https service doesn't works through CSS

slandeira · ‎08-03-2007

I have 2 CSS 11501, and they work fine.

The only problem that has is that it doesn't work one of the content HTTPS.

This is the configuration that I have:

......................................

service server54

ip address 172.16.10.46

keepalive port 443

keepalive type tcp

active

service server55

ip address 172.16.10.146

keepalive port 443

keepalive type tcp

owner https

content web

vip address 10.102.1.28

add service server54

port 443

protocol tcp

application ssl

advanced-balance ssl

add service server55

active

group web

vip address 10.102.1.28

add service server52

add service server53

add service server54

add service server55

active

......................................

I've left only one of the services active. In the CSS I see the requests but no package comes to the server.

The http service has the same addresses and does not have any problem.

What can happen?

RODRGUTI · ‎08-03-2007

Hello,

Did you check that the service is alive? (CSS# show service summary)

Did you check that the CSS is showing service hits for that content rule? (CSS# show summary) when you are doing requests?

If the users are the ones that are opening the connections, please change the group configuration:

group web

vip address 10.102.1.28

add destination service server52

add destination service server53

add destination service server54

add destination service server55

active

After trying all above, if you keep having the problem, the best way to know what is happening is get simultaneous captures, in the switch(s) where the CSS is directly connected, and you will see the CSS receiving the traffic, and forwarding the traffic to the backend servers.

You will confirm or at least you will see if the CSS is not the problem.

- Rodrigo.