Forum Discussion
Anup_Km
Nimbostratus
NimbostratusUnable to connect to virtual server with curl -v xx.xx.xx.xx:8443 or 443
Hi,
I have created one Virtual Server in LTM Big IP F5 BIG-IP 14.1.0.2 Build 0.0.4 Point Release2
Port number I used while creating is 443 https service. Also Pool Members are from different subnets that Virtual Server; hence no SNAP auto map is used.
I get output when i run same command for Pool member IP with Service port 8443; as at server end 8443 port is assigned. However when I am running command with 8443 and 443 but it does not produce any output. It gives me error of Conenction refuse. Below GIven is Logs of Output
logs:
* Rebuilt URL to:
* Trying xx.xx.xx.xx...
* connect to xx.xx.xx.xx port 443 failed: Connection refused
* Failed to connect to xx.xx.xx.xx port 443: Connection refused
* Closing connection 0
curl: (7) Failed to connect to xx.xx.xx.xx port 443: Connection refused
- Nikoolayy1
MVP
Hello , Please do more investigation as it could be many things as the web server not allowing the traffic and so on. Also the pool member being different subnet than the VIP or even the F5 device not having a direct subnet to the pool member does not affect SNAT as the F5 self IP is used for the server connection. Maybe you need to read:
https://support.f5.com/csp/article/K7336
https://support.f5.com/csp/article/K99422936
For HTTP/SSL issues check:
Anup_KmI did some additonal Check that Virtual IP is reachable from Server. and I am also able to run curl command for Server IP it gives me Handshake results.
One strange thing; When i telnet Virtual IP from inside F5 CLI it does not allow me inside. Howerver when I try to telnet Server Pool IP I get to prompt. It is very different behaviour as virtual IP is only present on F5 device itselft.
Still I am not able to telnet it with port 8443 or 443 whichever I configure.
- Nikoolayy1
Again the F5 uses a self ip to talk to the server not the VIP address that is for the client. Please see what I provided and maybe check:
- Anup_Km
No. I am not taking to telnet F5 Virtual Interface from Putty or any management Server.
I have already taken CLI inside working LB thorugh its management IP.
I tested telneting another virtual Server configured in same LB with Virtual IP with command
telnet xx.xx.xx.xx 443 ........................ it works
However for this perticular Virtual Server when I do same with telnet xx.xx.xx. 8443 or 443 it does not work.
