This discussion is archived
1 Reply Latest reply: Jul 30, 2012 2:50 AM by user12629685 RSS

SGD Gateway refuses new connections

843669 Newbie
Currently Being Moderated
I have a customer using SGD 4.5 and after a gateway restart everything is working OK. Then after a period of time (sometime hours or sometime it is days) the gateway does not allow new connections. Existing connections are not impacted. Looking in the routing proxy log we see errors like:

----------------------------
INFO: NOT FOR PRODUCTION USE.

Jul 10, 2012 2:00:16 AM JARP main

INFO: Running...

Jul 10, 2012 6:30:51 AM proxy.Route run

INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:SGD <- SSL <- Router, To: TCP] timed out. Restart

ing.

Jul 10, 2012 8:12:07 AM proxy.Route run

INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:SGD <- SSL <- Router, To: TCP] timed out. Restart

ing.

Jul 10, 2012 11:31:51 AM proxy.Route run

INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:* <- SSL, To: TCP:localhost:8081] error. Restarti

ng.

Jul 10, 2012 11:31:51 AM proxy.Route run

INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:* <- SSL, To: TCP:localhost:8081] error. Restarti

ng.

Jul 10, 2012 11:31:51 AM async.channel.tcp.AsyncTcpChannelClient$ConnectOp run

INFO: finishConnect() exception: java.net.ConnectException: Connection refused

Jul 10, 2012 11:31:51 AM proxy.Route run

INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:* <- SSL, To: TCP:localhost:8081] error. Restarti

ng.
----------------------

On running "tarantella gateway list" on the SGD server we see that certificates have expired.

They have 2 active gateways running. If we run "gateway sslcert print" on both the servers we get the following:

one server

<hostA>:/opt/SUNWsgdg/bin # ./gateway sslcert print

keytool error: java.lang.Exception: Alias <hostA> does not exist
ERROR: failed to print certificate (status 1)

on the second gateway response was clear certifcate but the date of the certificate has expired.

Questions:
1) Has someone encountered this problem? If yes ,what was the solution?
2) Is it the certificate problem an issue and if we sort it out would it solve the connections issue? Also why does this problem go away (for a while at least) after the restart of the gateway?
  • 1. Re: SGD Gateway refuses new connections
    user12629685 Explorer
    Currently Being Moderated
    What is the version of jarp.jar?

    cd /opt/SUNWsgdg/proxy
    /opt/SUNWsgdg/java/default/bin/java -jar jarp.jar --version                                                                                                                                                                                                                                               

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points