So some things to consider. 1. Change your child remap to use a http origin, and your existing parent routing configuration will work. The parent remap will use a https origin.
2. Keep the https origin in your child remap. You will need to change the parent routing configuration to poll the parent server(s) on the https port(whatever that is, usually port 443) You will need to ensure that the the parent server vends a certificate that can be verified by the child. If not, then at the child disable server verify for those transactions(or even globally) On Mon, Jan 6, 2020 at 10:48 AM Jeremy Payne <[email protected]> wrote: > > ATS child/edge is attempting a TLS setup to your parent. > Is the parent configured for TLS communication ? > > > On Mon, Jan 6, 2020 at 10:38 AM ezko <[email protected]> wrote: > > > > hi, > > so trying to configure a simple 2 tier cache with reverse and forward > > caches. > > any ideas why this doesn't work ? > > thanks. > > > > client --> ats_rev --> ats_fw --> origin > > > > for ats_rev (reverse proxy) , remap config: > > map http://ats.vod_ds.test.tv/assets/ https://ngxorg.test.tv/assets/ > > > > parent config: > > dest_domain=ngxorg.test.tv port=443 parent="172.24.0.8:80|0.1;" > > round_robin=consistent_hash go_direct=false qstring=consider > > > > and 172.24.0.8 is the ats_fw (forward proxy) > > > > it works fine if origin is http but fails for https. > > > > logs for ats_rev: > > ... > > Parent initially marked as down 172.24.0.8:80 > > SSL connection failed for 'ngxorg.test.tv': error:140770FC:SSL > > routines:SSL23_GET_SERVER_HELLO:unknown protocol > > > > client revives: HTTP/1.1 502 Next Hop Connection Failed > > > > > > > > > > > > -- > > Sent from: http://apache-traffic-server.24303.n7.nabble.com/
