Load balancer web server error 503

[vmware3222]

Hi every one

i configured a one arm load balancer with 2 web server

when i try open the url with the adress of virtual server the error is service unavailable 503

Any help

thanks

[Dimitri Desmidt]

HTTP 503 is "Service Unavailable".

Can you check if your pool is UP?

I would suspect your pool is down.

Dimitri

[vmware3222]

he's up

if my edge have 2 interfaces one internal and the second is uplink where i must configure my DNAT

Because if i configure it on my uplink interface it isn't working

i configured it on the interbal interface but i don't know if it's wotking

[chay2263]

Sounds like you are doing inline loadbalancing if you are using two interfaces. Unless that internal interface is used for HA purposes only. If you are doing one armed then you need your Uplink interface to be on the same segment as your web servers and your web servers default gateway need to be the LB ip address. In this case the LB will be doing both SNAT and DNAT on the original packet. You would need configure your DNAT rule on the uplink interface. But if your web servers are really connected to the internal interface of your ESG then you need to create a SNAT on the internal interface to translate your web servers IP to that of the LB.

[vmware3222]

In fact, i have 2 logical switches

lS1 : 10.10.0.0/24

LS2: 10.20.0.0/24

connected to dlr

and another ls between dlr and edge : 192.168.0.0/24

uplink of dlr: 129.194.184.0/24

if i put the DNAT on uplink interface like for example 129.194.184 for 10.10.0.1

he doesn't work

My Client pc ping the uplink interface for edge but he can't ping the ip if i use it for DNAT rule

what is wrong in my configuration ?

[Dimitri Desmidt]

I don't dully understand the text below.

Can you send a ppt or Visio diagram with the IP@ of everything (client, Edge, DLR, pool servers, etc), the default gw / route of everything, and the specific other config of elements in a detailed way (like NAT on the Edge).

Then it will be easier to reply.

Dimitri

[vmware3222]

this is my diagram with  dat rules and fw edge rules

[Dimitri Desmidt]

Some possible mis-configuration:

. You didn't configure the secondary IP@ 129.194.184.81-84 on the Edge

[vmware3222]

it's configured in the edge interface but when i use it for the DNAT i can't ping it

the DNAt is not working

[chay2263]

The DNAT rule needs to be on the uplink interface of your NSX Edge router not on the DLR. Based on your diagram it seems as you have a transit network between your DLR and edge and all your LSs connect to the DLR. The NSX Edge is doing your LB for you so you need the DNAT rule there.

[vmware3222]

whwn i put the dnat rule on the uplink interface i can't ping it

Dnatsoesn't work

[Dimitri Desmidt]

I don't think I'll be able to help without seeing your lab.

If you're interested, you can contact me on Skype: dimitri_desmidt.

Dimitri

[vmware3222]

yes

i send you an invitation

thank you

my skype is waffa ifak

[vmware3222]

it have 4 dimitri your photo is what