{"action":"created","issue":{"url":"https://api.github.com/repos/zaproxy/zaproxy/issues/2318","repository_url":"https://api.github.com/repos/zaproxy/zaproxy","labels_url":"https://api.github.com/repos/zaproxy/zaproxy/issues/2318/labels{/name}","comments_url":"https://api.github.com/repos/zaproxy/zaproxy/issues/2318/comments","events_url":"https://api.github.com/repos/zaproxy/zaproxy/issues/2318/events","html_url":"https://github.com/zaproxy/zaproxy/issues/2318","id":140015936,"number":2318,"title":" ZAP Error [java.net.SocketTimeoutException]: Read timed out when running on AWS EC2 instance","user":{"login":"alienatix","id":83695,"avatar_url":"https://avatars.githubusercontent.com/u/83695?v=3","gravatar_id":"","url":"https://api.github.com/users/alienatix","html_url":"https://github.com/alienatix","followers_url":"https://api.github.com/users/alienatix/followers","following_url":"https://api.github.com/users/alienatix/following{/other_user}","gists_url":"https://api.github.com/users/alienatix/gists{/gist_id}","starred_url":"https://api.github.com/users/alienatix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alienatix/subscriptions","organizations_url":"https://api.github.com/users/alienatix/orgs","repos_url":"https://api.github.com/users/alienatix/repos","events_url":"https://api.github.com/users/alienatix/events{/privacy}","received_events_url":"https://api.github.com/users/alienatix/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/zaproxy/zaproxy/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":{"login":"thc202","id":4639210,"avatar_url":"https://avatars.githubusercontent.com/u/4639210?v=3","gravatar_id":"","url":"https://api.github.com/users/thc202","html_url":"https://github.com/thc202","followers_url":"https://api.github.com/users/thc202/followers","following_url":"https://api.github.com/users/thc202/following{/other_user}","gists_url":"https://api.github.com/users/thc202/gists{/gist_id}","starred_url":"https://api.github.com/users/thc202/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thc202/subscriptions","organizations_url":"https://api.github.com/users/thc202/orgs","repos_url":"https://api.github.com/users/thc202/repos","events_url":"https://api.github.com/users/thc202/events{/privacy}","received_events_url":"https://api.github.com/users/thc202/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/zaproxy/zaproxy/milestones/1","html_url":"https://github.com/zaproxy/zaproxy/milestones/2.5.0","labels_url":"https://api.github.com/repos/zaproxy/zaproxy/milestones/1/labels","id":1487775,"number":1,"title":"2.5.0","description":"Enhancements and bug fixes expected to be included in the next main release.","creator":{"login":"thc202","id":4639210,"avatar_url":"https://avatars.githubusercontent.com/u/4639210?v=3","gravatar_id":"","url":"https://api.github.com/users/thc202","html_url":"https://github.com/thc202","followers_url":"https://api.github.com/users/thc202/followers","following_url":"https://api.github.com/users/thc202/following{/other_user}","gists_url":"https://api.github.com/users/thc202/gists{/gist_id}","starred_url":"https://api.github.com/users/thc202/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thc202/subscriptions","organizations_url":"https://api.github.com/users/thc202/orgs","repos_url":"https://api.github.com/users/thc202/repos","events_url":"https://api.github.com/users/thc202/events{/privacy}","received_events_url":"https://api.github.com/users/thc202/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":75,"state":"open","created_at":"2016-01-06T16:25:24Z","updated_at":"2016-03-30T14:08:14Z","due_on":null,"closed_at":null},"comments":19,"created_at":"2016-03-10T21:37:15Z","updated_at":"2016-03-30T14:59:54Z","closed_at":null,"body":"When I ssh to EC2 instance and run:\r\n\r\n`./zap.sh -daemon -port 8090 -host 0.0.0.0`\r\n\r\nZAP starts without any problem:\r\n\r\n>Found Java version 1.7.0_95\r\nAvailable memory: 16047 MB\r\nSetting jvm heap size: -Xmx512m\r\n0 [main] INFO org.zaproxy.zap.DaemonBootstrap  - OWASP ZAP 2.4.3 started.\r\n325 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE  - dataFileCache open start\r\n332 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE  - dataFileCache open end\r\n657 [main] INFO org.parosproxy.paros.network.SSLConnector  - Reading supported SSL/TLS protocols...\r\n657 [main] INFO org.parosproxy.paros.network.SSLConnector  - Using a SSLEngine...\r\n872 [main] INFO org.parosproxy.paros.network.SSLConnector  - Done reading supported SSL/TLS protocols: [SSLv2Hello, SSLv3, TLSv1, TLSv1.1, TLSv1.2]\r\n876 [main] INFO org.parosproxy.paros.extension.option.OptionsParamCertificate  - Unsafe SSL renegotiation disabled.\r\n886 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory  - Loading extensions\r\n1583 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory  - Extensions loaded\r\n1888 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Change user agent to other browsers. \r\n1888 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Detect insecure or potentially malicious content in HTTP responses.\r\n1888 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Detect and alert 'Set-cookie' attempt in HTTP response for modification.\r\n1888 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Avoid browser cache (strip off IfModifiedSince)\r\n1888 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log cookies sent by browser.\r\n1888 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log unique GET queries into file:filter/get.xls\r\n1889 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log unique POST queries into file:  filter/post.xls\r\n1889 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log request and response into file: filter/message.txt\r\n1889 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP request body using defined pattern.\r\n1889 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP request header using defined pattern.\r\n1889 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP response body using defined pattern.\r\n1889 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP response header using defined pattern.\r\n1889 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Send ZAP session request ID\r\n2016 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows ZAP to check for updates\r\n2019 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionViewOption\r\n2019 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionEdit\r\n2019 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionFilter\r\n2019 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Provides a rest based API for controlling and accessing ZAP\r\n2126 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionState\r\n2126 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHistory\r\n2127 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Show hidden fields and enable disabled fields\r\n2128 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Search messages for strings and regular expressions \r\n2129 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Encode/Decode/Hash...\r\n2129 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows you to intercept and modify requests and responses\r\n2129 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Passive scanner\r\n2170 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Script passive scan rules\r\n2170 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Application Error Disclosure\r\n2170 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Incomplete or No Cache-control and Pragma HTTP Header Set\r\n2170 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Content-Type Header Missing\r\n2170 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cookie No HttpOnly Flag\r\n2171 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cookie Without Secure Flag\r\n2171 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cross-Domain JavaScript Source File Inclusion\r\n2171 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Web Browser XSS Protection Not Enabled\r\n2171 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Secure Pages Include Mixed Content\r\n2171 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Password Autocomplete in Browser\r\n2172 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Private IP Disclosure\r\n2172 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Session ID in URL Rewrite\r\n2172 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: X-Content-Type-Options Header Missing\r\n2172 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: X-Frame-Options Header Not Set\r\n2191 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows you to view and manage alerts\r\n2191 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Active scanner, heavily based on the original Paros active scanner, but with additional tests added\r\n2196 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Spider used for automatically finding URIs on a site\r\n2202 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing A set of common popup menus for miscellaneous tasks\r\n2202 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Forced browsing of files and directories using code from the OWASP DirBuster tool\r\n2203 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionManualRequest\r\n2203 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Compares 2 sessions and generates an HTML file showing the differences\r\n2203 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Invoke external applications passing context related information such as URLs and parameters\r\n2204 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Handles anti cross site request forgery (CSRF) tokens\r\n2206 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionAuthentication\r\n2809 [ZAP-daemon] INFO org.zaproxy.zap.extension.authentication.ExtensionAuthentication  - Loaded authentication method types: [Form-based Authentication, HTTP/NTLM Authentication, Manual Authentication, Script-based Authentication]\r\n2810 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Creates a dynamic SSL certificate to allow SSL communications to be intercepted without warnings being generated by the browser\r\n2811 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Logs errors to the Output tab in development mode only\r\n2811 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionUserManagement\r\n2812 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Summarise and analyse FORM and URL parameters as well as cookies\r\n2812 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Script integration\r\n2820 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Scripting console, supports all JSR 223 scripting languages\r\n2820 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionForcedUser\r\n2821 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Extension handling HTTP sessions\r\n2821 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Zest is a specialized scripting language from Mozilla specifically designed to be used in security tools\r\n2887 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionDiff\r\n2888 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionRequestPostTableView\r\n2888 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Simple browser configuration\r\n2888 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionSessionManagement\r\n2983 [ZAP-daemon] INFO org.zaproxy.zap.extension.sessions.ExtensionSessionManagement  - Loaded session management method types: [Cookie-based Session Management, Http Authentication Session Management]\r\n2983 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelRequestFormTableView\r\n2983 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Capture messages from WebSockets with the ability to set breakpoints.