topic Re: ACE for transparent proxying and load balancing in Application Networking

ACE for transparent proxying and load balancing

thedinuka — Tue, 09 Sep 2008 08:15:23 GMT

We are intending to use and ACE appliance to re-direct web traffic to a set of proxy servers. The proxy mechanism is transparent proxy, and there for the clients IP address are not VIPs but real IPs on the internet. I'm unclear on how to set this up. Especially, how to do transparent redirection of traffic on the ACE(and whether that is possible for that matter)

Can some one pls help.

Re: ACE for transparent proxying and load balancing

Gilles Dufour — Tue, 09 Sep 2008 08:42:05 GMT

you need to setup a serverfarm that has your proxy defined as real server.

Then use the keyword 'transparent' inside the serverfarm to make it transparent.

Create a class-map to catch the traffic you need.

ie:

class-map Http-Proxy

match port tcp eq 80

Then associate the class-map and serverfarm in a policy

ie:

policy-map type loadbalance first MyProxy

class class-default

serverfarm ....

policy-map multimatch VlanX

class Http-proxy

loadbalance policy MyProxy

loadbalnce vip inservice

Gilles.

Re: ACE for transparent proxying and load balancing

thedinuka — Tue, 09 Sep 2008 09:07:14 GMT

Thanks. I understand the configs on classmap and policy map. But whats the requirement to define the server farm as transparent?

also can you point out how to set that up

thanks again

Re: ACE for transparent proxying and load balancing

Gilles Dufour — Tue, 09 Sep 2008 10:15:30 GMT

By setting the serverfarm in transparent mode you instruct ACE not to nat the destination address when forwarding to the proxy.

The default mode is to nat the destination with the real server ip address.

The serverfarm config would look like this :

serverfarm MyProxy

transparent

rserver Proxy 1

inservice

Gilles.

Re: ACE for transparent proxying and load balancing

thedinuka — Tue, 09 Sep 2008 10:29:54 GMT

great, that was really helpful, But for this to happen is there a specific constraint on the operating mode (routed or bridged?)

also, is there a specific doc on which i can find this info(like the transparent command on the server farm config?)

you are being very helpful and I really appreciate that