ACE keep probing real servers using "https get 302"

Hi all,
I got one problem with cisco ACE in my company. Currently, two ACE appliances are working as HA redundancy. Previously I enabled some https and http probing using get 302 for some servers and services. But then I was told to remove all https or http probing, and instead use tcp port 443 and 80. After that, one of the serverfarm (server groups) is receiving https get 302 and I already checked in the monitoring and see whether there's any https probing regarding the respected real servers. But I could not find any. Even I disable all probing to that serverfarm, all the server members still receiving https get 302. Is this behavior a bug?
The ACE version is A3(2.1). And the HA status is on standby cold. Can standby cold cause this kind of trouble?

Hi Daniel,
I just corrected the cert problem and made the state peer into standby hot. But still it still keep probing the get 302. And then I tried to restart both ACEs. The first step is to restart the second ACE (standby) and then switched over all context to the second one. The problem is that when I made the second one to be active, some services were not working, especially the ones with ssl terminated in ACE. I'm pretty sure that both ACEs were in sync.
Any idea what is the problem?

Similar Messages

Retrieve data from a non-peoplesoft application using HTTP Get

I need to retrieve data from a non-peoplesoft application. They want us to submit a HTTP GET request to their URL with a series of parameters. I am thinking about using HTTP Targert connector to accomplish this. Does anyone have sample peoplecode?
Currently we are on 8.51.10 Tools...
If there is any better way .. please let me know ..

I have used HTTP Get to get XML file from a government sanction list by hitting URL http://www.treasury.gov/ofac/downloads/sdn.xml
There is a delivered PS program that does that for vendor sanctions. I had to get the online setup correctly by creating a new custom Node with HTTP Target Connector. The program name is BSP_IMPORT. The below code is responsible for the calling the node and retrieving the data. Play around with the code below see if you can get it to meet your needs.
BSP_IMPORT_AET.BANKNODE.Value is just the custom external code that I created.
PMT_FLAT_FILE_INBOUND message is just a none rowset based message to use the web service call.
Local TR:FileUtilities:FTP &oFTPUtil = create TR:FileUtilities:FTP();
+/* HTTP */+
+/*******************************************************************************/+
Local Message &msgHTTP;
Local Message &msgResult;
+&msgHTTP = CreateMessage(Message.PMT_FLAT_FILE_INBOUND);+
+&oFTPUtil.PopulateFTPGetIBInfo(&msgHTTP, BSP_IMPORT_AET.BANKNODE.Value);+
+&msgResult = %IntBroker.ConnectorRequest(&msgHTTP);+
+/* check to see if the file is wrapped */+
+&strAllLines = &msgResult.GenXMLString();+
+&strAllLines = Substitute(&strAllLines, Char(26), " "); /* Added this line to remove invalid characters */+
+/*******************************************************************************/+
Edited by: Maher on Mar 20, 2012 3:28 PM

Is it possible to use HTTP GET navigation links?

Hi,
I'm learing JSF technology, I found it very powerful.
But I'm not able to understand how generate navigation links that use HTTP GET method. Do anyone Help me?
It seems impossilbe, but I don't want believe that it is true.
Building a web site using only HTTP POST methods is out of the W3C for Web Site suggestions.
A "good" serach engine for example dosen't take in cosideration HTTP POST Links.
I hope that someone tell me how generate using JSF HTTP GET links for navigation.
Bye

Balusc, thanks for you help.
The blog is very good!
I make help classe (FacesUtils) who you show in blog, but not find the property on request context map, but I use the param variable on faces-config.xml and Request Managed Bean and all work fine.
thanks.
I'm wrong where I think the Request Managed Bean is create for each request on all pages, the Request Managed Bean is create only on requeste page reference its.
Parte of my faces-config where I put the Request Managed Bean:
<managed-bean>
          <managed-bean-name>uuidParamManager</managed-bean-name>
          <managed-bean-class>
               br.srv.full.virtual.managers.request.UUIDParamManager
          </managed-bean-class>
          <managed-bean-scope>request</managed-bean-scope>
               <managed-property>
               <property-name>loginManager</property-name>
               <property-class>
                    br.srv.full.virtual.managers.LoginManager
               </property-class>
               <value>#{loginManager}</value>
          </managed-property>
          <managed-property>
               <property-name>uuid</property-name>
               <property-class>java.lang.String</property-class>
               <value>#{param.UUID}</value>
          </managed-property>
     </managed-bean>Where UUIDParamManager is create on request its receive first the LoginManager Instance, and later its receive the UUID param.
I put the prototype of project on virtual.full.srv.br.
thanks.

Real Servers not connected to ACE VLAN and Real Servers are clients accessing the VIP

Hi,
I have a very strange set up and need some help to get my config working
I have a ASA firewall with three VLANs
VLAN 1 = Internet
VLAN 2 = DMZ
VLAN 3 = Goes to ACE
On the ACE I have four VLANs
VLAN 3 = Goes to ASA
VALN 4 = Web Server Tier
VALN 5 = DB Tier
VALN 6 = VIPs
Our Application team have asked us to create a New VIP on the ACE with real servers in DMZ (Server A and Server B)
And they have told us that the cleints accessing the VIP will be Server A and Server B
I have always created VIPs with real servers directly connected to the ACE but not connected elsewhere.
I belive I have a big challenge of opening ports on the firewall etc to get this set up working. Also, should i use some sort of NAT / SNAT?
Could anyone guide me on this setup please?
Raj

Hi Raj,
First of all it is possible to add servers in ACE which are HOP away from ACE interfaces. Here servers are HOP away but there VIP is part of ACE interface subnet. The only need is that servers return traffic towards client should be passed through ACE (so that ACE can manitain states and chage the source IP of the reply packet from server IP to VIP on which client has requested the connection).
When servers are HOP away and ACE do not come in path between server and client then we have to to do SNAT for intial client request. This configuration will force the return traffic from server to ACE (as server will NAT IP as client IP).
In your case DMZ-VIP which is created for two real servers A and B, will be accesses by these servers only. So it is a situation of server accessing there own VIP. For this scenario to work we have to have SNAT (no matter whether servers are directly connected or HOP away). So best solution here is VIP in VLAN 3, Rserevrs for this VIP in DMZ, and SNAT client request, using free IP in VLAN 3.
Also you have to open ports on firewall for both "real server Probes" and actual application ports, moreover policies modification on firewall for allowing traffic from DMZ to ACE VIP, DMZ to NAT IP and there vice versa traffic.

ACE 4710 same real servers, different ports.

Hi! I have the following question based on a new site requirement. The following sites use the same back end servers. Names changed to protect the innocent and my finger fumbling with pretty names for my actual config.
I have two real servers being load balanced: 10.0.0.1 and 10.0.0.2
They have:
Site A URL= www.testsite.com:80
Site B URL= www.newstuff.com:81
I want Site B answering on port 81 for anything referencing the URL match for either port :80, and :81, then redirect to :81 anything that is on :80.
I want Site A answering on port 80 for anything not referencing the Site B URL.
How do I split the traffic coming in while also redirecting if only needed for the one site?
Also, one further question, how do I handle monitoring the ports up for each as validation for the VIP? If either port goes down is that going to take both of them offline?

Hi,
Since they are two different URL's, they would be resolving to two different VIPs. You can create two serverfarms with same servers but listening on ports 81 and 80 and create a class-map for different IP's or even same IP, listening on port 81 and 80. Any client coming with port 80 as destination would be loadbalanced to serverfarm_80 and any client coming on port 81 as destination would be loadbalanced to serverfarm_81.
class-map match-all Test_80
2 match virtual-address 10.1.1.1 tcp eq www
class-map match-all Test_81
3 match virtual-address 10.1.1.2 tcp eq 81
rserver r1
ip address 10.0.0.1
inservice
rserver r2
ip address 10.0.0.2
inservice
serverfarm_80
rserver r1 80
inservice
rserver r2 80
inservice
serverfarm_81
rserver r1 81
inservice
rserver r2 81
inservice
policy-map type loadbalance http first-match http
class class-default
    serverfarm serverfarm_80
policy-map type loadbalance http first-match http_81
class class-default
    serverfarm serverfarm_81
policy-map multi-match Test
class Test_80
    loadbalance vip inservice
    loadbalance policy http
    loadbalance vip icmp-reply active
   class Test_81
    loadbalance vip inservice
    loadbalance policy http_81
    loadbalance vip icmp-reply active
Let me know if you have any questions.
Regards,
Kanwal
Note: Please mark answers if they are helpful.

Retrieving image using HTTP GET method?

I want to send a image to a client browser. My servlet's HTML response to the client browser contains the <img src="..."> tag. The client browser uses the HTTP GET method to call my servlet's DoGet method, and I must transfer the desired image to the client browser in this DoGet method at servlet. Now, the problem is that, what should be the source URL in the image(img) tag that is present in my servlet response to client?
For eg: the img tag should be like this
<img src="http://<hostname>:<portname>/<servletname>/...?[var1=value1]">
Now at the ellipsis that you see in the above source URI, I want to write the type of image file (something.jpg) ,so the browser knows what kind of image file it is.
To sum it up...how to get the image using DoGet method and <img src="...">
Regards,
Amit

To give you a better idea on what's happening, read the RFC:
(HTTP/1.0) http://ftp.ics.uci.edu/pub/ietf/http/rfc1945.html
(HTTP/1.1 - compressed data)
http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html
If you for example execute the command by telnetting to port 80 on a server:
GET http://somewhere.com/some.jpg HTTP/1.0<cr>
<cr>You will get this header:
Trying 217.22.64.73...
Connected to xxx.xxx.xxx
Escape character is '^]'.
HTTP/1.1 200 OK
Date: Fri, 01 Aug 2003 12:36:30 GMT
Server: Apache/1.3.27 (Unix) FrontPage/5.0.2.2510
Last-Modified: Tue, 15 Jul 2003 03:11:52 GMT
ETag: "268de8-2fc4-3f1370f8"
Accept-Ranges: bytes
Content-Length: 12228
Connection: close
Content-Type: image/jpegWatch the last part, that's what the setContentType does, normally the content-type defaults to text/html in a webserver.
A webserver usually maintains a list of file extensions by which it will determine the correct MIME type to emit, when a resource is retrieved.
The browser reads the header, and decides what to do with it, in combination with (X)HTML markup.
Greets.

Error 66 and error 18500 using HTTP GET control: SOLVED

Hello, I'm new as a member and as a LabView user but I spent many hours trying to get the URL_Get_HTTP vi to play nicely with my code, and as a courtesy I thought I would post the problems I was having and the resolution(s).
First of all, I was receiving an Error 66 every time I would attempt to make a connection. This implies that the server terminated the connection, but I knew that this was not the case as I could connect just fine in other manners (browsers, PHP, etc)...
1) I changed the "bytes to read" input of the "TCP Read" control residing in the middle of the "TCP Buffered Read.vi" from a constant of 1024 to 1. I have not confirmed that this step is required and you may want to apply step #2 on its own.
2) I stripped the Error 66 from the "URL Get HTTP Document.vi" inbetween the "TCP Buffered Read" control and the "TCP Read Stream" control. You can do this by disconnecting the wire, adding a "Clear Error" control on that wire, or perhaps least offensively using my attached control which selectively removes only Error 66. You should review my control before using it, as I am a new LabView user! If you think this is "bad form" to strip and ignore an error I would completely agree, but I'm going to classify this as a bug in the control itself, and would also point out that the 4th post of the following thread concluded the same thing.
http://forums.ni.com/t5/LabVIEW/Can-t-read-page-containing-XML-using-GET-HTTP-Document/m-p/1191803#M...
3) To this point the Error 66 is no longer showing up, but now Error 18500 is, which is labeled as "undocumented" which was not very helpful. Most people will probably not suffer from this problem, but ultimately the cause was that my URL string ended in a carriage return. The HTTP control does not appreciate this in any way, and a simple Trim on the string before sending it resolved this issue.
Anyway, good luck!
Attachments:
filter_error.vi ‏24 KB

Try to send some valid data in COMP_CODE.
It seems that SAP is returning some reply which is not fitting your response Schema.
SAP Call is made and problem is in generating response document.
Use the design console to test the view again. and try to see the XML resquest document and response document. Compare your request xml with that in design console.

HANDLING HTTP "GET" IN SENDER ADAPTER

Hi,
I have a Scenario where I have to use HTTP GET Adapter to get data from a website daily to PI and Post the data from PI to SAP ECC.On the receiver end Idoc is being used.I need help on what to use (From sdn I came to know that Java Proxy or Adapter Module can be used ) and how to configure the sender adapter in this scenario.In case of Adpater module the steps needed to configure the scenario would be helpful.In case of Java Proxy sample code that would suit the scenario would be appreciated.