\r\n2986 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Summarise and analyse FORM and URL parameters as well as cookies\r\n2986 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionAuthorization\r\n2987 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing AJAX Spider, uses Crawljax\r\n2987 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Handles adding Global Excluded URLs\r\n2988 [ZAP-daemon] WARN org.zaproxy.zap.extension.globalexcludeurl.ExtensionGlobalExcludeURL  - GlobalExcludeURL.optionsLoaded()\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Adds menu item to refresh the Sites tree\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Adds support for configurable keyboard shortcuts for all of the ZAP menus.\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing OWASP ZAP User Guide\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionReport\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows you to configure which extensions are loaded when ZAP starts \r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelComponentonentAll\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelHexView\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelImageView\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelLargeRequestView\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelLargeResponseView\r\n2988 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelRequestQueryCookieTableView\r\n2989 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelSyntaxHighlightTextView\r\n2989 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Active Scan Rules\r\n2989 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing The ZAP Getting Started Guide\r\n2989 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Tips and Tricks\r\n2989 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Provides the foundation for concrete message types (for example, HTTP, WebSockets) expose fuzzer implementations.\r\n2990 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows to fuzz HTTP messages.\r\n2991 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing The Online menu links\r\n2991 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionSaveRawHttpMessage\r\n2991 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Provides WebDrivers to control several browsers using Selenium and includes HtmlUnit browser.\r\n2991 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Translations of the core language files\r\n2991 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Passive Scan Rules\r\n2991 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Quick Start panel \r\n2992 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows to fuzz WebSocket messages.\r\n2993 [Thread-4] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL  - Creating new root CA certificate\r\n3089 [ZAP-daemon] INFO org.zaproxy.zap.DaemonBootstrap  - ZAP is now listening on 0.0.0.0:8090\r\n3446 [Thread-4] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL  - New root CA certificate created\r\n\r\nI ensure that ZAP listens to port 8090 by running netstat -uta | grep 8090:\r\n\r\n`tcp6       0      0 [::]:8090               [::]:*                  LISTEN`\r\n\r\nThen I use curl from my laptop to access EC2 instance by it's public IP:\r\n\r\n>curl -v EC2-host:8090\r\n* Rebuilt URL to: EC2-host:8090/\r\n*   Trying EC2-host...\r\n* Connected to EC2-host (EC2-host) port 8090 (#0)\r\n> GET / HTTP/1.1\r\n> Host: EC2-host:8090\r\n> User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n> Accept: */*\r\n> Referer: \r\n> \r\n< HTTP/1.1 504 Gateway Timeout\r\n< Content-Length: 1911\r\n< Content-Type: text/plain; charset=UTF-8\r\n* Connection #0 to host 52.37.251.50 left intact\r\n\r\nat the same time netstat shows me a lot of opened connections:\r\n\r\n>tcp        0      0 ip-172-30-0-221:8090    EC2-host.:34088 SYN_RECV   \r\ntcp6       0      0 [::]:8090               [::]:*                  LISTEN     \r\ntcp6       0      0 ip-172-30-0-221:38852   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:55390   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:38020 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:52432   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:55759   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:58787 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:52077 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:49051 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:55484 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:40724 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:47354   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:36019   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:52022   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:51511 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:53242   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:35760   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:39354   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:59507   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:53388   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:36219 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:52108 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:34705 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:49159   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:48851   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:45609 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:45546   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:50533   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:36484   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:43129 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:38790   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:50698 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:33265   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:44329 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:51403 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:40302 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:44767 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:47802   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:8090    EC2-host.:47444 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:36401   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:39548   EC2-host.u:8090 ESTABLISHED\r\ntcp6       0      0 ip-172-30-0-221:56141   EC2-host.u:8090 ESTABLISHED\r\n........