I just wrote a really simple configuration file for pound, that is
redirecting to two webservers in the back end.
The problem is that when I try to access our website I get the error Service
Unavailable. Please try again later on the client.
For what I've read it seems that pound cannot redirect to any of the
webservers. Is there something else I need to add.
My conf file just has the ip address where pound listens on port 8080 and
the back end servers on port 80.
Thanks for any help

Please paste your config on http://pastebin.com/ and link it here.

On Wed, Nov 12, 2008 at 22:21, Swanilda Suarez <suarezst(at)gmail.com> wrote:

> I just wrote a really simple configuration file for pound, that is
> redirecting to two webservers in the back end.
> The problem is that when I try to access our website I get the error
> Service
> Unavailable. Please try again later on the client.
> For what I've read it seems that pound cannot redirect to any of the
> webservers. Is there something else I need to add.
> My conf file just has the ip address where pound listens on port 8080 and
> the back end servers on port 80.
> Thanks for any help
>
>
> --
> To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.
>



-- 
Read my blog (at) http://www.raven.nu/blog

Hello,

Please post your config file.

"Server Unavailable" sounds like a back end response. If you are redirecting
to IIS and ASP.NET, then "Server Unavailable" means your application is not
working on the web server.

Pound will write errors to the /var/log/messages (linux) file. I suggest you
"tail -f /var/log/messages" and then try to hit your farm again. That will
tell you if pound is working or not. If you don't get any output, then pound
is not handling the connection. In that case, check your firewall settings.

-- Jake


> -----Original Message-----
> From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> Sent: Wednesday, November 12, 2008 1:22 PM
> To: pound(at)apsis.ch
> Subject: [Pound Mailing List] Service Unavailable. Please try again
> later.
> 
> I just wrote a really simple configuration file for pound, that is
> redirecting to two webservers in the back end.
> The problem is that when I try to access our website I get the error
> Service
> Unavailable. Please try again later on the client.
> For what I've read it seems that pound cannot redirect to any of the
> webservers. Is there something else I need to add.
> My conf file just has the ip address where pound listens on port 8080
> and
> the back end servers on port 80.
> Thanks for any help
> 
> 
> --
> To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.

The configuration file looks like this. As you can see it looks really
simple. It's just one proxy (ubuntu) trying to hit two Windows servers. Also
I restarted the ubuntu machine and after that I don't even get the message
anymore I just get a page cannot be displayed.

## Minimal sample pound.cfg
##
## see pound(8) for details


######################################################################
## global options:

User        "www-data"
Group        "www-data"
#RootJail    "/chroot/pound"

## Logging: (goes to syslog by default)
##    0    no logging
##    1    normal
##    2    extended
##    3    Apache-style (common log format)
LogLevel    1

## check backend every X secs:
Alive        30

## use hardware-accelleration card supported by openssl(1):
#SSLEngine    "<hw>"


######################################################################
## listen, redirect and ... to:

## redirect all requests on port 8080 ("ListenHTTP") to the local webserver
(see "Service" below):
ListenHTTP
    Address xx.xx.xx.xx
    MaxRequest 1024
    Port    80

    ## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
    xHTTP        0



    Service

        BackEnd
            Address    xx.xx.xx.xx
            Port    80
        End
        BackEnd
            Address xx.xx.xx.xx
            Port 80
        End
    End
End




On Wed, Nov 12, 2008 at 2:38 PM, Jacob Anderson
<jwa(at)beyond-ordinary.com>wrote:

> Hello,
>
> Please post your config file.
>
> "Server Unavailable" sounds like a back end response. If you are
> redirecting
> to IIS and ASP.NET, then "Server Unavailable" means your application is
> not
> working on the web server.
>
> Pound will write errors to the /var/log/messages (linux) file. I suggest
> you
> "tail -f /var/log/messages" and then try to hit your farm again. That will
> tell you if pound is working or not. If you don't get any output, then
> pound
> is not handling the connection. In that case, check your firewall settings.
>
> -- Jake
>
>
> > -----Original Message-----
> > From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> > Sent: Wednesday, November 12, 2008 1:22 PM
> > To: pound(at)apsis.ch
> > Subject: [Pound Mailing List] Service Unavailable. Please try again
> > later.
> >
> > I just wrote a really simple configuration file for pound, that is
> > redirecting to two webservers in the back end.
> > The problem is that when I try to access our website I get the error
> > Service
> > Unavailable. Please try again later on the client.
> > For what I've read it seems that pound cannot redirect to any of the
> > webservers. Is there something else I need to add.
> > My conf file just has the ip address where pound listens on port 8080
> > and
> > the back end servers on port 80.
> > Thanks for any help
> >
> >
> > --
> > To unsubscribe send an email with subject unsubscribe to
> > pound(at)apsis.ch.
> > Please contact roseg(at)apsis.ch for questions.
>
>
>
> --
> To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.
>

Exellent! So what does /var/log/messages have in it when you try to hit your
servers?

