Hi,
I’m using nginx plus with ssl on TCP load balance, Configured like the documentation, but it not work. (All the IP below is not real-ip)
I have web servers behind, I want to use ssl offloading, and I choose TCP load balance. listen on 443 and proxy to web server's 80.
Page access always report ERR_TOO_MANY_REDIRECTS.
Error log
2015/06/11 03:00:32 [error] 8362#0: *361 upstream timed out (110: Connection timed out) while connecting to upstream, client: 10.0.0.1, server: 0.0.0.0:443, upstream: "10.0.0.2:443", bytes from/to client:656/0, bytes from/to upstream:0/0
10.0.0.2 this ip is the nginx ip, while it is used as upstream?
The configuration is like this, remove the real ip
server {
listen 80 so_keepalive=30m::10;
proxy_pass backend;
proxy_upstream_buffer 2048k;
proxy_downstream_buffer 2048k;
}
server {
listen 443 ssl;
proxy_pass backend;
#proxy_upstream_buffer 2048k;
#proxy_downstream_buffer 2048k;
ssl_certificate ssl/chained.crt;
#ssl_certificate ssl/4582cfef411bb.crt;
ssl_certificate_key ssl/zoomus20140410.key;
#ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#ssl_ciphers HIGH:!aNULL:!MD5;
ssl_handshake_timeout 3s;
#ssl_session_cache shared:SSL:20m;
#ssl_session_timeout 4h;
}
upstream backend {
server *.*.*.*:80;
server *.*.*.*:80;
}
nginx -v
nginx version: nginx/1.7.11 (nginx-plus-r6-p1)
And I’m using amazon linux
uname -a
Linux ip-*.*.*.* 3.14.35-28.38.amzn1.x86_64 #1 SMP Wed Mar 11 22:50:37 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
BTW, tcp how to set access log?