Welcome! Log In Create A New Profile

Advanced

Moving SSL termination to the edge increased the instance of 502 errors

Michael Ottoson
November 28, 2017 11:30PM
Hi All,

We installed nginx as load balancer/failover in front of two upstream web servers.

At first SSL terminated at the web servers and nginx was configured as TCP passthrough on 443.

We rarely experiences 502s and when it did it was likely due to tuning/tweaking.

About a week ago we moved SSL termination to the edge. Since then we've been getting daily 502s. A small percentage - never reaching 1%. But with ½ million requests per day, we are starting to get complaints.

Stranger: the percentage seems to be rising.

I have more details and a pretty picture here:

https://serverfault.com/questions/885638/moving-ssl-termination-to-the-edge-increased-the-instance-of-502-errors


Any advice how to squash those 502s? Should I be worried nginx is leaking?
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Moving SSL termination to the edge increased the instance of 502 errors

Michael Ottoson November 28, 2017 11:30PM

Re: Moving SSL termination to the edge increased the instance of 502 errors

Maxim Dounin November 29, 2017 07:44AM

RE: Moving SSL termination to the edge increased the instance of 502 errors

Michael Ottoson November 29, 2017 08:06AM

Re: Moving SSL termination to the edge increased the instance of 502 errors

Drew Turner November 29, 2017 09:18AM

Re: Moving SSL termination to the edge increased the instance of 502 errors

pbooth November 29, 2017 01:14PM

Re: Moving SSL termination to the edge increased the instance of 502 errors

Anoop Alias November 30, 2017 06:10AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 307
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready