Resolved: Error if too many cookies-Header too large

dev support
1

I had a large discussion that I started in another thread, but the subject was not related to it, I had gone off on a tangent, therefore I thought I’d post this so that if anybody else has this issue it’ll be easier to locate the solution.

The problem was I had a site that wrote around 70 cookies. It worked fine on ACF 2016, but when I tried to run it on Lucee 6.1.1.118 it would not work, when the cookies were written it would throw an error Object Moved

It appeared that the headers were too large.

The fix for it turned out to be reasonable simple, as below.

Edit this file C:\Windows\BonCodeAJP13.settings, you need to add into the settings:

<PacketSize>65536</PacketSize>

This is the part of the code where you will need to add it

<Settings>
<Server>localhost</Server>
<Port>8009</Port>
<EnableRemoteAdmin>True</EnableRemoteAdmin>
<EnableHeaderDataSupport>True</EnableHeaderDataSupport>
<ForceSecureSession>False</ForceSecureSession>
<AllowEmptyHeaders>False</AllowEmptyHeaders>
<ModCFMLSecret>LongSecretCodeWillBeHere</ModCFMLSecret>
<RequestSecret>LongSecretCodeWillBeHere</RequestSecret>
<PacketSize>65536</PacketSize>
</Settings>

The second file to edit is C:\lucee\tomcat\conf\server.xml , this will need packetSize=“65536”

Look for this code

type or paste code here    <!-- Define an AJP 1.3 Connector on port 8009 -->

    <Connector protocol="AJP/1.3"
	    port="8009"
	    secret="LongSecretCodeWillBeHere"
	    secretRequired="true"
               redirectPort="8443" 
packetSize="65536"
 />

On a side note as it’s also a modification in the server.xml, I previously had a thread where I discussed that my pages were taking about 4 seconds to load, prior to this change so it had nothing to do with the above. I had discussed this in another thread. To resolve this I added address="::1" to the server.xml mentioned above, giving

 <!-- Define an AJP 1.3 Connector on port 8009 -->
    <Connector protocol="AJP/1.3"
	    port="8009"
	   address="::1"
	    secret="LongSecretCodeWillBeHere"
	    secretRequired="true"
            redirectPort="8443"
            packetSize="65536"
 />

Btw: These changes do not seem to have had any obvious impact on my other sites and they all still load very quickly.

Tech stack
Windows Server 2022
IIS 10
Lucee 6.1.1.118
Apache Tomcat/9.0.98
Java 21.0.5

1 Like