Advertisement
Guest User

EKS - Envoy dynamic forward proxy CA validation error

a guest
Apr 26th, 2021
247
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.56 KB | None | 0 0
  1. [2021-04-26 09:10:32.340][24][debug][conn_handler] [source/server/connection_handler_impl.cc:501] [C25] new connection
  2. [2021-04-26 09:10:32.340][24][debug][http] [source/common/http/conn_manager_impl.cc:254] [C25] new stream
  3. [2021-04-26 09:10:32.340][24][debug][http] [source/common/http/conn_manager_impl.cc:886] [C25][S7094661581815841908] request headers complete (end_stream=true):
  4. ':authority', 'git.tech.rz.blub.de'
  5. ':path', '/'
  6. ':method', 'GET'
  7. 'user-agent', 'Wget'
  8. 'connection', 'close'
  9. [2021-04-26 09:10:32.340][24][debug][http] [source/common/http/filter_manager.cc:755] [C25][S7094661581815841908] request end stream
  10. [2021-04-26 09:10:32.340][24][debug][forward_proxy] [source/extensions/common/dynamic_forward_proxy/dns_cache_impl.cc:56] thread local lookup for host 'git.tech.rz.blub.de'
  11. [2021-04-26 09:10:32.340][24][debug][forward_proxy] [source/extensions/common/dynamic_forward_proxy/dns_cache_impl.cc:77] cache miss for host 'git.tech.rz.blub.de', posting to main thread
  12. [2021-04-26 09:10:32.340][24][debug][forward_proxy] [source/extensions/filters/http/dynamic_forward_proxy/proxy_filter.cc:142] [C25][S7094661581815841908] waiting to load DNS cache entry
  13. [2021-04-26 09:10:32.340][1][debug][forward_proxy] [source/extensions/common/dynamic_forward_proxy/dns_cache_impl.cc:215] starting main thread resolve for host='git.tech.rz.blub.de' dns='git.tech.rz.blub.de' port='443'
  14. [2021-04-26 09:10:32.341][1][debug][forward_proxy] [source/extensions/common/dynamic_forward_proxy/dns_cache_impl.cc:232] main thread resolve complete for host 'git.tech.rz.blub.de'. 3 results
  15. [2021-04-26 09:10:32.341][1][debug][forward_proxy] [source/extensions/common/dynamic_forward_proxy/dns_cache_impl.cc:270] host 'git.tech.rz.blub.de' address has changed
  16. [2021-04-26 09:10:32.341][1][debug][upstream] [source/extensions/clusters/dynamic_forward_proxy/cluster.cc:119] Adding host info for git.tech.rz.blub.de
  17. [2021-04-26 09:10:32.341][1][debug][upstream] [source/extensions/clusters/dynamic_forward_proxy/cluster.cc:98] adding new dfproxy cluster host 'git.tech.rz.blub.de'
  18. [2021-04-26 09:10:32.341][1][debug][upstream] [source/common/upstream/upstream_impl.cc:278] transport socket match, socket default selected for host with address 10.104.86.175:443
  19. [2021-04-26 09:10:32.341][13][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  20. [2021-04-26 09:10:32.342][14][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  21. [2021-04-26 09:10:32.342][13][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  22. [2021-04-26 09:10:32.342][16][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  23. [2021-04-26 09:10:32.342][18][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  24. [2021-04-26 09:10:32.342][20][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  25. [2021-04-26 09:10:32.342][14][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  26. [2021-04-26 09:10:32.342][22][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  27. [2021-04-26 09:10:32.342][20][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  28. [2021-04-26 09:10:32.342][24][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  29. [2021-04-26 09:10:32.342][26][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  30. [2021-04-26 09:10:32.342][16][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  31. [2021-04-26 09:10:32.342][28][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  32. [2021-04-26 09:10:32.342][30][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  33. [2021-04-26 09:10:32.342][30][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  34. [2021-04-26 09:10:32.342][28][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  35. [2021-04-26 09:10:32.342][32][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  36. [2021-04-26 09:10:32.342][26][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  37. [2021-04-26 09:10:32.342][37][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  38. [2021-04-26 09:10:32.342][22][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  39. [2021-04-26 09:10:32.342][24][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  40. [2021-04-26 09:10:32.342][35][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  41. [2021-04-26 09:10:32.342][40][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  42. [2021-04-26 09:10:32.342][1][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  43. [2021-04-26 