Forum Discussion

Jon_106252's avatar
Jon_106252
Icon for Nimbostratus rankNimbostratus
Nov 12, 2013

Lync 2013 reverse proxy unstable

I just configured my first iApp with LTM (v.11.2.1). It worked well to start but then after a few hours all the web services stopped working. For example, https://meet.domain.com would give a "could not establish a secure connection" error in any browser. When testing directly against the internal Lync Front End, it works. Also, mobile device would not log.

 

After a few more hours, everything would start work again.

 

I can add that everything works well from inside... meaning when we remove LTM from the Lync services equation.

 

I am using our internet PKI using a SHA1 SAN certificate. I'm not sure if I need to specify our Chain, Trusted CA in either client or server certificate.

 

Any hints on how to fix this or how to configure my certificates in my different profiles?

 

Thanks

 

devops
iApps

6 Replies

  • Jon_106252's avatar
    Jon_106252
    Icon for Nimbostratus rankNimbostratus
    Nov 12, 2013

    And by the way, when the VS is not working, if I go into its properties and just click the Update button, even without changing anything, it starts to work again right away. For a while... then it breaks again.

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 13, 2013

    OK, so could you provide some data around your setup etc.

     

    -VE or physical?

     

    -Uptime?

     

    -Any useful log messages?

     

    -CPU & memory usage?

     

    -SSL Profile settings?

     

    -Anything else useful?

     

    -Have you tried doing a packet capture whilst the issue is occurring, client side in particular

     

    -Server metrics?

     

  • Jon_106252's avatar
    Jon_106252
    Icon for Nimbostratus rankNimbostratus
    Nov 25, 2013

    Duplicate IP in our DMZ. An old server had multiple ip configured and one of them was the one I was using for my VS.