Hi,

On Fri, 2020-10-30 at 00:49 +0000, Wesley Lukehart wrote:
> To recap;
> Exchange says component is Inactive
> IIS is up and still serving content
> healthcheck.htm page does not load, is down, unavailable, what have you
> haproxy gets 200 response from health check that supposedly isn’t
> available

Have you tested with curl / wget from haproxy server if IIS/Exchange returns
stautus=200 for /oab/healthcheck.htm ?

curl -v -k https://ip.addr.e.ss/oab/healthcheck.htm
and
# this probably sends "correct" iis.exchange.domain.com SNI to iis server,
# maybe iis/exchange needs SNI to serve correct file/status ?
curl -v -k --resolve iis.exchange.domain.com:443:iis.ip.here
https://iis.exchange.domain.com/oab/healthcheck.htm


> Here are relevant haproxy logs showing the health check as good and
> content still being proxied, even though the component is inactive (ie
> health check page is not accessible)
>      Oct 29 14:51:39 <Server-Name> haproxy: [WARNING] 302/145139 (93952) :
> Health check for server be_ex2019_oab/<SERVER_NAME_1> succeeded, reason:
> Layer7 check passed, code: 200, info: "HTTP status check returned code
> <3C>200<3E>", check duration: 8ms, status: 3/3 UP.
 
> Looking at the IIS logs, when the component is active, I see the GET
> requests from my workstations IP. When the component is inactive, no GET
> request is logged from my workstation.
> In addition, weather the service is active or inactive, IIS logs GET
> requests from the haproxy servers:
>      2020-10-30 00:13:01 10.168.99.91 GET /oab/healthcheck.htm - 443 -
> <haproxy_server_ip_1> - - 200 0 0 1
>      2020-10-30 00:13:11 10.168.99.91 GET /oab/healthcheck.htm - 443 -
> <haproxy_server_ip_2> - - 200 0 0 1

So both haproxy and IIS log show that /oab/healthcheck.htm is served with
status=200 to haproxy ?

When you test /oab/healthcheck.htm with browser what url do you use:
https://correct.domain.com/oab/healthcheck.htm
or https://ip.addr.es.s/oab/healthcheck.htm ? Do you get different result
with ip or hostname ?

-Jarno

-- 
Jarno Huuskonen

Reply via email to