Why Does CBH Login Fail Through an ECS in a New VPC Connected with the VPC Where CBH Is via VPN or a VPC Peering Connection

Symptom

1. A VPC with a 10.xx.xx.xx CIDR block was selected for a CBH instance.
2. This VPC was connected to another VPC with a 192. xx.xx.xx CIDR block via a VPN or VPC Peering connection.
3. The CBH system can be accessed through the ECSs in the VPC with a 10.xx.xx.xx CIDR block.
4. There is a low probability that the CBH system cannot be accessed through the ECS in the VPC with a 192.xx.xx.xx CIDR block.
5. The route in the red box in the following figure was displayed in the network configurations of the CBH system.
   Figure 1 Network configuration
   

Possible Causes

The CBH system uses a version earlier than 3.3.26.0. In versions earlier than 3.3.26.0, if a CBH system has a large number of requests, threads may be exceptionally stopped during system status checks. As a result, routes may fail to be refreshed, and request traffic is forwarded to ETH0 and then discarded. Login failures then occur.

Solutions

Upgrade the CBH system to 3.3.26.0. .