Forum Discussion

JimmyJose's avatar
JimmyJose
Icon for Nimbostratus rankNimbostratus
Feb 29, 2016

HTTPS Monitor not working

Hello,

 

A pool, when configured with an HTTPS monitor, is marked Down. However, when configured with a TCP monitor to check port 443, it gets marked Up.

 

  • Telnet to the web server IPs from within CLI of F5 returns ']'.
  • A manual GET request from the command line of F5 to the web servers returns the content of the page.

Tried configuring the HTTPS monitor in following ways to no avail.

 

1.GET /page.html

 

2.GET /page HTTP/1.0\r\nConnection: Close

 

How can the troubleshooting be furthered in this case?

 

Regards, Jimmy

 

=-=-=

 

application delivery
LTM
monitors

1 Reply

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Feb 29, 2016

    Jimmy,

     

    My approach would be to check the connection from the BIG-IP command prompt with curl, e.g. curl -k https://10.10.10.10 and openssl e.g. openssl s_client -connect 10.10.10.10:443. See what gets returned by these commands.

     

    I'd also look to run tcpdump/ssldump on the BIG-IP and narrow it down to the pool member and self IP of the vlan on the BIG-IP.

     

    Finally, I'd check the following ASKf5 solution to ensure your health monitor complies to the correct formatting, especially the \r\n endings: Constructing HTTP requests for use with the HTTP or HTTPS application health monitor

     

    Hope this helps,

     

    N