Forum Discussion
NimbostratusPage cannot be displayed - intermittent issue
Hello Experts
I have one application with SSL-offload on F5 with rewrite, redirect irule. rewrite for real host name to virtual host name in header/body. redirect irule for http to https.
The problem I am facing is that at sometimes, I am getting "page cannot be displayed" then I need to remove the ssl client profile, apply the changes and then again put the ssl profile and it worked. But after sometimes, problem recurs.
I would appreciate if you could let me know what could be the problem. It seems that problem with certificate related settings. Its javabased application showing maps
2 Replies
IanBEmployee
Firstly, if you're using Internet Explorer as your browser, turn off "Show friendly HTTP error messages" (internet options / advanced), so that you have a chance of seeing the actual error returned, instead of that generic error page that IE replaces it with.
If you're still getting the same generic error, then your client is probably getting a TCP RST. When the virtual is in that broken state, I suggest running "curl -vk /" from the commandline of the LTM to eliminate anything between your client and LTM from being the cause, though this might not work well if your application requires cookies or authentication in order to reproduce the issue.
Also confirm whether the problem affects multiple clients simultaneously.
You could also add some logging in irules to try and identify exactly where the failure is occurring, and enable reset packet logging (tmsh modify sys db tm.rstcause.pkt value enable), then check /var/log/ltm to see if that gives you an indication of what the problem is. Remember to disable rstcause logging again later.
You could also get a tcpdump capture of the issue occurring, and then look at it in wireshark to see if the SSL stack is sending any fatal alerts
Amit585731Did you try wireshark, seems to be related to cipher. Also is mutual auth enabled in this case?
Thanks
