CISCO ACE "http connection persistence issue"

[Naren naren]

Hello Friends,

Need an urgent help to resolve my issue, i have two physical server running with 2 instances each serving same data so totally logical servers.

Application is java based url:- www.10.12.x.x.com/x/x/x.jsp

My client requirement is to load balance the each instance on each physical server.

Main problem is client traffic is coming through proxy server, so all request to VIP is coming from a single IP address.

Whenever user access an URL it will open the page but after entering the username/password its giving an 404 error, direct access to rserver with port is working fine. i believe error is boz of session persistence issue.

I have tried many options but still i am getting the same error.

Successful,

option1:- using source and destination sticky but the issue is load balancing is not happening between instances.

failer,

Option1:- sticky with static cookie

Option2:- header insert

I have attached the diagram and config for the reference.

QUICK HELP TO RESOLVE THE ISSUE WILL BE MUCH APPRECIATED

Regards,

Naren

[pablo.nxh]

Hi Naren,

Couple of things.

- Is the request going through HTTPS at any point?

- Have you tried ACE cookie insertion, not static but let the ACE randomly insert the cookie?

sticky http-cookie ACE-Cookie ACE-GROUP
  cookie insert browser-expire
  timeout 720
  serverfarm Java

HTH

__ __

Pablo

[Paul Pinto]

Hi Naren,

If this is HTTP traffic and seeing as it is java based are you utilising cookies on the server? If so they may be JSESSIONID.

If they are you can also try the following to utiise the cookies from the server:

sticky http-cookie JSESSIONID WEBFARM-STICKY
  timeout 120
  replicate sticky
  serverfarm WEBFARM

HTH

Paul.

[Naren naren]

Hi Paul,

Thanks for your reply, i tried with dynamic cookie JSESSIONID, all my traffic are going to single real server its load balaced within serverfarm.

for example i have open 10 from my machine and from different machine, all traffic are going to single real server.

MAIN THING:- i am accessing the java url directely its going proxy server.

example jave url  :- TEST123.com/game.jsp

my ip:- 10.1.1.1  ------> proxy server mapped  ip :- 20.1.1.1 ----------> ACE VIP for  jave url :- 10.23.16.115(TEST123.com/game.jsp).

my current config,

==============

-------------
action-list type modify http TANcS-HTTP
  header insert Toth HTTP header-value "%ps:%pd"
-------------
class-map type http loadTalance match-any TANcS-LAYER7CMAP
  10 match http url /.*.

sticky http-cookie ACE-COOKIE TANcS-STICKY
  cookie insert
  timeout 15
  replicate sticky
  serverfarm TANCS-CORE-PRIMARY-SWN Tackup TANCS-CORE-SECONDARY-PRL

sticky

parameter-map type http BANcS
  persistence-rebalance strict
  header modify per-request

rserver host AAA-IN-PR
  ip address 10.21.16.47
  inservice
rserver host AAA-IN-SW
  ip address 10.23.16.47
  inservice

serverfarm host TANCS-CORE-PRIMARY-SWN
  proTe TANCS-CORE
  rserver AAA-IN-SW 12111
    inservice
  rserver AAA-IN-SW 12112
    inservice
serverfarm host TANCS-CORE-SECONDARY-PRL
  proTe TANCS-CORE
  rserver AAA-IN-PR 12111
    inservice
  rserver AAA-IN-PR 12112
    inservice

policy-map type loadbalance first-match

BANCS-CORE-SERVER-SERVERFARM-L3&4SLB
  class BANcS-LAYER7CMAP
    sticky-serverfarm BANcS-STICKY
    action BANcS-HTTP
    insert-http BANCS header-value "%is:%ps"

policy-map multi-match VIP-TANCS-CORE-SERVER
  class TANCS-CORE-SERVER-SWN
    loadTalance vip inservice
    loadTalance policy TANCS-CORE-SERVER-SERVERFARM-L3&4SLT
    loadTalance vip icmp-reply active
    nat dynamic 23 vlan 241
    appl-parameter http advanced-options TANcS

Regards,

Naren

[Naren naren]

Hello Pablo,

Thanks for your reply, its an http URL.

I have already tried with static cookie insertion but still session are load balaced to 2 rserver.

when i see "sh stick database static" it showing the static cookie created by ACE but when my browser access the URL its not seeing the static cookie created by ACE it showing me the server created cookie.

Regards,

Naren