Cache engine with ASA

Hi
Can I use the Content Engine as a Reverse proxy server and deploy the servers and the CE in the DMZ. If yes then can I have the ASA do the WCCP or the router?
Thank you
Regards
Aiyappa

Hello Javier,
It's missing there,
The limitation is still present,
Regards,
Julio Carvajal

Similar Messages

Cache Engine with a private address

Can I configure my CE590 with a private address ( for ex. 172.16.1.1 )
Should I translate this private address to a public address ?
The sample configuration in the below URL comment :
!---Important: If you configure the Cache Engine
!---with a private address, it must get!---translated to a public address. "
http://www.cisco.com/warp/customer/117/cache_engine/transparentconfig.htm
please advise me
Thanks
Mohamed Abdallah

Should I configure a static NAT on the router for the CE ip address
OR use the PTR record in my DNS for the CE ip add. for the DNS reverse lookup ??
Answer: In any event, you will need a PTR record configured in your DNS network for the CE ip address. This must be a public record so that the internet sites can do a reverse lookup. Best case senario for security is to configure static nat on the router with a public ip address that resolves to the internal private ip address of the CE
What if I give the CE a public IP address ? Do I need PTR record in my DNS for the CE ip address?
Answer: You can certainly do that and it does make things a bit easier. For security though, I recommend going with the private ip with nat upstream.
Regards
Pete..

How to Integrate 500 Series Cache Engine with WS-C3550-48-EMI

We are having a Catalyst 3550 L3 Switch, which is being used to provide Internet service. Now we want to integrate a 500 Series Cache Engine so that outbound http traffic is cached.
The Cat 3550-48-EMI switch is not supporting " ip wccp web-cache redirect out" command, instead it's supporting " ip wccp web-cache redirect in" command. So for outbound traffic no caching is happening. How this can be achieved?
Regards,
Malay.

in and out means catch traffic when it comes in or when it goes out respectively.
So you can configure the 'out' on the Internet facing interface to catch the request before it goes out to the Internet.
But you can also configure the 'in' on the client interface to catch the request when it comes into the router.
The 'in' gives much better performance because you catch the request before doing a route loockup.
The only disadvantage is that if you have many client vlans, you need to configure this 'in' command for each one of them.
Regards,
Gilles.

Cache engine IP spoofing with CSS ?

i would like to use css and cache engine in a spoofed ip source design to preserve identity of requestor.
WCCP appears to be able to do this but not L4+ switching with CSS.
Does anyone know of a way of doing this either as a transparent cache or proxy cache ?
thanks in advance

Alan, we discussed this by email in the case you opened.
The command 'wccp spoof-client-ip enable' does work on the CE even
if you are not using WCCP.
On the CSS, just make a config similar to the one for one-armed transparent SCA config.
Tested in the lab and it works.
Gilles.

Problems with transaction-logs on cache engines

Good Day All,
I have a Cache Engine 550 here and the transaction log working.log file got quite large.
I was not able to export it to my ftp server so I logged into the Cache engine via ftp and downloaded the file to a PC.
I then deleted the working.log file on the Cache Engine and rebooted the cache engine.
The working.log file was not re-created as I had hoped it might be.
I have created a file called working.log in the correct directory. This file does not seem to get updated though so this must not be right either.
Any suggestions?
regards,
amanda

Hi Zach,
Thank you so much for writing back. I am running an archaic version of the software... i can check tomorrow. As to the logging.... i had not enabled transaction-logging in itself so it was a silly config error ...
:) amanda

ACE with cache engine "spoof" mode

If Cache Engine use spoof mode, how ACE be configured for support this mode. Have it any command add into ACE?

I am looking into this myself. Can the ACE work in this fashion:
Clients VLAN 10
Internet VLAN 20
Cache Servers VLAN 30
Traffic that comes in from clients on vlan 10, any of it that is tcp port 80, send to the cache on vlan 30. Traffic coming back from the internet, vlan 20, if its tcp port 80, send to the cache on vlan 30.
Its basic layer 4 redirection. But when the traffic goes to the cache, the cache is not going to use its own IP to make the internet request, its going to use the clients IP, this is why a map is needed on vlan 10 and vlan 20, to ensure traffic is pipelined thru the ace. Has anyone done this?

Does the Cisco Cache Engine Work with the Cisco Local Director ?

I need to know if it is possible and how to use cisco local director to redirect traffic to the cache engine in reverse proxy configuration and transparent proxy configuration.

In directed mode, the client browsers are configured to point to a proxy to a virtual IP address on the Local Director. I know the Local Director does not support a real server that does not have a virtual address defined so it can't transparently forward like the CSS.

Streaming WMT (netshow) through PIX with Cache Engine

Hello:
I am trying to stream WMT from a pre-loaded Cache engine through a PIX firewall. I would like to use UDP for the streaming, but when I start the streaming TCP is selected by default. Forcing UDP within Windows causes an error. The PIX doesn't allow the UDP traffic through since it didn't originate from the inside. Outside the firewall UDP only works if I force it. TCP is the default. First, is UDP the best way to do this or is TCP ok since it is comming from the Cache engine? Second, how can I change the Cache engine setup to default to UDP or is this not possible?
Thank you,
Hampton Saussy
Midlands Technical College

We had a similar issue. If the firewall is not configured to accept TCP ports, then the streaming video server will perform HTTP cloaking i.e Instead of using the TCP ports it will use HTTP port 80 to get through the firewall, then the server sends the streaming video data via UDP. If UDP cannot pass through the firewall, the client requests delivery via TCP. The fixup rtsp command lets PIX Firewall pass RTSP (Real Time Streaming Protocol) packets. This command does not fix RTSP UDP connections. So I guess using TCP is a better option.

Question about connection between cache engine and cat6k

Dear sir,
Here is the problem description, please give me some help, thank you so much:
catalyst 6509 is enable for wccp v2.CE 7320 also enable the wccp v2.Wccp service 91 is configured on 6509.Service-munber 91 and port-list 1(with port number 8080) are also configured on CE 7320.Wccp communicates well about service number 91.
but browsing web page with port number 8080 gets always failed.
1.6509 wccp configuration:
ip wccp web-cache redirect-list 30
ip wccp 91
interface Vlan10
ip address 211.162.224.2 255.255.255.240
ip wccp web-cache redirect out
ip wccp 91 redirect out
2.ce7320 wccp configuration:
wccp router-list 1 211.161.1.49
wccp port-list 1 8080
wccp web-cache router-list-num 1
wccp service-number 91 router-list-num 1 port-list-num 1 application cache
wccp version 2
3.show info. from 6509 and ce 7320:
gwbn7320#sh wccp content-engines
Content Engine List for Service: Web Cache
IP address = 211.161.1.50
Routers seeing this Content Engine(1)
211.162.224.2
Content Engine List for Service: WCCPv2 Service 91
IP address = 211.161.1.50
Routers seeing this Content Engine(1)
211.162.224.2
gwbn7320#sh statistics http savings
Statistics - Savings
Requests Bytes
Total: 90685 460066803
Hits: 936 162710
Miss: 89749 459904093
Savings: 1.0 % 0.0 %
6509-left#sh ip wccp
Global WCCP information:
Router information:
Router Identifier: 211.162.224.2
Protocol Version: 2.0
Service Identifier: web-cache
Number of Cache Engines: 1
Number of routers: 1
Total Packets Redirected: 2525
Redirect access-list: 30
Total Packets Denied Redirect: 0
Total Packets Unassigned: 146
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Service Identifier: 91
Number of Cache Engines: 1
Number of routers: 1
Total Packets Redirected: 0
Redirect access-list: -none-
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Regards,
Sha

Gilles,
Thank you!
Here is the result:
6509-left#sh ip wccp 91 detail
WCCP Cache-Engine information:
IP Address: 211.161.1.50
Protocol Version: 2.0
State: Usable
Redirection: GRE
Initial Hash Info: 00000000000000000000000000000000
00000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 256 (100.00%)
Packets Redirected: 180
Connect Time: 00:07:06
Regards,
Sha

ACE as cache engine for wccp redirection

Does anybody know if the ACE 4710 appliance supports WCCP acting as a web-cache engine? I am exausting all possible options, and then some, for deploying a new application networking environment. I just returned from ACE training last week and found myself ramping up to deploy a new ACE.
I have pretty much exhausted my options for topology. We discussed several different designs in class and I don't like any of them. I have some serious problems with using the ACE as a default-gateway for servers. That options is out due to how other "non application" traffic is handled. Traffic such as RDP from IT support staff, patching from SMS servers, virus dat updates, vulnerability scanning... it all routes to the ACE which has to have static routes... then clients hitting the application VIPs have to be natted so the ACE does not use the static routes and reply directly... it all becomes a very big problem over time.
Second and third options are one-armed and direct server return... both not suitable for my requirements.
Now... that leaves me with an option we currently have deployed. That is to use a distribution route-switch (Catalyst 4500 Sup-IV) in the middle. The Cat uses PBR to return http traffic from the web servers back to the ACE. All other traffic follows normal routing table.
Ok... that works perfect... except PBR is not supported in the Sup-6 engine. Unbelievable... I know. This is a major fly in the ointment for this new deployment.
Now... there is another protocol that is often used for redirection... WCCP. If the ACE were a wccp web-cache, the router could be configured to redirect ingress http to the ACE. But... the ACE would have to act as a web-cache engine and register with the Cat as a home-router.
I am sure this option is not an option... but it would be nice. The ACE 4710 appliance has the general processor to do it but it would have to be implemented in software. I'm running A3(1.0) and I cannot find anything related to wccp. Nothing in the command-reference.
If there are any Cisco developers interested in adding some killer funtionality... this would be it. Wccp can be done in layer-2 as well as layer-3. The Sup-6 supports layer-2 redirection. Since the ACE is generally layer-2 adjacent this would be rather easy to implement. Anyway... food for thought.

I just would like to mention that you could have ACE in bridge mode inserted between your servers and the gateway (4500).
All traffic will go through ACE but no need for nating and no statc routes (just one default route pointing to the 4500).
The only problems would be if you exceed the BW of the 4710 with all your traffic.
Regarding the WCCP support for the 4710 this is not currently in our roadmap.
Ask your cisco account team to introduce the request.
Thanks,
Gilles.

Getting following error while we starting up cache engine

Hi,
We always getting following error, when we try to restart our 4 cache engine ie 4th coherence node all the time. We are having cluster with WKA type with 6 member in it. First 3 member start normally without any issues. But the 4 th one always ends up in the following issue. Even we change starting order for coherence nodes, first 3 will go fine, from 4 th onwards, we are getting the following problem.
2012-10-25 16:27:25.746/113.283 Oracle Coherence EE 3.4.2/411p1 <Error> (thread=DistributedCache, member=4): validatePolls: This service timed-out due to una
nswered handshake request. Manual intervention is required to stop the members that have not responded to this Poll
PollId=1, active
InitTimeMillis=1351178785142
Service=DistributedCache (4)
RespondedMemberSet=[]
LeftMemberSet=[]
RemainingMemberSet=[1,2,3]
what should we check for? Any help is greatly appreciated.
Regards,
chakradhar

Hi,
This was a problem in earlier releases of Coherence and you can try to configure the <thread-pool> for your Distributed Cache and see if the problem goes away. Here is a note from Oracle support that talks more about this problem: https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=845363.1
HTH
Cheers,
_NJ

New Servlet Engine with iAS

Is it true that in the next version of iAS, a new servlet engine (TOMCAT perhaps) will be proposed to replace JSERV ?
null

WebLogic's Servlet engine is less than $1K / CPU I believe.
Peace,
Cameron Purdy
Tangosol Inc.
Tangosol Coherence: Clustered Coherent Cache for J2EE
Information at http://www.tangosol.com/
"Jon" <[email protected]> wrote in message
news:[email protected]..
Does anyone have experience using iPlanet 6.0 Servlet engine with
WebLogic 6.1 EJB engine? The two engines will be located on separate
physical servers. If so, any information on the implementation would
be greatly appreciated (lessons learned especially). Would the cost
difference between using WebLogic's Servlet engine vs. iPlanet's
Servlet Engine be worth the attempt? I saw in some previous posts
that there were issues with how older versions of Weblogic RMI (T3)
Protocol worked and that Weblogic would only have one socket
connection for the iPlanet Servlet Engine through which all requests
will be multiplexed. This would be a bottleneck for any application.
Is this still true with the latest versions of these products?
Thanks,
Jon

Cache Engine 510

Hi ,
We have purchased a cache engine 510 and are going to be deploying it in a transparent caching scenario. Where is the optimal place to put the cache engine, on the inside network behind firewall or on outside. If placed on the outside of the firewall what conduits/access lists need to be put in place for the solution to work.
I have been trying to find a good document on how the WCCP protocol works with regards to how the source/destination addresses change when a router redirects traffic to a cache engine to better understand what rules need to be changed on the firewall. Any pointers to a good reference URL will be greatly appreciated.

to understand the log message, please look into :
http://www.cisco.com/en/US/products/hw/contnetw/ps546/products_tech_note09186a00800a5fe1.shtml
If you have only one router, you don't have the choice of the location.
Put your Cache in the same subnet as the router and the firewall.
Finally, you can't view object that were cached.
Gilles.

Cache engine overloads, how to.....

i've cisco cache engine 505 attached with cisco 2611 router. Now whenever i reload my cache engine it performs its job for 5 minutes after that it overloads and cannnot perform its job and cache engine changes its state to bypass mode.
What could be the factors that causes this problem?
How can i avoid this problem.
this could be memory issue? if yes then which memory.hardisk or RAM or else?
pls reply me as soon as possible.

The ICAP daemon on the Content Engine continues to send updates (from the HTTP response) to the ICAP server, and it overloads the cache engine

Extra Hard disk on Cache Engine

I have a 9GB Hard Disk on a cache engine at the moment, but 18GB was ordered. We had to install it before the other 9GB arrived though, and now it's arrived, I need to put that extra 9GB in. I have been surfing the Cisco site trying to find instructions on how to put it in, but could not find any. Can someone please help?
Thanks :o)
Helena

Here's a link with information on setting up the hard drives:
http://www.cisco.com/univercd/cc/td/doc/product/webscale/webcache/ce25/config25/chap2.htm#xtocid226421

Cache engine with ASA

Similar Messages

Maybe you are looking for