Forum Discussion
Smitha_111683
Nimbostratus
NimbostratusConnectException: Connection timed out Error
I am running an application using iControl v9.4. This application lists out the virtual servers on a bigip machine and also allows deletion and adding of nodes to a pool. It was working fine with iControl v4.6.2 on windows and linux boxes. Now that I have switched to iControl v9.4, it is giving me the below error on the linux box:
AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: java.net.ConnectException: Connection timed out
faultActor:
faultNode:
faultDetail:
{http://xml.apache.org/axis/}stackTrace:java.net.ConnectException: Connection timed out
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
at java.net.Socket.connect(Socket.java:452)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketFactoryImpl.createSocket(DashoA12275)
at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:92)
at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:191)
at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:404)
at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invokeTransport(AxisClient.java:150)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:289)
at org.apache.axis.client.Call.invokeEngine(Call.java:2838)
at org.apache.axis.client.Call.invoke(Call.java:2824)
at org.apache.axis.client.Call.invoke(Call.java:2501)
at org.apache.axis.client.Call.invoke(Call.java:2424)
at org.apache.axis.client.Call.invoke(Call.java:1835)
at iControl.LocalLBVirtualServerBindingStub.get_list(Unknown Source)
at BigWebIP.getVSList(Unknown Source)
at _vslist._jspService(_vslist.java:56)
[SRC:/vslist.jsp:39]
at com.orionserver[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)
at oracle.jsp.runtimev2.JspPageTable.compileAndServe(JspPageTable.java:575)
at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:311)
at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:498)
at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:402)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:834)
at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:340)
at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:830)
at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:228)
at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:133)
at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)
at java.lang.Thread.run(Thread.java:534)
BigWebIP is a custom class in which I have tried out the three certification methods in the constructor. (i.e. adding certificate to .keystore, the new Provider class as well as executing the installCert class). The following are the lines added in the constructor:
System.setProperty("javax.net.ssl.trustStore",
System.getProperty("user.home") + "/.keystore");
Provider.install("MYX509ALG");
I am using Oracle AS 10.1.2. The application works fine when run on Oracle AS 10.1.2 installed on Windows. But when deployed on a linux box gives the error mentioned above. I compiled and created the jar/ear on the linux box itself.
Any help would be greatly appreciated.
- It's a bit hard on our end to diagnose what's going wrong with your setup. The "Connection timed out" error indicates one of a couple of things.
1. The URL to the iControl endpoint is not valid.
2. The URL to the iControl endpoint is not routable.
3. The java setup on your Linux box doesn't have all the SSL (jsse) code required for the SSL connection.
I'd start by printing out the full URL that you are connecting to (ie. https://x.x.x.x/iControl/iControlPortal.cgi). Then try to test connectivity from the new machine (with a browser, curl, wget, ...).
If you can connect to the endpoint with means outside of java, then odds are it's a jsse issue. I really don't think so as the connect timed out error almost always indicates an issue with the connection string or routing from the client to the BIG-IP.
-Joe 
Smitha_111683Thanks Joe for the pointers. The issue has been resolved. It was a security feature that does not allow to connect to bigip address on the external vlan from a host on the internal vlan.
jimbob22_43693I'm running into what looks to be this same issue. Would it be possible to elaborate on what that security feature was? Is it something I change on the BigIP?
Thanks.
Danny Agapito (datasynapse)- hoolio
Cirrostratus
Hi Danny,
It's port lockdown. You can get more info on it in SOL7317 (Click here). iControl will make calls to the BIG-IP via port 443 so that's what you would want to check for.
Aaron
