(failed) net::ERR_Connection_reset in production site

Brown, Matt 86

ASP.NET Web Form site worked fine in test. I moved it to production and the site won't come up. I've done a reinstall and double checked all I could. I looked for an answer into this and came away with it being a browser issue when it is not that as this happens to anyone looking at the site. The site uses SSO, but it doesn't even get to that point and it generates the error in the title on the very first hit in the Network tab when I do an inspect. Test site is 2022 while the production server is 2016. Framework for the production site is 4.5.2. I know production has at least 4.6, but I would find it odd if the difference would be the issue.

2 answers

MotoX80 35,141 Reputation points

2024-05-04T13:32:05.0166667+00:00
Do you get different results when you try this while in an RDP session on the server and on some other machine?

Test basic connectivity with PowerShell.

Test-NetConnection -ComputerName WhateverNameYouUse -Port 80 Test-NetConnection -ComputerName WhateverNameYouUse -Port 443 Invoke-WebRequest http://WhateverNameYouUse Invoke-WebRequest https://WhateverNameYouUse

Do basic troubleshooting by checking the Application and System event logs, the IIS logs, and the HTTP error logs in C:\Windows\System32\LogFiles\HTTPERR.

Check your site bindings and verify that you have the correct host name and IP address. Verify that the certificate you use for HTTPS matches the WhateverNameYouUse value.

I kept my test and production servers the same OS and same Framework versions.
Please sign in to rate this answer.
Brown, Matt 86 Reputation points

2024-05-06T14:35:49.9133333+00:00

It ended up being I didn't have the certificate tied to the site. I'm still getting a 404 for the site, and I don't see any messages being in the event viewer or in any of the log files. I can go into IIS and do an explore on the site and get the correct directory.

MotoX80 35,141 Reputation points

2024-05-06T15:03:58.19+00:00

I'm still getting a 404 for the site,

What is the name of your default page and is it listed in IIS's default document settings for the web site?

Brown, Matt 86 Reputation points

2024-05-06T15:31:43.3766667+00:00

Default.aspx, and it is listed in IIS as the default page.

MotoX80 35,141 Reputation points

2024-05-06T16:55:49.84+00:00

If you hard code it, does that work? https://yoursite/default.aspx

Look in the IIS log for the 404 entry. Make sure that you don't have a redirect in there somehow. And that the request is being routed to the correct site.

Press F12 in the browser to open the developer tools and look at the network tab to see what page is being requested.

Brown, Matt 86 Reputation points

2024-05-06T19:40:24.0833333+00:00

If I use the bookmark or add in the Default.aspx page both will error out on the base url or the Default.aspx page. I looked at redirects in IIS and I didn't see any. There was a time the server was using JSP pages with Wildfire, but that has been stripped out, so there might be something lingering from that., but I have double checked on that end.

MotoX80 35,141 Reputation points

2024-05-07T12:57:36.59+00:00

both will error out on the base url or the Default.aspx page

Well, since forum users didn't configure your web site, if you want our help you will need to share details about the url you are typing in, how the site is configured, anonymous/authenticated, the bindings, the root directory, etc.

Can you browse a simple .HTM file? Using the Content View of the IIS manager tool, what happens if you right click a file and select Browse?

Trace the 404 with IIS's failed request tracing.

https://www.bing.com/search?pglt=41&q=iis+failed+request+tracing

Trace the files that the w3wp process tries to read with Process Monitor.

https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

Brown, Matt 86 Reputation points

2024-05-07T17:45:18.6566667+00:00

I generated the trace file for the Process Monitor, but I'm not sure what to look for or to do with it. I went through to make sure I had tracing setup. I did some testing and got the attempt at a test.asp page, and I see it in the regular log file, but I don't see anything in the FailedReqLogFiles folder. The regular log file did a couple Gets and that's it.

The site is a secured internal site for a client, so the URL is formatted https://app.client.com.

MotoX80 35,141 Reputation points

2024-05-07T19:55:31.8366667+00:00

but I'm not sure what to look for or to do with it.

You want to add a filter for "Process name is w3wp.exe". In the trace look for file I/O to your root directory.

Look for file I/O to your default page. Is the result column a success or access denied?

Do you see any not found or access denied events?

Brown, Matt 86 Reputation points

2024-05-10T17:08:56.96+00:00

I played around with IIS and while I'm still getting a 404, it at least hits the SSO aspect. That processes fine, but it still get a 404 when it hits the main URL Here's what I am getting from the log file.

2024-05-10 16:14:01 63.25.130.201 GET / - 443 - 63.25.249.20 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Edg/124.0.0.0 - 200 0 0 1406

2024-05-10 16:14:01 63.25.130.201 GET /agent/login-fragment-relay-response uri=https%3A%2F%2Fapp.client%2F&state=CAATFLXqDsDU1CHgEBgwvl0DdYI 443 - 63.25.249.20 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Edg/124.0.0.0 https://app.client.com/ 302 0 0 0

2024-05-10 16:14:01 63.25.130.201 GET /jakarta/isapi_redirect.dll - 443 - 63.25.249.20 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Edg/124.0.0.0 https://app.client.com/ 200 0 0 0

2024-05-10 16:14:02 63.25.130.201 POST /agent/cdsso-oauth2 - 443 - 63.25.249.20 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Edg/124.0.0.0 https://ssologin.client.com/ 302 0 0 15

2024-05-10 16:14:02 63.25.130.201 GET /jakarta/isapi_redirect.dll - 443 BROMA9U 63.25.249.20 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Edg/124.0.0.0 https://ssologin.client.com/ 404 0 2 156

2024-05-10 16:14:02 63.25.130.201 GET /jakarta/isapi_redirect.dll - 443 BROMA9U 63.25.249.20 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Edg/124.0.0.0 https://app.client.com/ 404 0 2 93

Note, there is no jakarta folder in either the C or D drive so I'm not sure how it even gets the 200. From Process Monitor, it looks for it and the files within that directory, but it obviously doesn't find them. I don't see where it hits the Default.aspx page. I tested another .NET site and it never calls for Jakarta so I need to figure out where IIS is configured to look for it.

MotoX80 35,141 Reputation points

2024-05-10T20:35:18.14+00:00

Check the ISAPI filters section in the IIS manager and remove any reference to jakarta.

It might be better to define a brand new web site and point it to your root folder.

It's not easy for forum users to help you with these types of problems because we have no knowledge of what was done in the past on your server.

Brown, Matt 86 Reputation points

2024-05-17T18:52:51.53+00:00

I had to go to the specific ISAPI filters section versus the one with CGI also included in it. Once I saw it was still in the ISAPI specifically I removed it and it ran fine. Thanks.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Michael Taylor 56,346 Reputation points

2024-05-17T19:07:56.2466667+00:00
Long list of things to check:

What does the event logs say on the web server when you run it?

Have you tried browsing the site directly from the server's IIS Manager screen?

Have you confirmed the app pool hosting the site is running (as it WAP which it relies on)?

Have you confirmed the site is also started and associated with the correct app pool?

Is the app pool set to use the v4 runtime of NET Framework?

Was NET recently installed or updated? If so was Net Framework (re)registered with IIS? If you have other sites that are also using NET v4 then this likely isn't the issue.

Did you confirm that the apppool has permissions to the site directory?

Have you confirmed that all the binaries, configs and content needed by the site were deployed correctly?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

(failed) net::ERR_Connection_reset in production site

2 answers

Your answer