Re: https problem

Lam,

No problem.

In ldirectord.conf:

# Virtual Server for HTTPS
virtual=165.230.141.100:443
real=165.230.141.98:443 gate
real=165.230.141.99:443 gate
service=https
scheduler=rr
persistent=3600
protocol=tcp
checktype=connect

That should do the trick. Just make sure your Apache SSL is on for both
165.230.141.98 / 165.230.141.99 (of course, replace your IP addresses
where mine are...) If not, when ldirectord tries to connect to *.98 and
*.99 to "check" the connection, it will never be able to connect, thus
is will never add the servers to the pool...

-John

Lam Louis wrote:

> Thanks John
>
> could you mind to show me the setting of config file ldirectord.cf and
> How to config the virtual host correctly?
>
> Best Regards
> Lam
>
>> From: "John C. Amodeo" <[email protected]>
>> Reply-To: [email protected]
>> To: [email protected]
>> Subject: Re: https problem
>> Date: Wed, 05 Oct 2005 09:23:00 -0400
>>
>> Lam,
>>
>> I had this problem just last week. What I found was I needed to change
>> "checktype=connect" in the ldirectord.cf file. For some reason, with an
>> SSL cert, ultramonkey cannot connect to a https service when
>> "checktype=negotiate"
>>
>> Also, make sure you have virtual host configured for the web servers you
>> need to connect to. If your httpd.conf file is not correct, ultramonkey
>> will not be able to establish a connection.
>>
>> Hope this helps you in some way...
>>
>> -John
>>
>> Lam Louis wrote:
>>
>> > I set up a LVS with one director and two realserver. Using DR method,
>> > I successed to set up a http service.
>> >
>> > However, it failed to connect the realserver through https services.
>> >
>> > the Structure is as below:
>> >
>> > Prot LocalAddress:Port Scheduler Flags
>> > -> RemoteAddress:Port Forward Weight ActiveConn InActConn
>> > TCP 10.0.58.136:443 rr
>> > -> 10.0.58.232:443 Route 1 0 2
>> > TCP 10.0.58.136:80 rr
>> > -> 10.0.58.230:80 Route 1 1 8
>> > -> 10.0.58.232:80 Route 1 0 7
>> >
>> >
>> > and after numbers of accesses of HTTPS, information has showed below:
>> >
>> >
>> > IP Virtual Server version 1.0.10 (size=65536)
>> > Prot LocalAddress:Port Conns InPkts OutPkts InBytes OutBytes
>> > -> RemoteAddress:Port
>> > TCP 10.0.58.136:443 15 76 0 4330 0
>> > -> 10.0.58.232:443 15 76 0 4330 0
>> > TCP 10.0.58.136:80 236 1868 0 333760 0
>> > -> 10.0.58.230:80 45 566 0 127198 0
>> > -> 10.0.58.232:80 191 1302 0 206562 0
>> >
>> >
>> > Althrough I can't accesses the https service, but the realserver
>> > showed the trace as below
>> >
>> > tcpdump -n -i any port 443
>> > tcpdump: listening on any
>> > 17:09:09.833127 10.0.58.93.2450 > 10.0.58.136.https: S
>> > 4012402657:4012402657(0) win 65535 <mss 1460,nop,nop,sackOK> (DF)
>> > 17:09:09.833142 10.0.58.136.https > 10.0.58.93.2450: S
>> > 4038977378:4038977378(0) ack 4012402658 win 5840 <mss
>> > 1460,nop,nop,sackOK> (DF)
>> > 17:09:13.630883 10.0.58.136.https > 10.0.58.93.2450: S
>> > 4038977378:4038977378(0) ack 4012402658 win 5840 <mss
>> > 1460,nop,nop,sackOK> (DF)
>> > 17:09:19.630883 10.0.58.136.https > 10.0.58.93.2450: S
>> > 4038977378:4038977378(0) ack 4012402658 win 5840 <mss
>> > 1460,nop,nop,sackOK> (DF)
>> >
>> >
>> > The web farm did not set any firewall , Can you help me to solve the
>> > problem?
>> >
>> > Thank You Very Much~1
>> >
>> >
>> >
>>
>> -- 
>> ______________________________________________________________
>> John C. Amodeo :: Associate Director of Information Technology
>> Faculty of Arts and Sciences
>> Rutgers, The State University of New Jersey
>> Voice: 732.932.9455 Fax: 732.932.0013
>>
>>
>> -- 
>> Ultra Monkey - http://www.ultramonkey.org/
>> To UNSUBSCRIBE, email to [email protected], with a body:
>> unsubscribe ultramonkey-users [email protected]
>> where "[email protected]" is YOUR email address.
>>
>
>
>

-- 
______________________________________________________________
John C. Amodeo :: Associate Director of Information Technology
Faculty of Arts and Sciences
Rutgers, The State University of New Jersey
Voice: 732.932.9455 Fax: 732.932.0013


-- 
Ultra Monkey - http://www.ultramonkey.org/
To UNSUBSCRIBE, email to [email protected], with a body:
unsubscribe ultramonkey-users [email protected]
where "[email protected]" is YOUR email address.