ACE 4710 - 1 global IP to 2 separate private IP's

[Damian Coverly]

Hi experts,

I was hoping someone could help me with this.

Is it possible to use the ACE as a proxy and send SSL connections to 1 VIP then 2 seperate RSevers based on a URL redirect/rewrite? I need a solution that uses one global IP address and sends the SSL connection to two (and eventually more) seperate virtual machines. I'll try my best to explain it in a below

ACE's currently runn Version A5(2.1)

Any info on this would be greatly appreciated.

Thanks, Damian.

[sivaksiv · Accepted solution]

Hi Damian,

Looking at the setup, yes its possible, let me know if you need any information.

Reference:

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00809c3045.shtml

-

Siva

[ajayku2]

Hi Damian,

FIrst requirement would be to do SSL offloading. Without that you cannot achieve this.

Here it is discussed :

https://supportforums.cisco.com/thread/2115937

So ideally first setting up SSL offload.

http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA4_1_0/configuration/ssl/guide/terminat.html#wp1110842

Then setting URL based load balancing policy.

docwiki.cisco.com/wiki/URL_Load_Balancing_Using_Routed_Mode_on_the_Cisco_Application_Control_Engine_Configuration_Example

regards,

Ajay Kumar

[Damian Coverly]

Hi Siva and Ajay,

Thanks for assuring me this can be done. I'll go through all the links you've sent and get back to you for help if you don't mind.

Ajay - the second link you posted is dead.

Thanks, Damian.

[ajayku2 · Accepted solution]

Hi,

This works for me. Give it a try again.

http://docwiki.cisco.com/wiki/URL_Load_Balancing_Using_Routed_Mode_on_the_Cisco_Application_Control_Engine_Configuration_Example

You can even try to search in google  - cisco ace url based load balancing

regards,

Ajay Kumar

[Damian Coverly]

Hi Ajay and Siva,

I only got around to this implemention this week and with some help from those links I was able to configure it successfully.

Thanks for your help.

Take care, Damian.

[ajayku2]

Hi Damian,

Good to know that it was helpful.

regards,

Ajay Kumar