By: reza Piri user 14 Sep 2017 at 3:52 p.m. CDT

9 Responses
reza Piri gravatar
I spun up an EC2 instance with all the pre-requisites, added the FQDN to my /etc/hosts file but when I try to access the server from my browser, I cannot pull it up. Also, when I ping the server on the public and private IP on EC2, I get timeouts on both.

By Michael Schwartz Account Admin 14 Sep 2017 at 3:55 p.m. CDT

Michael Schwartz gravatar
Are you sure it's not a network or server firewall issue?

By reza Piri user 14 Sep 2017 at 3:58 p.m. CDT

reza Piri gravatar
on my localhost or amazon?

By Michael Schwartz Account Admin 14 Sep 2017 at 4:05 p.m. CDT

Michael Schwartz gravatar
The host firewall on the Gluu Server?

By Aliaksandr Samuseu staff 14 Sep 2017 at 4:14 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Reza. I agree with Michael. If you can't ping EC2 vm's public IP, it may signify some networking issue there. I take it you still can ssh into it. Could you provide output of next commands (all are run from inside Gluu container): 1. `# hostname` 2. `# cat /etc/hosts` 3. `# cat /etc/resolv.conf` 4. `# netstat -nlpt` 5. `# ps -aux | grep -i java` 6. `# ifconfig` This one needs to be run outside container, but still on Gluu's vm: 1. `# iptables -L -n -v` Could you also share external DNS name Amazon should have provided you in the process of setting the vm up?

By Aliaksandr Samuseu staff 14 Sep 2017 at 6:27 p.m. CDT

Aliaksandr Samuseu gravatar
We also have some notes on AWS setups [here](https://gluu.org/docs/ce/3.1.0/installation-guide/#amazon-aws). Were you following those docs as well?

By Aliaksandr Samuseu staff 16 Sep 2017 at 9:49 a.m. CDT

Aliaksandr Samuseu gravatar
Hi, Reza. The previous request (for commands' output) still remains pending, yet you may also try to check [this article](http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html) and make sure your instance is configured to allow incoming HTTPS traffic on port 443, at least. You may use picture provided in the opening post [here](https://stackoverflow.com/questions/29164607/amazon-ec2-port-443-not-open) as an example (the rest of discussion seems irrelevant)

By reza Piri user 16 Sep 2017 at 10:50 a.m. CDT

reza Piri gravatar
I did use the private IP amazon provided. I'll check out the Amazon EC2 Security Groups for Linux Instances. The other link isn't much help. Here are the results. ``` # Public DNS = ec2-13-59-22-166.us-east-2.compute.amazonaws.com # hostname = gluu.signal0x.com # cat /etc/hosts = 127.0.0.1 localhost ::1 ip6-localhost ip6-loopback ff02::1 ip6-allnodes ff02::2 ip6-allrouters 172.31.1.11 gluu.signal0x.com # cat /etc/resolv.conf nameserver 172.31.0.2 search us-east-2.compute.internal # netstat -nlpt tcp 0 0 127.0.0.1:1636 0.0.0.0:* LISTEN 1174/slapd tcp 0 0 127.0.0.1:11211 0.0.0.0:* LISTEN 1146/memcached tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 973/sshd tcp6 0 0 :::80 :::* LISTEN 1430/apache2 tcp6 0 0 127.0.0.1:8081 :::* LISTEN 1335/java tcp6 0 0 127.0.0.1:8082 :::* LISTEN 1202/java tcp6 0 0 :::22 :::* LISTEN 973/sshd tcp6 0 0 :::443 :::* LISTEN 1430/apache2 # ps -aux | grep -i java jetty 1202 0.1 31.6 3985180 1280484 ? Sl Sep14 4:15 /opt/jre/bin/java -server -Xms256m -Xmx858m -XX:MaxMetaspaceSize=368m -XX:+DisableExplicitGC -Dgluu.base=/etc/gluu -Dserver.base=/opt/gluu/jetty/identity -Dlog.base=/opt/gluu/jetty/identity -Dpython.home=/opt/jython -Dorg.eclipse.jetty.server.Request.maxFormContentSize=50000000 -Djetty.logging.dir=/opt/gluu/jetty/identity/logs -Djetty.home=/opt/jetty -Djetty.base=/opt/gluu/jetty/identity -Djava.io.tmpdir=/opt/jetty-9.3/temp -jar /opt/jetty/start.jar jetty.http.host=localhost jetty.http.port=8082 jetty.state=/opt/gluu/jetty/identity/identity.state jetty-logging.xml jetty-started.xml start-log-file=/opt/gluu/jetty/identity/logs/start.log jetty 1335 0.1 38.2 4806728 1547252 ? Sl Sep14 3:42 /opt/jre/bin/java -server -Xms256m -Xmx1288m -XX:MaxMetaspaceSize=552m -XX:+DisableExplicitGC -Dgluu.base=/etc/gluu -Dserver.base=/opt/gluu/jetty/oxauth -Dlog.base=/opt/gluu/jetty/oxauth -Dpython.home=/opt/jython -Djetty.logging.dir=/opt/gluu/jetty/oxauth/logs -Djetty.home=/opt/jetty -Djetty.base=/opt/gluu/jetty/oxauth -Djava.io.tmpdir=/opt/jetty-9.3/temp -jar /opt/jetty/start.jar jetty.http.host=localhost jetty.http.port=8081 jetty.state=/opt/gluu/jetty/oxauth/oxauth.state jetty-logging.xml jetty-started.xml start-log-file=/opt/gluu/jetty/oxauth/logs/start.log root 30734 0.0 0.0 8856 648 pts/0 S+ 15:41 0:00 grep --color=auto -i java # ifconfig eth0 Link encap:Ethernet HWaddr 02:ee:2d:82:e4:ec inet addr:172.31.1.11 Bcast:172.31.15.255 Mask:255.255.240.0 inet6 addr: fe80::ee:2dff:fe82:e4ec/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:9001 Metric:1 RX packets:39267 errors:0 dropped:0 overruns:0 frame:0 TX packets:33287 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:12803061 (12.8 MB) TX bytes:5967187 (5.9 MB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:471344 errors:0 dropped:0 overruns:0 frame:0 TX packets:471344 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:196683450 (196.6 MB) TX bytes:196683450 (196.6 MB) # iptables -L -n -v Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination ```

By Aliaksandr Samuseu staff 26 Sep 2017 at 11:38 a.m. CDT

Aliaksandr Samuseu gravatar
Hi, Reza. Were you able to configure it? From the look of it, there shouldn't be some issue with the instance itself. It seems `gluu.signal0x.com` is what you provided to the `setup.py` script, correct? Then on the machine where you run your browser, you need to make sure this name is mapped to external ip address of you AWS vm, what seems to be 13.59.22.166 (I got it by resolving `ec2-13-59-22-166.us-east-2.compute.amazonaws.com`). So, in Linux, you would need to add this line to `/etc/hosts` file: ``` 13.59.22.166 gluu.signal0x.com ``` I've just tried to do this and I got to Gluu login page. So I guess it works now?

By Aliaksandr Samuseu staff 02 Oct 2017 at 1:46 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Reza. I'm closing this ticket out for now. If you need further assistance, feel free to open a new ticket.