ERROR:vyos_config_sync:An error occurred: HTTPSConnectionPool ?!

General questions
1

Hi All,

I’m trying to setup HA and config-sync between 2 router over https but the below ERROR shows up when I commit changes, and the configuration does not sync. Unsure if I’m missing something ?!

INFO:vyos_config_sync:Config synchronization: Mode=load, Secondary=192.168.50.27
An error occurred: HTTPSConnectionPool(host='192.168.50.27', port=7443): Max retries exceeded with url: /configure-section (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fdbf9ca8a90>: Failed to establish a new connection: [Errno 111] Connection refused'))
ERROR:vyos_config_sync:An error occurred: HTTPSConnectionPool(host='192.168.50.27', port=7443): Max retries exceeded with url: /configure-section (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fdbf9ca8a90>: Failed to establish a new connection: [Errno 111] Connection refused'))

VyOS Version

vyos@vyos:~$ show version
Version:          VyOS 2025.10.30-0020-rolling
Release train:    current
Release flavor:   generic

Built by:         autobuild@vyos.net
Built on:         Thu 30 Oct 2025 00:20 UTC
Build UUID:       27f0d9d2-cf34-4ef2-80e7-2fde19861a48
Build commit ID:  e8b465297dd33f

Configuration on Router A

set service config-sync mode load
set service config-sync secondary address 192.168.50.27
set service config-sync secondary port 7443
set service config-sync secondary key mykey

set service config-sync section nat
set service config-sync section policy
set service config-sync section service ntp
set service config-sync section qos interface
set service config-sync section qos policy
set service config-sync section interfaces ethernet
set service config-sync section system time-zone
set service config-sync section system option
set service config-sync section system static-host-mapping

set high-availability vrrp group defaultHA interface eth0
set high-availability vrrp group defaultHA hello-source-address 192.168.50.26
set high-availability vrrp group defaultHA peer-address 192.168.50.27
set high-availability vrrp group defaultHA address 192.168.50.25/24 interface eth0
set high-availability vrrp group defaultHA priority 101
set high-availability vrrp group defaultHA track interface eth0
set high-availability vrrp group defaultHA vrid 96

set high-availability vrrp sync-group sync member defaultHA
set high-availability vrrp sync-group sync health-check ping 192.168.50.27
set high-availability vrrp sync-group sync health-check interval 10
set high-availability vrrp sync-group sync health-check failure-count 5

Configuration on Router B

set service https port 7443
set service https listen-address 192.168.50.26
set service https allow-client address 192.168.50.27
set service https api keys id myid key mykey

set high-availability vrrp group defaultHA interface eth0
set high-availability vrrp group defaultHA hello-source-address 192.168.50.27
set high-availability vrrp group defaultHA peer-address 192.168.50.26
set high-availability vrrp group defaultHA address 192.168.50.25/24 interface eth0
set high-availability vrrp group defaultHA priority 100
set high-availability vrrp group defaultHA track interface eth0
set high-availability vrrp group defaultHA vrid 96

set high-availability vrrp sync-group sync member defaultHA
set high-availability vrrp sync-group sync health-check ping 192.168.50.26
set high-availability vrrp sync-group sync health-check interval 10
set high-availability vrrp sync-group sync health-check failure-count 5

VRRP

vyos@vyos:~$ show vrrp
Name       Interface      VRID  State      Priority  Last Transition
---------  -----------  ------  -------  ----------  -----------------
defaultHA  eth0             96  MASTER          101  9m21s

vyos@vyos:~$ show vrrp
Name       Interface      VRID  State      Priority  Last Transition
---------  -----------  ------  -------  ----------  -----------------
defaultHA  eth0             96  BACKUP          100  9m28s
2

The log on on the 2nd VyOS was showing the below error..

Jan 25 19:37:22 systemd[1]: nginx.service: Scheduled restart job, restart counter is at 62.
Jan 25 19:37:22 systemd[1]: Stopped A high performance web server and a reverse proxy server.
Jan 25 19:37:22 systemd[1]: Starting A high performance web server and a reverse proxy server...
Jan 25 19:37:22 nginx[4809]: nginx: [emerg] bind() to 192.168.50.26:7443 failed (99: Cannot assign requested address) <-----
Jan 25 19:37:22 nginx[4809]: nginx: configuration file /etc/nginx/nginx.conf test failed
Jan 25 19:37:22 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Jan 25 19:37:22 systemd[1]: nginx.service: Failed with result 'exit-code'.

I rechecked the configuration and the error was the listen and allow-client address

set service https listen-address 192.168.50.26 <--- This is 2nd VyOS address
set service https allow-client address 192.168.50.27 <--- This is 1st VyOS address

Reversed the above addresses, and its working as expected..

3

Will deleting interface eth0 from config-sync help?

4

Thanks @Viacheslav

I got this working..

What I’m trying to understand is if I have to configure both HA and Config-Sync ?

Because what I have experience is Config-Sync only synchronizes configuration after the Config-Sync setup is complete, any configuration done before it is not copied, and I’m also not sure how to manually sync configuration..

5

It will sync if a specific section has been changed.