topic ACE - Port Load balance in Application Networking

ACE - Port Load balance

datacenter — Tue, 22 Sep 2009 21:18:04 GMT

I have a proxy solution implementated and using squid. We want to do a loadbalance proxy services. Ex: two real ip servers with two proxy service (port 3128 and 8080). How can we do this using Cisco ACE module?

Re: ACE - Port Load balance

Gilles Dufour — Thu, 24 Sep 2009 08:20:25 GMT

Hopefully you're not asking for the complete solutions but just some guidance.

First, configure each real server.

In other words, every device physical ip address.

ie:

rserver Squid1

ip addr x.x.x.x

inservice

Then create a serverfarm to group the rservers.

ie:

serverfarm proxy

rserver squid1 8080

ins

rserver squiq1 3128

ins

rserver squid2 8080

ins

rserver squid2 3128

ins

Then use the serverfarm in your policy.

Gilles.

Re: ACE - Port Load balance

datacenter — Thu, 24 Sep 2009 10:30:37 GMT

Thanks you for the attention.

we already have this configuration working.

The problem is: 50% of the users are configurated to use the port 3128 on the IE proxy settings and other 50% to use the port 8080. We want to set up all users IE proxy settings to use one single port (Ex. 5555). When these users try to use the internet they will send the request to ACE than ACE will change the port destination (3128 or 8080) and send to the servers.

Re: ACE - Port Load balance

dario.didio — Thu, 24 Sep 2009 11:26:23 GMT

Hi,

so what you want is the users connect to the proxy VIP on the ACE to port 10.1.240.10:5555 and the ACE balances these request over the proxy servers on ports server 1 port 3128+8080 and server 2 port 3128+8080? Is this correct?

This should work:

class-map match-all L4VIPCLASS

2 match virtual-address 10.1.240.10 tcp eq 5555

rserver server1

ip add x.x.x.x

ins

rserver server2

ip add x.x.x.x

ins

serverfarm test

rserver server1 3128

ins

rserver server1 8080

ins

rserver server2 3128

ins

rserver server2 8080

ins

This way, all requests for internet will be load-balanced over your proxy servers on ports 3128 and 8080, but your clients will only send traffic to 5555.

HTH,

Dario