Load Balance Connection

[Purnajith]

We have a 3-node rabbitMQ cluster ( Deployed on EC2 machines with names as rmq1.internal, rmq2.internal, rmq3.internal ) listening on target groups via the network load balancer. We are planning to provide the load balancer's DNS record which would resolve to the RMQ cluster. But when we tried using it always provided an error as "RabbitMQ.Stream.Client.RoutingClientException: Could not find broker (rmq2.internal:5551) after 25 attempts"

Here is the sample code

var ipAddress = Dns.GetHostAddresses("rmq.internal");
var lbAddressResolver = new AddressResolver(new IPEndPoint(IPAddress.Parse(ipAddress), 5551));
var config = new StreamSystemConfig
{
    UserName = "guest",
    Password = "guest",
    VirtualHost = "/",
    AddressResolver = lbAddressResolver,
    Endpoints = new List<EndPoint> {addressResolver.EndPoint},
}; 

Can you help us in resolving this issue ?

FYI

• We see this issue only in the dot net stream lib, not in either dotnet queue lib lib or the java libs (both queue and stream) which is using the same hostname and directly connecting to the load balancer address resolver as defined here

[Gsantomaggio]

Port 5551 is a TLS port. You need to configure the TLS client side:
https://github.com/rabbitmq/rabbitmq-stream-dotnet-client#tls

[Purnajith]

We have enabled that as well with the following

Ssl = new RSC.SslOption
                {
                    Enabled = useSSL,
                    ServerName = hostName,
                },

[Gsantomaggio]

I don't think that it is enough as a configuration.

btw, can you please check the rabbitmq server logs? you should see some connection.

Another test is to try without TLS using the standard port 5552

[Purnajith]

Ohh will try that and let you know

[Gsantomaggio]

I just tried with a configuration like this:

  var ssl = new SslOption()
        {
            Enabled = true,
            AcceptablePolicyErrors = SslPolicyErrors.RemoteCertificateNotAvailable |
                                     SslPolicyErrors.RemoteCertificateChainErrors |
                                     SslPolicyErrors.RemoteCertificateNameMismatch,
        };
        var ipAddress = await Dns.GetHostAddressesAsync("my.domain.net");
        var lbAddressResolver = new AddressResolver(new IPEndPoint(ipAddress[0], 5551));

        var config = new StreamSystemConfig()
        {
            UserName = "myusername",
            Password = "mypassword",
            Ssl = ssl,
            AddressResolver = lbAddressResolver,
            Endpoints = new List<EndPoint>(new List<EndPoint>()
            {
                lbAddressResolver.EndPoint
            }),
        };

and it works.
But I think that I should add a DNS entry for the AddressResolver to avoid to lookup manually the IP Address from the DNS

[Purnajith]

@Gsantomaggio Great this is help full, I will try it and let you know

[Gsantomaggio]

@Purnajith, FYI #189

In this way, you can use the DNS directly

[Gsantomaggio]

@Purnajith have you solved it? We will release a new version soon I'd like to know if everything is ok!
thank you

[Purnajith]

@Gsantomaggio We were not able to check cause we rolled back out the set up for a single cluster so that no one would be blocked. I'll try to test this by this Friday and let you know if is that ok?

When are you planning to release a new version?

[Gsantomaggio]

Thank you @Purnajith ! the plan is for the next week

[Purnajith]

Great will try to give you an update before that

[Gsantomaggio]

will close due of inactivity