Thanks, I did set this to the load balancer vip at what point I got the message below. In any case, I changed the “strictness” global setting to false and following this it is working. While this is OK for my environment, I would still like to understand if the fact that I had to change the strictness is due to a configuration error on my side or if this step should be part of the documentation.
Thanks Niclas > On 15 Jun 2022, at 08:18, Rohit Yadav <rohit.ya...@shapeblue.com> wrote: > > It's possible but then you'll need to configure the "host" global setting > (set this to the IP address of your load balancer) and this "host" address > must be accessible by your KVM agents (if any) and SSVM/CPVM agents. > > > Regards. > > ________________________________ > > > > From: Niclas Lindblom > Sent: Thursday, June 09, 2022 19:19 > To: users@cloudstack.apache.org > Subject: Management Server HA > > Hi, > > I have 2 development servers that I wanted to load balance with Traefik that > I have running as a docker instance. I believe I have configured Traefik > correctly according to the guidance in the documentation > https://docs.cloudstack.apache.org/en/latest/adminguide/reliability.html . > However, when I try and logon the page hangs and I am seeing this error > message in the management server logs > > ERROR [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-70:null) (logid:) SSL > error caught during wrap data: Certificate ownership verification failed for > client: 192.168.20.6, for local address=/192.168.20.11:8250, remote > address=/192.168.20.6:54714. > > Am I missing some steps in the configuration with regards of SSL ? > > Niclas
smime.p7s
Description: S/MIME cryptographic signature
