도메인 이름이 다른 두 서버의 로드 밸런싱을 수행하고 있습니다. 현재 로드 밸런싱 구성과 1개의 Tomcat 인스턴스가 있는 Server1에서는 제대로 작동하지만 server2에서는 작동하지 않습니다. AJP 실패를 겪고 있습니다. 나는 성공하지 못한 채 HTTPS를 사용해 보았습니다. 내가 뭘 잘못했나요?
오류 기록:
(110)Connection timed out: AH00957: HTTPS: attempt to connect to SERVER_2_IP:8445 (SERVER_2_IP) failed
[Tue Feb 26 09:53:40.020390 2019] [proxy:error] [pid 16991:tid 140154131154688] AH00959: ap_proxy_connect_backend disabling worker for (SERVER_2_IP) for 60s
[Tue Feb 26 09:53:40.020400 2019] [proxy_http:error] [pid 16991:tid 140154131154688] [client CLIENT_IP:40082] AH01114: HTTP: failed to make connection to backend: SERVER_2_IP
Server1: 사이트 활성화/000-default.conf:
<VirtualHost *:443>
ServerName DOmain.de
ServerAlias www.domain.de
SSLEngine on
SSLProxyEngine on
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off
SSLCertificateFile /etc/letsencrypt/live/domain.de/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/domain.de/private.key
SSLCertificateChainFile /etc/letsencrypt/live/domain.de/chain.pem
<Proxy balancer://mycluster>
BalancerMember ajp://IP:8009 route=server1
BalancerMember https://IP2:8445 route=server2
</Proxy>
ProxyPass /balancer-manager !
ProxyPass / balancer://mycluster/
</VirtualHost>
서버 2 톰캣:
<Connector port="8445" enableLookups="true" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="200" disableUploadTimeout="true" connectionTimeout="36000"
compression="off" sslProtocols="TLS" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TL$
ECDHE_RSA_WITH_AES_256_CBC_SHA384,
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256,
TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"
compressionMinSize="1024" scheme="https" secure="true" clientAuth="false"
keystoreFile="/etc/letsencrypt/live/Domain2.de/keystore.jks" keyPass="PASSWORD" keyAlias="tomcat" keystorePass="PASSWORD" URIEncoding="utf-8"/>
<Connector port="8012" protocol="AJP/1.3" redirectPort="8445" connectionTimeout="10000" keepAliveTimeout="10000" />
나는 또한 다음을 제공했습니다.
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 8445 -j ACCEPT
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 8012 -j ACCEPT
service iptables save.
여전히 작동하지 않습니다. 서버 2가 응답하지 않습니다.