Karthikdasari0423 commented on issue #10660:
URL: 
https://github.com/apache/trafficserver/issues/10660#issuecomment-1786559003

   Hi @bryancall @brbzull0 i tried and ats is installed sucessfully but i am 
facing below error
   ```
   root@ubuntu:~/trafficserver# /opt/bin/curl -k --http3-only -v  
https://localhost:4443/cache/1024
   * processing: https://localhost:4443/cache/1024
   *   Trying [::1]:4443...
   * QUIC: connection to ::1 port 4443 refused
   * QUIC connect to ::1 port 4443 failed: Couldn't connect to server
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   ^C
   root@ubuntu:~/trafficserver# /opt/bin/curl -k --http3 -v  
https://localhost:4443/cache/1024
   * processing: https://localhost:4443/cache/1024
   *   Trying [::1]:4443...
   * QUIC: connection to ::1 port 4443 refused
   * QUIC connect to ::1 port 4443 failed: Couldn't connect to server
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying [::1]:4443...
   * connect to ::1 port 4443 failed: Connection refused
   *   Trying 127.0.0.1:4443...
   * Connected to localhost (127.0.0.1) port 4443
   * ALPN: offers h2,http/1.1
   * TLSv1.3 (OUT), TLS handshake, Client hello (1):
   * OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to localhost:4443
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   *   Trying 127.0.0.1:4443...
   ^C
   root@ubuntu:~/trafficserver#
   ```
   am i missing anything here
   
   below is my records.yaml
   ```
   root@ubuntu:~/trafficserver# cat /opt/ats/etc/trafficserver/records.yaml
   ts:
     accept_threads: 1
     cache:
       limits:
         http:
           max_alts: 5
       log:
         alternate:
           eviction: 0
       max_doc_size: 0
       min_average_object_size: 8000
       ram_cache:
         size: -1
       ram_cache_cutoff: 4194304
       threads_per_disk: 8
     diags:
       debug:
         enabled: 0
         tags: http|dns
     dump_mem_info_frequency: 0
     exec_thread:
       affinity: 1
       autoconfig:
         enabled: 1
         scale: 1.0
       limit: 2
     http:
       accept_no_activity_timeout: 120
       cache:
         cache_responses_to_cookies: 1
         cache_urls_that_look_dynamic: 1
         heuristic_lm_factor: 0.1
         heuristic_max_lifetime: 86400
         heuristic_min_lifetime: 3600
         http: 1
         ignore_client_cc_max_age: 1
         required_headers: 2
         when_to_revalidate: 0
       connect_attempts_max_retries: 3
       connect_attempts_max_retries_down_server: 1
       connect_attempts_rr_retries: 3
       connect_attempts_timeout: 30
       down_server:
         cache_time: 60
       forward:
         proxy_auth_to_parent: 0
       insert_client_ip: 1
       insert_request_via_str: 1
       insert_response_via_str: 3
       insert_squid_x_forwarded_for: 1
       keep_alive_no_activity_timeout_in: 120
       keep_alive_no_activity_timeout_out: 120
       negative_caching_enabled: 0
       negative_caching_lifetime: 1800
       normalize_ae: 1
       parent_proxy:
         retry_time: 300
       push_method_enabled: 0
       server_ports: 8080 8080:ipv6
       slow:
         log:
           threshold: 0
       transaction_active_timeout_in: 900
       transaction_active_timeout_out: 0
       transaction_no_activity_timeout_in: 30
       transaction_no_activity_timeout_out: 30
       uncacheable_requests_bypass_parent: 1
     log:
       auto_delete_rolled_files: 1
       logging_enabled: 3
       max_space_mb_for_logs: 25000
       max_space_mb_headroom: 1000
       periodic_tasks_interval: 5
       rolling_enabled: 1
       rolling_interval_sec: 86400
       rolling_size_mb: 10
     net:
       connections_throttle: 30000
       default_inactivity_timeout: 86400
       max_connections_in: 30000
       max_requests_in: 0
     res_track_memory: 0
     reverse_proxy:
       enabled: 1
     ssl:
       client:
         CA:
           cert:
             filename: localhost.crt
             path: /opt/ats/etc/trafficserver/
         verify:
           server:
             policy: PERMISSIVE
             properties: ALL
     task_threads: 2
     url_remap:
       pristine_host_hdr: 0
       remap_required: 1
   ---
   ts:
     http:
       server_ports: 8080 4443:ssl 4443:quic
   ---
   ts:
     udp:
       threads: 1
   ---
   ts:
     diags:
       show_location: 2
   ---
   ts:
     quic:
       initial_max_streams_bidi_in: 100000
   # Document modified by traffic_ctl Tue Oct 31 06:18:39 2023
   #
   ---
   ts:
     quic:
       initial_max_streams_bidi_out: 100000
   ---
   ts:
     quic:
       server:
         supported_groups: '"P-256:X25519:P-384:P-521"'
   ---
   ts:
     quic:
       client:
         supported_groups: '"P-256:X25519:P-384:P-521"'
   ---
   ts:
     quic:
       disable_http_0_9: 1
   root@ubuntu:~/trafficserver#
   
   ```
   
