07-04-2005 10:41 PM
hi,
We are on the process of setting up a web server farm that will handle traffic for two different sites. The farm is composed of 4 servers. Two servers (s1 & s2) will handle traffic for http://site.com. While traffic for http://site2.com will be handled by all four servers (s1, s2, s3 & s4). Can the 1150x handle this kind of scenario? We are thinking of doing the setup like this
[INTERNET]
|
[PIX FW]
|
[CISCO 1150x]
|
[s1] [s2] [s3] [s4]
Will this setup address our requirements? I am new to Content Networking and any site or configuration examples will be very much helpful.
TIA
Jason
Solved! Go to Solution.
07-05-2005 08:36 AM
if your site1 and site2 uses different vip address, it is very easy.
If they share a single ip address, you then need to tell the CSS to look at the hostname inside http request.
You can easily do this with the command 'url "//www.site1.com"'
Regards,
Gilles.
07-05-2005 10:14 AM
Jason,
Quite simple....
content rule 1 (site1)
vip address xxx.xxx.xxx.xxx
port xx
prot tcp
url "//site.com/*"
advance-balance arrow-point cookies
no persistance
add service server1
add service server2
active
Second content:
content rule 2 (site2)
vip address xxx.xxx.xxx.xxx
port xx
prot tcp
url "//site2.com/*"
advance-balance arrow-point cookies
no persistance
add service server1
add service server2
add service server3
add service server4
active
Services for CSS:
Server1
ip address xyz.sss.ddd.ddd (ip address of web server1)
port xx
prot tcp
act
Server2
ip address xyz.sss.ddd.ddd (ip address of web server2)
port xx
prot tcp
act
Server3
ip address xyz.sss.ddd.ddd (ip address of web server3)
port xx
prot tcp
act
Server4
ip address xyz.sss.ddd.ddd (ip address of web server4)
port xx
prot tcp
act
07-11-2005 10:35 PM
you have 2 possibilities.
Either you work in bridge mode, and the PIX, servers and CSS are all in the same ip subnet.
Or you work in routing mode and you have 2 subnets.
1 for CSS-Pix and 1 for CSS-servers.
In first scenario, the Pix is the default gateway for the servers.
In the 2nd scenario, the CSS is the DG for the servers and the Pix is the DG for the CSS.
About the platform choice, the 11503 being modular it is a better choice.
You can add SSL module if you need SSL in the future, you can SAM module if you need more performance, ...
Regards,
Gilles.
07-05-2005 08:36 AM
if your site1 and site2 uses different vip address, it is very easy.
If they share a single ip address, you then need to tell the CSS to look at the hostname inside http request.
You can easily do this with the command 'url "//www.site1.com"'
Regards,
Gilles.
07-05-2005 10:14 AM
Jason,
Quite simple....
content rule 1 (site1)
vip address xxx.xxx.xxx.xxx
port xx
prot tcp
url "//site.com/*"
advance-balance arrow-point cookies
no persistance
add service server1
add service server2
active
Second content:
content rule 2 (site2)
vip address xxx.xxx.xxx.xxx
port xx
prot tcp
url "//site2.com/*"
advance-balance arrow-point cookies
no persistance
add service server1
add service server2
add service server3
add service server4
active
Services for CSS:
Server1
ip address xyz.sss.ddd.ddd (ip address of web server1)
port xx
prot tcp
act
Server2
ip address xyz.sss.ddd.ddd (ip address of web server2)
port xx
prot tcp
act
Server3
ip address xyz.sss.ddd.ddd (ip address of web server3)
port xx
prot tcp
act
Server4
ip address xyz.sss.ddd.ddd (ip address of web server4)
port xx
prot tcp
act
07-05-2005 03:30 PM
James/Gilles,
Thank you for the replies. Very much helpful.
Cheers!
07-11-2005 05:15 PM
Hi guys,
I have one more question about my setup below
[INTERNET]
|
[PIX FW]
|
[CISCO 1150x]
|
[s1] [s2] [s3] [s4]
With the kind of implementation that i'll be doing, is the IP address that I will assign on the CSS switch on the same block with the ip servers of the servers? Also, which product would you recommend? Will the 11501 do or should I go for the 11503?
TIA
Jason
07-11-2005 10:35 PM
you have 2 possibilities.
Either you work in bridge mode, and the PIX, servers and CSS are all in the same ip subnet.
Or you work in routing mode and you have 2 subnets.
1 for CSS-Pix and 1 for CSS-servers.
In first scenario, the Pix is the default gateway for the servers.
In the 2nd scenario, the CSS is the DG for the servers and the Pix is the DG for the CSS.
About the platform choice, the 11503 being modular it is a better choice.
You can add SSL module if you need SSL in the future, you can SAM module if you need more performance, ...
Regards,
Gilles.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide