LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

[lvs-users] https not working - http OK

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: [lvs-users] https not working - http OK
From: Robin Bowes <robin-lists@xxxxxxxxxxxxxx>
Date: Wed, 16 Dec 2009 16:55:09 +0000
Hi,

I'm using lvs on CentOS 5.4. I'm using the pulse daemon to start the
services.

I have two virtual services defined:

# ipvsadm -S -n
-A -t 192.168.55.60:80 -s wlc
-a -t 192.168.55.60:80 -r 192.168.55.13:80 -g -w 1
-a -t 192.168.55.60:80 -r 192.168.55.12:80 -g -w 1
-a -t 192.168.55.60:80 -r 192.168.55.9:80 -g -w 1
-a -t 192.168.55.60:80 -r 192.168.55.10:80 -g -w 1
-a -t 192.168.55.60:80 -r 192.168.55.8:80 -g -w 1
-a -t 192.168.55.60:80 -r 192.168.55.7:80 -g -w 1
-a -t 192.168.55.60:80 -r 192.168.55.11:80 -g -w 1
-a -t 192.168.55.60:80 -r 192.168.55.6:80 -g -w 1
-A -t 192.168.55.60:443 -s wlc
-a -t 192.168.55.60:443 -r 192.168.55.6:443 -g -w 1
-a -t 192.168.55.60:443 -r 192.168.55.10:443 -g -w 1
-a -t 192.168.55.60:443 -r 192.168.55.12:443 -g -w 1
-a -t 192.168.55.60:443 -r 192.168.55.8:443 -g -w 1
-a -t 192.168.55.60:443 -r 192.168.55.7:443 -g -w 1
-a -t 192.168.55.60:443 -r 192.168.55.9:443 -g -w 1
-a -t 192.168.55.60:443 -r 192.168.55.11:443 -g -w 1
-a -t 192.168.55.60:443 -r 192.168.55.13:443 -g -w 1

The http service works fine, but the https service does not:

# wget --spider --tries=1 http://192.168.55.60
Spider mode enabled. Check if remote file exists.
--2009-12-16 16:49:35--  http://192.168.55.60/
Connecting to 192.168.55.60:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1157 (1.1K) [text/html]
Remote file exists and could contain further links,
but recursion is disabled -- not retrieving.

# wget --spider --timeout=5 --tries=1 https://192.168.55.60
Spider mode enabled. Check if remote file exists.
--2009-12-16 16:51:26--  https://192.168.55.60/
Connecting to 192.168.55.60:443... failed: Connection timed out.
Giving up.

Each of the individual real servers works OK, eg:

# wget --spider --timeout=5 --tries=1 --no-check-certificate
https://192.168.55.6
Spider mode enabled. Check if remote file exists.
--2009-12-16 16:52:34--  https://192.168.55.6/
Connecting to 192.168.55.6:443... connected.
WARNING: certificate common name `*.example.com' doesn't match requested
host name `192.168.55.6'.
HTTP request sent, awaiting response... 200 OK
Length: 1157 (1.1K) [text/html]
Remote file exists and could contain further links,
but recursion is disabled -- not retrieving.

I'm at a bit of a loss as to where to start looking for any more
information.

Anyone got any ideas?

R.

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>