ACE 4710 Loadbalancer Weblogic Issues

[Andrew MacDonald]

Hi Guys,

Having some issues with my Loadbalancer and weblogic. Eventually i want to SSL Forwarding and everything set up but as of now I can only access the VIP under port 7001 (default weblogic port.) How would i get it so I can access via HTTP. My Config is below.

PA-ACE-4700-SLB/Admin# changeto Prod-Support

PA-ACE-4700-SLB/Prod-Support# show run

Generating configuration....

access-list allow line 8 extended permit ip any any

probe icmp PROBE_SERVICE_ICMP

  interval 5

  passdetect interval 5

  receive 5

probe tcp TCP443_PROBE

  port 443

  interval 5

  passdetect interval 5

  receive 5

  connection term forced

  open 2

probe tcp TCP7001_PROBE

  port 7001

  interval 5

  passdetect interval 5

  receive 3

  connection term forced

  open 2

probe tcp TCP80_PROBE

  interval 5

  passdetect interval 5

  receive 3

  connection term forced

  open 2

rserver host 228-WLS11host1

  ip address 192.168.211.228

  inservice

rserver host 229-WLS11host2

  ip address 192.168.211.229

  inservice

serverfarm host WLS11-7001

  probe TCP7001_PROBE

  rserver 228-WLS11host1

    inservice

  rserver 228-WLS11host1 7001

  rserver 229-WLS11host2

    inservice

  rserver 229-WLS11host2 7001

sticky http-cookie ACE_COOKIE-7001 7001_STICKY

  cookie insert browser-expire

  replicate sticky

  serverfarm WLS11-7001

class-map type http loadbalance match-any L5

  2 match http url .*

class-map match-all WLS11-7001-CLASS

  2 match virtual-address 192.168.211.50 tcp any

policy-map type loadbalance first-match WLS11-7001-Policy

  class L5

    sticky-serverfarm 7001_STICKY

policy-map multi-match WLS11-SLB

  class WLS11-7001-CLASS

    loadbalance vip inservice

    loadbalance policy WLS11-7001-Policy

    loadbalance vip icmp-reply active

    nat dynamic 1 vlan 1000

interface vlan 1000

  ip address 192.168.211.226 255.255.255.0

  access-group input allow

  nat-pool 1 192.168.211.50 192.168.211.50 netmask 255.255.255.255 pat

  service-policy input WLS11-SLB

  no shutdown

ip route 0.0.0.0 0.0.0.0 192.168.211.235

Thanks for any help you can provide.

[Jorge Bejarano]

Andrew,

Why do you get some of the services disabled?

serverfarm host WLS11-7001

  probe TCP7001_PROBE

  rserver 228-WLS11host1

    inservice

  rserver 228-WLS11host1 7001

  rserver 229-WLS11host2

    inservice

  rserver 229-WLS11host2 7001

Did you try something like this already?

serverfarm host WLS11-7001

  probe TCP7001_PROBE

  rserver 228-WLS11host1 7001

  inservice

  rserver 229-WLS11host2 7001

  inservice

What is the status in the probe? Is it failing?

Jorge

[Andrew MacDonald]

Probes are successful and the app is loadbalancing the way it should with Sticky Sessions however i want to be able to hit the vip on port 80 rather than 7001. If i goto 192.168.211.50:7001 it works great if i go to http://192.168.211.50 i got nothing.

Let me know if you have any ideas.

Thanks!

-Andy

[Jorge Bejarano · Accepted solution]

Hummm,

Andy

1) Can you modify this?

class-map type http loadbalance match-any L5

  2 match http url .*

to look like this:

class-map type http loadbalance match-any L5

  2 match http url /.*

2)Can you do this:

serverfarm host WLS11-7001

  probe TCP7001_PROBE

  rserver 228-WLS11host1 7001

  inservice

  rserver 229-WLS11host2 7001

  inservice

3)Can you clear all the browser´s cookies and/or open a new browser window? It might be possible that some clients are stuck to the servers with does not have hardcoded the port.

4)Can you do:  clear stats loadbalance?(won´t affect anything)

5)Then generate traffic

6)Then get:

#show service-policy WLS11-SLB class-map WLS11-7001-CLASS detail

#show stat http

Jorge

[Andrew MacDonald]

You nailed it Jorge. Thanks for your help. I am going to work on the Daunting task of setting up SSL now.

-Andy

[Jorge Bejarano]

Sounds good!

Good Luck

Jorge