cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1098
Views
0
Helpful
3
Replies

HTTP Migration issues on ACE 4710

umesh_vid1080
Level 1
Level 1

Hello All ,

I have issues with Http 80 migration  from CSS to ACE . i have implemented layer 4 policy match but we have issues with application . It do not work properly when i implmenet below ACE configuration .

Any help would be highly appreciated .  Thanks in Advance !

CSS Config :

service s0adcmer1

  ip address 192.168.1.10

  keepalive type tcp

  keepalive port 80

  active

service s0adcmer2

  ip address 192.168.1.11

  keepalive type tcp

  keepalive port 80

  active

owner WEB

  content webservers

    add service s0adcmer1

    vip address 192.168.1.20

    add service s0adcmer2

    balance leastconn

    protocol tcp

    port 80

    url "/*"

    advanced-balance arrowpoint-cookie

    arrowpoint-cookie name web

    arrowpoint-cookie browser-expire

    active

ACE Config :
rserver host s0adcmer1
  inservice
  ip address 192.168.1.10
exit
rserver host s0adcmer2
inservice
ip address 192.168.1.11
exit
serverfarm host WEB
  predictor leastconns
  probe PROBE_TCP_HTTP
  rserver s0adcmer1
    inservice
  rserver s0adcmer2
    inservice
exit
sticky http-cookie  web  webservers_STICKY
  cookie insert browser-expire
  replicate sticky
  serverfarm WEB
exit
class-map match-any webservers_CLASS
  2 match virtual-address 192.168.1.20 tcp eq  http
exit
policy-map type loadbalance first-match webservers_POLICY
  class class-default
    sticky-serverfarm webservers_STICKY
exit
policy-map multi-match POLICY
  class webservers_CLASS
    appl-parameter http advanced-options CASE_PARAM
    loadbalance vip inservice
    loadbalance vip icmp-reply active
    loadbalance policy  webservers_POLICY
    nat dynamic 10 vlan 20
exit
After i implemeted above config in ACE we got  issues  .
Initial URL is http://192.168.1.20 But when user go to below url after initially login with http://192.168.1.20  . The next  window  do not pop-up . 
What is suitable layer 7 policy to resolve this issues ?
Is below Layer 7 policy resolve the issues ?
class-map type http loadbalance match-any webservers_CLASSURL
match http url    .*
exit
  

3 Replies 3

Surya ARBY
Level 4
Level 4

What does live http header show ? Any trace available ?

No trace right now .

I have updated the config with below L7 policy

class-map type http loadbalance match-any webservers_CLASSURL
match http url    .*
And increase the header-maxparse which resolve the issues  , But still one user not able to access the link . When he tries to access the link we are seeing the increment in  "  Static parse errors   " 
user is able to telnet on port 80 on VIP .
sh running-config parameter-map :
parameter-map type http CASE_PARAM
  case-insensitive
  persistence-rebalance
  set header-maxparse-length 8192
  length-exceed continue
sh service-policy POLICY detail  :
nat dynamic 11 vlan 20
        curr conns       : 6         , hit count        : 2152     
        dropped conns    : 0        
        client pkt count : 360903    , client byte count: 112445312          
        server pkt count : 564378    , server byte count: 712733090
loadbalance:
        L7 loadbalance policy: prowebservers_POLICY
        VIP ICMP Reply       : ENABLED-WHEN-ACTIVE
        VIP State: INSERVICE
        Persistence Rebalance: ENABLED
        curr conns       : 5         , hit count        : 2172     
        dropped conns    : 4  
        client pkt count : 360956    , client byte count: 112450371          
        server pkt count : 564378    , server byte count: 712733090          
        conn-rate-limit      : 0         , drop-count : 0        
        bandwidth-rate-limit : 0         , drop-count : 0   
# sh stats http
+------------------------------------------+
+-------------- HTTP statistics -----------+
+------------------------------------------+
LB parse result msgs sent : 833593     , TCP data msgs sent       : 1508923  
Inspect parse result msgs : 0          , SSL data msgs sent       : 0        
                      sent
TCP fin msgs sent         : 13738      , TCP rst msgs sent:       : 98       
Bounced fin msgs sent     : 266        , Bounced rst msgs sent:   : 9        
SSL fin msgs sent         : 0          , SSL rst msgs sent:       : 0        
Drain msgs sent           : 573439     , Particles read           : 3591602  
Reuse msgs sent           : 0          , HTTP requests            : 601034   
Reproxied requests        : 56677      , Headers removed          : 0        
Headers inserted          : 600663     , HTTP redirects           : 0        
HTTP chunks               : 13412      , Pipelined requests       : 0        
HTTP unproxy conns        : 593882     , Pipeline flushes         : 0        
Whitespace appends        : 0          , Second pass parsing      : 0        
Response entries recycled : 49         , Analysis errors          : 0        
Header insert errors      : 0          , Max parselen errors      : 0        
Static parse errors       : 4          , Resource errors          : 0        
Invalid path errors       : 0          , Bad HTTP version errors  : 0        
Headers rewritten         : 0          , Header rewrite errors    : 0        
Unproxy msgs sent         : 593882  

Resolved : Deleted all cookie and temp . internet file from IE , rebooted machine and it is work .

Review Cisco Networking for a $25 gift card