Artifactory上传大文件报错502 Bad Gateway、403 Bad props auth token

基础信息 #

• Artifactory版本：EnterpriseX license 7.15.3 rev 71503900
• 权限说明：具备目标仓库管理员权限
• 操作场景：尝试上传大小接近10GB的离线.tgz制品文件

异常现象 #

1. UI上传异常 #

通过Artifactory UI点击目标仓库的Deploy按钮上传时，上传进度显示100%后会直接跳转回登录页，同时“bundle artifact”部署选项、用户自定义“Layout”选项均未展示，弹窗底部的Deploy按钮也处于灰化不可点击状态。

2. API上传异常 #

参考官方文档使用Access Key通过curl上传时，等待12-13小时后返回502 Bad Gateway错误。
已尝试以下操作均未解决问题：

• 添加-x ""参数绕过代理
• 命令前添加no_proxy="10.20.30.40" curl ....前缀绕过代理
• 使用-u user:pass方式鉴权
• 调整Artifactory配置、数据库配置，放开更多连接数并延长超时时间

备注：日志中We are completely uploaded and fine行下方258M对应的数值为0，说明没有文件实际上传成功。

$ curl -H "X-JFrog-Art-Api:akfljkljkALDJALKDALKJDALKDJLASJDLAKDJALKDJALKDJALKDJALKDJALJKDLKAJFLANCMNLLgoEjcfZ-c7v58FmyaAUsJ8c0gFV6VVHp2WpvYbU7IftRyzirHEmsGJ3MRL0eZqCkyZYI_pkrcgXb3H2QcQ6RxDpbY2UYgX5AKQlrLhtb644wlBtK1VelsJ90d-6TPrr59ss-igGDhS-HUpSMAYMBl9cXQtT5hAR8Q" -X PUT "https://artifactory.company.com/artifactory/AlphaPipeline-PRJ-ProjectABCPipeline-Production-Local/Pipeline-release-3.0.0.tgz" -T Pipeline-release-3.0.0.tgz -v
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--: --:--: --:--:     0*   Trying 10.20.30.40...
* TCP_NODELAY set
* Connected to artifactory.company.com (10.20.30.40) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: C:/tools/installed/Git/mingw64/ssl/certs/ca-bundle.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
} [5 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.2 (IN), TLS handshake, Server hello (2):
{ [76 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [4146 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [333 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [70 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
{ [1 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ABCDE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=Denver; L=Centennial; O=Spotair Technologies; CN=artifactory.company.com
*  start date: Feb 24 20:54:47 2021 GMT
*  expire date: Feb 24 20:54:46 2022 GMT
*  subjectAltName: host "artifactory.company.com" matched cert's "artifactory.company.com"
*  issuer: C=US; O=Entrust, Inc.; OU=See www.entrust.net/legal-terms; OU=(c) 2012 Entrust, Inc. - for authorized use only; CN=Entrust Certification Authority - L1K
*  SSL certificate verify ok.
} [5 bytes data]
> PUT /artifactory/AlphaPipeline-PRJ-ProjectABCPipeline-Production-Local/Pipeline-release-3.0.0.tgz HTTP/1.1
> Host: artifactory.company.com
> User-Agent: curl/7.60.0
> Accept: */*
> X-JFrog-Art-Api:akfljkljkALDJALKDALKJDALKDJLASJDLAKDJALKDJALKDJALKDJALKDJALJKDLKAJFLANCMNLLgoEjcfZ-c7v58FmyaAUsJ8c0gFV6VVHp2WpvYbU7IftRyzirHEmsGJ3MRL0eZqCkyZYI_pkrcgXb3H2QcQ6RxDpbY2UYgX5AKQlrLhtb644wlBtK1VelsJ90d-6TPrr59ss-igGDhS-HUpSMAYMBl9cXQtT5hAR8Q
> Content-Length: 11629208547
> Expect: 100-continue
>
{ [5 bytes data]
< HTTP/1.1 100 Continue
} [5 bytes data]
 99 10.8G    0     0   99 10.7G      0   357M  0:00:31  0:00:30  0:00:01  258M* We are completely uploaded and fine
100 10.8G    0     0  100 10.8G      0   239k 13:11:33 13:11:33 --:--:     0{ [5 bytes data]
< HTTP/1.1 502 Bad Gateway
< Date: Wed, 07 Jul 2021 18:55:33 GMT
< Server: Apache/2.4.46 (Unix) OpenSSL/1.1.1k
< Content-Length: 232
< Content-Type: text/html; charset=iso-8859-1
<
{ [232 bytes data]
100 10.8G    0   232  100 10.8G      0   239k 13:11:33 13:11:33 --:--:    54<!DOCTYPE HTML PUBLIC "-//IETF//DPRJ HTML 2.0//EN">
<html><head>
<title>502 Bad Gateway</title>
</head><body>
<h1>Bad Gateway</h1>
<p>The proxy server received an invalid
response from an upstream server.<br />
</p>
</body></html>

* Connection #0 to host artifactory.company.com left intact

3. 不同大小文件返回错误不一致 #

使用相同API Access Key上传几KB大小的小文件时，会立即返回403 Bad props auth token错误；命令无任何修改，上传大于2MB的文件时则返回上述502 Bad Gateway错误。

{ [824 bytes data]
100  2576  100   824  100  1752    675   1437  0:00:01  0:00:01 --:--:  2113{
  "errors" : [ {
    "status" : 403,
    "message" : "Bad props auth token: apiKey=my_long_apiAccessKeyHere."
  } ]
}

内容的提问来源于stack exchange，提问作者AKS