Hello forum,
I've bumped into an issue that puzzles me.
I have a client that has a load balancing rule active for years, to 4 backend servers. It uses a TCP health check.
This has been running fine until they did an upgrade of the backend last night, and the new backend doesn't seem to like the TCP connects from the UTM. So they've installed lighttpd on the backend servers, and hacked a cgi script together to check the status of the application, and return a HTTP 200 or 503 depending on the operational status.
Checking the status manually works fine:
[server]$ curl http://127.0.0.1 HTTP/1.1 200 Ok Content-Type: text/html Content-Length: 65 <html><body>Application Cluster Node is operational</body></html> [server]$
It also works fine from other servers in the subnet, so no server based firewall rules are in the way.
However, as soon as I change the load balancer rule from TCP to HTTP ( with either leaving the URL field empty or entering "index.php" ), all nodes go down.
The server monitor logs:
2022:07:31-16:43:53 firewall-1 service_monitor[29121]: id="4003" severity="error" sys="System" sub="loadbalancing" name="error reading HTTP response: 1/-1" 2022:07:31-16:43:53 firewall-1 service_monitor[29121]: id="4003" severity="error" sys="System" sub="loadbalancing" name="error reading HTTP response: 1/-1" 2022:07:31-16:43:53 firewall-1 service_monitor[29121]: id="4003" severity="error" sys="System" sub="loadbalancing" name="error reading HTTP response: 1/-1" 2022:07:31-16:43:53 firewall-1 service_monitor[29121]: id="4003" severity="error" sys="System" sub="loadbalancing" name="error reading HTTP response: 1/-1"
but there are no requests logged in the lighttpd logs on the 4 backend servers.
I must be missing something obvious here, but I'm staring at it for 2 hours and getting nowhere.
Any tips on where I go wrong?
This thread was automatically locked due to age.
