<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
<head>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<!--[if gte mso 9]>
<xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
<o:PixelsPerInch>96</o:PixelsPerInch>
</o:OfficeDocumentSettings>
</xml>
<![endif]-->
<style type="text/css">* a:hover{cursor:pointer;}</style>
<style>body {-webkit-animation:bugfix infinite 1s;}@-webkit-keyframes bugfix {from {position:relative;}to {position:relative;}}</style>
</head>
<body style="word-wrap:normal; word-break:break-word;">
<style>a {word-wrap:normal;word-break:break-word;}.background-contain {background-size:contain;}@media only screen and (max-width:600px) {.container {-webkit-text-size-adjust:none !important;}.container,.palm-one-whole {width:100% !important;min-width:100% !important;}.palm-one-half {width:50% !important;min-width:50% !important;box-sizing:border-box;}blockquote .container,blockquote .container div,blockquote .container table {width:auto !important;min-width:0 !important;position:relative !important;}img {max-width:100%;}.border-outer,.border-middle,.border-inner,.inner,[title="separator"] {width:100% !important;}.innercell {padding:8px !important;}.palm-block {display:block !important;}td.palm-one-whole {display:inline-block !important;padding:0;}td.palm-one-whole:first-child:not(:only-child) {margin-bottom:16px;}td.hostname {padding-top:3px !important;}}@media only screen and (min-width:601px) {.preview-card {max-width:600px !important;}}@media only screen and (min-device-width :320px) and (max-device-width :568px),only screen and (min-device-width :768px) and (max-device-width :1024px),only screen and (max-device-width:640px),only screen and (max-device-width:667px),only screen and (max-width:480px){.container {width:100% !important;min-width:100% !important;}.p,.small,li,font[size="2"],font[size="3"] {font-size:1em !important;}}@media only screen and (min-device-width :320px) and (max-device-width :568px),only screen and (min-device-width :768px) and (max-device-width :1024px),only screen and (min-device-width :1224px) {.message-wrapper {padding-top:6px;}.apple-only[style] {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}.no-apple {display:none !important;}form {font-size:inherit;}input[type="text"] {height:43px;padding-left:4px !important;}button:hover {cursor:pointer;}}@media only screen and (min-device-width :1224px) {.apple-mail-form {display:block !important;background-color:white !important;}}* [office365] .outlook-com-hidden {display:none !important;}* [office365] .outlook-com-button {display:block;}* [office365] .outlook-com-only {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}.ExternalClass {width:100%;}.ExternalClass .outlook-com-button {display:block;}.ExternalClass button {height:auto;}.ExternalClass .outlook-com-hidden {display:none !important;}.ExternalClass .outlook-com-only {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}.ExternalClass .ecxlabels {display:none !important;}.ExternalClass .ecxlabels {display:none !important;}.ExternalClass .ecxarrow {display:none !important;}.ExternalClass cite >div + div {padding:0 0 4px 0;}.ExternalClass .h1 {padding-bottom:5px;}.ExternalClass .h2 {padding-bottom:5px;}.ExternalClass .h3 {padding-bottom:5px;}.ExternalClass [lang="brand-pinterest"] {width:280px !important;}</style>
<!--[if (gte mso 9)|(IE)]>
<style>a,body {font-family:'Calibri',Arial,sans-serif;}img {border:none !important;-ms-interpolation-mode:bicubic;}td {mso-line-height-rule:exactly !important;}.mso-card-inner table {border-collapse:collapse !important;mso-table-lspace:0pt;mso-table-rspace:0pt;vertical-align:top;}.outlook-com-only {display:none !important;font-size:0 !important;}#mso-one-whole {width:100% !important;}.border-outer,.border-middle,.border-inner {border:none !important;}.border-middle,.border-inner {width:100% !important;}.mso-border-outer,.mso-border-middle,.mso-border-inner {padding:1px;}.mso-border-outer {background-color:rgb(245,255,255);}.mso-border-middle {background-color:rgb(223,246,255);}.mso-border-inner {background-color:rgb(153,176,225);}</style>
<![endif]-->
<table class="container" lang="container" dir="ltr" border="0" cellpadding="0" cellspacing="0" valign="top" style="width:100%; margin-top:6px;">
<tr>
<td valign="top" class="message-wrapper" style="line-height: 1.31; color: #222; font-family: arial, sans-serif;">
<!--[if mso]><table border="0" cellpadding="0" cellspacing="0" valign="top" style="border-collapse:separate;"><tr><td valign="top"><![endif]-->
<div>Hi all, I'm having some trouble using NGINX as a TCP proxy connecting to a customer's servers over an IPSec VPN. </div><div><br></div><div>My setup:</div><div>- 1 EC2 instance with NGINX plus configured as TCP proxy </div><div>- 1 EC2 instance in same VPC running Openswan VPN</div><div>- IPSec VPN with customer that is configured to only respond to requests from my proxy EC2 instance's public IP</div><div><br></div><div>A visual of my setup is here: https://s3-us-west-1.amazonaws.com/static.semprehealth.com/nginx_stream.jpg</div><div><br></div><div><br></div><div>My nginx config on proxy instance:</div><blockquote style="margin: 0 0 0 40px;"><div>user nginx;</div><div>worker_processes auto;</div><div><br></div><div>error_log /var/log/nginx/error.log debug;</div><div>pid /var/run/nginx.pid;</div><div><br></div><div>events {</div><div> worker_connections 1024;</div><div>}</div><div><br></div><div>stream {</div><div> upstream coupon_processors {</div><div> least_conn;</div><div> server 170.138.33.30:49841;</div><div> }</div><div><br></div><div> server {</div><div> listen 49841;</div><div> proxy_pass coupon_processors;</div><div> }</div><div>}</div></blockquote><div><br></div><div><br></div><div>Problem: </div><div>When I'm on proxy instance, I can send data over TCP to my customer's servers (170.138.33.30:49841). When I try to send data from another box, via the proxy, I don't see data returned.</div><div><br></div><div>These are the error logs:</div><blockquote style="margin: 0 0 0 40px;"><div>2016/11/04 08:49:38 [info] 16345#16345: *5 client <MY_IP>:49263 connected to 0.0.0.0:49841</div><div>2016/11/04 08:49:38 [info] 16345#16345: *5 proxy 5.5.0.53:26726 connected to 170.138.33.30:49841</div><div>2016/11/04 08:49:38 [info] 16345#16345: *5 client disconnected, bytes from/to client:105/0, bytes from/to upstream:0/105</div></blockquote><div><br></div><div>Any reason why I can send data, but don't receive anything back?</div><div><br></div><div>Thanks,</div><div>Swaraj</div><img align="left" width="0" height="0" style="border:0; width:0px; height:0px;" src="https://track.mixmax.com/api/track/v2/9isYxYoyd3wo0QoPN/gIt92YugGdsFWZoVmcw1WZzBkahJXY3NnI/IyZy9mL45Wan5GQ45Wan5mI/?sc=false" alt="">
<!--[if mso]></td></tr></table><![endif]-->
</td>
</tr>
</table>
</body>
</html>