Re: https problem
"Lam Louis" <[email protected]>
| Newsgroups | gmane.linux.highavailability.ultramonkey |
|---|---|
| Message-ID | <[email protected]> |
Thanks John could you mind to show me the setting of config file ldirectord.cf and How to config the virtual host correctly? Best Regards Lam >From: "John C. Amodeo" <[email protected]> >Reply-To: [email protected] >To: [email protected] >Subject: Re: https problem >Date: Wed, 05 Oct 2005 09:23:00 -0400 > >Lam, > >I had this problem just last week. What I found was I needed to change >"checktype=connect" in the ldirectord.cf file. For some reason, with an >SSL cert, ultramonkey cannot connect to a https service when >"checktype=negotiate" > >Also, make sure you have virtual host configured for the web servers you >need to connect to. If your httpd.conf file is not correct, ultramonkey >will not be able to establish a connection. > >Hope this helps you in some way... > >-John > >Lam Louis wrote: > > > I set up a LVS with one director and two realserver. Using DR method, > > I successed to set up a http service. > > > > However, it failed to connect the realserver through https services. > > > > the Structure is as below: > > > > Prot LocalAddress:Port Scheduler Flags > > -> RemoteAddress:Port Forward Weight ActiveConn InActConn > > TCP 10.0.58.136:443 rr > > -> 10.0.58.232:443 Route 1 0 2 > > TCP 10.0.58.136:80 rr > > -> 10.0.58.230:80 Route 1 1 8 > > -> 10.0.58.232:80 Route 1 0 7 > > > > > > and after numbers of accesses of HTTPS, information has showed below: > > > > > > IP Virtual Server version 1.0.10 (size=65536) > > Prot LocalAddress:Port Conns InPkts OutPkts InBytes OutBytes > > -> RemoteAddress:Port > > TCP 10.0.58.136:443 15 76 0 4330 0 > > -> 10.0.58.232:443 15 76 0 4330 0 > > TCP 10.0.58.136:80 236 1868 0 333760 0 > > -> 10.0.58.230:80 45 566 0 127198 0 > > -> 10.0.58.232:80 191 1302 0 206562 0 > > > > > > Althrough I can't accesses the https service, but the realserver > > showed the trace as below > > > > tcpdump -n -i any port 443 > > tcpdump: listening on any > > 17:09:09.833127 10.0.58.93.2450 > 10.0.58.136.https: S > > 4012402657:4012402657(0) win 65535 <mss 1460,nop,nop,sackOK> (DF) > > 17:09:09.833142 10.0.58.136.https > 10.0.58.93.2450: S > > 4038977378:4038977378(0) ack 4012402658 win 5840 <mss > > 1460,nop,nop,sackOK> (DF) > > 17:09:13.630883 10.0.58.136.https > 10.0.58.93.2450: S > > 4038977378:4038977378(0) ack 4012402658 win 5840 <mss > > 1460,nop,nop,sackOK> (DF) > > 17:09:19.630883 10.0.58.136.https > 10.0.58.93.2450: S > > 4038977378:4038977378(0) ack 4012402658 win 5840 <mss > > 1460,nop,nop,sackOK> (DF) > > > > > > The web farm did not set any firewall , Can you help me to solve the > > problem? > > > > Thank You Very Much~1 > > > > > > > >-- >______________________________________________________________ >John C. Amodeo :: Associate Director of Information Technology >Faculty of Arts and Sciences >Rutgers, The State University of New Jersey >Voice: 732.932.9455 Fax: 732.932.0013 > > >-- >Ultra Monkey - http://www.ultramonkey.org/ >To UNSUBSCRIBE, email to [email protected], with a body: >unsubscribe ultramonkey-users [email protected] >where "[email protected]" is YOUR email address. > -- Ultra Monkey - http://www.ultramonkey.org/ To UNSUBSCRIBE, email to [email protected], with a body: unsubscribe ultramonkey-users [email protected] where "[email protected]" is YOUR email address.