ACE filter by url

Hi,
I want to redirect some url on a specific server of mywebfarm. The loadbalancing work but the specific rules I create based on http url not. (The loadbalancing dont keep the same server during the same user session by the way)
Here is my config :
access-list ANY line 8 extended permit icmp any any
access-list ANY line 16 extended permit ip any any
probe tcp PROBE_TCP
interval 30
passdetect interval 60
rserver host web1
ip address 172.16.0.101
conn-limit max 50000 min 40000
inservice
rserver host web2
ip address 172.16.0.102
conn-limit max 50000 min 40000
inservice
serverfarm host FARM_WEB
predictor leastconns
probe PROBE_TCP
rserver web1
   inservice
rserver web2
   inservice
serverfarm host SINGLE_WEB1
rserver web1
   inservice
parameter-map type http HTTP_PARAMETER_MAP
persistence-rebalance
class-map match-all L4-WEB-IP
2 match virtual-address x.x.x.x tcp eq www
class-map match-all L4-WEBHTTPS-IP
2 match virtual-address x.x.x.x tcp eq https
class-map type http loadbalance match-all L7CLASSWEB1
2 match http url http://www.mycompany*
class-map type http loadbalance match-all L7CLASSWEB1-Mycompany.com
2 match http url http://www.mycompany.com/*
class-map type management match-all REMOTE_ACCESS
2 match protocol ssh any
policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
class REMOTE_ACCESS
   permit
policy-map type loadbalance http first-match WEB_L7_POLICY
class L7CLASSWEB1
   serverfarm SINGLE_WEB1
class L7CLASSWEB1-Mycompany.com
   serverfarm SINGLE_WEB1
class class-default
   serverfarm FARM_WEB
   insert-http x-forward header-value "%is"
   insert-http X-FORWARDED-FOR header-value "%is"
policy-map multi-match WEB-to-vIPs
class L4-WEB-IP
   loadbalance vip inservice
   loadbalance policy WEB_L7_POLICY
   loadbalance vip icmp-reply active
   nat dynamic 1 vlan 2129
   appl-parameter http advanced-options HTTP_PARAMETER_MAP
class L4-WEBHTTPS-IP
   loadbalance vip inservice
   loadbalance policy WEB_L7_POLICY
   loadbalance vip icmp-reply active
   nat dynamic 1 vlan 2129
   appl-parameter http advanced-options HTTP_PARAMETER_MAP

Hello Jean
The first thing which comes to my mind when you say: "The loadbalancing dont keep the same server during the same user session by the way" is you need to configure some stickiness configuration, here you have a link about it:
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/slb/guide/sticky.html#wp1007300
For the redirection question, what exactly do you want to acomplish?
Here you have an example which might help you out: http://docwiki.cisco.com/wiki/URL_Load_Balancing_Using_One_Arm_Mode_with_Source_NAT_on_the_Cisco_Application_Control_Engine_Configuration_Example
ACE-1/onearm(config)# class-map slb-vip
ACE-1/onearm(config-cmap)# match virtual-address 172.16.5.101 any
ACE-1/onearm(config)# class-map type http loadbalance match-all images
ACE-1/onearm(config-cmap-http-lb)# match http url /images/.*
ACE-1/onearm(config)# policy-map type loadbalance http first-match slb-logic
ACE-1/onearm(config-pmap-lb)# class images
ACE-1/onearm(config-pmap-lb-c)# serverfarm imagefarm
ACE-1/onearm(config-pmap-lb-c)# class class-default
ACE-1/onearm(config-pmap-lb-c)# serverfarm webfarm
As you can see above in this partial configuration, you have the VIP:172.16.5.101, that is
our website: www.example.com, now we want to match www.example.com/images/, this is where we
aree using the other class-map and based on that we finally execute the action of sending the
request to the serverfarm imagefarm.
Hope this helps!!!
Jorge
http://docwiki.cisco.com/wiki/URL_Load_Balancing_Using_One_Arm_Mode_with_Source_NAT_on_the_Cisco_Application_Control_Engine_Configuration_Example