Can you open the back-end without using pound, or do you get a server
unavailable error?

If you are using ASP.Net, make sure that your IIS is running he correct .NET
runtime for your web application.

-- Jake


> -----Original Message-----
> From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> Sent: Thursday, November 13, 2008 9:17 AM
> To: pound(at)apsis.ch
> Subject: Re: [Pound Mailing List] Service Unavailable. Please try again
> later.
> 
> The configuration file looks like this. As you can see it looks really
> simple. It's just one proxy (ubuntu) trying to hit two Windows servers.
> Also
> I restarted the ubuntu machine and after that I don't even get the
> message
> anymore I just get a page cannot be displayed.
> 
> ## Minimal sample pound.cfg
> ##
> ## see pound(8) for details
> 
> 
> ######################################################################
> ## global options:
> 
> User        "www-data"
> Group        "www-data"
> #RootJail    "/chroot/pound"
> 
> ## Logging: (goes to syslog by default)
> ##    0    no logging
> ##    1    normal
> ##    2    extended
> ##    3    Apache-style (common log format)
> LogLevel    1
> 
> ## check backend every X secs:
> Alive        30
> 
> ## use hardware-accelleration card supported by openssl(1):
> #SSLEngine    "<hw>"
> 
> 
> ######################################################################
> ## listen, redirect and ... to:
> 
> ## redirect all requests on port 8080 ("ListenHTTP") to the local
> webserver
> (see "Service" below):
> ListenHTTP
>     Address xx.xx.xx.xx
>     MaxRequest 1024
>     Port    80
> 
>     ## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
>     xHTTP        0
> 
> 
> 
>     Service
> 
>         BackEnd
>             Address    xx.xx.xx.xx
>             Port    80
>         End
>         BackEnd
>             Address xx.xx.xx.xx
>             Port 80
>         End
>     End
> End
> 
> 
> 
> 
> On Wed, Nov 12, 2008 at 2:38 PM, Jacob Anderson <jwa(at)beyond-
> ordinary.com>wrote:
> 
> > Hello,
> >
> > Please post your config file.
> >
> > "Server Unavailable" sounds like a back end response. If you are
> > redirecting
> > to IIS and ASP.NET, then "Server Unavailable" means your application
> is
> > not
> > working on the web server.
> >
> > Pound will write errors to the /var/log/messages (linux) file. I
> suggest
> > you
> > "tail -f /var/log/messages" and then try to hit your farm again. That
> will
> > tell you if pound is working or not. If you don't get any output,
> then
> > pound
> > is not handling the connection. In that case, check your firewall
> settings.
> >
> > -- Jake
> >
> >
> > > -----Original Message-----
> > > From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> > > Sent: Wednesday, November 12, 2008 1:22 PM
> > > To: pound(at)apsis.ch
> > > Subject: [Pound Mailing List] Service Unavailable. Please try again
> > > later.
> > >
> > > I just wrote a really simple configuration file for pound, that is
> > > redirecting to two webservers in the back end.
> > > The problem is that when I try to access our website I get the
> error
> > > Service
> > > Unavailable. Please try again later on the client.
> > > For what I've read it seems that pound cannot redirect to any of
> the
> > > webservers. Is there something else I need to add.
> > > My conf file just has the ip address where pound listens on port
> 8080
> > > and
> > > the back end servers on port 80.
> > > Thanks for any help
> > >
> > >
> > > --
> > > To unsubscribe send an email with subject unsubscribe to
> > > pound(at)apsis.ch.
> > > Please contact roseg(at)apsis.ch for questions.
> >
> >
> >
> > --
> > To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> > Please contact roseg(at)apsis.ch for questions.
> >
> 
> 
> --
> To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.

