CSS and Oracle Load Balancing

[wasiimcisco]

Hi,

I have CSS in single arm deployment model. I have multiple servers load balancing on this CSS on port 80 etc. Today I am trying to load balance one Oracle server but I am facing problem with it.

Real servers are accessible on port 80 without any problem but when we are trying to access the same servers on VIP we are not able to see the web page.

real server http://192.168.17.12/irs.htm

real server http://192.168.17.14/irs.htm

real server http://192.168.10.37/irs.htm

VIP

http://192.168.200.58/irs.htm

Below is the configuration. I can do the telnet on port 80 and I can ping the VIP IP address.

I will only put 192.168.200.58 in browser I can see the oracle page but with the full URL i am not able to see it.

Though I have other oracle servers which I have load balance with the same configuration and I can access the web page.

==========================================================================================

http://tptest.enoc.com/forms/frmservlet?config=tp  (This is working fine).

========================================================================

http://irs.enoc.com/irs.htm  (This is not working).

By name and by IP address both are not working.

http://192.168.200.58/irs.htm  (This is not working).

=============================================================================

service IRC_1

  ip address 192.168.17.12

  keepalive type tcp

  keepalive port 80

  active

service IRC_2

  ip address 192.168.17.14

  keepalive type tcp

  keepalive port 80

service IRC_DR

  ip address 192.168.10.37

  keepalive type tcp

  keepalive port 80

content ENOC_IRC

    add service IRC_1

    add service IRC_2

    add service IRC_DR

    vip address 192.168.200.58

    protocol tcp

    port 80

    advanced-balance sticky-srcip

    active

owner ENOC_GIT

content ENOC_IRC

    add service IRC_1

    add service IRC_2

    add service IRC_DR

    vip address 192.168.200.58

    protocol tcp

    port 80

    advanced-balance sticky-srcip

    active

group ENOC_IRC

  add destination service IRC_1

  add destination service IRC_2

  add destination service IRC_DR

  vip address 192.168.200.58

  active

===================================================================================================

ENOCDC-CSS01(config)# show service summary

Service Name                     State     Conn  Weight  Avg   State

                                                         Load  Transitions

IRC_1                            Alive         0      1     2            0

IRC_2                            Suspended     0      1   255            1

IRC_DR                           Suspended     0      1   255            1

ENOCDC-CSS01(config)# show summary

Global Bypass Counters:

   No Rule Bypass Count:     0

   Acl Bypass Count:         0

Owner            Content Rules    State     Services         Service Hits

ENOC_GIT        

              ENOC_IRC         Active    IRC_1            103

                                            IRC_2            10

                                            IRC_DR           7

=======================================================================================================

Same setting I am doing for other servers and working fine only for these servers I am facing problem. Curently only one server is active in the configuration.

Kindly let me know what I am missing and how to fix the problem.

I have also attached the full configuration of CSS.

[wasiimcisco]

Hi,

can anyone help me out.

[Daniel Arrondo Ostiz]

Good afternoon,

The way it's configured, the CSS is load-balancing the traffic purely at L4. This means that it will not even look at the URLs, it will simply forward each packet to the client/server after applying NAT.

With that in mind, if you are able to telnet the VIP on port 80 (which indicates that the TCP connection is established properly) but not open the webpage, then, the problem is most likely not related to the CSS at all.

In any case, to troubleshoot this further, I would recommend you get simultaneous traffic captures on both sides of the CSS while establishing a test connection. With those you should be able to see what is really happening.

If you need help to analyze these captures, you can always open a TAC service request.

Best regards

Daniel

[wasiimcisco]

Hi,

My point of concern is that I did the same for Oracle server and this is working fine

http://192.168.200.95/forms/frmservlet?config=tp

only when I am doing the load balancing for

http://irs.enoc.com/irs.htm  (This is not working).

By name and by IP address both are not working.

http://192.168.200.58/irs.htm  (This is not working).

I dont have a option for TAC case is there a a way to fix the problem by apply other load balancing method. Is there something to do with the Circut VLAN. I didnt create the Circut VLAN 17 where this server is located.

I am doing almost 8 differenceservers load balancing in this CSS.

your expert opinion will definately help me.

[Daniel Arrondo Ostiz]

As I said in my last post, based on your description, it doesn't seem to be a CSS issue, but anyway, to troubleshoot (either yourself or with TAC), you will need to get simultaneous traffic captures on both sides of the CSS to really see what is going on with those faulty connections.

Regards

Daniel