Forum: NGINX HTTP/1.1 505 HTTP Version Not Supported Server: nginx/1.2.6

Posted by rtsai (Guest)
on 2013-02-05 01:55
(Received via mailing list)
Hi,

I am using nginx as a ssl offloader in front of HAProxy.  The issue I am
having is I get a 505 error on one of the calls I make to Nginx/haproxy. 
If
I make that same call to haproxy directory, I get a 200.

Server OS: centos 5.6
Nginx sever version: 1.2.6
Here is my config:

worker_processes     8;
#worker_cpu_affinity 0001 0010 0100 1000;

worker_rlimit_nofile 70000;
events {
    worker_connections  6144;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    #sendfile        on;
    #tcp_nopush     on;
    #keepalive_timeout  0;
    #keepalive_timeout  65;
    #gzip  on;

 log_format upstream '$remote_addr - - [$time_local] "$request" $status 
'
'upstream $upstream_response_time request $request_time ' '[for $host 
via
$upstream_addr]';

  upstream haproxy {
  # POINT TO HAPROXY:1443
  server 127.0.0.1:1443
  }

    server {
        listen       443 ssl;

        # CERT
        server_name  my.testinstant.com;
  ssl_certificate_key  /etc/nginx/certs/mytestinstant.pem
        ssl_certificate  /etc/nginx/certs/mytestinstant.crt;


        ssl_session_timeout  5m;
        ssl_protocols  SSLv3 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
  # SINGLE PROCESS CACHE
  ssl_session_cache  builtin:1000  ;

  ssl_ciphers
!aNULL:!eNULL:!EXPORT:!DSS:!DES:!kEDH:!ADH:!EXPORT:!LOW:!SSLv2:!RC4-MD5:RC4+RSA:DES-CBC3-SHA:AES+RSA:+HIGH:+MEDIUM;


  # POINT TO HAPROXY UPSTREAM
        location / {
  proxy_pass http://haproxy;
        }

  # DEFINE NGINX STATUS PAGE
        location /nginx_status {
            stub_status on;
            access_log   off;
            allow all;
        }

    }

 #error_page   500 502 503 504  /50x.html;
 #location = /50x.html {
 # root   /var/www/nginx-default;
 #}

}

Any help with this would be aprreciated.

Thanks
Rob

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,235903,235903#msg-235903
Posted by rtsai (Guest)
on 2013-02-05 02:53
(Received via mailing list)
Here is the error from the curl

Fault Name: HttpRequestReceiveError
Error Type: Default
Description: Http request received failed
Root Cause Code: -19002
Root Cause : HTTP Transport: Http version not supported
Binding State: CLIENT_CONNECTION_ESTABLISHED
Service: null
Endpoint: null
Operation (Client):

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,235903,235904#msg-235904
Posted by Maxim Dounin (Guest)
on 2013-02-05 11:20
(Received via mailing list)
Hello!

On Mon, Feb 04, 2013 at 07:54:44PM -0500, rtsai wrote:

> I am using nginx as a ssl offloader in front of HAProxy.  The issue I am
> having is I get a 505 error on one of the calls I make to Nginx/haproxy. If
> I make that same call to haproxy directory, I get a 200.

To understand what goes on first of all you have to debug what
happens on the wire, either with tcpdump/wireshark, or using nginx
debug log, see http://nginx.org/en/docs/debugging_log.html.

--
Maxim Dounin
http://nginx.com/support.html
Posted by Reinis Rozitis (Guest)
on 2013-02-05 14:02
(Received via mailing list)
> I am using nginx as a ssl offloader in front of HAProxy.

It is a bit out of topic but the 1.5.x tree of haproxy has inbuilt SSL
support (and it works fine) .. so kinda one less moving part in the 
network
setup.


rr
Posted by rtsai (Guest)
on 2013-02-05 21:51
(Received via mailing list)
Thanks,  I'll give that a shot. I assume HAProxy 1.5 is still in dev.

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,235903,235951#msg-235951
Please log in before posting. Registration is free and takes only a minute.
Existing account (Switch to SSL-encrypted connection)
NEW: Do you have a Google/GoogleMail or Yahoo account? No registration required!
Log in with Google account | Log in with Yahoo account
No account? Register here.