How are ALB HTTPS health checks verified? Announcing the arrival of Valued Associate #679:...
Why aren't air breathing engines used as small first stages
Is it fair for a professor to grade us on the possession of past papers?
How to answer "Have you ever been terminated?"
What is homebrew?
How to tell that you are a giant?
Withdrew £2800, but only £2000 shows as withdrawn on online banking; what are my obligations?
Fundamental Solution of the Pell Equation
Is the Standard Deduction better than Itemized when both are the same amount?
Is there a holomorphic function on open unit disc with this property?
また usage in a dictionary
Do I really need to have a message in a novel to appeal to readers?
Compare a given version number in the form major.minor.build.patch and see if one is less than the other
What does "lightly crushed" mean for cardamon pods?
Closed form of recurrent arithmetic series summation
Can a new player join a group only when a new campaign starts?
Around usage results
How to compare two different files line by line in unix?
What does the "x" in "x86" represent?
Irreducible of finite Krull dimension implies quasi-compact?
Circuit to "zoom in" on mV fluctuations of a DC signal?
Do wooden building fires get hotter than 600°C?
Why are there no cargo aircraft with "flying wing" design?
Declining "dulcis" in context
What's the meaning of "fortified infraction restraint"?
How are ALB HTTPS health checks verified?
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!How to set up ELB health checks with multiple applications running on each EC2 instance?Why is my instance failing ELB health checks when adding it to the load balancer via Ansible?AWS ELB health check when using nginx and TCPAutoscaling health checks fail in Amazon-provided ECS CloudFormation template.How to set up Neo4j securely using Amazon Web ServicesWhat cipher suites does an Amazon Classic ELB support for health checking?Determine load balancer health check timeoutAWS ALB resolves to 2 IPs. What are they?Connect from ec2 instance by alb to app to the same instanceHow are load balancers, health checks, and autoscalers supposed to handle surges?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
When AWS application load balancers are configured to use HTTPS health checks, how are those verified? What subject name is matched against? What certificates are used?
Whenever I try to use HTTPS health checks, the ALB reports the health checks have failed, and I'm trying to get details about how the check is made.
amazon-web-services amazon-elb
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
bumped to the homepage by Community♦ 19 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
When AWS application load balancers are configured to use HTTPS health checks, how are those verified? What subject name is matched against? What certificates are used?
Whenever I try to use HTTPS health checks, the ALB reports the health checks have failed, and I'm trying to get details about how the check is made.
amazon-web-services amazon-elb
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
bumped to the homepage by Community♦ 19 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Health checks only use IP addresses, not hostnames. They do not care, nor could they, if the cert matches the requested name.
– EEAA
May 2 '17 at 4:27
@EEAA, that's what I guessed. ELBs can care, but only because it's possible to specify the cert.
– Paul Draper
May 2 '17 at 4:43
add a comment |
When AWS application load balancers are configured to use HTTPS health checks, how are those verified? What subject name is matched against? What certificates are used?
Whenever I try to use HTTPS health checks, the ALB reports the health checks have failed, and I'm trying to get details about how the check is made.
amazon-web-services amazon-elb
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
When AWS application load balancers are configured to use HTTPS health checks, how are those verified? What subject name is matched against? What certificates are used?
Whenever I try to use HTTPS health checks, the ALB reports the health checks have failed, and I'm trying to get details about how the check is made.
amazon-web-services amazon-elb
amazon-web-services amazon-elb
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
asked May 2 '17 at 3:56
Paul DraperPaul Draper
192216
192216
bumped to the homepage by Community♦ 19 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 19 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Health checks only use IP addresses, not hostnames. They do not care, nor could they, if the cert matches the requested name.
– EEAA
May 2 '17 at 4:27
@EEAA, that's what I guessed. ELBs can care, but only because it's possible to specify the cert.
– Paul Draper
May 2 '17 at 4:43
add a comment |
Health checks only use IP addresses, not hostnames. They do not care, nor could they, if the cert matches the requested name.
– EEAA
May 2 '17 at 4:27
@EEAA, that's what I guessed. ELBs can care, but only because it's possible to specify the cert.
