Hi,
i have configure haproxy-1.5.4-1.el6.x86_64 with this config

frontend inbound-https
    bind :443 #ssl crt ./my_view_cert.pem
    mode tcp
    option tcplog
    default_backend view_https

backend view_https
    mode tcp
    option tcplog
    option httpchk OPTIONS /
    http-check expect status 200
    option ssl-hello-chk #make sure we can talk SSL, not just TCP
    balance source
    balance roundrobin
    stick on src
    stick-table type ip size 100m expire 1h
    server milap9900 172.16.74.17:443 check id 1 inter 10s rise 5 fall 2
    server milap9901 172.16.74.18:443 check id 2 inter 10s rise 5 fall 2

but when one server responding with 503 haproxy not exclude a fail node

from haproxy machine i check:

wget  https://172.16.74.17 --no-check-certificate
--2014-10-15 16:17:15--  https://172.16.74.17/
Connessione a 172.16.74.17:443...connesso.
AVVERTIMENTO: impossibile verificare il certificato di 172.16.74.17,
rilasciato da "/O=VMware, Inc./OU=VMware View default
certificate/CN=milap9900":
  Impossibile verificare localmente l'autorità dell'emittente.
    AVVERTIMENTO: certificate common name "milap9900" doesn't match
requested host name "172.16.74.17".
HTTP richiesta inviata, in attesa di risposta... 503 Service Unavailable
2014-10-15 16:17:36 ERRORE 503: Service Unavailable.

where am I wrong?

Best Regard
Pasquale

Reply via email to