Only 7.3 version (Latest) supports HTTP GET method. All previous versions support only POST.
In your case java proxy is better choice.
Refer these standard links.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/7d4db211-0d01-0010-1e8e-9b07fc2113ab?quicklink=index&overridelayout=true
http://wiki.sdn.sap.com/wiki/display/Java/JavaProxyChangesinPI7.1fromPI7.0
http://help.sap.com/saphelp_nwesrce/helpdata/en/86/58cd3b11571962e10000000a11402f/content.htm
Basically you have to create java proxy for the outbound (sender) interface and use those proxy(stub) objects to code in java. Refer sender java proxy in the above link.

How to do HTTP GET effectively in PI

Hi ,
I need to download a csv file using HTTPS GET using .Looks like the plain HTTP adaptor only supports POST.I plan to do it by writing a Java client.My question is where to write the implementation ie in Mapping,wrap it under a SOAP web service etc.
Any inputs will be appreciated.
Regards,
Premjit

Hi,
Did you checked the below blog
/people/amol.joshi2/blog/2006/06/28/must-fire-a-http-get-from-xi---try-this
which details the implementation of using java
HTH
Rajesh

HTTP GET for sender adapter possible ?

I have to get XML-messages from third party webservice. I should use HTTP GET to get the data but is this possible in XI ? I mean like RFC->XI->HTTP(GET) and I would process the response from HTTP GET call.

Hi Jari,
For getting response from web service, you should use SOAP adapter.
Anyways,if it for web application, you can use HTTP get in XI for synchronous communication.
Have a look at these blogs for details -
1. /people/amol.joshi2/blog/2006/06/28/must-fire-a-http-get-from-xi---try-this
2. /people/william.li/blog/2007/09/07/posting-and-testing-using-xipi-http-adapter
Regards,
Sunil Chandra

R/3 HTTP GET to external supplier - what are the options

Hello all
Our scenario is that we have to connect to an external supplier using HTTP GET to get our order responses in the return structure. I was wondering what the best/easiest way is to do this.
We cannot use the HTTP adapter since that only supports HTTP-POST. Additionally the RFC that lies behind it does not allow query strings in the definition, something we need to use.
we could make use of the HTTP_GET function module in the SFTP function group but how to do it then?
-we cannot create an abap proxy for this since the outbound WSDL contains invalid keywords (choice keyword not supported)
-we probably could use BPM that calls the HTTP_GET.
-we could write an ABAP that calls the HTTP_GET and puts the output into a directory where XI can pick it up.
-I also read that you could write a small java function that does the HTTP_GET . But i have no experience with this.
So what is the best option to accomplish this?
thanks
Tom

From SP15 you may use Adapter-Specific Message Attributes.
To evaluate adapter attributes in the message header of the XI message, set the Use Adapter-Specific Message Attributes indicator.
     If you want missing message attributes to trigger an error message, set the Fail If Adapter-Specific Message Attributes Missing indicator. If the indicator is set and the header for adapter-specific message attributes or one of the set attributes is missing from the message, this leads to a system error (red flag).
If you do not set the indicator, and message attributes are missing, the adapter accesses information from the adapter configuration.
     If you want to use an HTTP destination or URL set by the mapping, set the URL or HTTP Destination indicator. (The indicator displayed depends on the Addressing Type you selected above). If you set the indicator, the URL or HTTP destination set dynamically is called by HTTP.
If the message header does not contain the URL or the HTTP destination, and you have set the Fail If Adapter-Specific Message Attributes Missing indicator, the XI message is set to status System Error. If you do not set the indicator, the URL or HTTP destination defined statically in the communication channel is used.
     If you want to use HTTP Header Fields, set the indicator and enter the fields in Field 1 to Field 6. The fields are embedded in the HTTP request under the names you enter here.
The technical names of the fields are HeaderFieldOne, .... HeaderFieldSix.
     If you want to use URL Parameters, set the indicator and enter the parameters in the fields Parameter 1 to Parameter 6. The parameters are embedded in the HTTP request under the names you enter here.
The technical names of the fields are URLParamOne, c, URLParamSix.
The attribute namespace for the adapter is http://sap.com/xi/XI/System/HTTP.
http://help.sap.com/saphelp_nw04/helpdata/en/43/64dbb0af9f30b4e10000000a11466f/content.htm
/Otto

Newbie: does Oracle BPEL Process Manager support http-get/post binding?

Hi all,
i'm a newbie in using bpel4ws. Two things i must know before using the Oracle BPEL Process Manager:
1. Does the manager support the sub-specification bpel4ws?
2. I want to orchestrate some services which aren't binded using http-SOAP or rpc. They are binded using http-GET and http-POST. Does the manager support these bindings too?

Hi Clemens,
thanks for answering.
Ähhm... as i told you, i'm newbie here. I searched for the content of
samples/tutorials/702.bindings/http
But i'm afraid i don't know where to start. Its no URL and i didn't find the source of this path. Can you add the full URL or tell me how to get to the source of these samples?
thanks
Albrecht

HTTP - GET

Currently we are using the WebMethods as the Middleware and we are moving towards SAP-XI.
When we send our documents to our suppliers we are using the HTTPS (i.e HTTP Post) to send our documents
Sameway when we want to receive the documents from our Suppliers we are using HTTP GET.
In XI whether we have any way to use the HTTP GET, to pull the messages from outside the firewall?

Hi Rohini,
Have a look at this thread...
http://help.sap.com/saphelp_nw2004s/helpdata/en/d9/ef2940cbf2195de10000000a1550b0/frameset.htm
cheers,
Prashanth
P.S Please mark helpful answers

Call Bpel process through HTTP get or post method

I need to call BPEL process from Mobile.
In mobile we are using HTTP get or post methods. so can anybody tell me how to invoke BPEL(how to pass input to BPEL) by using HTTP get or post method.
Vivek garg
Edited by: 809104 on Dec 24, 2010 2:36 AM

I got the soluntion
we just need to change the binding in WSDL file from Soap to HTTP.
First of all add three namespaces in wsdl file
xmlns:mime="http://schemas.xmlsoap.org/wsdl/mime/"
xmlns:http="http://schemas.xmlsoap.org/wsdl/http/"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
Then change the Request msg from element type to string type like below
<message name="UserLoggOffRequestMessage">
<part name="UserId" type="xsd:string"/> (add this one))
(remove this one)
</message>
Then change the binding
<binding name="UserLoggOffBinding" type="client:UserLoggOff">
<http:binding verb="GET"/>
<operation name="process">
<http:operation location="/process"/>
<http:urlEncoded/>
<output>
<mime:mimeString part="Body"/>
</output>
</operation>
</binding>
Then do some changes in service tag . we need to do the changes in location only.
we need to remove orabpel from location and add httpbinding
http://infva04718.vshodc.lntinfotech.com:8888/*orabpel*/MobileApplication/UserLoggOff/1.0
http://infva04718.vshodc.lntinfotech.com:8888/*httpbinding*/MobileApplication/UserLoggOff/1.0
do like following
<service name="UserLoggOff">
<port name="UserLoggOffPort" binding="client:UserLoggOffBinding">
<http:address location="http://infva04718.vshodc.lntinfotech.com:8888/httpbinding/MobileApplication/UserLoggOff/1.0"/>
</port>
</service>
Then deploy the process then u can invoke this
http://infva04718.vshodc.lntinfotech.com:8888/httpbinding/MobileApplication/UserLoggOff/process?UserId=a1
here process is name of process u want to invoke

Implementation of OSB service to Http GET XML payload

Hi,
I am new to OSB.I have a requirement where Ecommerce system will post a XML over HTTP.
Our OSB service has to receive that XML using Http GET and send it to a SOA composite as a SOAP.
My doubt are
1.can we implement the proxy service with service type any XML structure
2.Will Ecommerce provide any WSDL so that we can configure it in our proxy service.
Pls help.
thanks

Hi,
947423 wrote:
1.can we implement the proxy service with service type any XML structureYes, that should be alright...
2.Will Ecommerce provide any WSDL so that we can configure it in our proxy service.\Probably not, if they are just sending an XML over HTTP that is probably not SOAP, if at least they can provide you an XSD that would be nice... Otherwise you may have to write one...
Cheers,
Vlad
It is considered good etiquette to reward answerers with points (as "helpful" - 5 pts - or "correct" - 10pts)
https://forums.oracle.com/forums/ann.jspa?annID=893

ACE keep probing real servers using "https get 302"

Similar Messages

Maybe you are looking for