– Paul Draper
May 2 '17 at 4:43
Health checks only use IP addresses, not hostnames. They do not care, nor could they, if the cert matches the requested name.
– EEAA
May 2 '17 at 4:27
Health checks only use IP addresses, not hostnames. They do not care, nor could they, if the cert matches the requested name.
– EEAA
May 2 '17 at 4:27
@EEAA, that's what I guessed. ELBs can care, but only because it's possible to specify the cert.
– Paul Draper
May 2 '17 at 4:43
@EEAA, that's what I guessed. ELBs can care, but only because it's possible to specify the cert.
– Paul Draper
May 2 '17 at 4:43
add a comment |
1 Answer
1
active
oldest
votes
Have you read the documentation? The health checks are to an IP, but the documentation that I've read doesn't say anything about certificates. If you want to have health checks over https it would be safest to have a valid working https certificate on your origin.
If the status of a target is any value other than Healthy, the API returns a reason code and a description of the issue, and the console displays the same description in a tooltip. Note that reason codes that begin with Elb originate on the load balancer side and reason codes that begin with Target originate on the target side.
In short, it will tell you what the problem is if you look in the right place.
The health check is an http/s request to the path you specify. That URL has to return a 200 status code, though it can be configured to interpret another code as healthy - see the doc link above.
The HTTP codes to use when checking for a successful response from a
target. You can specify values or ranges of values between 200 and
499. The default value is 200.
answered May 2 '17 at 4:36
TimTim
18.1k41950
In my case the error is "Target.FailedHealthChecks".
– Paul Draper
May 2 '17 at 4:42
curl the failed health check target including path - eg curl -i 1.2.3.4/health . Edit your question to include the curl, the response (headers and status code). Check the logs on the server, say the web server access and error logs, post correlated logs from your curl. Please don't reply in a comment, it's too difficult to read.
– Tim
May 2 '17 at 5:39
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f847694%2fhow-are-alb-https-health-checks-verified%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Have you read the documentation? The health checks are to an IP, but the documentation that I've read doesn't say anything about certificates. If you want to have health checks over https it would be safest to have a valid working https certificate on your origin.
If the status of a target is any value other than Healthy, the API returns a reason code and a description of the issue, and the console displays the same description in a tooltip. Note that reason codes that begin with Elb originate on the load balancer side and reason codes that begin with Target originate on the target side.
In short, it will tell you what the problem is if you look in the right place.
The health check is an http/s request to the path you specify. That URL has to return a 200 status code, though it can be configured to interpret another code as healthy - see the doc link above.
The HTTP codes to use when checking for a successful response from a
target. You can specify values or ranges of values between 200 and
499. The default value is 200.
answered May 2 '17 at 4:36
TimTim
18.1k41950
In my case the error is "Target.FailedHealthChecks".
– Paul Draper
May 2 '17 at 4:42
curl the failed health check target including path - eg curl -i 1.2.3.4/health . Edit your question to include the curl, the response (headers and status code). Check the logs on the server, say the web server access and error logs, post correlated logs from your curl. Please don't reply in a comment, it's too difficult to read.
– Tim
May 2 '17 at 5:39
add a comment |
Have you read the documentation? The health checks are to an IP, but the documentation that I've read doesn't say anything about certificates. If you want to have health checks over https it would be safest to have a valid working https certificate on your origin.
If the status of a target is any value other than Healthy, the API returns a reason code and a description of the issue, and the console displays the same description in a tooltip. Note that reason codes that begin with Elb originate on the load balancer side and reason codes that begin with Target originate on the target side.
In short, it will tell you what the problem is if you look in the right place.
The health check is an http/s request to the path you specify. That URL has to return a 200 status code, though it can be configured to interpret another code as healthy - see the doc link above.
The HTTP codes to use when checking for a successful response from a
target. You can specify values or ranges of values between 200 and
499. The default value is 200.
answered May 2 '17 at 4:36
TimTim
18.1k41950
In my case the error is "Target.FailedHealthChecks".
– Paul Draper
May 2 '17 at 4:42
curl the failed health check target including path - eg curl -i 1.2.3.4/health . Edit your question to include the curl, the response (headers and status code). Check the logs on the server, say the web server access and error logs, post correlated logs from your curl. Please don't reply in a comment, it's too difficult to read.
– Tim
May 2 '17 at 5:39
add a comment |
Have you read the documentation? The health checks are to an IP, but the documentation that I've read doesn't say anything about certificates. If you want to have health checks over https it would be safest to have a valid working https certificate on your origin.
If the status of a target is any value other than Healthy, the API returns a reason code and a description of the issue, and the console displays the same description in a tooltip. Note that reason codes that begin with Elb originate on the load balancer side and reason codes that begin with Target originate on the target side.
In short, it will tell you what the problem is if you look in the right place.
The health check is an http/s request to the path you specify. That URL has to return a 200 status code, though it can be configured to interpret another code as healthy - see the doc link above.
The HTTP codes to use when checking for a successful response from a
target. You can specify values or ranges of values between 200 and
499. The default value is 200.
answered May 2 '17 at 4:36
TimTim
18.1k41950
Have you read the documentation? The health checks are to an IP, but the documentation that I've read doesn't say anything about certificates. If you want to have health checks over https it would be safest to have a valid working https certificate on your origin.
If the status of a target is any value other than Healthy, the API returns a reason code and a description of the issue, and the console displays the same description in a tooltip. Note that reason codes that begin with Elb originate on the load balancer side and reason codes that begin with Target originate on the target side.
In short, it will tell you what the problem is if you look in the right place.
The health check is an http/s request to the path you specify. That URL has to return a 200 status code, though it can be configured to interpret another code as healthy - see the doc link above.
The HTTP codes to use when checking for a successful response from a
target. You can specify values or ranges of values between 200 and
499. The default value is 200.
answered May 2 '17 at 4:36
TimTim
18.1k41950
answered May 2 '17 at 4:36
TimTim
18.1k41950
answered May 2 '17 at 4:36
TimTim
18.1k41950
answered May 2 '17 at 4:36
TimTim
18.1k41950
18.1k41950
In my case the error is "Target.FailedHealthChecks".
– Paul Draper
May 2 '17 at 4:42
curl the failed health check target including path - eg curl -i 1.2.3.4/health . Edit your question to include the curl, the response (headers and status code). Check the logs on the server, say the web server access and error logs, post correlated logs from your curl. Please don't reply in a comment, it's too difficult to read.
– Tim
May 2 '17 at 5:39
add a comment |
In my case the error is "Target.FailedHealthChecks".
– Paul Draper
May 2 '17 at 4:42
curl the failed health check target including path - eg curl -i 1.2.3.4/health . Edit your question to include the curl, the response (headers and status code). Check the logs on the server, say the web server access and error logs, post correlated logs from your curl. Please don't reply in a comment, it's too difficult to read.
– Tim
May 2 '17 at 5:39
In my case the error is "Target.FailedHealthChecks".
– Paul Draper
May 2 '17 at 4:42
In my case the error is "Target.FailedHealthChecks".
– Paul Draper
May 2 '17 at 4:42
curl the failed health check target including path - eg curl -i 1.2.3.4/health . Edit your question to include the curl, the response (headers and status code). Check the logs on the server, say the web server access and error logs, post correlated logs from your curl. Please don't reply in a comment, it's too difficult to read.
– Tim
May 2 '17 at 5:39
curl the failed health check target including path - eg curl -i 1.2.3.4/health . Edit your question to include the curl, the response (headers and status code). Check the logs on the server, say the web server access and error logs, post correlated logs from your curl. Please don't reply in a comment, it's too difficult to read.
– Tim
May 2 '17 at 5:39
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f847694%2fhow-are-alb-https-health-checks-verified%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Health checks only use IP addresses, not hostnames. They do not care, nor could they, if the cert matches the requested name.
– EEAA
May 2 '17 at 4:27
@EEAA, that's what I guessed. ELBs can care, but only because it's possible to specify the cert.
– Paul Draper
May 2 '17 at 4:43