LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

[lvs-users] SSL forwarding problem.

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: [lvs-users] SSL forwarding problem.
From: Chuck Cochems <zaphod@xxxxxxx>
Date: Tue, 25 Mar 2008 15:07:51 -0700
I've got port 80 fine, but port 433 doesn't seem rto want to cooperate.

it's really strange.

the port in fact DOES get forwarded, as verified by telnetting to it, 
but any browser i use simply hangs and never completes the connection.

The plan is of course to share the same key on all virtual servers, 
since they have the "same domain name"

ldirectord.conf here.

# Global Directives
checktimeout=10
checkinterval=2
autoreload=no
logfile="local0"
quiescent=yes
virtual = 192.168.2.105:3306
         service = mysql
         real = 192.168.2.101:3306 gate
         real = 192.168.2.102:3306 gate
         checktype = negotiate
         login = "ldirector"
         passwd = "ldirectorbigpassword"
         database = "ldirectordb"
         request = "SELECT * FROM connectioncheck"
         scheduler = wrr
virtual = 206.180.231.35:80
         real=192.168.2.10:80 gate
         real=192.168.2.11:80 gate
         fallback=127.0.0.1:80 gate
         service=http
         request="ldirector.html"
         receive="Test Page"
         scheduler=rr
         protocol=tcp
         checktype=negotiate
virtual = 206.180.231.35:443
         real=192.168.2.10:443 gate
         real=192.168.2.11:443 gate
         fallback=127.0.0.1:443 gate
         service=http
         checkport=80
         request="ldirector.html"
         receive="Test Page"
         scheduler=rr
         protocol=tcp
         checktype=negotiate
         persistent=5000


note that i have it checking port 80 for the ssl forward check. this is 
to avoid the checker having to key negotiate.

The "persistant" line is a new addition, but it doesn't seem to have 
helped.  The key negotiation never starts.

I can connect to real IPs no problem, though i get a warning about 
server name mismatch.


<Prev in Thread] Current Thread [Next in Thread>