[f-nsp] L7 Healthchecks on TLS (stunnel) ports

Brent Van Dussen vandusb at attens.com
Fri Jun 13 13:26:31 EDT 2003


Ditch the port 995, etc.. keepalive statements under your real server 
config.  By specifying the ports globally at the top of your config you 
elimate the need to do it under the real servers.  It might not solve the 
problem but it might fix it too ;)

-Brent


At 07:06 PM 6/12/2003, Ethan Burnside wrote:
>Greetings,
>
>     I'm trying to configure the ServerIron XL to do health checks
>against pop3s (995) and imaps (993) ports.  The ports are stunnel (TLS)
>localhost redirects to pop3 and imap respectively.  I set it up with:
>
>server port 995
>  tcp keepalive 15 3
>
>server port 993
>  tcp keepalive 15 3
>
>server real <servername> <ip>
>  port 995
>  port 995 keepalive
>  port 993
>  port 993 keepalive
>  port 2525
>  port 2525 keepalive
>
>     But I still see failure after failure (flapping) in the logs.
>Anyone have any experience with SSL/TLS port monitoring outside of the
>ServerIron's known ports?
>
>     TYIA!
>
>Cheers,
>
>~Ethan B.
>
>
>--
>--------------------------
>Ethan Burnside - Founder
>Kattare Internet Services
>http://www.kattare.com
>--------------------------
>
>
>
>
>
>_______________________________________________
>foundry-nsp mailing list
>foundry-nsp at puck.nether.net
>http://puck.nether.net/mailman/listinfo/foundry-nsp




More information about the foundry-nsp mailing list