Forum Discussion

Smitha_111683's avatar
Smitha_111683
Icon for Nimbostratus rankNimbostratus
May 14, 2007

ConnectException: Connection timed out Error

I am running an application using iControl v9.4. This application lists out the virtual servers on a bigip machine and also allows deletion and adding of nodes to a pool. It was working fine with iControl v4.6.2 on windows and linux boxes. Now that I have switched to iControl v9.4, it is giving me the below error on the linux box:

 

 

AxisFault

 

faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException

 

faultSubcode:

 

faultString: java.net.ConnectException: Connection timed out

 

faultActor:

 

faultNode:

 

faultDetail:

 

{http://xml.apache.org/axis/}stackTrace:java.net.ConnectException: Connection timed out

 

at java.net.PlainSocketImpl.socketConnect(Native Method)

 

at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)

 

at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)

 

at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)

 

at java.net.Socket.connect(Socket.java:452)

 

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(DashoA12275)

 

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.(DashoA12275)

 

at com.sun.net.ssl.internal.ssl.SSLSocketFactoryImpl.createSocket(DashoA12275)

 

at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:92)

 

at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:191)

 

at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:404)

 

at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)

 

at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)

 

at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)

 

at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)

 

at org.apache.axis.client.AxisClient.invokeTransport(AxisClient.java:150)

 

at org.apache.axis.client.AxisClient.invoke(AxisClient.java:289)

 

at org.apache.axis.client.Call.invokeEngine(Call.java:2838)

 

at org.apache.axis.client.Call.invoke(Call.java:2824)

 

at org.apache.axis.client.Call.invoke(Call.java:2501)

 

at org.apache.axis.client.Call.invoke(Call.java:2424)

 

at org.apache.axis.client.Call.invoke(Call.java:1835)

 

at iControl.LocalLBVirtualServerBindingStub.get_list(Unknown Source)

 

at BigWebIP.getVSList(Unknown Source)

 

at _vslist._jspService(_vslist.java:56)

 

[SRC:/vslist.jsp:39]

 

at com.orionserver[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)

 

at oracle.jsp.runtimev2.JspPageTable.compileAndServe(JspPageTable.java:575)

 

at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:311)

 

at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:498)

 

at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:402)

 

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

 

at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:834)

 

at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:340)

 

at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:830)

 

at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:228)

 

at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:133)

 

at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.2.0)].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)

 

at java.lang.Thread.run(Thread.java:534)

 

 

BigWebIP is a custom class in which I have tried out the three certification methods in the constructor. (i.e. adding certificate to .keystore, the new Provider class as well as executing the installCert class). The following are the lines added in the constructor:

 

 

System.setProperty("javax.net.ssl.trustStore",

 

System.getProperty("user.home") + "/.keystore");

 

Provider.install("MYX509ALG");

 

 

I am using Oracle AS 10.1.2. The application works fine when run on Oracle AS 10.1.2 installed on Windows. But when deployed on a linux box gives the error mentioned above. I compiled and created the jar/ear on the linux box itself.

 

 

Any help would be greatly appreciated.
dev
devops
iControl

4 Replies

Sort By
  • Joe_Pruitt's avatar
    Joe_Pruitt
    May 14, 2007
    It's a bit hard on our end to diagnose what's going wrong with your setup. The "Connection timed out" error indicates one of a couple of things.

     

     

    1. The URL to the iControl endpoint is not valid.

     

    2. The URL to the iControl endpoint is not routable.

     

    3. The java setup on your Linux box doesn't have all the SSL (jsse) code required for the SSL connection.

     

     

    I'd start by printing out the full URL that you are connecting to (ie. https://x.x.x.x/iControl/iControlPortal.cgi). Then try to test connectivity from the new machine (with a browser, curl, wget, ...).

     

     

    If you can connect to the endpoint with means outside of java, then odds are it's a jsse issue. I really don't think so as the connect timed out error almost always indicates an issue with the connection string or routing from the client to the BIG-IP.

     

     

    -Joe
  • Smitha_111683's avatar
    Smitha_111683
    Icon for Nimbostratus rankNimbostratus
    May 16, 2007
    Thanks Joe for the pointers. The issue has been resolved. It was a security feature that does not allow to connect to bigip address on the external vlan from a host on the internal vlan.
  • jimbob22_43693's avatar
    jimbob22_43693
    Icon for Nimbostratus rankNimbostratus
    Oct 14, 2008
    I'm running into what looks to be this same issue. Would it be possible to elaborate on what that security feature was? Is it something I change on the BigIP?

     

     

    Thanks.

     

    Danny Agapito (datasynapse)
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Oct 15, 2008
    Hi Danny,

     

     

    It's port lockdown. You can get more info on it in SOL7317 (Click here). iControl will make calls to the BIG-IP via port 443 so that's what you would want to check for.

     

     

    Aaron