cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
753
Views
0
Helpful
1
Replies

CSS load balancing, service dependancy condition check

joonyong-chua
Level 1
Level 1

Hi,

I would like to seek some advice regarding the CSS's service configuration.

Is there a way to configure the CSS such that it check for the condition/status of a independant service (not involved in the load balancing algorithm) is alive/down (using service mode keepalive port/type), before deciding whether to/not to load balance to a group of services?

Senario is as follwows:

We process incoming HTTPS request and load balance to 2 HTTPS Servers (HTTPS service SSL1 and SSL2), on condition that a independent service (HTTPS service SSL3) is alive (using the keepalive type/port check in service mode).

If the independant service (HTTPS service SSL3) is not alive, remove the HTTPS Servers (HTTPS service SSL1 and SSL2) from the load balancing algorithm.

Thanks in advance for assistance

!************************** CIRCUIT **************************

circuit VLAN1

ip address 192.168.103.35 255.255.255.192

!************************** SERVICE **************************

service SSL1

ip address 192.168.103.53

protocol tcp

port 443

keepalive type tcp

keepalive port 443

active

service SSL2

ip address 192.168.103.54

protocol tcp

port 443

keepalive type tcp

keepalive port 443

active

----------------------------------------------------------------

? This is the service condition that CSS will check before deciding to/not to load balance to SSL1 and SSL2.

? If SSL3 is down, do not load balance to SSL1 and SSL2. If SSL3 is up, load balance to SSL1 and SSL2

service SSL3

ip address 192.168.103.55

protocol tcp

port 443

keepalive type tcp

keepalive port 443

active

-----------------------------------------------------------------

!*************************** OWNER ***************************

owner CISCO

content L5Rule_SSL

vip address 192.168.103.37

application ssl

protocol tcp

port 443

url "/*"

add service SSL1

add service SSL2

active

!*************************** GROUP ***************************

group SSL

vip address 192.168.103.37

add destination service SSL1

add destination service SSL2

active

1 Reply 1

jofi
Level 1
Level 1

maybe this?

------

circuit VLAN1

ip address 192.168.103.35 255.255.255.192

ip virtual-router 10 priority 100

ip redundant-vip 10 192.168.103.37

ip critical-service 10 SSL3

-------

if I'm not mistaken the vip 192.168.103.37 will stop working when the service SSL3 goes down. I'm not sure that this is what you want though...