Using the Apache Server Status to Troubleshoot Client Connections

The Apache web server makes performance metrics available through a native server status page. Information includes, but is not limited to:

  • Client throughput and latency

  • Resource utilization

  • Activity metrics

While you can access these metrics at anytime from the Imprivata Appliance Console, Imprivata Support will typically request that you enable this functionality to determine if long–lived client connections are adversely effecting your enterprise.

By default, the ability to access the Apache server status page is disabled, as enabling it adds server load.

To enable access to the Apache server status page:

  1. In the Imprivata Appliance Console, go to the System page > Operations tab.

  2. On the Activate Apache Status Page row, click Configure.

  3. On the Apache Status Page dialog, select Show Apache Status Page.

    • Leave Show Extended status selected. This setting is required to view the client connection metrics.

    • If you want to view basic Apache performance metrics only, deselect Show Extended status.

  4. By default, anyone can access the status page.

    To limit access to one or more clients, enter the respective IP addresses or ranges.

  5. Click Save and restart the Imprivata server.

    The Imprivata server is restarted. A message appears when the operation is complete.

To identify long–lived client connections:

  1. From a client that has access to the page, open a web browser.

  2. Enter the following URL:

    https://<ApplianceIPAddress>/server-status?refresh=5

    The refresh interval is measured in seconds and is used to display updated statistics.

The following screen capture illustrates a sample status page and highlights the information that is relevant to long–lived client connections:

  • The M column displays an "R", and the Request column displays "reading..."

    These values indicate that Apache is stuck in a reading state.

  • The SS column specifies the time (in seconds) since the beginning of most recent request.

    As the page refreshes, this value increases until the request timeouts, indicating that the connection has failed.

    While not illustrated, the row is removed at the next refresh interval.

Click to enlarge

You should disable access to the Apache server status page when you are finished troubleshooting, as leaving it enabled adds server load.

To disable access to the Apache server status page:

  1. In the Imprivata Appliance Console, go to the System page > Operations tab.

  2. On the Activate Apache Status Page row, click Configure.

  3. On the Apache Status Page dialog, deselect Show Apache Status Page.

  4. Click Save and restart the Imprivata server.

    The Imprivata server is restarted. A message appears when the operation is complete.