   curl  -V
   ```
   root@ubuntu:~/trafficserver# /opt/bin/curl -V
   curl 8.2.1-DEV (x86_64-pc-linux-gnu) libcurl/8.2.1-DEV OpenSSL/3.1.2 
zlib/1.2.11 brotli/1.0.9 nghttp2/1.55.1 ngtcp2/0.17.0 nghttp3/0.13.0
   Release-Date: [unreleased]
   Protocols: dict file ftp ftps gopher gophers http https imap imaps mqtt pop3 
pop3s rtsp smb smbs smtp smtps telnet tftp
   Features: alt-svc AsynchDNS brotli HSTS HTTP2 HTTP3 HTTPS-proxy IPv6 
Largefile libz NTLM NTLM_WB SSL threadsafe TLS-SRP UnixSockets
   root@ubuntu:~/trafficserver#
   ```
   
   netstat 
   ```
   root@ubuntu:~/trafficserver# netstat -alpn | grep 4443
   tcp        0      0 0.0.0.0:4443            0.0.0.0:*               LISTEN   
   251519/traffic_serv
   udp        0      0 0.0.0.0:4443            0.0.0.0:*                        
   251519/traffic_serv
   root@ubuntu:~/trafficserver#
   ```
   remap.conf
   ```
   #     fields cannot.
   #  2) The number of capturing sub-patterns is limited to 9;
   #     this means $0 through $9 can be used as substitution place holders ($0
   #     will be the entire input string)
   #  3) The number of substitutions in the expansion string is limited to 10.
   #
   map / http://127.0.0.1/ @plugin=generator.so
   root@ubuntu:~/trafficserver#
   ```
   
   ssl_multicert.conf
   ```
   # Examples:
   #   ssl_cert_name=foo.pem
   #   dest_ip=*   ssl_cert_name=bar.pem ssl_key_name=barKey.pem
   #   dest_ip=209.131.48.79       ssl_cert_name=server.pem 
ssl_key_name=serverKey.pem
   #   dest_ip=10.0.0.1:99 ssl_cert_name=port99.pem
   #   ssl_cert_name=foo.pem ssl_key_dialog="exec:/usr/bin/mypass foo 'ba r'"
   #   ssl_cert_name=foo.pem action=tunnel
   #   ssl_cert_name=wildcardcert.pem ssl_key_name=privkey.pem
   dest_ip=* ssl_cert_name=/opt/ats/etc/trafficserver/localhost.crt 
ssl_key_name=/opt/ats/etc/trafficserver/localhost.key
   root@ubuntu:~/trafficserver#
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to