Ad Widget

Collapse

Webscenario Monitor SSL backend servers with SNI

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • pyromaniac
    Junior Member
    • Jan 2022
    • 2

    #1

    Webscenario Monitor SSL backend servers with SNI

    Hello,

    I want to monitor the individual backend servers behind my load balancer.
    So I found out that I could use http://{HOST.IP}/ as URL and a "Host:"-Header with the needed domain name to check the individual backend-servers via HTTP correctly, which is nice.
    But unfortunately I need that also for HTTPS / SSL. If I try to use httpS://{HOST.IP}/ I get "SSL connect error: OpenSSL SSL_connect: Connection reset by peer in connection to XXX.XXX.XXX.XXX:443".
    This is because SSL SNI is done in layer 5/6 of OSI and therefore before the actual HTTP Protocol on layer 7.

    The needed curl command to check the backend servers correctly would be something like
    "curl https://www.zabbix.com --resolve www.zabbix.com:443:{HOST.IP}"
    Are there any options I am missing to get this done, or does webscenarios simply not (yet) support curls resolve option?
    If it is not yet supported: Are there any plans to support it in the near future like with a new "curl options" in web scenario steps?

    Thanks in advance!
  • emrocha
    Junior Member
    • Mar 2024
    • 1

    #2
    I have the same scenario and I don't know how to resolve it without an external script.

    Comment

    Working...