PI52696: WebSphere Application Server proxy

Fixes are available

APAR status

Closed as program error.

Error description

All threads are being blocked after SSL Channel is closing .
All the WebSphere Application Server  proxy threads were held
in a writing block after proxy did an error determination and
issued a close on the connection.

Local fix

```
n/a
```

Problem summary

****************************************************************
* USERS AFFECTED:  IBM WebSphere Application Server Version    *
*                  8.5.5 and 9.0.0.0 Full Profile, and Liberty *
*                  Profile 8.5.5 users of the SSL Channel      *
****************************************************************
* PROBLEM DESCRIPTION: Threads servicing SSL connections       *
*                      might be blocked by the closing         *
*                      handshake write.                        *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
The closing handshake write for each connection driven through
the SSL Channel is currently thread blocking. If the write
does not complete immediately, the channel will continue to
attempt writing indefinitely. This behavior blocks the thread
and a message similar to the following might be reported:
WSVR0605W: Thread "Proxy : 13" (000000f7) has been active
for 746657 milliseconds and may be hung.  There is/are 1
thread(s) in total in the server that may be hung.
at java.lang.Thread.yield(Native Method)
at com.ibm.ws.ssl.channel.impl.SSLUtils.flushCloseDown(
SSLUtils.java:216)
at com.ibm.ws.ssl.channel.impl.SSLUtils.shutDownSSLEngine(
SSLUtils.java:119)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.
cleanupSSLConnectionLink.java:222)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.
close(SSLConnectionLink.java:167)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.
close(HttpInboundLink.java:884)
at com.ibm.ws.proxy.channel.http.HttpProxyConnectionLink.
clearLink(HttpProxyConnectionLink.java:2188)

Problem conclusion

The SSL Channel was modified so that the closing handshake
write is not thread blocking and to provide a timer to control
for how long the channel will attempt to complete this write.
A new custom property was added to the SSL Channel to enable
the timer. The property name is
"timeoutValueInSSLClosingHandshake" and accepts
integer values to configure the amount to wait (in seconds)
before giving up on completing the write. The default value for
this property is -1, implying that the channel will wait
indefinitely for the write to complete.


For inbound connections, the custom property can be set on the
SSL Channel configuration panel found here:


Application Servers > {Server Name} > Web Container Transport
Chains > {Chain Name} > {SSL Channel Name} > Custom Properties

The fix for this APAR is currently targeted for inclusion in
fix pack 8.5.5.10 and WebSphere Application Server version
9.0.0.0 and fix pack 16.0.0.2 for WebSphere Liberty. Please
refer to the Recommended Updates page for delivery
information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PI52696
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2015-11-17
Closed date
2016-06-23
Last modified date
2016-06-23

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800

Applicable component levels

R850 PSY
UP
R900 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
28 April 2022

Tips

PI52696: WebSphere Application Server proxy - Too many open files

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R850 PSY

R900 PSY

Document Information

Share your feedback

Need support?