UltraMonkey Http/Https Question
"Bo Stewart" <[email protected]> Tue, 10 Feb 2009 10:56:18 -0600
| Newsgroups | gmane.linux.highavailability.ultramonkey |
|---|---|
| Message-ID | <[email protected]> |
This is a multipart message in MIME format.
--===============0796801364==
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0048_01C98B6E.33DC0350"
Content-Language: en-us
This is a multipart message in MIME format.
------=_NextPart_000_0048_01C98B6E.33DC0350
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
I've configured a 2 node HA + LB cluster as described in the streamline high
availability and load balancing example. Everything appeas to work
correctly from the HA and load balancing standpoint. I can stop heartbeat
and the other server will pickup as a master and I can stop the http service
on either of my web servers and ipvsadm reports the weight for that server
as 0 (no traffic being transmitted?).
My setup is this:
Virtual IP: 192.168.20.100
Web1: 192.168.20.20
Web2: 192.168.20.21
I can browse to http://192.168.20.100 and http traffic is working correctly.
I get the page I expect. The problem is when browsing to
https://192.168.20.100 the browser cannot connect. In debugging I've done
http://192.168.20.100:443 and this request works and serves the same page as
http://192.168.20.100. Upon further investigation using wget to download a
file wget http://192.168.20.100 works correctly wget https://192.168.20.100
gives me an openssl error which I assume is because 192.168.20.100:443 is
serving standard http instead of https.
My ldirectord.cf is below:
# Global Directives
checktimeout=10
checkinterval=2
#fallback=127.0.0.1:80
autoreload=no
logfile="/var/log/ldirectord.log"
logfile="local0"
quiescent=yes
# Virtual Server for HTTP
virtual=192.168.20.100:80
fallback=127.0.0.1:80
real=192.168.20.20:80 gate
real=192.168.20.21:80 gate
service=http
request="ha.html"
receive="Test Page"
scheduler=rr
#persistent=600
protocol=tcp
checktype=negotiate
# Virtual Service for HTTPS
virtual=192.168.20.100:443
fallback=127.0.0.1:443
real=192.168.20.20:443 gate
real=192.168.20.21:443 gate
service=https
request="ha.html"
receive="Test Page"
scheduler=rr
#persistent=600
protocol=tcp
checktype=connect
Also important to not the SSL certs on the webservers(20, 21) are not valid
and have to be ignored when issuing a wget https://192.168.20.100/ha.html.
Will invalid certs cause a problem with Ultramonkey?
So my question is why is port 443 on 192.168.20.100 serving unsecured
traffic?
Please let me know any pointers or questions you may have? I'm at a loss as
to where to turn next.
Thank you in advance,
Bo Stewart
------=_NextPart_000_0048_01C98B6E.33DC0350
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" =
xmlns:p=3D"urn:schemas-microsoft-com:office:powerpoint" =
xmlns:a=3D"urn:schemas-microsoft-com:office:access" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" =
xmlns:s=3D"uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" =
xmlns:rs=3D"urn:schemas-microsoft-com:rowset" xmlns:z=3D"#RowsetSchema" =
xmlns:b=3D"urn:schemas-microsoft-com:office:publisher" =
xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadsheet" =
xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" =
xmlns:odc=3D"urn:schemas-microsoft-com:office:odc" =
xmlns:oa=3D"urn:schemas-microsoft-com:office:activation" =
xmlns:html=3D"http://www.w3.org/TR/REC-html40" =
xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope/" xmlns:D=3D"DAV:" =
xmlns:x2=3D"http://schemas.microsoft.com/office/excel/2003/xml" =
xmlns:ois=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" =
xmlns:dir=3D"http://schemas.microsoft.com/sharepoint/soap/directory/" =
xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#" =
xmlns:dsp=3D"http://schemas.microsoft.com/sharepoint/dsp" =
xmlns:udc=3D"http://schemas.microsoft.com/data/udc" =
xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema" =
xmlns:sub=3D"http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/"=
xmlns:ec=3D"http://www.w3.org/2001/04/xmlenc#" =
xmlns:sp=3D"http://schemas.microsoft.com/sharepoint/" =
xmlns:sps=3D"http://schemas.microsoft.com/sharepoint/soap/" =
xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance" =
xmlns:udcs=3D"http://schemas.microsoft.com/data/udc/soap" =
xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile" =
xmlns:udcp2p=3D"http://schemas.microsoft.com/data/udc/parttopart" =
xmlns:wf=3D"http://schemas.microsoft.com/sharepoint/soap/workflow/" =
xmlns:dsss=3D"http://schemas.microsoft.com/office/2006/digsig-setup" =
xmlns:dssi=3D"http://schemas.microsoft.com/office/2006/digsig" =
xmlns:mdssi=3D"http://schemas.openxmlformats.org/package/2006/digital-sig=
nature" =
xmlns:mver=3D"http://schemas.openxmlformats.org/markup-compatibility/2006=
" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns:mrels=3D"http://schemas.openxmlformats.org/package/2006/relationshi=
ps" xmlns:spwp=3D"http://microsoft.com/sharepoint/webpartpages" =
xmlns:ex12t=3D"http://schemas.microsoft.com/exchange/services/2006/types"=
=
xmlns:ex12m=3D"http://schemas.microsoft.com/exchange/services/2006/messag=
es" =
xmlns:pptsl=3D"http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/=
" =
xmlns:spsl=3D"http://microsoft.com/webservices/SharePointPortalServer/Pub=
lishedLinksService" xmlns:Z=3D"urn:schemas-microsoft-com:" =
xmlns:st=3D"" xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple>
<div class=3DSection1>
<p class=3DMsoNormal>I’ve configured a 2 node HA + LB cluster as =
described
in the streamline high availability and load balancing =
example.
