at org.apache.coyote.http11.InternalInputBuffer.fill(InternalInputBuffer.java:501)    at org.apache.coyote.http11.InternalInputBuffer.parseHeader(InternalInputBuffer.java:393)    at org.apache.coyote.http11.InternalInputBuffer.parseHeaders(InternalInputBuffer.java:268)    at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1011)    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:623)    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)    at java.lang.Thread.run(Thread.java:745)

 

Tomcat 預設的maxHttpHeaderSize設定好像是4K，我們增加到了8K，即8192。在某次升級時，客戶報SSO功能不能使用。後來才發現我們把客戶定義的maxHttpHeaderSize值給覆蓋了，客戶定義的是32K。由於客戶複雜的網路，可能會在URL中自動增加了一些其它的參數，導致URL中傳遞的東西過多，預設的8K還不夠用，這裡後台就會有上面的報錯。把maxHttpHeaderSize值給加大後，這個報錯就消失了，問題也得到解決。

tomcat maxHttpHeaderSize 設定不夠大導致 SSO 登入失敗