Thanks Jacob, I got it working for the http part,
I started working on the https part but I was wondering:
I exported the certificate from another windows machine and then transfered
into a linux machine and made it a .pem  certificate. My current
configuration for the https looks like this:

ListenHTTP
    Address xx.xx.xx.xx
    MaxRequest 1024
    Port    80

    ## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
    xHTTP        0
End
ListenHTTPS
    Address xx.xx.xx.xx
    MaxRequest 1024
    Port 443
    Cert "/etc/pound/certificate.pem"
End


    Service
    URL ".*"

        BackEnd
            Address xx.xx.xx.xx
            Port    80
        End
        BackEnd
            Address xx.xx.xx.xx
            Port 80
        End



    End


Also my boss told me we use cookies and session id's. Am I missing
something?
Thanks
On Thu, Nov 13, 2008 at 10:38 AM, Jacob Anderson
<jwa(at)beyond-ordinary.com>wrote:

> Exellent! So what does /var/log/messages have in it when you try to hit
> your
> servers?
>
> Can you open the back-end without using pound, or do you get a server
> unavailable error?
>
> If you are using ASP.Net, make sure that your IIS is running he correct
> .NET
> runtime for your web application.
>
> -- Jake
>
>
> > -----Original Message-----
> > From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> > Sent: Thursday, November 13, 2008 9:17 AM
> > To: pound(at)apsis.ch
> > Subject: Re: [Pound Mailing List] Service Unavailable. Please try again
> > later.
> >
> > The configuration file looks like this. As you can see it looks really
> > simple. It's just one proxy (ubuntu) trying to hit two Windows servers.
> > Also
> > I restarted the ubuntu machine and after that I don't even get the
> > message
> > anymore I just get a page cannot be displayed.
> >
> > ## Minimal sample pound.cfg
> > ##
> > ## see pound(8) for details
> >
> >
> > ######################################################################
> > ## global options:
> >
> > User        "www-data"
> > Group        "www-data"
> > #RootJail    "/chroot/pound"
> >
> > ## Logging: (goes to syslog by default)
> > ##    0    no logging
> > ##    1    normal
> > ##    2    extended
> > ##    3    Apache-style (common log format)
> > LogLevel    1
> >
> > ## check backend every X secs:
> > Alive        30
> >
> > ## use hardware-accelleration card supported by openssl(1):
> > #SSLEngine    "<hw>"
> >
> >
> > ######################################################################
> > ## listen, redirect and ... to:
> >
> > ## redirect all requests on port 8080 ("ListenHTTP") to the local
> > webserver
> > (see "Service" below):
> > ListenHTTP
> >     Address xx.xx.xx.xx
> >     MaxRequest 1024
> >     Port    80
> >
> >     ## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
> >     xHTTP        0
> >
> >
> >
> >     Service
> >
> >         BackEnd
> >             Address    xx.xx.xx.xx
> >             Port    80
> >         End
> >         BackEnd
> >             Address xx.xx.xx.xx
> >             Port 80
> >         End
> >     End
> > End
> >
> >
> >
> >
> > On Wed, Nov 12, 2008 at 2:38 PM, Jacob Anderson <jwa(at)beyond-
> > ordinary.com>wrote:
> >
> > > Hello,
> > >
> > > Please post your config file.
> > >
> > > "Server Unavailable" sounds like a back end response. If you are
> > > redirecting
> > > to IIS and ASP.NET, then "Server Unavailable" means your application
> > is
> > > not
> > > working on the web server.
> > >
> > > Pound will write errors to the /var/log/messages (linux) file. I
> > suggest
> > > you
> > > "tail -f /var/log/messages" and then try to hit your farm again. That
> > will
> > > tell you if pound is working or not. If you don't get any output,
> > then
> > > pound
> > > is not handling the connection. In that case, check your firewall
> > settings.
> > >
> > > -- Jake
> > >
> > >
> > > > -----Original Message-----
> > > > From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> > > > Sent: Wednesday, November 12, 2008 1:22 PM
> > > > To: pound(at)apsis.ch
> > > > Subject: [Pound Mailing List] Service Unavailable. Please try again
> > > > later.
> > > >
> > > > I just wrote a really simple configuration file for pound, that is
> > > > redirecting to two webservers in the back end.
> > > > The problem is that when I try to access our website I get the
> > error
> > > > Service
> > > > Unavailable. Please try again later on the client.
> > > > For what I've read it seems that pound cannot redirect to any of
> > the
> > > > webservers. Is there something else I need to add.
> > > > My conf file just has the ip address where pound listens on port
> > 8080
> > > > and
> > > > the back end servers on port 80.
> > > > Thanks for any help
> > > >
> > > >
> > > > --
> > > > To unsubscribe send an email with subject unsubscribe to
> > > > pound(at)apsis.ch.
> > > > Please contact roseg(at)apsis.ch for questions.
> > >
> > >
> > >
> > > --
> > > To unsubscribe send an email with subject unsubscribe to
> > pound(at)apsis.ch.
> > > Please contact roseg(at)apsis.ch for questions.
> > >
> >
> >
> > --
> > To unsubscribe send an email with subject unsubscribe to
> > pound(at)apsis.ch.
> > Please contact roseg(at)apsis.ch for questions.
>
>
>
> --
> To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.
>

