Hallo,
seit letzter Woche haben wir das Problem, das ich intern über unseren Port 5001 nicht mehr auf die 3CX zugreifen kann.
Wenn ich mir das Log ansehen von nginx sehe ich erst
root@debian:/var/log/nginx# more error.log.1
2020/07/31 09:44:44 [warn] 512#512: "ssl_stapling" ignored, host not found in OCSP responder "ocsp.int-x3.letsencrypt.org"
2020/07/31 09:45:08 [warn] 849#849: "ssl_stapling" ignored, host not found in OCSP responder "ocsp.int-x3.letsencrypt.org"
und nach eine neustart von nginx sehe ich immer
root@debian:/var/log/nginx# more error.log
2020/08/04 11:24:23 [notice] 13203#13203: using inherited sockets from "7;8;9;10;"
2020/08/04 11:34:48 [alert] 547#547: *13 open socket #22 left in connection 9
2020/08/04 11:34:48 [alert] 547#547: *12 open socket #21 left in connection 10
2020/08/04 11:34:48 [alert] 547#547: *36 open socket #23 left in connection 13
2020/08/04 11:34:48 [alert] 547#547: *37 open socket #24 left in connection 14
2020/08/04 11:34:48 [alert] 547#547: aborting
2020/08/04 11:45:42 [alert] 1220#1220: *12 open socket #17 left in connection 5
2020/08/04 11:45:42 [alert] 1220#1220: *13 open socket #18 left in connection 7
2020/08/04 11:45:42 [alert] 1220#1220: *22 open socket #21 left in connection 8
2020/08/04 11:45:42 [alert] 1220#1220: *21 open socket #20 left in connection 11
2020/08/04 11:45:42 [alert] 1220#1220: aborting
2020/08/04 11:51:10 [alert] 1741#1741: *19 open socket #18 left in connection 5
2020/08/04 11:51:10 [alert] 1741#1741: *18 open socket #14 left in connection 7
2020/08/04 11:51:10 [alert] 1741#1741: *56 open socket #22 left in connection 9
2020/08/04 11:51:10 [alert] 1741#1741: *40 open socket #21 left in connection 10
2020/08/04 11:51:10 [alert] 1741#1741: *39 open socket #20 left in connection 12
2020/08/04 11:51:10 [alert] 1741#1741: *58 open socket #23 left in connection 13
2020/08/04 11:51:10 [alert] 1741#1741: aborting
root@debian:/var/log/nginx# systemctl status nginx
● nginx.service - A high performance web server and a reverse proxy server
Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2020-08-04 11:51:10 CEST; 24min ago
Docs: man:nginx(8)
Process: 1901 ExecStop=/sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /run/nginx.pid (code=exited, status=2)
Process: 1910 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Process: 1907 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Main PID: 1912 (nginx)
Tasks: 5 (limit: 4915)
CGroup: /system.slice/nginx.service
├─1912 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
├─1913 nginx: worker process
├─1914 nginx: worker process
├─1915 nginx: worker process
└─1916 nginx: worker process
Aug 04 11:51:10 debian systemd[1]: Starting A high performance web server and a reverse proxy server...
Aug 04 11:51:10 debian systemd[1]: Started A high performance web server and a reverse proxy server.
root@debian:/etc/nginx# dig @8.8.8.8 ocsp.int-x3.letsencrypt.org
; <<>> DiG 9.10.3-P4-Debian <<>> @8.8.8.8 ocsp.int-x3.letsencrypt.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21210
;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;ocsp.int-x3.letsencrypt.org. IN A
;; ANSWER SECTION:
ocsp.int-x3.letsencrypt.org. 1343 IN CNAME ocsp.int-x3.letsencrypt.org.edgesuite.net.
ocsp.int-x3.letsencrypt.org.edgesuite.net. 279 IN CNAME a771.dscq.akamai.net.
a771.dscq.akamai.net. 19 IN A 23.213.161.158
a771.dscq.akamai.net. 19 IN A 23.213.161.146
a771.dscq.akamai.net. 19 IN A 23.213.161.142
a771.dscq.akamai.net. 19 IN A 23.213.161.159
a771.dscq.akamai.net. 19 IN A 23.213.161.144
a771.dscq.akamai.net. 19 IN A 23.213.161.145
a771.dscq.akamai.net. 19 IN A 23.213.161.138
a771.dscq.akamai.net. 19 IN A 23.213.161.136
a771.dscq.akamai.net. 19 IN A 23.213.161.132
;; Query time: 16 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Tue Aug 04 12:27:47 CEST 2020
;; MSG SIZE rcvd: 286
root@debian:/etc/nginx#
root@debian:/etc/nginx/snippets# getent hosts ocsp.int-x3.letsencrypt.org
2a02:26f0:1700:6::17d5:a18c a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a19f a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a190 a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a196 a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a198 a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
seit letzter Woche haben wir das Problem, das ich intern über unseren Port 5001 nicht mehr auf die 3CX zugreifen kann.
