502.3 Error Code 2147954552 Reverse Proxy Cookie problem

Dawid Kotynia 1

Hi,
I'm struggling with a 502.3 Error Code 2147954552 problem. I already analyze the Bad request routing logs. No info there, only Error code mentioned at the beggining. I stuck. I can only say when the cookie for the website is on client side then I have this problem. When the user will remove the cookie then everything is routed properly. I will be apriciate for any help.

Bruce Zhang-MSFT 3,751 Reputation points

2022-02-11T02:27:32.873+00:00

Hi @Dawid Kotynia ,

Are you just using ARR as a reverse proxy, or as a load balancer to route requests to multiple backend servers? If it is a reverse proxy, are there multiple servers? What is their structure like?

In fact failed request tracing is the most useful log, it can record the root cause of the problem. You can also check the event viewer for error messages. Please post both logs if possible.

As far as I know, cookies are stored on the client side, and 502.3 indicates a problem with server-side requests, cookies do not affect ARR. So your problem is most likely that the request with the cookie is not being forwarded to the correct server by ARR. Maybe the cookie generated by server A is sent to the client, and the session corresponding to the server is only stored in server A. But the next request is forwarded to server B. Session authentication failure resulted in a timeout.
Dawid Kotynia 1 Reputation point

2022-02-11T10:46:09+00:00

Hi,

Thank you for response. ARR is a reverse proxy right now. I have only one application server - backend server at this point. I fully understand that 502.3 shall be not related to cookie, but I described what I observe, and this problem could be easily reproduced. The example ARR log here
The IIS respond imidiately so it is not timeout issue. The client request is not farworded to application server at all, is handled by IIS and IIS respond imidiately with 502.3. When cookie is not on a client side, the request is properly forwarded to application server. I found a workaround solution by removing the cookie from client by server doing Set-Cookie with Max-Age=-1. The problem accours when client have old cookie stored, from previous session or not valid anymore. In my opinion it shall be still farworded to aplication server so server can decide what to do and not the IIS which shall only farword the requests. Maybe the problem is here in my understanding, but the problem shows when the Chrome and Edge version 98 has been released. Old versions did not behave like that.
When the client will close the session by closing the browser the session cookie shall be removed by browser anyway, so then no problem. Only when cookie with expired session key is in the browser memory.

The problem still exist I'm afraid it will surely show up, when it will be very critical. I would like to understand what is happening, why IIS do not forward request to backend server.
Bruce Zhang-MSFT 3,751 Reputation points

2022-02-14T02:57:59.837+00:00

Hi @Dawid Kotynia ,

I noticed that IIS set response headers but there are only two headers. Should it only has two headers correctly?

If it is incorrect, can you show me the correct response headers and error information recoreded in event viewer(backend server and ARR)? One thing I want to confirm is that is there any space in headers?

2 answers

Sachin Chadha 5 Reputation points

2024-05-01T13:43:09.0033333+00:00

After spending many days and nights, we found root cause of this issue as spaces mentioned inside text of one of the HTTP Response Header value. Reference to screenshot below is the correct and incorrect value:

Incorrect Value: Header always set X-Content-Type-Options

Correct Value: X-Content-Type-Options

Hence do not provide any space between any value of response header.

HTTP Response Headers can be found in feature view of web application or at IIS Server Name level.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Dawid Kotynia 1 Reputation point

2024-05-01T19:20:28.31+00:00

Thank you very much for trying to help. Unfortunatelly it will take for me some time to check if this works. It's almost two years since topic starts, but I never found an answer so it will be interesting to test what you found.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

502.3 Error Code 2147954552 Reverse Proxy Cookie problem

2 answers

Your answer