[f-nsp] ServerIron: complete ssl health check

Vlad marchenko at gmail.com
Tue Feb 23 13:07:57 EST 2010


Hello,

I'm running 07.4.01kT12 on ServerIron and having trouble getting
complete health check to work on https (SSL) port.

Per documentation, by default SI performs simple health check on SSL
port (i.e. L3 check plus a simple SSL Helo packet). This works good,
but we want to improve monitoring so that it checks for our
application to be running OK. so I added

>no server use-simple-ssl-health-check

as well as

>server real NAME
>port ssl keepalive
>port ssl url "GET /app_status"

at this point I see that ServerIron disables 443 port on the real
server sporadically for a second, then enables it back and keep doing
that until I revert back to simple ssl check. Note that same
/app_status works just fine on http port, so it's not matter of
application, there is some issue with establishing SSL connection
between ServerIron and our web server. The SSL certificate we use is
inexpensive $200 one from rapidssl.com.

Does anyone know how to get it working with full healthcheck?


-- Vlad



More information about the foundry-nsp mailing list