cancel
Showing results for 
Search instead for 
Did you mean: 

Smartfox over 443 non ssl traffic passthrough

Highlighted
New Contributor

Smartfox over 443 non ssl traffic passthrough

I tried searching the forums for an answer but found nothing so hopefully the community can help.  Any help is greatly appreciated.

 

We are running smartfox on a pool of servers.  When we use the smartfox client to go to the server via public IP address i.e. direct to (making this up) 72.2.2.2 then we can connect.  When I push the client to connect through the public IP or domain of the load balancer (making it up again) 12.11.11.11 then there is no connection to the pool.   If I put into a web browser http:domain.com:443 then I see activity in the monitor as going to that pool, the same goes if I put in the public IP address. 

 

In reading the smartfox documentation it says that it just uses TCP, no SSL.  I've tried various rules that I will list out below and still get no pass through to the pool from the client.  Does anyone have recommendations on how to setup the virtual server and the rules?  Thank you for the help.

 

RULES tried:

1.  IF   URL Path contains (case insensitive) "subdomain.domain.com"
THEN Choose Pool: "_pool"


2. IF URL Path contains "public IP"
THEN Choose Pool: "_pool"

3. if(http.getHostHeader() == "subdomain.domain.com" )
{
pool.use
("_pool");
}

4. if(http.getHostHeader() == "subdomain.domain.com:443" )
{
pool.use
("_pool");
}

5. IF Remote Port is not equal to "80"
THEN Choose Pool: "_pool"
3 REPLIES
Contributor

Re: Smartfox over 443 non ssl traffic passthrough

Hi Mallanon,

 

Are you saying that port 443 works but 80 doesn't?  If you want to have both ports 80 and 443 open then you need two virtual servers, one for 80 and one for 443.  If you want to do SSL pass through then you will also need two pools, one for 80 and one for 443 attached to the virtual servers.  First try this without any rules and see how it goes.

 

Thanks,

Faisal

New Contributor

Re: Smartfox over 443 non ssl traffic passthrough

Thank you for looking at this.

 

No those are just different rules I've tried at different times and there isn't any SSL pass through (I recognize that 443 is typically SSL but that's what they went with.  After reading as much documentation as I could find on smartfox I found out that they don't do well with http traffic.  So I set it up for first server as the virtual server listening on port 443 and a basic rule that says that anything that comes into the 443 port gets forwarded into my pool.  We can see the connections going into the server as the smartfox logs show a connection attempt trying to be established. 

 

The issue is either the server configuration or possibly an assymetric route issue which I doubt but it is possible since the servers had a 2nd public IP to the internet.  We'll keep working at this.

 

-Matt-

Contributor

Re: Smartfox over 443 non ssl traffic passthrough

I see.  A debugging feature which might help you is Request Tracing which can be enabled under the Virtual Server's configuration page, its right above Request Logging.  Once enabled you can then click on the magnifying glass on a connection under Activity -> Connections to get a detailed breakdown on what happened from the Stingray point of view.  Make sure to first change the value of recent_consto something greater than 0 under System -> Global Settings -> Logging.

 

Thanks,

Faisal