Hi Swanilda,

I doubt that copying your certificate will work. You need to generate the
CSR from the machine that will be doing the SSL decryption. The openSSL CSR
generator will have a different public key than your IIS/Windows machine.

Are you still getting "server application unavailable" error when you try
out the https:// side of your URL?

If you are getting the "page can not be displayed" error, then your
certificate is the problem. "/var/log/messages" will likely have some error
message about your certificate.

-- jake


> -----Original Message-----
> From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> Sent: Tuesday, November 18, 2008 10:19 AM
> To: pound(at)apsis.ch
> Subject: Re: [Pound Mailing List] Service Unavailable. Please try again
> later.
> 
> Thanks Jacob, I got it working for the http part,
> I started working on the https part but I was wondering:
> I exported the certificate from another windows machine and then
> transfered
> into a linux machine and made it a .pem  certificate. My current
> configuration for the https looks like this:
> 
> ListenHTTP
>     Address xx.xx.xx.xx
>     MaxRequest 1024
>     Port    80
> 
>     ## allow PUT and DELETE also (by default only GET, POST and HEAD)?:
>     xHTTP        0
> End
> ListenHTTPS
>     Address xx.xx.xx.xx
>     MaxRequest 1024
>     Port 443
>     Cert "/etc/pound/certificate.pem"
> End
> 
> 
>     Service
>     URL ".*"
> 
>         BackEnd
>             Address xx.xx.xx.xx
>             Port    80
>         End
>         BackEnd
>             Address xx.xx.xx.xx
>             Port 80
>         End
> 
> 
> 
>     End
> 
> 
> Also my boss told me we use cookies and session id's. Am I missing
> something?
> Thanks
> On Thu, Nov 13, 2008 at 10:38 AM, Jacob Anderson <jwa(at)beyond-
> ordinary.com>wrote:
> 
> > Exellent! So what does /var/log/messages have in it when you try to
> hit
> > your
> > servers?
> >
> > Can you open the back-end without using pound, or do you get a server
> > unavailable error?
> >
> > If you are using ASP.Net, make sure that your IIS is running he
> correct
> > .NET
> > runtime for your web application.
> >
> > -- Jake
> >
> >
> > > -----Original Message-----
> > > From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> > > Sent: Thursday, November 13, 2008 9:17 AM
> > > To: pound(at)apsis.ch
> > > Subject: Re: [Pound Mailing List] Service Unavailable. Please try
> again
> > > later.
> > >
> > > The configuration file looks like this. As you can see it looks
> really
> > > simple. It's just one proxy (ubuntu) trying to hit two Windows
> servers.
> > > Also
> > > I restarted the ubuntu machine and after that I don't even get the
> > > message
> > > anymore I just get a page cannot be displayed.
> > >
> > > ## Minimal sample pound.cfg
> > > ##
> > > ## see pound(8) for details
> > >
> > >
> > >
> ######################################################################
> > > ## global options:
> > >
> > > User        "www-data"
> > > Group        "www-data"
> > > #RootJail    "/chroot/pound"
> > >
> > > ## Logging: (goes to syslog by default)
> > > ##    0    no logging
> > > ##    1    normal
> > > ##    2    extended
> > > ##    3    Apache-style (common log format)
> > > LogLevel    1
> > >
> > > ## check backend every X secs:
> > > Alive        30
> > >
> > > ## use hardware-accelleration card supported by openssl(1):
> > > #SSLEngine    "<hw>"
> > >
> > >
> > >
> ######################################################################
> > > ## listen, redirect and ... to:
> > >
> > > ## redirect all requests on port 8080 ("ListenHTTP") to the local
> > > webserver
> > > (see "Service" below):
> > > ListenHTTP
> > >     Address xx.xx.xx.xx
> > >     MaxRequest 1024
