Problem configuring VIP Adress in Hazelcast cluster

Openfire Openfire Support
1

Hello, I have installed an Openfire cluster with Hazelcast, and it seems to work pretty fine!

Connecting to the nodes (lets say node1 and node2) works great, but I’ve been asigned a VIP Adress to load balance the servers and when connecting to the VIP Adress we dont get answer from the Openfire servers.

-When connecting directly to nodes works ok.

-When telnet to the VIP Adress on port 5222 works allways ok and I can send XMPP messages (so I assume is load balanced ok, Its an F5 and have been configured to be transparent and forward all of the ports and to support XML).

-When connecting to the VIP Adress I dont have any result (I tryed to connect with spark and CitronIM).

Do I missed any configuration of the VIP Adress in the Openfire or Hazelcast Services?

Thanks for your help!

Mos

2

Sounds like either a misconfiguration on the F5, or you need some extra configuration on the hosts running Openfire - There is nothing in Openfire required to support load balancing.

Is the F5 doing proxying or TCP load balancing? Does it log anything when you connect with an IM client? I don’t understand what ‘to support XML’ means in the context of F5 - it should be passing all TCP traffic to Openfire, rather than caring what the content is.

3

David, thank you for the answer.

Is the F5 doing proxying or TCP load balancing? Yes, it does.

Does it log anything when you connect with an IM client? No, when we connect with the VIP Interface we cant see any message in the debug log. Anway if we connect via telnet and send.

I’ve mad some tests and I’ve found something interesting sending Xmpp messages throug telnet:

1-Telnet into the node (port 5222)-> send the following message:

** <stream:stream to=“170.65.233.122” xmlns="jabber:client"xmlns:stream=“http://etherx.jabber.org/streams” version=“1.0”>**

2-Telnet into the vip ip (port 5222)-> send the same message:

** <stream:stream to=“170.65.233.122” xmlns="jabber:client"xmlns:stream=“http://etherx.jabber.org/streams” version=“1.0”>**

I’v found that in the 1 test, sending the XMPP message without pressing the newline it gives automatically the answer:

  • <?xml version='1.0' encoding='UTF-8'?>stream:features<starttls xmlns="urn:ietf:params:xml

    :ns:xmpp-tls"><m

    echanism>DIGEST-MD5PLAINCRAM-MD5</

    mechanism>

    zlib<auth xmlns="http://jabber.org/features/iq-au

    th"/></stream:features

    >

    With the 2 test, sending the XMPP message without pressing the newline gives no response, and I have to send 2 newlines to the answer be printed.

    So this must be why the client cant connect to the vip adress, does somebody had this issue or knows what can cause it? (Must be the F5 LB right?)

    Thanks

    Marcos