topic Blue Prism Load Balancer Connection Error in Product Forum

Blue Prism Load Balancer Connection Error

SiddheshwarKore — Sat, 23 Oct 2021 15:54:00 GMT

Hi All,

I am getting following error while connecting to app-server from runtime resource :

Could not connect to https:<someservername:8199>/bpserver. This could be due to the fact that the server certificate is not configured properly with HTTP.SYS in the HTTPS case. This could also be caused by a mismatch of the security binding between the client and the server

Configuration Details:

BPv7.0
Two Load Balanced App servers
WCF: Transport Encryption
Load Balancer set to use SSL Passthrough
Same SSL cert applied on two app servers
Same configuration in both app server (Encryption schema etc. except binding address which is FQDN of each app server)
CN of SSL cert: bluprismprd.somecompany.com
FQDN of Load Balancer: bluprismprd.wip.somecompany.com
Runtime Resource is configured to connect to Load Balancer VIP FQDN (bluprismprd.wip.somecompany.com:8199)

Please note that if i configure the RR to directly connect to app server without load balancer (appserver1.somecompany.com), then it works fine

------------------------------
Siddheshwar Kore
------------------------------

RE: Blue Prism Load Balancer Connection Error

JerinJose — Tue, 26 Oct 2021 08:06:00 GMT

Hi Siddeshwar,

Please try with End to End SSL on load balancer (you should install the same certificate that of the application servers in LB as well) and Runtime Resources must be configured using /sslcert flag along with the thumbprint of the specific SSL cert which must be deployed locally on the runtime resource. The certificate should be deployed to the machine certificate store, not a specific users store.

------------------------------
Jerin Jose
Technical Product Owner
EY
Asia/Kolkata
*"If you find this post helpful mark it as best answer, .*
------------------------------

RE: Blue Prism Load Balancer Connection Error

RyanAndrews — Tue, 26 Oct 2021 23:14:00 GMT

Hi Siddheshwar,

Looking at your configuration, the common name (CN) on the certificate (bluprismprd.somecompany.com) does not match the FQDN of the Load balancers VIP (bluprismprd.wip.somecompany.com). Please reissue the certificate with either the CN or a Subject Alternate Name configured as bluprismprd.wip.somecompany.com, then reapply to the BP server configurations on each of your application servers.

------------------------------
Ryan Andrews
Platform Consultant
Blue Prism
Australia/Brisbane
------------------------------

RE: Blue Prism Load Balancer Connection Error

SiddheshwarKore — Mon, 01 Nov 2021 04:10:00 GMT

Hi Ryan, thanks a lot. Even I was suspecting this could be a problem so I added a DNS entry which would resolve the blueprismprd.somecomapny.com. to blueprismprd.wip.somecomapny.com. However the issue persists.

------------------------------
Siddheshwar Kore
------------------------------

RE: Blue Prism Load Balancer Connection Error

SiddheshwarKore — Tue, 02 Nov 2021 02:52:00 GMT

@RyanAndrews
Hi Ryan,

After making some changes in configuration, now the error message has disappeared. now I am getting following error:
Increase the timeout value passed to the call to request or increase the sendtimeout value on the binding

May I check how can change the timeout value in Blue Prism Config? Is it even posssible? in LB timeout is set to 60s persistence to 15 mins so LB should not be an issue I believe

------------------------------
Siddheshwar Kore
------------------------------

Re: RE: Blue Prism Load Balancer Connection Error

Sheela — Wed, 10 Apr 2024 11:49:25 GMT

@SiddheshwarKore ,

Im facing the same issue as you reported here.

Could you please let me know the steps which performed to resolve the issue.

Regards,

Sheela