Welcome to ISAserver.org

WLBS SSL and ISA - Please help

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Web Publishing >> WLBS SSL and ISA - Please help

Page: [1]

Message

<< Older Topic Newer Topic >>

WLBS SSL and ISA - Please help - 9.Aug.2005 1:54:00 PM

leadmonkeyboy

Posts: 4
Joined: 30.Jan.2005
Status: offline

We are having very peculiar problems with out ISA cluster. We have been running an ISA cluster of two computers for the last three years without much in the way of configuration changes. The cluster is running web publishing for quite a few sites sitting on a web farm behind them. One of the sites runs SSL and has been doing so quite well for about a year.

On wednesday of last week it just stopped. I know we didn't change any of the configurations for the array at that time, but we may have recently applied a recommended patch/update using the windows update feature. In any case, it didn't stop right after we did something and anything we may have done should not have affected it. It stopped around 9pm and I just happened to notice it while browsing from home.

We have spent the last few days doing everything possible to fix the problem. We even rebuilt one of the computers from scratch. When we did, we noticed that when the servers are clustered using WLBS they would not listen on the SSL port, wether it was 443, or anything else (and we tried quite a few ports). It didn't matter wether we accessed it from the load balanced IP or the dedicated IP, the results were the same. This is true even if only one machine was taking part in the load balancing. I have the WLBS set to:

Port range: 0 - 65535
Protocol: both
Mode: multiple
Priority:
Load: Equal
Affinity: single

When they are not using WLBS then they would listen on the SSL port and everything would be fine, except of course the cluster was not operational.

In the mean time we have setup one of the firewalls on the published IP address so that everything is working. Since there is no redundancy, I am very nervous about the current situation and would like to resolve this as soon as possible.

Does anyone have any ideas as to what may be happening here? I've considered the possible problems:

-- Infected by virus
I ran a virus detection program and didn't find anything, but I haven't entirely ruled this out though I think it is unlikely.

-- Patch or update applied previously
I don't think we applied anything that day, but it is possible something was applied previously that didn't go into effect until a service restarted. I think this is unlikely though because when we rebuilt the machine we applied SP4, but nothing after that and it still exhibited this problem.

-- Certificate issue
My knowledge is very limited here. Can a certificate somehow cause ISA to stop listening on a port in a load balanced configuration but not otherwise?

-- Something else

I'm tearing my hair out on this and would greatly appreciate any help.