Redirection woes

[damico_nick]

Greeting Gilles,

I'm runing into a brick wall here. I'm trying to configure redirection properly on our CSS11503's.

The webservers are IIS and will be hosting multiple sites using a single IP. Each site will have its own port. IE: Site A uses port 1080; Site B uses 2080, etc.... (all hosted from a single IP)

I'd like to create a separate VIP for each of these sites but how do I redirect to those ports specifically since all the sites are hosted on the same servers (service)?

service web1

ip address x.x.x.x

active

service web2

ip address x.x.x.x

active

content Stuff

vip address 2.2.2.2

add service web1

add service web2

protocol tcp

port 1080

advanced-balance sticky-srcip-dstport

sticky-inact-timeout 10

active

Thanks!

[pgolding]

Nick,

To specify the service port to use, just configure the port under the service. For example -

service web1

ip addr 1.1.1.1

port 1080

active

You can also add protocol under the service.

Peter

[damico_nick]

this is what I did:

service web1

ip address 1.1.1.1

active

service web2

ip address 1.1.1.2

active

content WebSite

vip address 10.10.10.10

add service web1

add service web2

advanced-balance sticky-srcip

sticky-inact-timeout 10

balance aca

sticky-serverdown-failover redirect

active

content WebSite-redirect

vip address 10.10.10.10

protocol tcp

port 80

url "/*"

redirect "//10.10.10.10:1080/"

active

My thought process here is that, the original request will come in on port 80 and the client will get redirected to 1080. Content rule WebSite will then load balance across the servers on the redirected port 1080. Also if the site redirects to 443, the content rule WebSite will load balance that as well.

Comment on your post: if I specify the port in the service, does that mean it will forward the requests to the web servers on that port? If so, what happens if the server sends a redirect to https (443)? Do I need to create a service with port 443?

Thanks

[pgolding]

Nick,

Yes, including a port number in the service config makes the box change the port. So you might have multiple content rules for different ports all using the same services. If you dont specify the service port number, it remains the same as what the client sent; if you do specify the port then all traffic to the service will go on the port specified under the service.

If you have an SSL redirect and a service configured with port 80 for example, then you might need new services with port 443 or no port, to be used with the port 443 content rule. This would be in the case of the services handling ssl internally. If there was an ssl module or other external ssl engine, then the clear text services (using port 80 most likely) would still do the job.

Peter

[b-beavers]

Nick - Did this configuration work for you? I have a similar configuration and used this post to fine tune my configuration but it still does not work.