topic Re: Problem with Sorry Server, HELP!! in Application Networking https://community.cisco.com/t5/application-networking/problem-with-sorry-server-help/m-p/15078#M160 <HTML><HEAD></HEAD><BODY><P>Couple of things here.</P><P></P><P>1. Is there a reason why you have specified 'port 443' in each of the services. This implies that you are natting the backend connection between the css and the webserver to port 443 even if the data coming in is something else, like port 80.</P><P></P><P>Quite honestly if your users are coming in port 443, then specifiy this in the content rule and remove it from the service. </P><P></P><P>2. As for why your sorry server does not work. The sorry server shows port 443 in the service, but the keepalive is port 80. If port 80 is working on the webserver and port 443 is not in your senario, the service will remain active even though it is not working for 443.</P><P></P><P>In other words, it makes no sense to use keepalive port 80 on a service when the way you have it configured only allows connections from the css to be on port 443 because you specified port 443 in the service. You generally want the keepalive to be the same port as the type of traffic you are sending the server so that the css really knows if the server is up.</P><P></P><P>Hope this all makes sense</P><P>Pete Knoops</P><P>Cisco Systems</P></BODY></HTML> Mon, 16 Sep 2002 11:27:33 GMT pknoops 2002-09-16T11:27:33Z Problem with Sorry Server, HELP!! https://community.cisco.com/t5/application-networking/problem-with-sorry-server-help/m-p/15077#M159 <P>I'm a newbie to content technology. I've recently implemented a css 11154 into our test environment and done the configs. Everything seems to work fine, however when I took the webserver off line the Sorry server displayed "page cannot be found" instead of displaying what I was wrote on the Sorry server site. I pasted the revelant bit of my config for you all to look at to see if I've missed any thing. Thanks in advance.</P><P></P><P></P><P>service SORRYwebserver</P><P> ip address 132.130.203.16</P><P> protocol tcp</P><P> port 443</P><P> keepalive type http</P><P> keepalive port 80</P><P> active</P><P></P><P>service TEST1webserver</P><P> ip address 132.130.203.13</P><P> protocol tcp</P><P> port 443</P><P> keepalive port 443</P><P> keepalive type http</P><P> active</P><P></P><P>service TEST2webserver</P><P> ip address 132.130.203.14</P><P> protocol tcp</P><P> port 443</P><P> keepalive port 443</P><P> keepalive type http</P><P> active</P><P></P><P></P><P>!*************************** OWNER ***************************</P><P>owner samson</P><P></P><P> content rule_external</P><P> add service TEST1webserver</P><P> add service TEST2webserver</P><P> balance leastconn</P><P> protocol tcp</P><P> vip address 132.130.205.3</P><P> primarySorryServer SORRYwebserver</P><P> active</P><P></P><P> content rule_internal</P><P> add service TEST1webserver</P><P> add service TEST2webserver</P><P> balance leastconn</P><P> protocol tcp</P><P> vip address 132.130.205.4</P><P> primarySorryServer SORRYwebserver</P><P> active</P><P></P><P></P><P></P><P></P> Thu, 12 Sep 2002 16:47:25 GMT https://community.cisco.com/t5/application-networking/problem-with-sorry-server-help/m-p/15077#M159 saluko 2002-09-12T16:47:25Z Re: Problem with Sorry Server, HELP!! https://community.cisco.com/t5/application-networking/problem-with-sorry-server-help/m-p/15078#M160 <HTML><HEAD></HEAD><BODY><P>Couple of things here.</P><P></P><P>1. Is there a reason why you have specified 'port 443' in each of the services. This implies that you are natting the backend connection between the css and the webserver to port 443 even if the data coming in is something else, like port 80.</P><P></P><P>Quite honestly if your users are coming in port 443, then specifiy this in the content rule and remove it from the service. </P><P></P><P>2. As for why your sorry server does not work. The sorry server shows port 443 in the service, but the keepalive is port 80. If port 80 is working on the webserver and port 443 is not in your senario, the service will remain active even though it is not working for 443.</P><P></P><P>In other words, it makes no sense to use keepalive port 80 on a service when the way you have it configured only allows connections from the css to be on port 443 because you specified port 443 in the service. You generally want the keepalive to be the same port as the type of traffic you are sending the server so that the css really knows if the server is up.</P><P></P><P>Hope this all makes sense</P><P>Pete Knoops</P><P>Cisco Systems</P></BODY></HTML> Mon, 16 Sep 2002 11:27:33 GMT https://community.cisco.com/t5/application-networking/problem-with-sorry-server-help/m-p/15078#M160 pknoops 2002-09-16T11:27:33Z