Similar Messages

Recorset filter by url then group by

I have a search results page that get its information via a
complex form then their is a more details page which is filtered by
the url i want to put another record set on the page which pick up
the info from the URl but then sort the information from a feild
which contains codes i want to select only part of the code ie
first 3 digits of the code.
i am using dreamweaver 8
this is the code from the dreamweaver panel if i fillet them
seprately they work but together i get no data can any give me a
clue on how to filter by url then group by field if contains "text"
SELECT *
FROM all1
WHERE product_name = 'MMColParam' AND product_id LIKE
'testVariable'
variables
MMColParam 1 Request.QueryString("product_name")
testVariable "%thr%" testVariable

thanks !
my URL call a template, so, is this the good url ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' FILTER_NODE_IOBJNM_1='ZIS_PDT' FILTER_VALUE_1='C' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN='>
or did i must put it in the CMD like this ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN=&FILTER_NODE_IOBJNM_1='ZIS_PDT'&FILTER_VALUE_1='C''>
another question,
in my query, did the characteristic must be in "free characteristic" or in "filter" or nowhere ???
thanks a lot

Insert filter by url of the template

Hello Wad experts,
can someone tell me how to insert filter by url of the template ?
using a CMD i think, but I need some help.
thanks for helping me

thanks !
my URL call a template, so, is this the good url ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' FILTER_NODE_IOBJNM_1='ZIS_PDT' FILTER_VALUE_1='C' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN='>
or did i must put it in the CMD like this ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN=&FILTER_NODE_IOBJNM_1='ZIS_PDT'&FILTER_VALUE_1='C''>
another question,
in my query, did the characteristic must be in "free characteristic" or in "filter" or nowhere ???
thanks a lot

Can ACE rewrite the URL sent back to the browser?

Hi,
I want to know that if there is a link on a webpage, for example: www.test.com/folder1/folder2/index.html
Would be it be possible to rewrite this so that when the webserver provides you with that page, that the ACE rewrites the given URL so that the browser only says in the URL bar: www.test.com
Or is this impossible and would the webserver itself need to do this rewrite?
Thanks!

Hi Robin,
As per my understanding, when you click on that link the URL would say www.test.com/folder1/folder2/index.html in URL bar. ACE can rewrite URL and forward to server or can modify server response but i am not sure if there's anyway you can get the URL change in the bar after you click on hyperlink and webpage loads. May be you can have redirection but not rewrite here.
Regards,
Kanwal

How to filter in URL using NW04s WAD?

Greeting Web Template Gurus,
I am working in NW04s SP12 WAD (Web Application Designer) and I am trying to use the filtering criteria in my URL... <bwurl>&FILTER_IOBJNM=0PLANT&FILTER_VALUE=1000. I have brought in the Filter Pane in the Web template and when I run the Web Template in IE, I do not see where 0PLANT is being used.
Is there a setting in the Web Template I am missing, or a specific Command I need to be running to get this to work for me?
Regards,
Alex

Hello Alex,
Please try to pass the command using the Template ID and not using the Query,
for example
http://<server><port>/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?QUERY=MMFG_M03_Q0088&FILTER_IOBJNM_1=MPLANT&FILTER_VALUE_1=3010
instead of using QUERY=MMFG_M03_Q0088, try WebTemplate as given below, it may help you
http://<server><port>/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?template_id=yourTemplate&FILTER_IOBJNM_1=MPLANT&FILTER_VALUE_1=3010
See this page for more info
[Calling Parameterized Web Templates|http://help.sap.com/saphelp_nw04/helpdata/en/27/6c013a53271a05e10000000a11402f/content.htm]
Thanks
Chandran

Interactive report row-level ("OR") filter via URL?

I know you can perform a column level filter on an Interactive Report via URL, but can you do a row level filter?
I want to do something like where column 1 = 'test' OR column 2 = 'test', not column 1= 'test AND column 2 = 'test'.
Thank you and apologies if I am missing something in the documentation or other forum messages.

Jeff,
Thanks again for the response and for looking into it. However, if I am not mistaken, the url in that excerpt does the same thing as the URL I posted except that you used IREQ_COLNAME instead of IR_COLNAME (which defaults to EQ I believe).
I want to see if a value is in column a OR column b, etc. The "OR" is the all important caveat.
I would settle for being able to pass a value to the IR's main search box (that searches all columns of all rows) if I cannot do a targeted row level filter on a few select columns.
If anyone knows how to do either of those things, that would be great information to have.
Thanks,

INTERESTING - ACE config and URL manipulation

Hi
My customer has an interesting requirement for his web/java based application (SAP).
There are multiple services (each has its own domain) running on the same server all services sharing the same TCP port. All of them require a correct path in the HTTP(S) header to display a desired web page. However if somebody is accessing (via HTTP or HTTPS) the service without any path in the URL (for a login page) the ACE should redirect a correct URL and path for the login page to the client. In other words...
1) http://sap.mydomain.com ---redirect to---> https://sap.mydomain.com/abc/init.do?language=de
2) https://sap.mydomain.com ---redirect to---> https://sap.mydomain.com/abc/init.do?language=de
3) http://sap.mydomain.com/abc/init.do?language=de ---redirect to---> https://sap.mydomain.com/abc/init.do?language=de
4) https://sap.mydomain.com/abc/AnythingElse ---NOT to be redeirected but sent unchanged---> https://sap.mydomain.com/abc/AnythingElse
Do you have any ideas how can I achieve this?
I tried something but it still doesn't work. Relevant config is attached.
Thanks in advance for your replies and happy to reward you 5* when we get it up and running
drsl

Dsliz,
One of them may look like this:
policy-map multi-match SAP-HTTP-REDIRECT-POLICY-MAP
class SAP-REDIRECT-CM
    loadbalance vip inservice
    loadbalance policy SAP-REDIRECT-POLICY
    loadbalance vip icmp-reply
class-map match-any SAP-REDIRECT-CM
3 match virtual-address 10.148.185.249 tcp eq ww
policy-map type loadbalance first-match SAP-REDIRECT-POLICY
class class-default
    serverfarm SAP-HTTP-REDIRECT
serverfarm redirect SAP-HTTP-REDIRECT
rserver SAP-HTTP-REDIRECTOR
    inservice
rserver redirect SAP-HTTP-REDIRECTOR
conn-limit max 4000000 min 4000000
webhost-redirection https://sap.mydomain.com/abc/init.do?language=de 301
inservice
You did not include the rest of the configuration for example for this:
class L7CM-B2C-DEMOSHOP
Additionally, you may need to see about matching seconday cookies as shown here, since it is required to match after "?" sometimes.
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA5_1_0/command/reference/policy.html#wp2336441
Jorge

ACE sorry farm url redirection query

Hi
I've had the following config tested :
===
rserver redirect sorry-server
webhost-redirection http://sorry.test.com/
inservice
serverfarm redirect sorry-farm
rserver sorry-server
inservice
policy-map type loadbalance first-match test-policy
class class-default
serverfarm farm1 backup sorry-farm
===
...and this is ok - but it will result in the client getting a redirected URL.
eg. If they visit www.test.com and that farm was down, they'll be redirected to sorry.test.com via the backup farm.
However, is it possible to 'silently' retrieve the sorry page from sorry.test.com but not redirect the client?
That is, if the main farm was down, is it possible for the ACE to retrieve the page at sorry.test.com and present it back to the client without the client seeing a change in URL (eg. they would still see www.test.com in their browser)?
Cheers
Cameron

Hi Syed
Thank you for responding.
In our case the "sorry.test.com" server would not exist in the same context as the original farm - hence I thought the web redirect was the only way to go.
I was trying to see if there was a way to provide the sorry page content that could be retrieved from either another context or any external URL - but not from a rserver in the same context as the real server farm.
As you suggest, we could put another vm in the same context that is soley used for the sorry page - but it would have been cool to use one sorry page for multiple contexts.
Thanks
Cameron

