Girish, Please check whether you were able to telnet to ssh port on that machine? If it works and as well, if you were able to manually do an ssh to that machine, then it may not be a firewall configuration issue.
If we are using either pexpect\paramiko library( assuming ), then open call of these libraries some times gets hung for ssh. You may just wanted to restart the ssh daemon on the target, I have seen upgrading ssh daemon some times fixes this issue. Thanks! Santhosh ________________________________________ From: Chiradeep Vittal [chiradeep.vit...@citrix.com] Sent: Monday, September 23, 2013 1:37 AM To: dev@cloudstack.apache.org Cc: Girish Shilamkar Subject: Re: SSHException('Error reading SSH protocol banner',) while sshing to a machine behind a load balancing rule What tool/library are you using to perform the SSH? SSH is not a good way to test the algorithm. How are you going to test other stickiness methods? Best to use good old HTTP. On 9/22/13 9:30 PM, "Ashutosh Kelkar" <ashut...@clogeny.com> wrote: >I am currently trying to validate the stickiness policy of a load >balancing >rule by sshing to the public IP of the LB rule and verifying that the >request goes to the same machine every time. > >Here is the config I use to create the LB rule. > >"lbrule": { > > "name": "SSH", > "alg": "roundrobin", > # Algorithm used for load balancing > "privateport": 22, > "publicport": 22, > "openfirewall": True, > "startport": 22, > "endport": 2222, > "protocol": "TCP", > "cidrlist": '0.0.0.0/0', > }, > >My ssh attempts fail with the following error : SSHException('Error >reading >SSH protocol banner',) > >Is there some more setup that is needed for SSH to work correctly? The SSH >error points to a possible firewall configuration issue. > >Regards >Ashutosh