id summary reporter owner description type status priority milestone component version resolution keywords cc uname nginx_version 1499 Frequent cancelling the HTTP/2 requests will cause server stop sending more data on the same connection jifang@… "Description: When downloading a lot of medium-sized files from Nginx HTTP/2 server, if requests are frequently canceled (RST_STREAM), eventually the connection will timeout and not be able to send/receive any data from the server. On the server side configure the server to support HTTP/2 with a self-signed certificate. And host about 100 files with size about 500k each. On the client side, I built an Android test, using a single thread to download the file from file no.1 to file no.100 consequently. During each download, the request is canceled and then proceed to download the next file. Eventually, the request will timeout. Depending on the setup the timeout may happen on different download. But once the testing environment is set, it always failed on the same file. The server IP is 10.0.0.186 The client IP is 10.0.0.135 Server timeout is the default 60 seconds Client timeout is set to 120 seconds A filtered (sid:75) server log shows that the header frame has been sent on 14:39:32 and then timed out after 60 seconds. Note, it is not always the header frame though. Sometimes it is the data frame not being sent out. {{{ 2018/03/05 14:39:32 [debug] 92282#0: *4 http2 frame type:1 f:5 l:14 sid:75 2018/03/05 14:39:32 [debug] 92282#0: *4 http2 HEADERS frame sid:75 depends on 0 excl:0 weight:16 2018/03/05 14:39:32 [debug] 92282#0: *4 http2 frame out: 00007FD4B082ABA0 sid:75 bl:1 len:122 2018/03/05 14:39:32 [debug] 92282#0: *4 http2 frame sent: 00007FD4B082ABA0 sid:75 bl:1 len:122 2018/03/05 14:40:32 [debug] 92282#0: *4 http2 send RST_STREAM frame sid:75, status:1 }}} In the meantime, the client log shows the header is not received until 14:40:32 {{{ 03-05 14:39:32.229 5979-5995/? V/VB_Network: Sending request https://10.0.0.186/files/37 on Connection{10.0.0.186:443, proxy=DIRECT hostAddress=/10.0.0.186:443 cipherSuite=TLS_RSA_WITH_AES_128_CBC_SHA protocol=h2} User-Agent: Host: 10.0.0.186 Connection: Keep-Alive Accept-Encoding: gzip 03-05 14:40:32.397 5979-5995/? V/VB_Network: Received response for https://10.0.0.186/files/37 (h2) in 60167.4ms server: nginx/1.13.10 date: Mon, 05 Mar 2018 22:39:32 GMT content-type: application/octet-stream content-length: 562176 last-modified: Sun, 04 Mar 2018 00:23:13 GMT etag: ""5a9b3c71-89400"" accept-ranges: bytes 03-05 14:40:32.400 5979-5995/? E/VB_Test: stream was reset: PROTOCOL_ERROR https://10.0.0.186/files/37 }}} Wireshark capture confirms that the header is sent out on 14:40:32 instead of 14:39:32 [[Image(https://github.com/jifang/nginx_bug_repo1/blob/master/files/wireshark.jpg?raw=true)]] [https://github.com/jifang/nginx_bug_repo1/blob/master/files/0305.pcapng?raw=true Full capture file] [https://gist.github.com/jifang/5a8a0e6dc4bf19273e815c56b7b9385f Server full log] [https://gist.github.com/jifang/7e3109bd31f888349e1a98ebd84d2e38 Client full log] The test project is under `git@github.com:jifang/nginx_bug_repo1.git`" defect closed major nginx-core 1.13.x invalid HTTP/2 RST_STREAM cancel Darwin Jis-MBP 16.7.0 Darwin Kernel Version 16.7.0: Thu Jan 11 22:59:40 PST 2018; root:xnu-3789.73.8~1/RELEASE_X86_64 x86_64 "nginx version: nginx/1.13.10 built by clang 9.0.0 (clang-900.0.39.2) built with OpenSSL 1.0.2n 7 Dec 2017 TLS SNI support enabled configure arguments: --with-debug --prefix=/usr/local/Cellar/nginx/1.13.9 --sbin-path=/usr/local/Cellar/nginx/1.13.9/bin/nginx --with-cc-opt='-I/usr/local/opt/pcre/include -I/usr/local/opt/openssl/include' --with-ld-opt='-L/usr/local/opt/pcre/lib -L/usr/local/opt/openssl/lib' --conf-path=/usr/local/etc/nginx/nginx.conf --pid-path=/usr/local/var/run/nginx.pid --lock-path=/usr/local/var/run/nginx.lock --http-client-body-temp-path=/usr/local/var/run/nginx/client_body_temp --http-proxy-temp-path=/usr/local/var/run/nginx/proxy_temp --http-fastcgi-temp-path=/usr/local/var/run/nginx/fastcgi_temp --http-uwsgi-temp-path=/usr/local/var/run/nginx/uwsgi_temp --http-scgi-temp-path=/usr/local/var/run/nginx/scgi_temp --http-log-path=/usr/local/var/log/nginx/access.log --error-log-path=/usr/local/var/log/nginx/error.log --with-debug --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_degradation_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-ipv6 --with-mail --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module "