You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Support <su...@xcaptor.com> on 2018/07/02 20:53:24 UTC
Using F5 to load balance tomcat servers
We are having trouble gettings this work over 8080.
Client -->F5:8080----> does not connect to Tomcat server:8080.
Client -->F5:8080----> connects fine to Tomcatserver:8080.
tcpdump on f5 reveals something about incorrect checksum.
visitor.aaa.com.webcache > 172.24.1.26.10970: Flags [.], cksum 0x4201
(incorrect -> 0xedac), seq 2, ack 524, win 4902, length 0 out slot1/tmm1
lis=/Common/si-xcaptor-external-8080
Any suggestions are appreciated.
Regards,
Usha
RE: Using F5 to load balance tomcat servers
Posted by Robert Sulliman <ro...@sjrb.ca>.
Is there a version difference between those tomcat instances?
I recently ran into an issue with our F5's looking for a "200 OK", but after an upgrade it stopped working. In newer versions of Tomcat the optional reason code has been removed.
Thanks,
Robert Sulliman
-----Original Message-----
From: Christopher Schultz <ch...@christopherschultz.net>
Sent: Tuesday, July 3, 2018 11:50 AM
To: users@tomcat.apache.org
Subject: Re: Using F5 to load balance tomcat servers
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Usha,
On 7/2/18 4:53 PM, Support wrote:
> We are having trouble gettings this work over 8080.
>
> Client -->F5:8080----> does not connect to Tomcat server:8080.
>
> Client -->F5:8080----> connects fine to Tomcatserver:8080.
What's the difference between the above two lines? I can't tell...
> tcpdump on f5 reveals something about incorrect checksum.
>
> visitor.aaa.com.webcache > 172.24.1.26.10970: Flags [.], cksum
> 0x4201 (incorrect -> 0xedac), seq 2, ack 524, win 4902, length 0 out
> slot1/tmm1 lis=/Common/si-xcaptor-external-8080
Looks like you have a flaky network component somewhere. Is anything else acting funny?
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=i9wc
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Using F5 to load balance tomcat servers
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Usha,
On 7/2/18 4:53 PM, Support wrote:
> We are having trouble gettings this work over 8080.
>
> Client -->F5:8080----> does not connect to Tomcat server:8080.
>
> Client -->F5:8080----> connects fine to Tomcatserver:8080.
What's the difference between the above two lines? I can't tell...
> tcpdump on f5 reveals something about incorrect checksum.
>
> visitor.aaa.com.webcache > 172.24.1.26.10970: Flags [.], cksum
> 0x4201 (incorrect -> 0xedac), seq 2, ack 524, win 4902, length 0
> out slot1/tmm1 lis=/Common/si-xcaptor-external-8080
Looks like you have a flaky network component somewhere. Is anything
else acting funny?
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAls7t0oACgkQHPApP6U8
pFh3zhAAhz69wmpzWR3cMvxQL68RIiM4VM3d9SCyIwXQ0KBKWnhG0fClVJcj7p62
2Q8G4aAEZ9Zrt5zAdrIpVwpZtU3/Pyzu+LQqu2pgDKvgcgxlK4GkxFuQmRen+xx6
TIOmih6S/iE2mEUh6x6p+8skFR3iESaPeq/27hmMLAG0t+buP2BjfJWjh05ZFwH5
hYn+KLl/MwVyjyBsWAaIOaXYnwqZAXxB5TUMH2c2ySqmJWBFPlbz1MO6RSqNI7/A
UfdJSCGObHUTIYDPtoQZtCwwGZ2FgLtcO0OGgvUCbVVFuHKeMHG+0Az8G0pQrEbA
xd/dYPMftXaxQlDoUdc71l5aqtjwBWeGgx/Vn50xD+1MCB62ZHogE2gels8KohyK
1uBPXYAtXmWNElCRdnyl7Hb75dUUGY9v3/cSldbpXunHjtShzfaBjln5F2azqQs4
DzMAgU3XQAJk3/wgBOoULnxz7rVKt4FkkPKCMz37Fxzdmuuwua32mm9ARAfYQUpV
v5SxDYQIBnVpHMnp9Ex8zOxBt4RmRSS0RjWNrkIUxd/JwUAfdllAy1KrtajawugX
Go/r3POm4dJ0MxRRfO/mrMnJ9/4OHP4ad6b1iNYWb3jqXKKxSFjw5Ek73jUYIj8K
hKX/Dy7FZVKyJlmhWEpm0D+38g9NcKpjEGSqHqjiaPRVf6+oQyE=
=i9wc
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Using F5 to load balance tomcat servers
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Usha,
On 7/3/18 3:25 PM, Support wrote:
> Chris, sorry for the typo! Can't believe I did it.
>
> Client -->F5:8080----> does not connect to Tomcat-server1:8080.
> Client -->connects fine to Tomcat-server1:8080.
>
> Client can connect fine directly to tomcat over 8080 but not
> through f5.
>
> tcpdump on f5 reveals something about incorrect checksum from
> tomcat server.
>
> visitor.aaa.com.webcache > 172.24.1.26.10970: Flags [.], cksum
> 0x4201 (incorrect -> 0xedac), seq 2, ack 524, win 4902, length 0
> out slot1/tmm1 lis=/Common/si-xcaptor-external-8080
>
> Robert, could you please give more details on tomcat optional
> reason code?
You don't mention your Tomcat version. Recent Tomcat versions have
removed the HTTP "reason phrase" from HTTP responses.
To re-enable it ion Tomcat 8.5, you must set sendReasonPhrase="true"
on your <Connector> in conf/server.xml.
If you are running Tomcat 9.0, there is no such option, and you'll
have to determine whether this is your problem with the F5 and ask F5
to provide a version of their lb OS which includes a spec-compliant
HTTP proxy.
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=9SNv
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Using F5 to load balance tomcat servers
Posted by Support <su...@xcaptor.com>.
Chris, sorry for the typo! Can't believe I did it.
Client -->F5:8080----> does not connect to Tomcat-server1:8080.
Client -->connects fine to Tomcat-server1:8080.
Client can connect fine directly to tomcat over 8080 but not through f5.
tcpdump on f5 reveals something about incorrect checksum from tomcat server.
visitor.aaa.com.webcache > 172.24.1.26.10970: Flags [.], cksum 0x4201
(incorrect -> 0xedac), seq 2, ack 524, win 4902, length 0 out slot1/tmm1
lis=/Common/si-xcaptor-external-8080
Robert, could you please give more details on tomcat optional reason code?
Thank you!
Regards,
Regards,
Usha
On Mon, Jul 2, 2018 at 4:53 PM, Support <su...@xcaptor.com> wrote:
> We are having trouble gettings this work over 8080.
>
> Client -->F5:8080----> does not connect to Tomcat server:8080.
>
> Client -->F5:8080----> connects fine to Tomcatserver:8080.
>
> tcpdump on f5 reveals something about incorrect checksum.
>
> visitor.aaa.com.webcache > 172.24.1.26.10970: Flags [.], cksum 0x4201
> (incorrect -> 0xedac), seq 2, ack 524, win 4902, length 0 out slot1/tmm1
> lis=/Common/si-xcaptor-external-8080
>
> Any suggestions are appreciated.
>
> Regards,
>
> Usha
>
>
>