Hi,
I am using nginx as a ssl offloader in front of HAProxy. The issue I am
having is I get a 505 error on one of the calls I make to Nginx/haproxy.
If
I make that same call to haproxy directory, I get a 200.
Server OS: centos 5.6
Nginx sever version: 1.2.6
Here is my config:
worker_processes 8;
#worker_cpu_affinity 0001 0010 0100 1000;
worker_rlimit_nofile 70000;
events {
worker_connections 6144;
}
http {
include mime.types;
default_type application/octet-stream;
#sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
#keepalive_timeout 65;
#gzip on;
log_format upstream '$remote_addr - - [$time_local] "$request" $status
'
'upstream $upstream_response_time request $request_time ' '[for $host
via
$upstream_addr]';
upstream haproxy {
# POINT TO HAPROXY:1443
server 127.0.0.1:1443
}
server {
listen 443 ssl;
# CERT
server_name my.testinstant.com;
ssl_certificate_key /etc/nginx/certs/mytestinstant.pem
ssl_certificate /etc/nginx/certs/mytestinstant.crt;
ssl_session_timeout 5m;
ssl_protocols SSLv3 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
# SINGLE PROCESS CACHE
ssl_session_cache builtin:1000 ;
ssl_ciphers
!aNULL:!eNULL:!EXPORT:!DSS:!DES:!kEDH:!ADH:!EXPORT:!LOW:!SSLv2:!RC4-MD5:RC4+RSA:DES-CBC3-SHA:AES+RSA:+HIGH:+MEDIUM;
# POINT TO HAPROXY UPSTREAM
location / {
proxy_pass http://haproxy;
}
# DEFINE NGINX STATUS PAGE
location /nginx_status {
stub_status on;
access_log off;
allow all;
}
}
#error_page 500 502 503 504 /50x.html;
#location = /50x.html {
# root /var/www/nginx-default;
#}
}
Any help with this would be aprreciated.
Thanks
Rob
Posted at Nginx Forum:
http://forum.nginx.org/read.php?2,235903,235903#msg-235903
on 2013-02-05 01:55
on 2013-02-05 02:53
Here is the error from the curl Fault Name: HttpRequestReceiveError Error Type: Default Description: Http request received failed Root Cause Code: -19002 Root Cause : HTTP Transport: Http version not supported Binding State: CLIENT_CONNECTION_ESTABLISHED Service: null Endpoint: null Operation (Client): Posted at Nginx Forum: http://forum.nginx.org/read.php?2,235903,235904#msg-235904
on 2013-02-05 11:20
Hello! On Mon, Feb 04, 2013 at 07:54:44PM -0500, rtsai wrote: > I am using nginx as a ssl offloader in front of HAProxy. The issue I am > having is I get a 505 error on one of the calls I make to Nginx/haproxy. If > I make that same call to haproxy directory, I get a 200. To understand what goes on first of all you have to debug what happens on the wire, either with tcpdump/wireshark, or using nginx debug log, see http://nginx.org/en/docs/debugging_log.html. -- Maxim Dounin http://nginx.com/support.html
on 2013-02-05 14:02
> I am using nginx as a ssl offloader in front of HAProxy.
It is a bit out of topic but the 1.5.x tree of haproxy has inbuilt SSL
support (and it works fine) .. so kinda one less moving part in the
network
setup.
rr
on 2013-02-05 21:51
Thanks, I'll give that a shot. I assume HAProxy 1.5 is still in dev. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,235903,235951#msg-235951
Please log in before posting. Registration is free and takes only a minute.
Existing account
(Switch to SSL-encrypted connection)
NEW: Do you have a Google/GoogleMail or Yahoo account? No registration required!
Log in with Google account | Log in with Yahoo account
Log in with Google account | Log in with Yahoo account
No account? Register here.