ACE match http url with post data

I need to make a layer-7 load balancing decision at the ACE module based on a URL string that includes form POST data. It is important that the balancing decision include and parse the part of the URL after the question mark. This doesn't seem to work with the "match http url" config on the ACE. My interpretation is that the ACE does not consider the POST data to be part of the URL string, and therefore does not include it in the regular expression matching. Am I missing something here, or have I run into a limitation of the ACE module?
class-map type http loadbalance match-any L7__URL_MATCH_CLASS
2 match http url index.php\?field=content.*

Hi
The '?' has a special meaning in the URL. It means the end of the main URL and the beginning of the URL query.
Its not possible to match ? in the url.
One option could be using secondary cookie matching in ACE.
class-map type http loadbalance match-any xyz
2 match http cookie secondary field cookie-value content
Thanks
Syed

CSS1506 - Filter admin URL's

I am currently migrating all of our prod environments from our NetApp reverse proxy to our CSS. So far everything has gone well. Client to CSS is SSL and then http to the backend servers.
I am about to migrate 1 application where I need to filter out certain admin URL's from the public. Is there a way to filter out these URL's on the CSS ?
Any help would be appreciated.
Cheers
Dave

Not really.
The CSS is a loadbalancer, not a proxy.
What you can do is catch some url into a specific rule that forwards the request to a specific server that can then display an error message.
Under a content rule use the command 'url' or 'urql' to catch a specific url.
Gilles.

Userhome filter, new URL(csv)

Hello
My question is about the userhome filter.
I have put one more URL in the URLs(cvs), now the entries are:
Personal Documents, favorites:Favorites, actioninbox, temp, clp, mynewentry
But the folder is not created. I'm not sure the filter is working right because neither the other URLs are created. The only ones that user have right now are Personal Documents and Favorites.
Why is not my folder created?
Thanks in advance.
Guillermo.

Ok, I found the reason why the folder was not created.
The filter creates the folders only when you access to that folders.
I was thinking that it worked when the users log into the portal.
So, you hace to do a KM navigation iView that points to the folder although the folder still doesn't exist.
When the iView is launched the filter automatically creates the folder.
Agur!

Folder filter on URL property

On Portal 4.5WS, I'm crawling a site of news archives and I want to sort them into subfolders by year. The target site is laid out in folders by date, so the URL contains the month and year in the path similar to .../122004/file.htm. I have created subfolders for each year, and created a filter with one criteria, where URL contains 2004, leaving the Text Contains field empty. None of the cards are passing the filter, so they are all ending up in the parent folder. As a test, I changed the filtered property from URL to Name and changed the criteria from 2004 to a word in the Name of an existing card, and the sort worked fine.
Is there something special about using the URL property in a filter? Is there a trick to specify a partial URL as a filter value? What am I missing here?

Hi Marcel,
I know what you meant, the time from %time_set% is being compared with the times from %year%.jan till %year%.dec on an alphabetical order.
i was wondering if you have any solution to this?
i have been playing around with different combination, and they all don't work, i.e.
*when time
*is < %time_set%.timeid    -> compares alphabetically OR
*when time.timeid
*is < %time_set%.timeid    -> grabs timeid from time, and only the year from %time_set% OR
*when time.timeid
*is < %time_set%    ->grabs timeid from time, and only the year from %time_set% OR
*when time
*is < %time_set%    -> compares alphabetically.
anyone has any suggestions on this matter?
cheers

Ace Logs from url or serverfarm

We are doing analysis on blocking the source IP's, the actual usage from this source IP's, to what URL's,
authenticated / non authenicated etc
is there any solution to trace out the User requests & url response from particular farm behind the source nat
referring the below discussion for my problem , can it be helpful for me
ACE: how do I check what status code does URL returns

