# "Connection Refused" with nginx as reverse proxy

**URL:** <https://www.ruby-forum.com/t/connection-refused-with-nginx-as-reverse-proxy/243979>\
**Category:** NGINX\
**Created:** [February 1, 2016, 2:00am UTC](https://www.ruby-forum.com/t/connection-refused-with-nginx-as-reverse-proxy/243979 "2016-02-01T02:00:54Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rafa\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/958977/32.png) [@Rafa\_F](https://www.ruby-forum.com/u/Rafa_F)\
**Post date:** [February 1, 2016, 2:00am UTC](https://www.ruby-forum.com/t/connection-refused-with-nginx-as-reverse-proxy/243979/1 "2016-02-01T02:00:54Z")

</div>

I have set up nginx as a reverse proxy with this configuration

worker\_processes 1;

pid /run/nginx.pid;

events {

worker\_connections 4096;

}

http {

include /etc/nginx/default.d/proxy.conf;

default\_type application/octet-stream;

sendfile on;

tcp\_nopush on;

server\_names\_hash\_bucket\_size 128;

server {

```
listen 127.107.138.162:8080;

server_name _;

access_log /var/log/nginx/access.log;

error_log /var/log/nginx/error.log;

access_log on;

# Load configuration files for the default server block.

include /etc/nginx/default.d/*.conf;

location / {

  proxy_pass http://127.0.0.1:8080;

}

location /rhesos-server {

    proxy_pass 

```

[http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping](http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping);

```
}

location /rhesos {

    proxy_pass 

```

[http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping](http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping);

```
}

```

}

}

However, when I use the curl command to send a request using the proxy  
like this, I see a “Connection Refused”

curl -v -x ‘http://\<username\>:\<password\>@128.107.138.162:8080’  
[http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping](http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping)

- About to connect() to proxy 128.107.138.162 port 8080 (#0)

- Trying 128.107.138.162…

- Adding handle: conn: 0x7f99a980aa00

- Adding handle: send: 0

- Adding handle: recv: 0

- Curl\_addHandleToPipeline: length: 1

- 
  - Conn 0 (0x7f99a980aa00) send\_pipe: 1, recv\_pipe: 0

- Failed connect to 10.154.181.43:8080; Connection refused

- Closing connection 0

curl: (7) Failed connect to 10.154.181.43:8080; Connection refused

Whereas when I try this without the proxy, it succeeds …

curl -v [http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping](http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping)

- About to connect() to 10.154.181.43 port 8080 (#0)

- Trying 10.154.181.43…

- Adding handle: conn: 0x7fa3da003a00

- Adding handle: send: 0

- Adding handle: recv: 0

- Curl\_addHandleToPipeline: length: 1

- 
  - Conn 0 (0x7fa3da003a00) send\_pipe: 1, recv\_pipe: 0

- Connected to 10.154.181.43 (10.154.181.43) port 8080 (#0)

> GET /rhesos-server/rhesos/api/v1/ping HTTP/1.1

> User-Agent: curl/7.30.0

> Host: 10.154.181.43:8080

> Accept: _/_

> 

\< HTTP/1.1 200 OK

- Server Apache-Coyote/1.1 is not blacklisted

\< Server: Apache-Coyote/1.1

\< Cache-Control: no-cache

\< Content-Type: application/json;charset=UTF-8

\< Transfer-Encoding: chunked

\< Date: Sat, 30 Jan 2016 00:59:28 GMT

\<

- Connection #0 to host 10.154.181.43 left intact

{“serviceName”:“Rhesos”,“serviceType”:“REQUIRED”,“serviceState”:“online”,“message”:“Healthy”,“lastUpdated”:“2016-01-30T00:59:28.571Z”,“upstreamServices”:[{“serviceName”:“CommonIdentityScim”,“serviceType”:“REQUIRED”,“serviceState”:“online”,“message”:“CommonIdentityScim  
is  
healthy”,“lastUpdated”:“2016-01-30T00:59:20.641Z”,“upstreamServices”:[],“baseUrl”:“[https://identity.webex.com](https://identity.webex.com)”}

Can someone tell what is wrong in my configuration?

Thanks,

Radha.

