topic Re: layer 7 class map on ace in Application Networking

layer 7 class map on ace

networks — Tue, 27 Jul 2010 12:38:21 GMT

would like to use layer 7 class map and policy on ace

requirement
have a single vip address 1.1.1.1 for url vprsoa.test.co.uk, vprgat.test.co.uk, vprgatadm.co.uk

what to use in LB so the above should work
also when i type vprsoa.test.co.uk/em it should be directed to the correct server farm
so /* for any of the above url should also work
what regular expressions to use

thanks in advance

Re: layer 7 class map on ace

shbadve — Tue, 27 Jul 2010 20:22:15 GMT

Example:

class-map match-all VIP
2 match virtual-address 1.1.1.1 tcp eq www

class-map type http loadbalance match-all VPRSOA_EM
2 match http header Host header-value "vprsoa.test.co.uk"
4 match http url /em

policy-map type loadbalance first-match VPR_URL_SLB
class VPRSOA_EM
serverfarm FARM1
class class-default
serverfarm FARM_DEFAULT

policy-map multi-match VIP_SLB
class VIP
    loadbalance vip inservice
    loadbalance policy VPR_URL_SLB
    loadbalance vip icmp-reply

In case each host name+URL needs to go to a different serverfarm then please create separate class-map for each.

Example:

class-map type http loadbalance match-all VPRSPA_TEST
2 match http header Host header-value "vprsoa.test.co.uk"
4 match http url /.*

policy-map type loadbalance first-match VPR_URL_SLB
class VPRSOA_EM
    serverfarm FARM_EM
class VPRSOA_TEST
    serverfarm FARM_TEST
class class-default
    serverfarm FARM_DEFAULT

Note: Order of class-map is important.

Adding Case Insensitive:

parameter-map type http HTTP-Params
case-insensitive

policy-map multi-match VIP_SLB
class VIP
    loadbalance vip inservice
    loadbalance policy VPR_URL_SLB
    loadbalance vip icmp-reply
    appl-parameter http advanced-options HTTP-Params

Hope this helps.

Thanks - Shubha

Re: layer 7 class map on ace

networks — Thu, 29 Jul 2010 17:07:48 GMT

Thanks for the reply

other 2 url are working but

but unosoagat.mfltest.co.uk/* isnt working, i am not sure if its the server or the config

btw: all 3 urls are pointed to the same server farm, for stickiness i have used

sticky http-cookie SFARM-UNOgateway-endpoint-STICKY SFARM-COOKIE-INSERT-UNO-gateway-endpoint-7777
cookie insert browser-expire
replicate sticky
serverfarm unogateway_adm_int
sticky http-cookie SFARM-UNOgatewayADM-endpoint-STICKY SFARM-COOKIE-INSERT-UNO-gatewayADM-endpoint-7777
cookie insert browser-expire
replicate sticky
serverfarm unogateway_adm_int
sticky http-cookie SFARM-UNOgatewayINT-endpoint-STICKY SFARM-COOKIE-INSERT-UNO-gatewayINT-endpoint-7777
cookie insert browser-expire
replicate sticky
serverfarm unogateway_adm_int

class-map type http loadbalance match-all L7unosoagat
2 match http Host header-value "unosoagat.mfltest.co.uk"
3 match http url /.*
class-map type http loadbalance match-all L7unosoagatadm
2 match http Host header-value "unosoagatadm.mfltest.co.uk"
3 match http url /.*
class-map type http loadbalance match-all L7unosoagatint
2 match http Host header-value "unosoagatint.mfltest.co.uk"
3 match http url /.*

Re: layer 7 class map on ace

shbadve — Thu, 29 Jul 2010 20:25:03 GMT

Hello,

I would suggest that you check the "show service-policy detail" output to see if the hit count for class L7unosoagat is incrementing or not.

If it is and the connection is not successful then check the "show serverfarm detail" for any failed conenctions.

However if the hit count is not incrementing then a client side capture would be helpful to see how the host name looks like.

Hope this helps.
Thanks. - Shubha