Tuesday, June 7, 2016

Request Entity Too Large

One issue we faced while hosting our ASP.Net web application, calling WebApi hosted on IIS web server - Request Entity Too Large


After debugging and tracking the traffic over the network, I was able to find the issue is caused due to SSL Certificate installed on IIS and the size of request packets allowed during the call.

Here is one article Microsoft published online for more details:



Client cannot renegotiate request and returns an HTTP 413 error

If client certificates are enabled on a Web server, Web site, or on individual directories or files on the site, clients might see an HTTP 413 error when uploading large files.
If a client sends a long HTTP request, for example, a POST request, to a Web server running IIS 6.0, the IIS worker process might receive enough data to parse request headers, but not receive the entire request entity body. When the IIS worker process detects that client certificates are required to return data to the client, IIS attempts to renegotiate the client connection. However, the client cannot renegotiate the connection because it is waiting to send the remaining request data to IIS.
If client renegotiation is requested, the request entity body must be preloaded using SSL preload. SSL preload will use the value of the UploadReadAheadSize metabase property, which is used for ISAPI extensions. However, if UploadReadAheadSize is smaller than the content length, an HTTP 413 error is returned, and the connection is closed to prevent deadlock. (Deadlock occurs because a client is waiting to complete sending a request entity, while the server is waiting for renegotiation to complete, but renegotiation requires that the client to be able to send data, which it cannot do).
The solution is to ensure that client is not blocked from sending the entire entity body. To do so, change the value of UploadReadAheadSize to a value larger than the content length.
The following example shows how to set the value for UploadReadAheadSize to 200KB on the Web server.

No comments:

Post a Comment