[users@httpd] RE: [POSSIBLE SPAM] - Re: [users@httpd] Problem with SSL request via Windows Network Load Balancer (WNLB) - Email found in subject

[Lee Weng Kong <LW...@dsta.gov.sg>]

Wow, thanks for the quick reply. Just to clarify, what do you mean by
"your load-balancer doesn't handle https correctly"?

Do you mean
1) Windows Network Load Balancer is unable to handle https correctly at
all (i.e. there is no point trying to get it working, because it won't).
I don't think that is the case, because I've gotten it to work with
SSL-enabled IIS before, and it worked fine then.

OR

2) There is some configuration that I'm getting wrong with WNLB. Here's
what I configured for the WNLB.

a) Cluster Parameters
Primaery IP: 131.42.2.5
Subnet Mask: 255.255.0.0
Full Internet name: 131.42.2.5
Remote control is not enabled.  

b) Host Parameters:
Priority(Unique host ID): 1
Initial cluster state: active
Dedicated IP address: 131.42.1.4
Subnet mask: 255.255.0.0

C) Port Rules
Port Range: 0 to 65535
Protocol: Both
Filtering mode: multiple hosts, affinity: single, load:100(%).

Any ideas if these settings are ok? Or should I have set them
differently?

Thanks!

Weng Kong

-----Original Message-----
From: Davide Bianchi [mailto:davide@onlyforfun.net] 
Sent: Thursday, July 21, 2005 3:27 PM
To: users@httpd.apache.org
Subject: [POSSIBLE SPAM] - Re: [users@httpd] Problem with SSL request
via Windows Network Load Balancer (WNLB) - Email found in subject

Lee Weng Kong wrote:
> 4) http://131.42.2.5:443 was ok. 443 is my port number for HTTPS

No, this is not "ok". If you can get an https page by using http, it
means that the system is not 'speaking https' but plain http.
And this lead to

> 5) https://131.42.2.5 <https://131.42.2.5/> was NOT ok.

of course, because the server can't understand the request since it's
encrypted.

> Anyone hit by this problem before. Any ideas what is wrong here?

Your load balancer doesn't handle https correctly.

Davide


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org



This e-mail is intended only for the named addressee(s) and may contain confidential and/or privileged information. If you are not the named addressee (or have received this e-mail in error), please notify the sender immediately. The unauthorised use, disclosure, distribution or copying of the contents in this e-mail is prohibited. Thank you.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org