09:10:32.342][35][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  44. [2021-04-26 09:10:32.342][40][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  45. [2021-04-26 09:10:32.342][32][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  46. [2021-04-26 09:10:32.342][18][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  47. [2021-04-26 09:10:32.342][37][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  48. [2021-04-26 09:10:32.342][38][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  49. [2021-04-26 09:10:32.342][1][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  50. [2021-04-26 09:10:32.342][43][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1201] membership update for TLS cluster dynamic_forward_proxy_cluster added 1 removed 0
  51. [2021-04-26 09:10:32.342][43][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  52. [2021-04-26 09:10:32.342][38][debug][upstream] [source/common/upstream/cluster_manager_impl.cc:1208] re-creating local LB for TLS cluster dynamic_forward_proxy_cluster
  53. [2021-04-26 09:10:32.342][24][debug][forward_proxy] [source/extensions/filters/http/dynamic_forward_proxy/proxy_filter.cc:159] [C25][S7094661581815841908] load DNS cache complete, continuing
  54. [2021-04-26 09:10:32.342][24][debug][router] [source/common/router/router.cc:425] [C25][S7094661581815841908] cluster 'dynamic_forward_proxy_cluster' match for URL '/'
  55. [2021-04-26 09:10:32.342][1][debug][forward_proxy] [source/extensions/common/dynamic_forward_proxy/dns_cache_impl.cc:289] DNS refresh rate reset for host 'git.tech.rz.blub.de', refresh rate 60000 ms
  56. [2021-04-26 09:10:32.342][24][debug][router] [source/common/router/router.cc:582] [C25][S7094661581815841908] router decoding headers:
  57. ':authority', 'git.tech.rz.blub.de'
  58. ':path', '/'
  59. ':method', 'GET'
  60. ':scheme', 'https'
  61. 'user-agent', 'Wget'
  62. 'x-forwarded-proto', 'http'
  63. 'x-request-id', '039afdfa-b423-42dd-b013-ea0975554eca'
  64. 'x-envoy-expected-rq-timeout-ms', '15000'
  65. [2021-04-26 09:10:32.342][24][debug][pool] [source/common/http/conn_pool_base.cc:79] queueing stream due to no available connections
  66. [2021-04-26 09:10:32.342][24][debug][pool] [source/common/conn_pool/conn_pool_base.cc:106] creating a new connection
  67. [2021-04-26 09:10:32.342][24][debug][client] [source/common/http/codec_client.cc:41] [C26] connecting
  68. [2021-04-26 09:10:32.342][24][debug][connection] [source/common/network/connection_impl.cc:860] [C26] connecting to 10.104.86.175:443
  69. [2021-04-26 09:10:32.342][24][debug][connection] [source/common/network/connection_impl.cc:876] [C26] connection in progress
  70. [2021-04-26 09:10:32.343][24][debug][connection] [source/common/network/connection_impl.cc:666] [C26] connected
  71. [2021-04-26 09:10:32.344][24][debug][connection] [source/extensions/transport_sockets/tls/ssl_socket.cc:224] [C26] TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  72. [2021-04-26 09:10:32.344][24][debug][connection] [source/common/network/connection_impl.cc:241] [C26] closing socket: 0
  73. [2021-04-26 09:10:32.344][24][debug][connection] [source/extensions/transport_sockets/tls/ssl_socket.cc:224] [C26] TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  74. [2021-04-26 09:10:32.344][24][debug][client] [source/common/http/codec_client.cc:99] [C26] disconnect. resetting 0 pending requests
  75. [2021-04-26 09:10:32.344][24][debug][pool] [source/common/conn_pool/conn_pool_base.cc:343] [C26] client disconnected, failure reason: TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  76. [2021-04-26 09:10:32.344][24][debug][router] [source/common/router/router.cc:1026] [C25][S7094661581815841908] upstream reset: reset reason: connection failure, transport failure reason: TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  77. [2021-04-26 09:10:32.344][24][debug][http] [source/common/http/filter_manager.cc:839] [C25][S7094661581815841908] Sending local reply with details upstream_reset_before_response_started{​connection failure,TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED}​
  78. [2021-04-26 09:10:32.344][24][debug][http] [source/common/http/conn_manager_impl.cc:1429] [C25][S7094661581815841908] closing connection due to connection close header
  79. [2021-04-26 09:10:32.344][24][debug][http] [source/common/http/conn_manager_impl.cc:1484] [C25][S7094661581815841908] encoding headers via codec (end_stream=false):
  80. ':status', '503'
  81. 'content-length', '195'
  82. 'content-type', 'text/plain'
  83. 'date', 'Mon, 26 Apr 2021 09:10:32 GMT'
  84. 'server', 'envoy'
  85. 'connection', 'close'
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement