topic Re: HTTP header insertion problem with ACE in Application Networking

HTTP header insertion problem with ACE

lukaszkhalil — Thu, 07 May 2009 17:54:47 GMT

I try to configure the HTTP header insertion feature based on the action-list type modify http. Unfortunately it does not works.

The config looks like that

action-list type modify http TEST

header insert both Host header-value test:test.

I added this action-list to the correct policy-map.

When I checked the snifer output on the server side, there is no test value in the HTTP header.

I test the same feature based on the "insert-http" command in the policy-map and this one works.

Could anybody help me with this problem?

Thank you in advance

Regards

Lucas

Re: HTTP header insertion problem with ACE

Gilles Dufour — Fri, 08 May 2009 07:30:11 GMT

I just gave it a try in my lab and it works.

action-list type modify http test-insert

header insert both My-Header header-value "gilles"

header insert both Host header-value "192.168.30.24:80"

policy-map type loadbalance http first-match HtppInsert

class class-default

serverfarm linux1-80

action test-insert

policy-map multi-match SLB1

class VIP-122-80

loadbalance vip inservice

loadbalance policy HtppInsert

loadbalance vip icmp-reply active

loadbalance vip advertise active

loadbalance vip advertise metric 1

connection advanced-options SetTos

My version: A2(1.4a)

Re: HTTP header insertion problem with ACE

lukaszkhalil — Fri, 08 May 2009 09:12:13 GMT

Ok thank you. I did my tests on version A2(1.4) so I'll try to do that on A2(1.4a)

Lucas

Re: HTTP header insertion problem with ACE

lukaszkhalil — Wed, 13 May 2009 19:34:43 GMT

I've done some tests on A2(1.4) and I confirm that the feature works, but the problem is that the new header field in being inserted only into the first packet of the flow. The rest of the packets do not have this parameter set.

Do you know how it can be fixed ?

Regards

Lucas

Re: HTTP header insertion problem with ACE

sachinga.hcl — Thu, 14 May 2009 00:20:37 GMT

Hi Lukaszk,

Enter an unquoted text string with no spaces and a maximum of 255 alphanumeric characters in the expression part as shown below.

action-list type modify http test-insert

header insert both My-Header header-value gilles

header insert both Host header-value 192.168.30.24:80

header insert both Host header-value www.cisco.com

Kind Regards,

Sachin Garg

Re: HTTP header insertion problem with ACE

lukaszkhalil — Thu, 14 May 2009 05:36:46 GMT

I tried to do that, but the results are the same.

My config is as below

action-list type modify http test-insert

header insert both My-Header header-value test

header insert both SSL header-value TRUE

I attached this action-list to the SSL policy-map, and what I saw is that the new headers appeared only in the first HTTP packet of the flow.

Regards

Lucas

Re: HTTP header insertion problem with ACE

Gilles Dufour — Thu, 14 May 2009 08:47:28 GMT

configure persistence rebalance with a parameter-map.

Re: HTTP header insertion problem with ACE

sachinga.hcl — Thu, 14 May 2009 18:59:27 GMT

Hi Lukas,

Add a new parameter-map named PRMAP_PERST_REBLNC and add this to the policy map using command appl-parameter http advanced-options PRMAP_PERST_REBLNC as shown below:

action-list type modify http test-insert

header insert both My-Header header-value test

header insert both SSL header-value TRUE

policy-map type loadbalance http first-match HtppInsert

class class-default

serverfarm linux1-80

action test-insert

policy-map multi-match SLB1

class VIP-122-80

loadbalance vip inservice

loadbalance policy HtppInsert

loadbalance vip icmp-reply active

loadbalance vip advertise active

loadbalance vip advertise metric 1

connection advanced-options SetTos

appl-parameter http advanced-options PRMAP_PERST_REBLNC

parameter-map type http PRMAP_PERST_REBLNC

persistence-rebalance

Hope this will make all the packets are inserted with the http header not the first one only.

If it works then plz inform.

Kind Regards.

Sachin Garg

Re: HTTP header insertion problem with ACE

litrenta — Tue, 19 May 2009 18:41:54 GMT

Instead of persistence-rebalance in your parameter map. Use header modify per-request in the parameter map. This introduces less overhead as we don't need to make a load balance decsion just insert the header.

Re: HTTP header insertion problem with ACE

lukaszkhalil — Thu, 21 May 2009 12:21:26 GMT

Hello

I've done a test and it works as well as the persistent-rebalance.

Could you please explain to me why when using persistent-rebalance I see the header value in each packet ?

Thank you in advance

Regard

Lucas

Re: HTTP header insertion problem with ACE

Gilles Dufour — Thu, 21 May 2009 14:12:48 GMT

Lucas,

analyzing data requires time, cpu, memory ... resources.

So we try to only analyze a minimum of data.

Without persistence rebalance, once we have made our loadbalancing decision, we simply switch the traffic without looking into the data.

This is the best option to achieve best performance.

By configuring 'persistence rebalance' you forces ACE to inspect every request.

You'll get lower performance but since we inspect all request we are able to insert the header to each of them.

Gilles.

Re: HTTP header insertion problem with ACE

lukaszkhalil — Thu, 21 May 2009 17:25:26 GMT

ok, now it is clear for me.

Thank you

Lucas