Load balancing FTP/HTTP on same VIP

Question

Hi,
Please could someone confirm if it is possible to load balance FTP and HTTP on same VIP? Would something like this work in a one-armed design?
class-map match-any WCVS
  2 match virtual-address 20.0.0.1 tcp eq www
  4 match virtual-address 20.0.0.1 tcp eq ftp
policy-map multi-match int3
  class WCVS
    loadbalance vip inservice
    loadbalance policy VS-l7slb
    inspect ftp
    nat dynamic 5 vlan 20
int vl20
service-policy input int3

Answer 1

Hello,
I assume you want to ultimately use cookie sticky, since it is in your config, but not yet used.  The '80' next to the rservers within the serverfarm will keep FTP from working because that will force the ACE to always use a destination port of 80 to the rservers, which is good for HTTP, but not so good for FTP.  Below is your config with some modifications.  I've created a new serverfarm for FTP, created a new probe for that farm, included HTTP cookie-sticky, and created a new L7 policy-map.  There is one line that I would like you to remove and see if it works.  If it does not, then add this line and see if it works.
Let me know how it goes...
logging enable
logging buffered 6
access-list ALL line 8 extended permit ip any any
access-list ALL line 16 extended permit icmp any any
probe http Probe_HTTP
  interval 5
  passdetect interval 60
  expect status 200 200
  open 2
  receive 2
probe tcp Probe_FTP
  port 21
  interval 5
  passdetect interval 60
  open 2
  receive 2
rserver host Server1
  ip address 10.10.10.10
  conn-limit max 4000000 min 4000000
  inservice
rserver host Server2
  ip address 10.10.10.11
  conn-limit max 4000000 min 4000000
  inservice
serverfarm host FARM-HTTP
  probe Probe_HTTP
  rserver Server1 80
    conn-limit max 4000000 min 4000000
    inservice
  rserver Server2 80
    conn-limit max 4000000 min 4000000
    inservice
serverfarm host FARM-FTP
  probe Probe_FTP
  rserver Server1
    conn-limit max 4000000 min 4000000
    inservice
  rserver Server2
    conn-limit max 4000000 min 4000000
    inservice
sticky http-cookie XXX_tempCookie XXX_tempCookie
  cookie insert
  serverfarm FARM-HTTP
class-map type management match-any Management
  201 match protocol http any
  202 match protocol https any
  203 match protocol icmp any
  204 match protocol kalap-udp any
  205 match protocol ssh any
  206 match protocol telnet any
  207 match protocol xml-https any
class-map match-any XXX-WCVS-WWW
  2 match virtual-address 10.10.10.100 tcp eq www
class-map match-any XXX-WCVS-FTP
  2 match virtual-address 10.10.10.100 tcp eq ftp
  3 match virtual-address 10.10.10.100 tcp range 1023 65535   <-- try first without this, then with this
class-map match-any NAT-VIP
  2 match destination-address 10.10.10.100 255.255.255.255
policy-map type management first-match Management
  class Management
    permit
policy-map type loadbalance first-match XXX_VS-l7slb-WWW
  class class-default
    sticky-serverfarm XXX_tempCookie
policy-map type loadbalance first-match XXX_VS-l7slb-FTP
  class class-default
    Serverfarm FARM-FTP
policy-map multi-match int3
  class XXX-WCVS-WWW
    loadbalance vip inservice
    loadbalance policy XXX_VS-l7slb-WWW
  class XXX-WCVS-FTP   
    loadbalance vip inservice
    loadbalance policy XXX_VS-l7slb-FTP
    inspect ftp   
  class NAT-VIP
    nat dynamic 5 vlan 12
interface vlan 12
  ip address 10.10.10.1 255.255.255.0
  alias 10.10.10.3 255.255.255.0
  peer ip address 10.10.10.2 255.255.255.0
  access-group input ALL
  nat-pool 5 10.10.10.100 10.10.10.100 netmask 255.255.255.0 pat
  service-policy input Management
  service-policy input int3
  no shutdown
ip route 0.0.0.0 0.0.0.0 10.10.10.254