> > >     Port    80
> > >
> > >     ## allow PUT and DELETE also (by default only GET, POST and
> HEAD)?:
> > >     xHTTP        0
> > >
> > >
> > >
> > >     Service
> > >
> > >         BackEnd
> > >             Address    xx.xx.xx.xx
> > >             Port    80
> > >         End
> > >         BackEnd
> > >             Address xx.xx.xx.xx
> > >             Port 80
> > >         End
> > >     End
> > > End
> > >
> > >
> > >
> > >
> > > On Wed, Nov 12, 2008 at 2:38 PM, Jacob Anderson <jwa(at)beyond-
> > > ordinary.com>wrote:
> > >
> > > > Hello,
> > > >
> > > > Please post your config file.
> > > >
> > > > "Server Unavailable" sounds like a back end response. If you are
> > > > redirecting
> > > > to IIS and ASP.NET, then "Server Unavailable" means your
> application
> > > is
> > > > not
> > > > working on the web server.
> > > >
> > > > Pound will write errors to the /var/log/messages (linux) file. I
> > > suggest
> > > > you
> > > > "tail -f /var/log/messages" and then try to hit your farm again.
> That
> > > will
> > > > tell you if pound is working or not. If you don't get any output,
> > > then
> > > > pound
> > > > is not handling the connection. In that case, check your firewall
> > > settings.
> > > >
> > > > -- Jake
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: Swanilda Suarez [mailto:suarezst(at)gmail.com]
> > > > > Sent: Wednesday, November 12, 2008 1:22 PM
> > > > > To: pound(at)apsis.ch
> > > > > Subject: [Pound Mailing List] Service Unavailable. Please try
> again
> > > > > later.
> > > > >
> > > > > I just wrote a really simple configuration file for pound, that
> is
> > > > > redirecting to two webservers in the back end.
> > > > > The problem is that when I try to access our website I get the
> > > error
> > > > > Service
> > > > > Unavailable. Please try again later on the client.
> > > > > For what I've read it seems that pound cannot redirect to any
> of
> > > the
> > > > > webservers. Is there something else I need to add.
> > > > > My conf file just has the ip address where pound listens on
> port
> > > 8080
> > > > > and
> > > > > the back end servers on port 80.
> > > > > Thanks for any help
> > > > >
> > > > >
> > > > > --
> > > > > To unsubscribe send an email with subject unsubscribe to
> > > > > pound(at)apsis.ch.
> > > > > Please contact roseg(at)apsis.ch for questions.
> > > >
> > > >
> > > >
> > > > --
> > > > To unsubscribe send an email with subject unsubscribe to
> > > pound(at)apsis.ch.
> > > > Please contact roseg(at)apsis.ch for questions.
> > > >
> > >
> > >
> > > --
> > > To unsubscribe send an email with subject unsubscribe to
> > > pound(at)apsis.ch.
> > > Please contact roseg(at)apsis.ch for questions.
> >
> >
> >
> > --
> > To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> > Please contact roseg(at)apsis.ch for questions.
> >
> 
> 
> --
> To unsubscribe send an email with subject unsubscribe to
> pound(at)apsis.ch.
> Please contact roseg(at)apsis.ch for questions.

Jacob Anderson wrote:
> Hi Swanilda,
> 
> I doubt that copying your certificate will work. You need to generate the
> CSR from the machine that will be doing the SSL decryption. The openSSL CSR
> generator will have a different public key than your IIS/Windows machine.

If the cert is actually a PEM cert, then it has both the certificate and 
the RSA key bundled together.  In which case it'll work fine.  In 
general, if you have the RSA key & the certificate, there's no need to 
get it reissued.  If you lose they key, then you've got to start from 
scratch.

Usually pound fails to start if there's an invalid cert, so you 
shouldn't have to dig too far to find that error.

Regards,
-- 
Dave Steinberg
http://www.geekisp.com/
http://www.steinbergcomputing.com/