David King

Pound, an open-source HTTP load balancer, inspects the HTTP methods of requests before passing them to the backends. While Pound supports WebDAV methods, I'm trying to load-balance two Xythos WFS servers, and Xythos uses two "extended" WebDAV methods called MKTICKET and DELTICKET (in addition to some others provided by a partial implementation of DeltaV), so I had to patch Pound to get them to work. It was relatively straight-forward, I just patched the list of allowed methods for WebDAV and the manpage to reflect the change. Since I added it to the list of WebDAV methods, you'll need xHTTP in pound.cfg to be at least 2 for it to work. I've had people ask for this more than once, so here is the patch: *** pound.8.orig 2007-07-11 12:13:00.000000000 -0700 --- pound.8 2007-09-18 13:53:21.000000000 -0700 *************** *** 337,343 **** .I 2 additionally allow standard WebDAV verbs (LOCK, UNLOCK, PROPFIND, PROPPATCH, SEARCH, MKCOL, MOVE, COPY, OPTIONS, TRACE, MKACTIVITY, ! CHECKOUT, MERGE, REPORT). .IP .I 3 additionally allow MS extensions WebDAV verbs (SUBSCRIBE, BPROPPATCH, --- 337,343 ---- .I 2 additionally allow standard WebDAV verbs (LOCK, UNLOCK, PROPFIND, PROPPATCH, SEARCH, MKCOL, MOVE, COPY, OPTIONS, TRACE, MKACTIVITY, ! CHECKOUT, MERGE, REPORT, MKTICKET, DELTICKET, VERSION-CONTROL, CHECKIN, UNCHECKOUT, ACL). .IP .I 3 additionally allow MS extensions WebDAV verbs (SUBSCRIBE, BPROPPATCH, *** config.c.orig 2007-07-11 12:13:06.000000000 -0700 --- config.c 2007-09-18 13:52:43.000000000 -0700 *************** *** 86,94 **** static char *xhttp[] = { "^(GET|POST|HEAD) ([^ ]+) HTTP/1.[01]$", "^(GET|POST|HEAD|PUT|DELETE) ([^ ]+) HTTP/1.[01]$", ! "^(GET|POST|HEAD|PUT|DELETE|LOCK|UNLOCK|PROPFIND|PROPPATCH|SEARCH|MKCOL|MOVE|COPY|OPTIONS|TRACE|MKACTIVITY|CHECKOUT|MERGE|REPORT) ([^ ]+) HTTP/1.[01]$", ! "^(GET|POST|HEAD|PUT|DELETE|LOCK|UNLOCK|PROPFIND|PROPPATCH|SEARCH|MKCOL|MOVE|COPY|OPTIONS|TRACE|MKACTIVITY|CHECKOUT|MERGE|REPORT|SUBSCRIBE|BPROPPATCH|POLL|BMOVE|BCOPY|BDELETE|CONNECT) ([^ ]+) HTTP/1.[01]$", ! "^(GET|POST|HEAD|PUT|DELETE|LOCK|UNLOCK|PROPFIND|PROPPATCH|SEARCH|MKCOL|MOVE|COPY|OPTIONS|TRACE|MKACTIVITY|CHECKOUT|MERGE|REPORT|SUBSCRIBE|BPROPPATCH|POLL|BMOVE|BCOPY|BDELETE|CONNECT|RPC_IN_DATA|RPC_OUT_DATA) ([^ ]+) HTTP/1.[01]$", }; static int log_level = 1; --- 86,94 ---- static char *xhttp[] = { "^(GET|POST|HEAD) ([^ ]+) HTTP/1.[01]$", "^(GET|POST|HEAD|PUT|DELETE) ([^ ]+) HTTP/1.[01]$", ! "^(GET|POST|HEAD|PUT|DELETE|LOCK|UNLOCK|PROPFIND|PROPPATCH|SEARCH|MKCOL|MOVE|COPY|OPTIONS|TRACE|MKACTIVITY|CHECKOUT|MERGE|REPORT|MKTICKET|DELTICKET|VERSION-CONTROL|CHECKIN|UNCHECKOUT|ACL) ([^ ]+) HTTP/1.[01]$", ! "^(GET|POST|HEAD|PUT|DELETE|LOCK|UNLOCK|PROPFIND|PROPPATCH|SEARCH|MKCOL|MOVE|COPY|OPTIONS|TRACE|MKACTIVITY|CHECKOUT|MERGE|REPORT|MKTICKET|DELTICKET|VERSION-CONTROL|CHECKIN|UNCHECKOUT|ACL|SUBSCRIBE|BPROPPATCH|POLL|BMOVE|BCOPY|BDELETE|CONNECT) ([^ ]+) HTTP/1.[01]$", ! "^(GET|POST|HEAD|PUT|DELETE|LOCK|UNLOCK|PROPFIND|PROPPATCH|SEARCH|MKCOL|MOVE|COPY|OPTIONS|TRACE|MKACTIVITY|CHECKOUT|MERGE|REPORT|MKTICKET|DELTICKET|VERSION-CONTROL|CHECKIN|UNCHECKOUT|ACL|SUBSCRIBE|BPROPPATCH|POLL|BMOVE|BCOPY|BDELETE|CONNECT|RPC_IN_DATA|RPC_OUT_DATA) ([^ ]+) HTTP/1.[01]$", }; static int log_level = 1;
And in case anyone else is arguing with Godaddy's stupid intermediate certificates with Pound, the PEM file pointed to by Cert within ListenHTTPS should have the key (without a password), the certificate, then the intermediate certificate (sf_issuing.crt). Damned Godaddy.