\r\n\r\nEventually ZAP throws: \r\n\r\n>217142 [ZAP-ProxyThread-45792] ERROR org.zaproxy.zap.ZAP$UncaughtExceptionLogger  - Exception in thread \"ZAP-ProxyThread-45792\"\r\njava.lang.OutOfMemoryError: GC overhead limit exceeded\r\nat java.net.SocketInputStream.socketRead0(Native Method)\r\nat java.net.SocketInputStream.read(SocketInputStream.java:152)\r\nat java.net.SocketInputStream.read(SocketInputStream.java:122)\r\nat java.io.BufferedInputStream.fill(BufferedInputStream.java:235)\r\nat java.io.BufferedInputStream.read(BufferedInputStream.java:254)\r\nat org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78)\r\nat org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106)\r\nat org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116)\r\nat org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413)\r\nat org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source)\r\nat org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source)\r\nat org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source)\r\nat org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source)\r\nat org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source)\r\nat org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)\r\nat org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source)\r\nat org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source)\r\nat org.parosproxy.paros.network.HttpSender.send(Unknown Source)\r\nat org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source)\r\nat org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source)\r\nat org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source)\r\nat org.parosproxy.paros.core.proxy.ProxyThread.processHttp(Unknown Source)\r\nat org.parosproxy.paros.core.proxy.ProxyThread.run(Unknown Source)\r\nat java.lang.Thread.run(Thread.java:745)\r\n\r\nAt the same time ZAP API is accessible locally:\r\n\r\n>curl -v http://127.0.0.1:8090\r\n* Rebuilt URL to: http://127.0.0.1:8090/\r\n* Hostname was NOT found in DNS cache\r\n*   Trying 127.0.0.1...\r\n* Connected to 127.0.0.1 (127.0.0.1) port 8090 (#0)\r\n> GET / HTTP/1.1\r\n> User-Agent: curl/7.35.0\r\n> Host: 127.0.0.1:8090\r\n> Accept: */*\r\n> \r\n< HTTP/1.1 200 OK\r\n< Pragma: no-cache\r\n< Cache-Control: no-cache\r\n< Access-Control-Allow-Methods: GET,POST,OPTIONS\r\n< Access-Control-Allow-Headers: ZAP-Header\r\n< X-Clacks-Overhead: GNU Terry Pratchett\r\n< Content-Length: 1084\r\n< Content-Type: text/html; charset=UTF-8\r\n< \r\n<head>\r\n<title>ZAP API UI</title>\r\n</head>\r\n<body>\r\n<h1>Welcome to the OWASP Zed Attack Proxy (ZAP)</h1><p>ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.</p><p></p><p>Please be aware that you should only attack applications that you have been specifically been given permission to test.</p><h2>Proxy Configuration</h2><p>To use ZAP effectively it is recommended that you configure your browser to proxy via ZAP.</p><p></p><p>You can do that manually or by configuring your browser to use the generated <a href=\"/OTHER/core/other/proxy.pac\">PAC file</a>.</p></html><h2>Links</h2><li><a href=\"/UI\">Local API</a></li><li><a href=\"https://www.owasp.org/index.php/ZAP\">ZAP Homepage</a></li><li><a href=\"https://github.com/zaproxy/zaproxy/wiki/Introduction\">ZAP Wiki</a></li><li><a href=\"http://groups.google.com/group/zaproxy-users\">ZAP User Group</a></li><li><a href=\"http://groups.google.com/group/zaproxy-develop\">ZAP Developer Group</a></li><li><a href=\"https://github.com/zaproxy/zaproxy/issues\">Report an issue</a></li></body>\r\n* Connection #0 to host 127.0.0.1 left intact\r\n\r\nSo it looks very strange and I have no idea why so many connections are opened.\r\n\r\nMore discussions can be found here: https://groups.google.com/forum/#!topic/zaproxy-develop/sZg37GBkF7w"},"comment":{"url":"https://api.github.com/repos/zaproxy/zaproxy/issues/comments/203476434","html_url":"https://github.com/zaproxy/zaproxy/issues/2318#issuecomment-203476434","issue_url":"https://api.github.com/repos/zaproxy/zaproxy/issues/2318","id":203476434,"user":{"login":"alienatix","id":83695,"avatar_url":"https://avatars.githubusercontent.com/u/83695?v=3","gravatar_id":"","url":"https://api.github.com/users/alienatix","html_url":"https://github.com/alienatix","followers_url":"https://api.github.com/users/alienatix/followers","following_url":"https://api.github.com/users/alienatix/following{/other_user}","gists_url":"https://api.github.com/users/alienatix/gists{/gist_id}","starred_url":"https://api.github.com/users/alienatix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alienatix/subscriptions","organizations_url":"https://api.github.com/users/alienatix/orgs","repos_url":"https://api.github.com/users/alienatix/repos","events_url":"https://api.github.com/users/alienatix/events{/privacy}","received_events_url":"https://api.github.com/users/alienatix/received_events","type":"User","site_admin":false},"created_at":"2016-03-30T14:59:54Z","updated_at":"2016-03-30T14:59:54Z","body":"ok, I've just tried - downloaded weekly build from https://github.com/zaproxy/zaproxy/releases/download/w2016-03-29/ZAP_WEEKLY_D-2016-03-29.zip to AWS instance, unziped it and ran:\r\n\r\n`./zap.sh -daemon -port 8090 -host 0.0.0.0`\r\n\r\nThe problem reproduced while accessing via browser using public IP. Thus it's not related to docker :-[\r\n\r\n "}}