I just wrote a really simple configuration file for pound, that is
redirecting to two webservers in the back end.
The problem is that when I try to access our website I get the error Service
Unavailable. Please try again later on the client.
For what I've read it seems that pound cannot redirect to any of the
webservers. Is there something else I need to add.
My conf file just has the ip address where pound listens on port 8080 and
the back end servers on port 80.
Thanks for any help

Please paste your config on http://pastebin.com/ and link it here.

On Wed, Nov 12, 2008 at 22:21, Swanilda Suarez <suarezst(at)gmail.com>
wrote:
[...]

[...]

Hello,

Please post your config file.

"Server Unavailable" sounds like a back end response. If you are redirecting
to IIS and ASP.NET, then "Server Unavailable" means your application is not
working on the web server.

Pound will write errors to the /var/log/messages (linux) file. I suggest you
"tail -f /var/log/messages" and then try to hit your farm again. That will
tell you if pound is working or not. If you don't get any output, then pound
is not handling the connection. In that case, check your firewall settings.
[...]

The configuration file looks like this. As you can see it looks really
simple. It's just one proxy (ubuntu) trying to hit two Windows servers. Also
I restarted the ubuntu machine and after that I don't even get the message
anymore I just get a page cannot be displayed.

## Minimal sample pound.cfg
##
## see pound(8) for details


######################################################################
## global options:

User        "www-data"
Group        "www-data"
#RootJail    "/chroot/pound"

## Logging: (goes to syslog by default)
##    0    no logging
##    1    normal
##    2    extended
##    3    Apache-style (common log format)
LogLevel    1

## check backend every X secs:
Alive        30

## use hardware-accelleration card supported by openssl(1):
#SSLEngine    "<hw>"


######################################################################
## listen, redirect and ... to:

## redirect all requests on port 8080 ("ListenHTTP") to the local webserver
(see "Service" below):
ListenHTTP
    Address xx.xx.xx.xx
    MaxRequest 1024
    Port    80

    ## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
    xHTTP        0



    Service

        BackEnd
            Address    xx.xx.xx.xx
            Port    80
        End
        BackEnd
            Address xx.xx.xx.xx
            Port 80
        End
    End
End




On Wed, Nov 12, 2008 at 2:38 PM, Jacob Anderson
<jwa(at)beyond-ordinary.com>wrote:
[...]

Exellent! So what does /var/log/messages have in it when you try to hit your
servers?

Can you open the back-end without using pound, or do you get a server
unavailable error?

If you are using ASP.Net, make sure that your IIS is running he correct .NET
runtime for your web application.
[...]

Thanks Jacob, I got it working for the http part,
I started working on the https part but I was wondering:
I exported the certificate from another windows machine and then transfered
into a linux machine and made it a .pem  certificate. My current
configuration for the https looks like this:

ListenHTTP
    Address xx.xx.xx.xx
    MaxRequest 1024
    Port    80

    ## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
    xHTTP        0
End
ListenHTTPS
    Address xx.xx.xx.xx
    MaxRequest 1024
    Port 443
    Cert "/etc/pound/certificate.pem"
End


    Service
    URL ".*"

        BackEnd
            Address xx.xx.xx.xx
            Port    80
        End
        BackEnd
            Address xx.xx.xx.xx
            Port 80
        End



    End


Also my boss told me we use cookies and session id's. Am I missing
something?
Thanks
On Thu, Nov 13, 2008 at 10:38 AM, Jacob Anderson
<jwa(at)beyond-ordinary.com>wrote:
[...]

Hi Swanilda,

I doubt that copying your certificate will work. You need to generate the
CSR from the machine that will be doing the SSL decryption. The openSSL CSR
generator will have a different public key than your IIS/Windows machine.

Are you still getting "server application unavailable" error when you try
out the https:// side of your URL?

If you are getting the "page can not be displayed" error, then your
certificate is the problem. "/var/log/messages" will likely have some error
message about your certificate.
[...]

Jacob Anderson wrote:[...]

If the cert is actually a PEM cert, then it has both the certificate and 
the RSA key bundled together.  In which case it'll work fine.  In 
general, if you have the RSA key & the certificate, there's no need to 
get it reissued.  If you lose they key, then you've got to start from 
scratch.

Usually pound fails to start if there's an invalid cert, so you 
shouldn't have to dig too far to find that error.

Regards,[...]