---

<div class="post-metadata">

**Author:** ![Radha\_Venkatesh\_Sra](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/c0e974/32.png) [@Radha\_Venkatesh\_Sra](https://www.ruby-forum.com/u/Radha_Venkatesh_Sra)\
**Post date:** [February 1, 2016, 5:25pm UTC](https://www.ruby-forum.com/t/connection-refused-with-nginx-as-reverse-proxy/243979/2 "2016-02-01T17:25:01Z")

</div>

Francis,

Thank you for pointing out the discrepency in the ip address. I have  
fixed  
that and the netstat out looks like this

netstat -anp | grep 8080  
tcp 0 0 128.107.138.162:8080 0.0.0.0:\*  
LISTEN

And I issued the curl command like this, but I still see this error

curl -v [http://128.107.138.162:8080/rhesos-server/rhesos/api/v1/ping](http://128.107.138.162:8080/rhesos-server/rhesos/api/v1/ping)

- About to connect() to 128.107.138.162 port 8080 (#0)
- Trying 128.107.138.162…
- Adding handle: conn: 0x7ffb9c003a00
- Adding handle: send: 0
- Adding handle: recv: 0
- Curl\_addHandleToPipeline: length: 1
- 
  - Conn 0 (0x7ffb9c003a00) send\_pipe: 1, recv\_pipe: 0

- Failed connect to 128.107.138.162:8080; Connection refused
- Closing connection 0  
curl: (7) Failed connect to 128.107.138.162:8080; Connection refused

Also, my curl command with the proxy set in the command is trying to  
simulate how the real request is going to come in to the server.

Thanks,  
Radha.

---

<div class="post-metadata">

**Author:** ![Radha\_Venkatesh\_Sra](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/c0e974/32.png) [@Radha\_Venkatesh\_Sra](https://www.ruby-forum.com/u/Radha_Venkatesh_Sra)\
**Post date:** [February 1, 2016, 6:49pm UTC](https://www.ruby-forum.com/t/connection-refused-with-nginx-as-reverse-proxy/243979/3 "2016-02-01T18:49:43Z")

</div>

On Mon, Feb 01, 2016 at 04:24:20PM +0000, Radha Venkatesh (radvenka)  
wrote:

Hi there,

> - 
> - Conn 0 (0x7ffb9c003a00) send\_pipe: 1, recv\_pipe: 0
> 
> - Failed connect to 128.107.138.162:8080; Connection refused
> - Closing connection 0  
> curl: (7) Failed connect to 128.107.138.162:8080; Connection refused

If the connection attempt gets to nginx, the nginx logs can show  
something  
about it.

But it looks to me like your security system is preventing the request  
getting to nginx in the first place. Check your firewall or other  
network  
control logs to see what is happening.

> Also, my curl command with the proxy set in the command is trying to  
> simulate how the real request is going to come in to the server.

nginx is not a proxy. So no request that comes to the server will  
involve  
“curl -x” with the nginx host:port. As far as any client is concerned,  
nginx is a web server.

Good luck with it,

## f

Francis D. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)

---

<div class="post-metadata">

**Author:** ![Radha\_Venkatesh\_Sra](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/c0e974/32.png) [@Radha\_Venkatesh\_Sra](https://www.ruby-forum.com/u/Radha_Venkatesh_Sra)\
**Post date:** [February 1, 2016, 9:32am UTC](https://www.ruby-forum.com/t/connection-refused-with-nginx-as-reverse-proxy/243979/4 "2016-02-01T09:32:27Z")

</div>

On Mon, Feb 01, 2016 at 01:00:04AM +0000, Radha Venkatesh (radvenka)  
wrote:

Hi there,

> server {  
> listen 127.107.138.162:8080;

> However, when I use the curl command to send a request using the proxy like  
> this, I see a “Connection Refused”
> 
> curl -v -x ‘http://:@128.107.138.162:8080’  
> [http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping](http://10.154.181.43:8080/rhesos-server/rhesos/api/v1/ping)

Two things there:

- the “listen” address and the “curl -x” address are not the same.
- nginx is not a proxy

Just make your curl request as normal to the nginx server.

> Can someone tell what is wrong in my configuration?

Possibly nothing.

## f

Francis D. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)