Backend Namespace Cannot get a server socket


#1

Hi,
I am getting a general socket error when trying to connect the haproxy backend server using a namespace. It connects fine on the frontend. Both the frontend and backend are using the same namespace but different interfaces. If I perform a wget from inside the namespace, I can retrieve the web page that the backend server is trying to connect too. Anyone got any clues to why the backend server cannot connect.

[WARNING] 082/114316 (15384) : Server b_http_P1234518P/P1234518P is DOWN, reason: Layer4 connection problem, info: “General socket error”

ip netns exec P1234518P wget http_//172.17.55.240:80/portal --no-check-certificate
–2017-03-24 12:31:45-- http_//172.17.55.240/portal
Connecting to 172.17.55.240:80… connected.
HTTP request sent, awaiting response… 301 Moved Permanently
Location: http_//172.17.55.240/portal/ [following]
–2017-03-24 12:31:45-- http_//172.17.55.240/portal/
Reusing existing connection to 172.17.55.240:80.
HTTP request sent, awaiting response… 302 Found
Location: https_//172.17.55.240/portal [following]
–2017-03-24 12:31:45-- https_//172.17.55.240/portal

namespace_list
namespace P1234518P

frontend f_http_P1234518P
mode http
bind 192.168.165.64:80 namespace P1234518P name http_P1234518P
default_backend b_http_P1234518P

backend b_http_P1234518P
mode http
server P1234518P 172.17.55.240:80 namespace P1234518P check

HA-Proxy version 1.7.3 2017/02/28
Copyright 2000-2017 Willy Tarreau willy@haproxy.org

Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -m64 -march=x86-64 -O2 -g -fno-strict-aliasing -Wdeclaration-after-statement
OPTIONS = USE_OPENSSL=1 USE_NS=1

Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200

Encrypted password support via crypt(3): yes
Built without compression support (neither USE_ZLIB nor USE_SLZ are set)
Compression algorithms supported : identity(“identity”)
Built with OpenSSL version : OpenSSL 1.0.1t 3 May 2016
Running on OpenSSL version : OpenSSL 1.0.1t 3 May 2016
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built without PCRE support (using libc’s regex instead)
Built without Lua support
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
Built with network namespace support

Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.

Available filters :
[COMP] compression
[TRACE] trace
[SPOE] spoe