Everything appeas to work correctly from the HA and load balancing
standpoint. I can stop heartbeat and the other server will pickup =
as a
master and I can stop the http service on either of my web servers and =
ipvsadm
reports the weight for that server as 0 (no traffic being =
transmitted?).<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>My setup is this:<o:p></o:p></p>
<p class=3DMsoNormal>Virtual IP: 192.168.20.100<o:p></o:p></p>
<p class=3DMsoNormal>Web1: 192.168.20.20<o:p></o:p></p>
<p class=3DMsoNormal>Web2: 192.168.20.21<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>I can browse to <a =
href=3D"http://192.168.20.100">http://192.168.20.100</a>
and http traffic is working correctly. I get the page I =
expect. The
problem is when browsing to <a =
href=3D"https://192.168.20.100">https://192.168.20.100</a>
the browser cannot connect. In debugging I’ve done <a
href=3D"http://192.168.20.100:443">http://192.168.20.100:443</a> and =
this request
works and serves the same page as <a =
href=3D"http://192.168.20.100">http://192.168.20.100</a>.
Upon further investigation using wget to download a file wget <a
href=3D"http://192.168.20.100">http://192.168.20.100</a> works correctly =
wget <a
href=3D"https://192.168.20.100">https://192.168.20.100</a> gives me an =
openssl
error which I assume is because 192.168.20.100:443 is serving standard =
http
instead of https. <o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>My ldirectord.cf is below:<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal># Global Directives<o:p></o:p></p>
<p class=3DMsoNormal>checktimeout=3D10<o:p></o:p></p>
<p class=3DMsoNormal>checkinterval=3D2<o:p></o:p></p>
<p class=3DMsoNormal>#fallback=3D127.0.0.1:80<o:p></o:p></p>
<p class=3DMsoNormal>autoreload=3Dno<o:p></o:p></p>
<p =
class=3DMsoNormal>logfile=3D"/var/log/ldirectord.log"<o:p></o:p=
></p>
<p class=3DMsoNormal>logfile=3D"local0"<o:p></o:p></p>
<p class=3DMsoNormal>quiescent=3Dyes<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal># Virtual Server for HTTP<o:p></o:p></p>
<p class=3DMsoNormal>virtual=3D192.168.20.100:80<o:p></o:p></p>
<p class=3DMsoNormal> =
fallback=3D127.0.0.1:80<o:p></o:p></p>
<p class=3DMsoNormal> =
real=3D192.168.20.20:80
gate<o:p></o:p></p>
<p class=3DMsoNormal> =
real=3D192.168.20.21:80
gate<o:p></o:p></p>
<p class=3DMsoNormal> =
service=3Dhttp<o:p></o:p></p>
<p class=3DMsoNormal> =
request=3D"ha.html"<o:p></o:p></p>
<p class=3DMsoNormal>
receive=3D"Test Page"<o:p></o:p></p>
<p class=3DMsoNormal> =
scheduler=3Drr<o:p></o:p></p>
<p class=3DMsoNormal> =
#persistent=3D600<o:p></o:p></p>
<p class=3DMsoNormal> =
protocol=3Dtcp<o:p></o:p></p>
<p class=3DMsoNormal>
checktype=3Dnegotiate<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal># Virtual Service for HTTPS<o:p></o:p></p>
<p class=3DMsoNormal>virtual=3D192.168.20.100:443<o:p></o:p></p>
<p class=3DMsoNormal>
fallback=3D127.0.0.1:443<o:p></o:p></p>
<p class=3DMsoNormal> =
real=3D192.168.20.20:443
gate<o:p></o:p></p>
<p class=3DMsoNormal> =
real=3D192.168.20.21:443
gate<o:p></o:p></p>
<p class=3DMsoNormal> =
service=3Dhttps<o:p></o:p></p>
<p class=3DMsoNormal> =
request=3D"ha.html"<o:p></o:p></p>
<p class=3DMsoNormal>
receive=3D"Test Page"<o:p></o:p></p>
<p class=3DMsoNormal> =
scheduler=3Drr<o:p></o:p></p>
<p class=3DMsoNormal> =
#persistent=3D600<o:p></o:p></p>
<p class=3DMsoNormal> =
protocol=3Dtcp<o:p></o:p></p>
<p class=3DMsoNormal> =
checktype=3Dconnect<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>Also important to not the SSL certs on the =
webservers(20,
21) are not valid and have to be ignored when issuing a wget
https://192.168.20.100/ha.html. Will invalid certs cause a problem with
Ultramonkey?<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>So my question is why is port 443 on 192.168.20.100 =
serving unsecured
traffic?<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>Please let me know any pointers or questions you =
may
have? I’m at a loss as to where to turn next. =
<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>Thank you in advance,<o:p></o:p></p>
<p class=3DMsoNormal>Bo Stewart<o:p></o:p></p>
</div>
</body>
</html>
------=_NextPart_000_0048_01C98B6E.33DC0350--
--===============0796801364==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Ultramonkey-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/ultramonkey-users
--===============0796801364==--