Parent initially marked as down

I think the issue is the child is sending a https request to the parent.
Does the parent support https on port 3128 ?

Post by Veiko Kukk
Hi,
I'm trying to get ATS 7.1.2 working with single parent and failover to
origin.
"clients" make request against ATS internally with plain http, with
remap.config we map those requests to https.
regex_map http://storage.(.*).cloud.ovh.net https://storage.$1.cloud.ovh.net
@plugin=cachekey.so @pparam=--remove-all-params=true
@pparam=--static-prefix=cloud_ovh_net
parent.config
dest_domain=. parent="192.168.1.52:3128" go_direct=false
I've set go_direct to false as otherwise request would go directly to
origin.
[Mar 28 15:32:21.720] Server {0x2ae732c203c0} NOTE: traffic server running
[Mar 28 15:32:21.826] Server {0x2ae73751e700} NOTE: cache enabled
[Mar 28 15:32:22.735] Server {0x2ae73751e700} NOTE: Parent initially marked
as down 192.168.1.52:3128
[Mar 28 15:32:47.695] Server {0x2ae73751e700} NOTE: Failure threshold met
failcount:10 >= threshold:10, http parent proxy 192.168.1.52:3128 marked
down
Why?
# telnet 192.168.1.52 3128
Trying 192.168.1.52...
Connected to 192.168.1.52.
Escape character is '^]'.
There is proper working network connection between child and parent ATS.
1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.833 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.789 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.790 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.344 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.346 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.693 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.695 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/htm
Where does this come from??
There is and should never be anything at "/" on parent.
I assume this is internal health check on child that tries to request "/" on
parent and since it's obviously failing, will mark parent down and never use
it.
How to change how parent is tested? I found nothing regarding to parent
health check in documentation.
Thanks,
Veiko

Veiko Kukk

2018-03-28 16:38:51 UTC

Hi,

No, only http. Connections to origin (via Internet) are made with https,
but internally we only do http (cheaper, simpler).

Why do you think, parent logs about child connection are indicating CONNECT
(https)?

1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/htm

Veiko

Post by Jeremy Payne
I think the issue is the child is sending a https request to the parent.
Does the parent support https on port 3128 ?

1.cloud.ovh.net

Post by Veiko Kukk
@plugin=cachekey.so @pparam=--remove-all-params=true
@pparam=--static-prefix=cloud_ovh_net
parent.config
dest_domain=. parent="192.168.1.52:3128" go_direct=false
I've set go_direct to false as otherwise request would go directly to
origin.
[Mar 28 15:32:21.720] Server {0x2ae732c203c0} NOTE: traffic server

running

Post by Veiko Kukk
[Mar 28 15:32:21.826] Server {0x2ae73751e700} NOTE: cache enabled
[Mar 28 15:32:22.735] Server {0x2ae73751e700} NOTE: Parent initially

marked

Post by Veiko Kukk
as down 192.168.1.52:3128
[Mar 28 15:32:47.695] Server {0x2ae73751e700} NOTE: Failure threshold met
failcount:10 >= threshold:10, http parent proxy 192.168.1.52:3128 marked
down
Why?
# telnet 192.168.1.52 3128
Trying 192.168.1.52...
Connected to 192.168.1.52.
Escape character is '^]'.
There is proper working network connection between child and parent ATS.
1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251150.833 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251152.789 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251152.790 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251157.344 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251157.346 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251167.693 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/html

Post by Veiko Kukk
1522251167.695 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/htm

Post by Veiko Kukk
Where does this come from??
There is and should never be anything at "/" on parent.
I assume this is internal health check on child that tries to request

"/" on

Post by Veiko Kukk
parent and since it's obviously failing, will mark parent down and never

use

Post by Veiko Kukk
it.
How to change how parent is tested? I found nothing regarding to parent
health check in documentation.
Thanks,
Veiko

Jeremy Payne

2018-03-28 16:49:50 UTC

Unless things have changed, the scheme defined in the remapped URL is
the scheme used when polling the parent server.
If you enable debug, you'll see the scheme sent to the parent.
A packet trace will also reveal the same.

Hi,
No, only http. Connections to origin (via Internet) are made with https, but
internally we only do http (cheaper, simpler).
Why do you think, parent logs about child connection are indicating CONNECT
(https)?
1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/htm
Veiko

Post by Jeremy Payne
I think the issue is the child is sending a https request to the parent.
Does the parent support https on port 3128 ?

