Debugging CSS

[mmedwid]

I am still having problems getting multiple ports to load balance with one-armed bandit configuration. Actually http is loadbalancing fine - but https is not working at all. What debug can I run on the CSS to see if my browser initiated https requests are hitting the CSS? The show summ is showing no hits yet I know there is nothing blocking traffic to the CSS or to the server in question.

service oldwww:443

keepalive port 443

protocol tcp

ip address 26.19.98.11

port 443

keepalive type tcp

active

content www.demo:443

balance aca

advanced-balance ssl

vip address 26.19.98.45

protocol tcp

port 443

add service oldwww:443

active

group Servers2

vip address 26.19.98.45

add service oldwww:80

add service oldwww:443

active

Owner Content Rules State Services Service Hits

demo_master testssl2 Active ssltesta 2

www.demo:80 Active oldwww:80 151

www.demo:443 Active oldwww:443 0

[Gilles Dufour · Accepted solution]

If you want to use 'advanced-balance ssl' you need to also configure the command 'application ssl' to tell the CSS to expect ssl traffic.

There is no debug command on the CSS.

If something does not work, capture a sniffer trace to see what is going on.

Gilles.

[mmedwid]

That helped somewhat. Thank-you. The service hits are now incrementing. So no doubt the traffic is getting there. But still no joy at the actual redirection from the ssl VIP to the ssl service.

www.demo:443 Active oldwww:443 6

[mmedwid]

Got it! Woot!! Can I buy you a beer?