Hi Anand,
The short answer is no. You cannot get this information from the ACE because it doesn't include any transaction logging feature
The thread you were mentioning was regarding probes. For those it's actually possible to see the last return code returned by the server, but the ACE will neither show you this information for client connections.
I wish I could provide you a more satisfactory answer.
Best regards
Daniel

ACE module SSL url rewrite and path rewrite

Hi all,
I'm hoping some of you helpful people on this forum can guide me or suggest a solution to a problem I'm faced with.
I am currently load balancing exchange 2010 traffic via an ACE module. Software version is A2(3.3). I have most parts of it working fine however I am having an issue when it comes to SSL termination for Outlook Web Access (OWA).
The problem comes down to a HTTP header (field is location). I have configured an action list to re-write the SSL pure URL as per page 96 of the "Cisco Application Control Engine Module SSL Configuration Guide". example:
ssl url rewrite location bnecas\.mycompany\.com sslport 443
That part works, the http header location field that comes back from the GET request is changed to https://cas.mycompany.com which is great. However, in addition to that url, there is also a path or something following that part. The actual string that is returned is:
https://cas.mycompany.com/owa/auth/logon.aspx?url=http://cas.mycompany.com/owa/&reason=0
The first bit of it, (https://cas.mycompany.com) is changed by the ssl url rewrite command, however the last part (http://cas.mycompany.com/owa/&reason=0) isn't changed.
This is where I've been trying to get the http Header Rewrite command to do something. I don't know if it can work in conjunction with the ssl url rewrite function however with the ssl rewrite function it seems it can't change bits of the string that aren't the pure URL at the front.
The end result is that while I have an SSL connection to the OWA login page, when I do login to OWA it reverts back to HTTP. I'm fairly sure it is because of the last part of the location string above. Is there a way to change that location string to do the following:
1. change the first part of the string to be https://cas.mycompany.com (like the ssl url rewrite function)
2. change the last part of the location string to put https in there instead of http
Ideally I would love to have this string
http://cas.mycompany.com/owa/auth/logon.aspx?url=http://cas.mycompany.com/owa/&reason=0
replaced with this one
https://cas.mycompany.com/owa/auth/logon.aspx?url=https://cas.mycompany.com/owa/&reason=0
I had originally tried the following in the action list:
header rewrite response location header-value "(owa/auth/logon\.aspx\?url=)http(://bnecas\.thiess\.aus/owa/&reason=0)" replace "%1https%2"
ssl url rewrite location bnecas\.mycompany\.com sslport 443
but it didn't work. I'm probably screwing up the regex somewhere however there doesn't seem to be very clear examples anywhere I can find.
Any help will be greatly appreciated and of course I will be sure to rate every post that responds to my plea for help.
Brad

Hi Brad,
try this:
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
action-list type modify http X
header rewrite response Location header-value "http://(.*url=)http://(.*)" replace "https://%1https://%2"
we wont be using ssl url rewrite in this case
Also we will be needing persistence rebalance applied through application parameter map and apply that under the VIP class

Cisco ACE - Exempt HTTP URL from SSL Offloading

Hi,
I have a cisco ACE module A2 (3.6). I am offloading url www.abc.com on cisco ACE. HTTP redirection to https is working & over https I am able to browse website perfectly. real servers are redirecting some pages over http. Due to page redirection from webserver I have to exempt one URL (http://www.abc.com/modules/docs/abc.aspx) from ssl offloading. It is possible or as a work around i have to rewrite complete url www.abc.com as ssl port.
Your inputs highly appreciated.
Regards,

Hi Masif,
In case you have not gotten assistance with this one, you just need to specify the specific URL and match it on top of the loadbalance policy that is already doing the redirection.
class-map type http loadbalance match-any No-Redirect
2 match http url /docs/abc.aspx
policy-map type loadbalance first-match ABC
class No-Redirect
serverfarm HTTP-Servers
class class-default
serverfarm Redirect
Hope this helps.
Pablo

ACE filter by url

Similar Messages

Maybe you are looking for