topic Cisco ACE 4710 - Different backend ports in Application Networking

Cisco ACE 4710 - Different backend ports

lquin1978 — Mon, 24 Feb 2014 16:57:59 GMT

We have a Cisco ACE 4710 and I would like to know if it would be possible to forward the following URLS to different backend server ports

https://test.mydomain.com/123 --> forwarded to 192.168.1.80 on port 8000

https://test.mydomain.com --> forward to 192.168.1.80 on port 8001

Thanks in advance

Cisco ACE 4710 - Different backend ports

Kanwaljeet Singh — Mon, 24 Feb 2014 17:37:54 GMT

Hi,

Yes this can be done. You should create two serverfarms with rserver 192.168.1.80. One should have rserver listening on port 8000 and one should have rserver listening on port 8001.

Then you should classify condition based on http class map.

Class-map type http loadbalance match-all test

2 match http url /123

Class-map type http loadbalance match-all test1

2 match http url test.mydomain.com

Policy-map type loadbalance first-match URL

class test

serverfarm1

class test1

serverfarm2

And then the usual configuration. I assume the above are not the actual domain names so be careful when defining conditions. The two conditions should not overlap or classification won't happen correctly.

Hope this helps.

Regards,

Kanwal

Re: Cisco ACE 4710 - Different backend ports

Lewis Quin — Wed, 26 Feb 2014 15:25:56 GMT

Thanks but the ACE does not give me the option for HTTP within thte class map, I only have:

access-list Specify access-list for classification

any Match any traffic

destination-address Specify destination-address for classification

port Specify tcp/udp port for classification

source-address Specify source-address for classification

virtual-address Specify virtual-address for classification

I am running

/c4710ace-mz.A3_2_7.bin

Cisco ACE 4710 - Different backend ports

Kanwaljeet Singh — Wed, 26 Feb 2014 15:39:10 GMT

Hi Lewis,

You should choose class-map "type" and then HTTP. Once you do that you have will the options.

Please see my example above.

Regards,

Kanwal

Cisco ACE 4710 - Different backend ports

Lewis Quin — Thu, 27 Feb 2014 13:42:33 GMT

Thank you, I have set up the class maps, but what does the VIP configuration look like? as I can only point to one back end server farm?

Cisco ACE 4710 - Different backend ports

Kanwaljeet Singh — Thu, 27 Feb 2014 14:45:41 GMT

Hi Lewis,

So you will have one VIP which will be common for the domains but ACE will take loadbalancing action on the basis of layer 7 information which you have configured in two separate class maps and bound to a L7 policy map. An example below for you. It is just to give an idea. It's not similar but should give you an idea about the configuration.

If the requested URL is /login, then send to the LOGIN server, otherwise send to web farm.

access-list ANYONE line 10 extended permit tcp any any

probe tcp TCP

rserver host WWW_SERVER_01

ip address 10.10.10.10

inservice

rserver host WWW_SERVER_02

ip address 10.10.10.11

inservice

rserver host WWW_SERVER_03

ip address 10.10.10.12

inservice

rserver host LOGIN_SERVER_04

ip address 10.10.10.15

inservice

serverfarm host WWW-FARM

probe TCP

rserver WWW_SERVER_01

inservice

rserver WWW_SERVER_02

inservice

rserver WWW_SERVER_03

inservice

serverfarm host LOGIN-FARM

probe TCP

rserver LOGIN_SERVER_04

inservice

class-map match-all WWW-VIP

2 match virtual-address 20.20.20.10 tcp eq www

class-map type http loadbalance match-any LOGIN

2 match http url /login

policy-map type loadbalance first-match SLB_LOGIC

class LOGIN

serverfarm LOGIN-FARM

class class-default

serverfarm WWW-FARM

policy-map multi-match CLIENT_VIPS

class WWW-VIP

loadbalance vip inservice

loadbalance policy SLB_LOGIC

loadbalance vip icmp-reply

interface vlan 10

description Servers vlan

ip address 10.10.10.5 255.255.255.0

no shutdown

interface vlan 20

description Client vlan

ip address 20.20.20.9 255.255.255.0

access-group input ANYONE

service-policy input CLIENT_VIPS

no shutdown

ip route 0.0.0.0 0.0.0.0 20.20.20.1

Regards,

Kanwal