Wenn ich mir das Log ansehen von nginx sehe ich erst
root@debian:/var/log/nginx# more error.log.1
2020/07/31 09:44:44 [warn] 512#512: "ssl_stapling" ignored, host not found in OCSP responder "ocsp.int-x3.letsencrypt.org"
2020/07/31 09:45:08 [warn] 849#849: "ssl_stapling" ignored, host not found in OCSP responder "ocsp.int-x3.letsencrypt.org"
und nach eine neustart von nginx sehe ich immer
root@debian:/var/log/nginx# more error.log
2020/08/04 11:24:23 [notice] 13203#13203: using inherited sockets from "7;8;9;10;"
2020/08/04 11:34:48 [alert] 547#547: *13 open socket #22 left in connection 9
2020/08/04 11:34:48 [alert] 547#547: *12 open socket #21 left in connection 10
2020/08/04 11:34:48 [alert] 547#547: *36 open socket #23 left in connection 13
2020/08/04 11:34:48 [alert] 547#547: *37 open socket #24 left in connection 14
2020/08/04 11:34:48 [alert] 547#547: aborting
2020/08/04 11:45:42 [alert] 1220#1220: *12 open socket #17 left in connection 5
2020/08/04 11:45:42 [alert] 1220#1220: *13 open socket #18 left in connection 7
2020/08/04 11:45:42 [alert] 1220#1220: *22 open socket #21 left in connection 8
2020/08/04 11:45:42 [alert] 1220#1220: *21 open socket #20 left in connection 11
2020/08/04 11:45:42 [alert] 1220#1220: aborting
2020/08/04 11:51:10 [alert] 1741#1741: *19 open socket #18 left in connection 5
2020/08/04 11:51:10 [alert] 1741#1741: *18 open socket #14 left in connection 7
2020/08/04 11:51:10 [alert] 1741#1741: *56 open socket #22 left in connection 9
2020/08/04 11:51:10 [alert] 1741#1741: *40 open socket #21 left in connection 10
2020/08/04 11:51:10 [alert] 1741#1741: *39 open socket #20 left in connection 12
2020/08/04 11:51:10 [alert] 1741#1741: *58 open socket #23 left in connection 13
2020/08/04 11:51:10 [alert] 1741#1741: aborting
root@debian:/var/log/nginx# systemctl status nginx
● nginx.service - A high performance web server and a reverse proxy server
Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2020-08-04 11:51:10 CEST; 24min ago
Docs: man:nginx(8)
Process: 1901 ExecStop=/sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /run/nginx.pid (code=exited, status=2)
Process: 1910 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Process: 1907 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
Main PID: 1912 (nginx)
Tasks: 5 (limit: 4915)
CGroup: /system.slice/nginx.service
├─1912 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
├─1913 nginx: worker process
├─1914 nginx: worker process
├─1915 nginx: worker process
└─1916 nginx: worker process
Aug 04 11:51:10 debian systemd[1]: Starting A high performance web server and a reverse proxy server...
Aug 04 11:51:10 debian systemd[1]: Started A high performance web server and a reverse proxy server.
root@debian:/etc/nginx# dig @8.8.8.8 ocsp.int-x3.letsencrypt.org
; <<>> DiG 9.10.3-P4-Debian <<>> @8.8.8.8 ocsp.int-x3.letsencrypt.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21210
;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;ocsp.int-x3.letsencrypt.org. IN A
;; ANSWER SECTION:
ocsp.int-x3.letsencrypt.org. 1343 IN CNAME ocsp.int-x3.letsencrypt.org.edgesuite.net.
ocsp.int-x3.letsencrypt.org.edgesuite.net. 279 IN CNAME a771.dscq.akamai.net.
a771.dscq.akamai.net. 19 IN A 23.213.161.158
a771.dscq.akamai.net. 19 IN A 23.213.161.146
a771.dscq.akamai.net. 19 IN A 23.213.161.142
a771.dscq.akamai.net. 19 IN A 23.213.161.159
a771.dscq.akamai.net. 19 IN A 23.213.161.144
a771.dscq.akamai.net. 19 IN A 23.213.161.145
a771.dscq.akamai.net. 19 IN A 23.213.161.138
a771.dscq.akamai.net. 19 IN A 23.213.161.136
a771.dscq.akamai.net. 19 IN A 23.213.161.132
;; Query time: 16 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Tue Aug 04 12:27:47 CEST 2020
;; MSG SIZE rcvd: 286
root@debian:/etc/nginx#
root@debian:/etc/nginx/snippets# getent hosts ocsp.int-x3.letsencrypt.org
2a02:26f0:1700:6::17d5:a18c a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a19f a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a190 a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a196 a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net
2a02:26f0:1700:6::17d5:a198 a771.dscq.akamai.net ocsp.int-x3.letsencrypt.org ocsp.int-x3.letsencrypt.org.edgesuite.net