Forum Discussion

sathish_2826's avatar
sathish_2826
Icon for Nimbostratus rankNimbostratus
Apr 28, 2020

HTTPS health monitor issue

Hi All,

I am trying to validate the VIP, which is failing in the browser stating that "connection reset",

 

The server that is mapped to the pool is green via the health check, i can use curl -vk https://<serverip>/state.txt --> it gives the right response,

 

If i do the same with the vip, i get the following error, curl -vk https://<VIPip>/state.txt --> Below error

 

> GET /state.txt HTTP/1.1

> Host: xxxxxxxxxxxxxxx

> User-Agent: curl/7.47.1

> Accept: */*

> 

 

 

* SSL read: error:00000000:lib(0):func(0):reason(0), errno 104

* Closing connection 0

curl: (56) SSL read: error:00000000:lib(0):func(0):reason(0), errno 104

 

 

The server is local to the F5, directly connected,

 

Please let me know if there are any thoughts on this problem.

 

application delivery
BIG-IP
LTM

11 Replies

Sort By
  • Lidev's avatar
    Lidev
    Icon for MVP rankMVP
    Apr 28, 2020

    Hello sathish,

    I've already met this type of SSL errorno 104 when I was using an iRule containing errors with processing on the HTTP responses part.

    Regards

  • sathish_2826's avatar
    sathish_2826
    Icon for Nimbostratus rankNimbostratus
    Apr 28, 2020

    Hi Lidev,

     

    The Irule used on the vip is a standard rule which is used in 1000's of other vip's with no issues,

     

    Do you see any other problem?

  • Lidev's avatar
    Lidev
    Icon for MVP rankMVP
    Apr 28, 2020

    It's hard to say without more details about the virtual server and monitoring configuration.

    I'll still test without the iRule to see if you can reproduce the issue ;-)

    • sathish_2826's avatar
      sathish_2826
      Icon for Nimbostratus rankNimbostratus
      Apr 28, 2020

      Removing Irule didn't help, anyway, thanks for looking into this :)

  • Samir's avatar
    Samir
    Icon for MVP rankMVP
    Apr 28, 2020

    Hope you have applied default "serverssl" profile to VIP and automap.. Apply and capture the packet. Hope it will work

  • sathish_2826's avatar
    sathish_2826
    Icon for Nimbostratus rankNimbostratus
    Apr 28, 2020

    Hi Samir,

    Serverssl is applied, SNAT is not required as server is local to the F5, thank you.