Post by Veiko Kukk
Hi,
I'm trying to get ATS 7.1.2 working with single parent and failover to
origin.
"clients" make request against ATS internally with plain http, with
remap.config we map those requests to https.
regex_map http://storage.(.*).cloud.ovh.net
https://storage.$1.cloud.ovh.net
@plugin=cachekey.so @pparam=--remove-all-params=true
@pparam=--static-prefix=cloud_ovh_net
parent.config
dest_domain=. parent="192.168.1.52:3128" go_direct=false
I've set go_direct to false as otherwise request would go directly to
origin.
[Mar 28 15:32:21.720] Server {0x2ae732c203c0} NOTE: traffic server running
[Mar 28 15:32:21.826] Server {0x2ae73751e700} NOTE: cache enabled
[Mar 28 15:32:22.735] Server {0x2ae73751e700} NOTE: Parent initially marked
as down 192.168.1.52:3128
[Mar 28 15:32:47.695] Server {0x2ae73751e700} NOTE: Failure threshold met
failcount:10 >= threshold:10, http parent proxy 192.168.1.52:3128 marked
down
Why?
# telnet 192.168.1.52 3128
Trying 192.168.1.52...
Connected to 192.168.1.52.
Escape character is '^]'.
There is proper working network connection between child and parent ATS.
1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.833 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.789 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.790 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.344 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.346 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.693 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.695 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/htm
Where does this come from??
There is and should never be anything at "/" on parent.
I assume this is internal health check on child that tries to request "/" on
parent and since it's obviously failing, will mark parent down and never use
it.
How to change how parent is tested? I found nothing regarding to parent
health check in documentation.
Thanks,
Veiko

Veiko Kukk

2018-03-29 08:25:21 UTC

Hi,

I think that suggestion you had was righ. Just changing remap.config to not
rewrite http to https made parent access working.

Now I need to find a way to change remap so that if it's sent to parent,
its http and when sent directly to origin, it would be https.

How would this be possible?

Veiko

Post by Jeremy Payne
Unless things have changed, the scheme defined in the remapped URL is
the scheme used when polling the parent server.
If you enable debug, you'll see the scheme sent to the parent.
A packet trace will also reveal the same.

Post by Veiko Kukk
Hi,
No, only http. Connections to origin (via Internet) are made with https,

but

Post by Veiko Kukk
internally we only do http (cheaper, simpler).
Why do you think, parent logs about child connection are indicating

CONNECT

Post by Veiko Kukk
(https)?
1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/htm

Post by Veiko Kukk
Veiko

Post by Jeremy Payne
I think the issue is the child is sending a https request to the parent.
Does the parent support https on port 3128 ?

marked

Post by Veiko Kukk
down
Why?
# telnet 192.168.1.52 3128
Trying 192.168.1.52...
Connected to 192.168.1.52.
Escape character is '^]'.
There is proper working network connection between child and parent

ATS.

Post by Veiko Kukk
1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.832 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251150.833 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.789 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.790 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251152.791 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.344 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.345 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251157.346 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.693 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.694 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/html
1522251167.695 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/- text/htm
Where does this come from??
There is and should never be anything at "/" on parent.
I assume this is internal health check on child that tries to request "/" on
parent and since it's obviously failing, will mark parent down and

never

Post by Veiko Kukk
use
it.
How to change how parent is tested? I found nothing regarding to

parent

Post by Veiko Kukk
health check in documentation.
Thanks,
Veiko

Veiko Kukk

2018-03-29 14:16:30 UTC

Answering myself.
URL remapping per parent does not seem to be possible.
Nor is it poissible to define whether parent should be connected via SSL on
in plain text.

Veiko

Post by Veiko Kukk
Hi,
I think that suggestion you had was righ. Just changing remap.config to
not rewrite http to https made parent access working.
Now I need to find a way to change remap so that if it's sent to parent,
its http and when sent directly to origin, it would be https.
How would this be possible?
Veiko

Post by Veiko Kukk
Hi,
No, only http. Connections to origin (via Internet) are made with

https, but

Post by Veiko Kukk
internally we only do http (cheaper, simpler).
Why do you think, parent logs about child connection are indicating

CONNECT

Post by Veiko Kukk
(https)?
1522251150.831 0 192.168.1.51 ERR_INVALID_REQ/400 491 - / - NONE/-

text/htm

Post by Veiko Kukk
Veiko

Post by Jeremy Payne
I think the issue is the child is sending a https request to the

parent.

Post by Jeremy Payne
Does the parent support https on port 3128 ?

Post by Veiko Kukk
Hi,
I'm trying to get ATS 7.1.2 working with single parent and failover

Post by Veiko Kukk
origin.
"clients" make request against ATS internally with plain http, with
remap.config we map those requests to https.
regex_map http://storage.(.*).cloud.ovh.net
https://storage.$1.cloud.ovh.net
@plugin=cachekey.so @pparam=--remove-all-params=true
@pparam=--static-prefix=cloud_ovh_net
parent.config
dest_domain=. parent="192.168.1.52:3128" go_direct=false
I've set go_direct to false as otherwise request would go directly to
origin.
[Mar 28 15:32:21.720] Server {0x2ae732c203c0} NOTE: traffic server running
[Mar 28 15:32:21.826] Server {0x2ae73751e700} NOTE: cache enabled
[Mar 28 15:32:22.735] Server {0x2ae73751e700} NOTE: Parent initially marked
as down 192.168.1.52:3128
[Mar 28 15:32:47.695] Server {0x2ae73751e700} NOTE: Failure threshold met
failcount:10 >= threshold:10, http parent proxy 192.168.1.52:3128

marked

ATS.

never

Post by Veiko Kukk
use
it.
How to change how parent is tested? I found nothing regarding to

parent