APM WebServer PowerPack Agent is not reporting metrics for Apache IBM_HTTP_SERVER Web Server with TLS enabled.

Products

• CA Application Performance Management Agent (APM / Wily / Introscope)
• INTROSCOPE

Issue/Introduction

APM WebServer PowerPack agent showing the following errors in APM agent log.

PM EDT [ERROR] [WebServerMonitor] Could not get metrics from server : https://<Web-Server-Hostname>:547
java.net.ConnectException: Connection refused
 at java.net.PlainSocketImpl.socketConnect(Native Method)
 at java.net.PlainSocketImpl.doConnect(Unknown Source)
 at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
 at java.net.PlainSocketImpl.connect(Unknown Source)
 at java.net.SocksSocketImpl.connect(Unknown Source)
 at java.net.Socket.connect(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.<init>(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketFactoryImpl.createSocket(Unknown Source)
 at com.wily.webservermonitor.AuthSSLProtocolSocketFactory.createSocket(AuthSSLProtocolSocketFactory.java:375)
 at com.wily.webservermonitor.AuthSSLProtocolSocketFactory.createSocket(AuthSSLProtocolSocketFactory.java:314)
 at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:710)
 at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:389)
 at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:173)
 at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:430)
 at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:326)
 at com.wily.webservermonitor.AWebServerMonitor$Executor.run(AWebServerMonitor.java:125)

 

The WebServerConfig.xml file is configured as follows:

<WebServer Type="Apache:IBM_HTTP_SERVER" Enabled="true" Protocol="TLS" ServerURL="https://<Web-Server-Hostname>:547" DisplayName="WebServer-IHS" RefreshFrequencyInSeconds="15" Mode="Permissive"/>   

 

Environment

Apache IBM_HTTP_SERVER Web Server when using TLS 1.1 and 1.2 protocols.APM WebServer PowerPack Agent Version 10.5.1.

Cause

The root cause is a firewall and an older JRE on the Operating System.

 

Resolution

APM cannot remotely monitor the web server due to the configuration (with some type of firewall in place). This is causing the connection refused condition.
In this case APM must monitor WebServer with APM WebServer PowerPack Agent installed locally. 

There could potentially be another issue when Apache IBM_HTTP_SERVER Web Server is on an older version of RHEL - 5.X or earlier.
In this case, the default JRE may not support the TLS protocols. You would need to use a newer version of the JRE for APM WebServer PowerPack Agent.