Intermittent PR_END_OF_FILE_ERROR with NodeBalancer and nginx
Once in a while I will get a Firefox error page when trying to access my site. It references code PR_END_OF_FILE_ERROR. If I try again after a few seconds, it works. I don't know if anyone else is seeing this problem with my site, but I don't see it with any other site.
I have 2 NodeBalancers balancing to 2 nginx/puma web servers via TCP. Connections are HTTP2. Searching /var/log/syslog and /var/log/nginx/error.log for my IP address does not yield any results.
In the nginx error log, I do see entries like this:
2021/03/04 02:38:23 [crit] 794#794: *35554601 SSL_do_handshake() failed (SSL: error:14201044:SSL routines:tls_choose_sigalg:internal error) while SSL handshaking, client: 192.168.255.71, server: 0.0.0.0:443
2021/03/04 02:38:45 [crit] 794#794: *35558672 SSL_do_handshake() failed (SSL: error:14201044:SSL routines:tls_choose_sigalg:internal error) while SSL handshaking, client: 192.168.255.103, server: 0.0.0.0:443
These happen maybe 2 or 3 times a minute, so I don't know if this was specifically caused by my requests.
Any ideas on the cause or how to narrow down the problem?
4 Replies
jtoscani
Linode Staff
I was able to locate your account and ran some checks on your Nodebalancers to be sure, and I didn't notice anything out of the ordinary.
In digging around for some information on that error message, it looks to be specific to Firefox:
https://appuals.com/pr-end-of-file-error/
That page sites a few reasons this might come up -
- VPN or Proxy interference
- Incorrect cipher variants
- Corrupted Firefox profile
- 3rd party security suite interference
I'd be curious to know if you run into this problem using a different browser. In any case, if you find it's just Firefox giving you problems, the article above detailed a few steps you can take to try and get it resolved.
I reproduced it with Chrome as well - it gave ERR_CONNECTION_CLOSED. Both Firefox and Chrome were failing at the same time, and again it went away in a few seconds.
rdaniels
Linode Staff
@donny-don I just wanted to let you know that we are looking into this a bit further. Look for a Support ticket from us with additional information once we have more to share. Thanks for your patience!