Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.

So, other than the obvious information where DataPower is clearly mentioning it is unable to connect successfully to the back end server:

Have you performed and analyzed a packet capture?

What logs, if any, do you see from the server?

Compare the SSL/TLS profile with that of the server (if there is a mismatch, it should be evident in the server logs).

Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.

Hi Attached the same.

So, other than the obvious information where DataPower is clearly mentioning it is unable to connect successfully to the back end server:

Have you performed and analyzed a packet capture?

What logs, if any, do you see from the server?

Compare the SSL/TLS profile with that of the server (if there is a mismatch, it should be evident in the server logs).

Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.

I'm seeing TLS 1.3 going to the server.  Is the server supporting TLS 1.3?

Hi Attached the same.

So, other than the obvious information where DataPower is clearly mentioning it is unable to connect successfully to the back end server:

Have you performed and analyzed a packet capture?

What logs, if any, do you see from the server?

Compare the SSL/TLS profile with that of the server (if there is a mismatch, it should be evident in the server logs).

Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.

Sorry, I was looking at the wrong server.  Can you do another packet capture and filter on only the destination server.  I think the capture you attached is missing the failure.

I'm seeing TLS 1.3 going to the server.  Is the server supporting TLS 1.3?

Hi Attached the same.

So, other than the obvious information where DataPower is clearly mentioning it is unable to connect successfully to the back end server:

Have you performed and analyzed a packet capture?

What logs, if any, do you see from the server?

Compare the SSL/TLS profile with that of the server (if there is a mismatch, it should be evident in the server logs).

Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.

Hi Please find the attached pcap and the destination endpoint is https://extgw.nonprod.rbihub.io/farmyieldreport/1.3/en.

Sorry, I was looking at the wrong server.  Can you do another packet capture and filter on only the destination server.  I think the capture you attached is missing the failure.

I'm seeing TLS 1.3 going to the server.  Is the server supporting TLS 1.3?

Hi Attached the same.

So, other than the obvious information where DataPower is clearly mentioning it is unable to connect successfully to the back end server:

Have you performed and analyzed a packet capture?

What logs, if any, do you see from the server?

Compare the SSL/TLS profile with that of the server (if there is a mismatch, it should be evident in the server logs).

Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.

So, other than the obvious information where DataPower is clearly mentioning it is unable to connect successfully to the back end server:

Have you performed and analyzed a packet capture?

What logs, if any, do you see from the server?

Compare the SSL/TLS profile with that of the server (if there is a mismatch, it should be evident in the server logs).

------------------------------
Joseph Morgan

Original Message:
Sent: Tue August 27, 2024 10:07 AM
From: Stefen Salvatore
Subject: Failed to process response headers in MPGW

Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.

Had the same error :(

So, other than the obvious information where DataPower is clearly mentioning it is unable to connect successfully to the back end server:

Have you performed and analyzed a packet capture?

What logs, if any, do you see from the server?

Compare the SSL/TLS profile with that of the server (if there is a mismatch, it should be evident in the server logs).

------------------------------
Joseph Morgan

Original Message:
Sent: Tue August 27, 2024 10:07 AM
From: Stefen Salvatore
Subject: Failed to process response headers in MPGW

Hi Team,

We are facing issue while calling backend url which is extenal to our network from MPGW. Where it is working fine and giving correct response in error cases like mismatching backend credentials in header, not passing mandatory fields in header. When we are passing all the correct params and payload we are encountering issue.

Below is the XSLT we used for Routing to backend.

            <xsl:variable name="sslprofile">

                  <xsl:value-of select="$RouteURI/RouteInfo/route/sslprofile[@name=$ruleName]/."/>

            </xsl:variable>

            <!-- sslprofile: setting the client profile by using the service variable -->

            <dp:set-variable name="'var://service/routing-url-sslprofile'" value="$sslprofile"/>

            <!-- routing url: setting the routing url by concating the URL and URI with the use of service variable -->

            <dp:set-variable name="'var://service/routing-url'" value="concat($OutBoundURL,$URI)"/>

            <xsl:copy-of select="."/>

Error Response from DP:

<?xml version='1.0' ?>

<env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'>

    <env:Body>

        <env:Fault>

            <faultcode>env:Client</faultcode>

            <faultstring>Internal Error</faultstring>

        </env:Fault>

    </env:Body>

</env:Envelope>

Below are the logs wrote in DataPower Logs:

6:38:17 PM  mpgw  error DEV-SIT     4694256     error 172.16.98.57      0x01130011  mpgw (MPGW-External-API-NONPROXY): Failed to process response headers

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00126  mpgw (MPGW-External-API-NONPROXY): Valid backside connection cannot be established: Failed to process response headers, url: https://hostname/farmyieldreport/1.3/en

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e00626  mpgw (MPGW-External-API-NONPROXY): Error occurred when connecting to URL 'https://hostname/farmyieldreport/1.3/en'

6:38:17 PM  mpgw  error DEV-SIT     4694256           172.16.98.57      0x80e0062a  mpgw (MPGW-External-API-NONPROXY): The header is empty when connecting to URL 'https://hostname/farmyieldreport/1.3/en'.

If we use gatewayscript url-open we are getting below error in the same case:

{

    "errorMessage": "The URL open() function cannot read the response from the stream. Error: Read from network stream timeout",

    "errorCode": "0x8580004e",

    "errorDescription": "The URL open() function cannot read the response from the stream",

    "errorSuggestion": "This error can be caused by an external entity (a remote server experiencing problems) or an internal issue. Check the log for additional messages on this same transaction for further clarification."

}

Any inputs will be helpful.