Note that there are some explanatory texts on larger screens.

plurals
  1. POGetting 413 errors on IIS with concurrent sessions using the same HTTPS client certificate
    primarykey
    data
    text
    <p>I have the following problem.</p> <p>I am hosting a WCF application on IIS 8 which accepts <strong>only</strong> HTTPS requests with client certificates. This service accepts POST messages which may vary in size (from a few bytes up to 1 GB) and are received parallel most of the time.</p> <p>The clients are getting a 413 Request entity too large response in the following case:</p> <ul> <li>When multiple connections are opened with the <strong>same</strong> client certificate and many small files are uploaded. In this case one request succeeds and all others fail with 413 error.</li> </ul> <p>The problem could be solved by setting the <code>uploadReadAheadSize</code> value to a larger value than the sum of all the parallel call sizes in the <code>system.webServer/serverRuntime</code> section of the configuration, but this causes the server to allocate the whole amount of memory for the read ahead buffer for each call which causes the server to run out of memory in case of many concurrent calls.</p> <p>My configuration <strong>works</strong> if the calls are made with <strong>different</strong> client certificates or in case of uploading one big file.</p> <p>I have read that with IIS 6 there was an option to set <code>SSLAlwaysNegoClientCert</code> in the configuration to fix a similar bug. I have tried <a href="https://stackoverflow.com/questions/2518314/make-iis-require-ssl-client-certificate-during-initial-handshake">workarounds</a> to set this value, but did not succeed using IIS 8.0. I have also tried turning off SSL Client cache to disable SSL session resumption, but that did not solve my problem as well.</p> <p>What may cause the 413 errors? Is there any way to enable multiple parallel uploads with a client certificate to the same server without using the whole memory of the server.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload