CSS 11000 series with load balancing for high availablity servers

Hi,
We have arrived at a designed,which has 2 PIX firewall(525)in a fault tolerant mode.Two interfaces from each of the PIX is connected directly to two css1000 switch which works in a fault tolerant mode.
other Two interface from each of the two css11000 switch is connected directly to two catalys 4003 switches to which we have Servers attached.
Pls let me know whether this design will work or If you could suggest some other design for high availablity servers which are kept at the DMZ.
Pls note in our design the internet user first hit the frewall and then the CSS11000 and then catalys 4003 and finally the Servers.
If anyone can help me out,pls send me a mail at [email protected]

Are the PIXes to be setup in a failover bundle?
If you use two interfaces in each PIX to connect
to the two CSS systems, are you not complicating the
setup? Which of the two should be called the inside?
I cannot recall whether you can have two inside legs at the current PIX level.

Similar Messages

Issue with Load balancing for 2 Apps Node for EBS 12.1

Hi Guys,
I had been following section 2.4 of Using Load-Balancers with Oracle E-Business Suite Release 12 (Doc ID 380489.1).
As per doc, I should be able to (but which is not happening in my case)
[root@ebs1 etc]# nslookup ebslbr.oracle.com
Server:         172.18.0.99
Address:        172.18.0.99#53
Name:   ebslbr.oracle.com
Address: 172.18.0.102
Name:   ebslbr.oracle.com
Address: 172.18.0.101
[root@ebs1 etc]# telnet ebslbr.oracle.com
Trying 172.18.0.101...
telnet: connect to address 172.18.0.101: Connection refused
Trying 172.18.0.102...
telnet: connect to address 172.18.0.102: Connection refused
telnet: Unable to connect to remote host: Connection refused
[root@ebs1 etc]#
I could able to lookup individual servers as well.
[root@ebs1 etc]# nslookup ebs1
Server:         172.18.0.99
Address:        172.18.0.99#53
Name:   ebs1.oracle.com
Address: 172.18.0.101
[root@ebs1 etc]# nslookup ebs2
Server:         172.18.0.99
Address:        172.18.0.99#53
Name:   ebs2.oracle.com
Address: 172.18.0.102
[root@ebs1 etc]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1       localhost.localdomain   localhost
#:1             localhost6.localdomain6 localhost6
#172.18.0.101    ebs1.oracle.com        ebs1
#172.18.0.102     ebs2.oracle.com        ebs2
#172.18.0.111    db1.oracle.com         db1
[root@ebs1 etc]# ping ebs2
PING ebs2.oracle.com (172.18.0.102) 56(84) bytes of data.
64 bytes from ebslbr (172.18.0.102): icmp_seq=1 ttl=64 time=0.482 ms
64 bytes from ebslbr (172.18.0.102): icmp_seq=2 ttl=64 time=0.546 ms
--- ebs2.oracle.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.482/0.514/0.546/0.032 ms
[root@ebs1 etc]# ping ebs1
PING ebs1.oracle.com (172.18.0.101) 56(84) bytes of data.
64 bytes from ebs1 (172.18.0.101): icmp_seq=1 ttl=64 time=0.032 ms
64 bytes from ebs1 (172.18.0.101): icmp_seq=2 ttl=64 time=0.044 ms
64 bytes from ebs1 (172.18.0.101): icmp_seq=3 ttl=64 time=0.041 ms
[root@ebs1 etc]#
[root@ebs1 etc]# telnet 127.0.0.1
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused
[root@ebs1 etc]# service iptables status
Firewall is stopped.
[root@ebs1 etc]#
I've further went, made changes in context file...ran autoconfig...but not getting frontend with 'ebslbr' hostname.
Can you please assist what could be the issue ?
Thanks,

Hi Hussein,
I've checked it... but there is a confusion... is telnet work without any port no ?
I mean see below output,
[applmgr@ebs1 ~]$ telnet ebs1 8000
Trying 172.18.0.101...
Connected to ebs1.
Escape character is '^]'.
Connection closed by foreign host.
[applmgr@ebs1 ~]$ telnet ebs2 8000
Trying 172.18.0.102...
Connected to ebs2.
Escape character is '^]'.
Connection closed by foreign host.
[applmgr@ebs1 ~]$ telnet ebs2
Trying 172.18.0.102...
telnet: connect to address 172.18.0.102: Connection refused
[applmgr@ebs1 ~]$ telnet ebslbr
Trying 172.18.0.101...
telnet: connect to address 172.18.0.101: Connection refused
Trying 172.18.0.102...
telnet: connect to address 172.18.0.102: Connection refused
[applmgr@ebs1 ~]$ telnet ebslbr 8000
Trying 172.18.0.101...
Connected to ebslbr.
Escape character is '^]'.
As per Metalink DOC: 380489.1, my Context file entries for both nodes,
[applmgr@ebs1 ~]$ grep -i s_webentryurlprotocol $CONTEXT_FILE
         <webentryurlprotocol oa_var="s_webentryurlprotocol">http</webentryurlprotocol>
[applmgr@ebs1 ~]$ grep -i s_webentryhost $CONTEXT_FILE
         <webentryhost oa_var="s_webentryhost">ebslbr</webentryhost>
[applmgr@ebs1 ~]$ grep -i s_webentrydomain $CONTEXT_FILE
         <webentrydomain oa_var="s_webentrydomain">oracle.com</webentrydomain>
[applmgr@ebs1 ~]$ grep -i s_webentrydomain $CONTEXT_FILE
         <webentrydomain oa_var="s_webentrydomain">oracle.com</webentrydomain>
[applmgr@ebs1 ~]$ grep -i s_active_webport $CONTEXT_FILE
      <activewebport oa_var="s_active_webport" oa_type="DUP_PORT" base="8000" step="1" range="-1" label="Active Web Port">8000</activewebport>
[applmgr@ebs1 ~]$ grep -i s_login_page $CONTEXT_FILE
         <login_page oa_var="s_login_page">http://ebslbr.oracle.com/OA_HTML/AppsLogin</login_page>
[applmgr@ebs1 ~]$ grep -i s_external_url $CONTEXT_FILE
         <externURL oa_var="s_external_url">http://ebslbr.oracle.com</externURL>
After running autoconfig, I still get frontpage for http://ebs1.oracle.com:8000/OA_HTML/AppsLogin & http://ebs2.oracle.com:8000/OA_HTML/AppsLogin which eventually redirects to http://ebslbr.oracle.com:8000/OA_HTML/RF.jsp?function_id=28716&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=… but which is wrong (there is no load balancing at all)...as my local desktop system32\drivers\etc\hosts file have following entries,
172.18.0.101    ebs1.oracle.com
ebslbr.oracle.com    ebslbr
172.18.0.102    ebs2.oracle.com
ebslbr.oracle.com    ebslbr
so,
ebs1.oracle.com:8000 -> ebslbr.oracle.com:8000 (It will always go to 1st node only)
This can be also proved by,
[applmgr@ebs1 ~]$ telnet ebslbr.oracle.com 8000 (telnet to ebslbr always going to 1st node on ebs1)
Trying 172.18.0.101...
Connected to ebslbr.oracle.com.
Escape character is '^]'.
[applmgr@ebs2 scripts]$ telnet ebslbr.oracle.com 8000 (telnet to ebslbr always going to 2nd node on ebs2)
Trying 172.18.0.102...
Connected to ebslbr.oracle.com.
Escape character is '^]'.
This should be round robin fashion...
Can you please help me, what is going wrong here ?
your help would be much appreciated ...
Regards,
Manish

CSS Load balancing for Exchange Server

Hi,
I have CSS configured in single arm and I have multiple servers configured for load balancing and it is working fine but when I am configuring Exchange server for load balancing I am facing problem and applications and printer/scanners are not able to send the email through the Virtual IP address configured for exchaneg server.
But if we configured the real server IP in the printer/scanners they are able to send the email. While checking the logs on the exchange server, it is showing that request for the email so coming from the Exchange VIP configured in the CSS.
I can telnet on port 25 on the VIP address (192.168.200.237). But unable to send the email through this VIP.
Below is the configuration
service ENOC_EXCHANGE-1
ip address 192.168.200.235
active
service ENOC_EXCHANGE-2
ip address 192.168.200.236
active
content EXCHANGE
    add service ENOC_EXCHANGE-2
    add service ENOC_EXCHANGE-1
    vip address 192.168.200.237
    active
group EXCHANGE
add destination service ENOC_EXCHANGE-1
add destination service ENOC_EXCHANGE-2
vip address 192.168.200.237
active
DC-CSS01# show rule GIT EXCHANGE
Name:                EXCHANGE   Owner:                ENOC_GIT
State:                 Active   Type:                     HTTP
Balance:          Round Robin   Failover:                  N/A
Persistence:          Enabled   Param-Bypass:         Disabled
Session Redundancy: Disabled
IP Redundancy:    Not Redundant
L3:         192.168.200.237
L4:         Any/Any
Url:
Redirect: ""
TCP RST client if service unreachable: Disabled
Rule Services & Weights:
1: EXCHANGE-1-Alive, S-1
2: EXCHANGE-2-Down, S-1
=============================================================================
Please let me know how to solve this problem. System team is saying with the physical IP address it is working fine problem with Load balancing. I have even tried with the
Add service command in the group but didnt work for me. If i will remove the group command then I cant telnet on port 25.
I think this is related to single arm modle or some wrong configuration for the NAT.
Kindly assist me

Hi
Printers are on Vlan 80 ( gw is 192.168.80.1) and exange server is on vlan 200 (gw is 192.168.200.1) i have multiple vlan which will communcate with exchange.
I hv other servers on 200 subnet which are working fine in load balancing.
My CSS is single arm setup.
Please assist
Sent from Cisco Technical Support iPhone App

For a true load balancing and high-availability OHS, OPMN, and mod_oc4j

i have read this link of Enabling Clustering on oc4j9.0.4 standalone app server
http://www.oracle.com/technology/docs/tech/java/oc4j/htdocs/getstart.htm#1015479
To test the clustering, start up the load balancer by executing "java -jar loadbalancer.jar".
C:\OC4J_EXTENDED\j2ee\home>java -jar loadbalancer.jar
In a future release of Oracle Application Server, loadbalancer.jar will be
desupported. Because of this, we strongly suggest that you discontinue your use
of loadbalancer.jar in this release. Under high loads, loadbalancer.jar may not
function properly. For a true load balancing and high-availability solution,
please move to use OHS, OPMN, and mod_OC4J. For more information, please see
http://otn.oracle.com/products/ias/ohs/content.html
Balancer initialized...
what load balancer should i use for web clustering
<frontend host="balancer-host" port="balancer-port" />
balancer-host=localhost
balancer-port=80
for all nodes i mentioned same host and port in http-web-site.xml.Is it correct?
i completed all the steps and run http://localhost:6666/session/SessionServlet
i hit 3 times
in the different browser http://localhost:7777/session/SessionServlet
instead of coming 4 it starting from 1 only.

can i use this loadbalancer.jar or not?
how to mod_oc4j in standalone app server

Problem with load balancing on CSS

Hi, we have a pair of servers that are load balanced for port 80 traffic to 198.x.x.21 using the h_www_tcp:80 content rule . I recently got a request that port 80 traffic directed to 198.x.x.21/apps/auction be directed only to one of the load balanced servers. I created a service and content rule r_auction_tcp:80, but traffic still seems to matching the load balancing content rule and going to the wrong server (the /app/auction site only exits on the first server).
I thought it might be sticyness so I experimented by assigning my pc IP addresses that have not be used and I would still end up on the wrong server with some of the addresses.
Any ideals?
content h_www_tcp:80
vip address 198.x.x.21
port 80
protocol tcp
advanced-balance sticky-srcip
add service webwa1.1_tcp:80
add service webwa2.1_tcp:80
redundant-index 1064
sticky-inact-timeout 480
active
service webwa1.1_tcp:80
ip address 10.6.3.30
protocol tcp
port 80
keepalive type tcp
keepalive port 80
redundant-index 130
active
service webwa2.1_tcp:80
ip address 10.6.3.31
protocol tcp
port 80
keepalive type tcp
keepalive port 80
redundant-index 140
active
content r_auction_tcp:80
vip address 198.x.x.21
redundant-index 1077
add service webwa1.1-auction_tcp:80
port 80
protocol tcp
url "/apps/auction/*"
active
service webwa1.1-auction_tcp:80
ip address 10.6.3.30
protocol tcp
port 80
keepalive type tcp
keepalive port 80
redundant-index 131
active

does that never work, or is it just some requests that sometimes fail to be remapped to the appropriate server?
It should normally work, but with the current config it is possible to see failures for session that stayed idle.
The solution is then to increase the flow-timeout-multiplier under each content rule to 50.
Gilles.

Recommended configuration for load balanced Portal with load balancer, multiple gateways and multiple servers.

Does anyone have a recommended network, hardware and software configuration guide for a Portal installation running with multiple gateways load balanced (ie one URL) that talk to multiple servers?

David,
We've used Resonate (software) to load balance the gateways. It allows
you to group all the gateways under 1 virtual URL and load balance the
incoming connections over each gateway depending on the rules that you
define in Resonate. Look in the SUN portal whitepapers there is one that
talks about it specifically.
As far as load balancing the calls to the portals, the gateways will
automatically load balance across all the portals that they know about
using a simple round-robin rotation. You may be able to use Resonate in
front of the portals but you may need to activate persistance within
Resonate to ensure that the user always ends up on the portal that he
established his initial connection on (if you want that), check with Sun
on this one.
David Broeren wrote:
Recommended configuration for load balanced Portal with load balancer,
multiple gateways and multiple servers.
Does anyone have a recommended network, hardware and software
configuration guide for a Portal installation running with multiple
gateways load balanced (ie one URL) that talk to multiple servers?
Try our New Web Based Forum at http://softwareforum.sun.com
Includes Access to our Product Knowledge Base!

HTTPS with load balancing

Hi guys,
We have a portal system with instance 08, so we typically connect to the portal using port 50800 for HTTP, and 50801 for HTTPS.
We have just created a second server node for this portal (in the config tool).
When we connect to 50800, does this automatically load balance the user to the better server? From some reading on these forums, it seemed to indicate that load balancing will only occur if I connect using port 8109. (where 09 is the instance number for the SCS of our portal)
When connecting to port 8109, we are redirected to port 50800, as I'd expect.
Question 1 - do we need to use 8109 for load balancing, or can we still use 50800?
Question 2 - If we need to use 8109, which is a HTTP port, how can we achieve load balancing with HTTPS. Is there a different port we need to use to have HTTPS with load balancing?
Question 3 - Is the creation of a second server node the best way to accomodate additional users and load on the portal system, or is there a better way to do things?
Thanks,
Michael.

Better late than never.
The load balancing you describe through the message server has its limitation. It redirects you to one of the dialog server hosts which means that any bookmarks will always point directly to a dialog server which may be down at that moment.
Access directly to a dialog server on port 50800 will sort of load balanc on the java server instances that are on that server but not on other servers.
The general recommendation is to setup an external loadbalancer and SAP Web dispatcher is a good match if the load is not very high. SAP webdispatcher will then bind up the cluster address and act as a proxy towards the dialog servers of the portal. The user will therefore only see one address. This will also work for HTTPS.
Regards
Dagfinn

Load balancing and High Availability topology

Our Forms 6i client-server application currently runs on Citrix farm of 20 Windows 2000 boxes (IBM Blade Servers 2 CPU and 2 Gig Memory).
Application supports 2000 users.
We are moving to AS 10g r2, forms 10g and the goal is to use same hardware, 20 Windows boxes (or less), for intranet web deployment.
What will be our best choices for application Load balancing and High Availability?
Hardware load balancer, Web Cache, mod-oc4j? Combinations?
Any suggestions, best practices, your experience?

Gerd, I understand, that you are running 10g web forms through the browser, but using Citrix for deployment. This means that in addition to Application Server and Forms runtime sessions, it will be separate browser session opened for each user. What the advantage of this configuration?
Michael, we are aware, that Citrix is not supported by Oracle as a deployment platform. That only means that prior contacting Oracle Support we have to reproduce the problem in standard environment. It was never been a problem to reproduce problem :) We were using Citrix as a deployment platform for Forms 6i client/server for 4 years, but now we are forced to upgrade to 10g.
We are familiar with various Load balancing options available. The question is which option is the most "workable" in our case.

Error in creation of JCO with Load balancing server

Hi,
We are using a ABAP user base for our WEBAS server 6.40 (with ABAP+JAVA). i have created a Public group in concerned ECC 5.0 system. I have already configured SLD, and then i maintain data supplier bridge in SLD and run RZ70 in ECC 5.0 system to load system information.. i can see details in SLD ..
now i am trying to create JCO connections .. here i am unable to create JCO with load balancing option.. i get
com.sap.mw.jco.JCO$Exception: (102) RFC_ERROR_COMMUNICATION: Connect to message server host failed Connect_PM TYPE=B MSHOST=<servername> GROUP=PUBLIC R3NAME=SID MSSERV=sapms<SID> PCS=1 ERROR service 'sapms<SID>' unknown TIME Fri Jun 16 12:41:20 2006 RELEASE 640 COMPONENT NI (network interface) VERSION 37 RC -3 MODULE ninti.c LINE 505 DETAIL NiPGetServByName2: service 'sapms<SID>' not found SYSTEM CALL getservbyname_r COUNTER 1
i am able to create single server JCO, but it fails in load balancing.. is there anything i have missed out in settings...
Thanks and regards,
Sudhir

Thanks, Bogdan Rokosa
I have the same problem,and solved it following the steps provided by Bogdan Rokosa :
you must insert an entry for your R3 system
(like: sapms<SID> 3600/tcp)
in services file
(C:\WINDOWS\system32\drivers\etc\services) on Java WAS.
I test the Jco successful without restart J2EE Engine.

System with load balancing server

Hi All,
We are having SAP NW 7.0 Portal and back end we have R3 implemented in a cluster environment. The system object in EP have used "System with Load balancing" template; using the LOGON group and the other related parameters.
But we have some problem with the ITS and WAS parameters; since we are using some Transaction iViews.
Let me explain.. for the R3 cluster we have 2 systems PROD1.domain.ext and PROD2.domain.ext. Now in the system object in portal, how to specify the parameters for ITS and WAS parameters? Since the host name in these we need to specify a single server which defeats the basic purpose of having clustered environment.
Can any one please help in resolving this issue.
Thanks,
Sravanthi

Hi Sravanthi,
Please check the below for finding ITS and WAS parameters from backend :
For ITS - Go to SE37 >> Utilities >> Setting >> Click on ICON Right Top Corner in popup window >> Select Internet Transaction Server >> you will find the Standard Path and HTTP URL.
For WAS - Go to SE37 >> Run FM - RSBB_URL_PREFIX_GET >> Execute it >> you will find PRefix and PAth paramter for WAS.
Please refer to this may help step-by-step : How-to create a portal system for using it in Visual Composer
Hope it helps
Regards
Arun

Issue in setting Load balancing for Indesign Server CS5.5

Hi All,
I need to set up load balancing mechanism for Indesign Server CS5.5 on Windows Server 2008 R2(64 bit version).
I have dutifully following all steps defined in "WORKING WITH LOAD BALANCING AND QUEUEING FOR ADOBE INDESIGN CS5 SERVER.pdf"
After running Indesign server using batch file "startup-indesign-server-CORBA-4instances.bat" from "<ID_SDK>\samples\load-balancing-and-queuing-clients\indesignserver-startup-scripts", I get only one instance of Indesign Server running. How to run multiple instances of the INDD server ? Is running multiple instance has something to do with type of licensing ?
Now I run Clover.cmd script, I get this screen. I have no idea why its not working. Please help. Please let me know, if the scenario is not clear and more information is required.
Thnx,
D

This is the image after running clover.bat

Reverse Proxy and Load Balancer for SMP 2.3 and Agentry Application

Hi Expert,
I'm putting in place a mobile solution composed by SMP 2.3 SPS 4 and SAP ECC 6.0. In the SMP 2.3 I created the agentry server and I have deployed my agentry application.
My SMP/Agentry infrastructure is composed by two servers therefore I need a load balancer for balance the load into the several servers. Furthermore I need to use a reverse proxy in my DMZ zone.
Based on what indicated in the SAP note "1904213 - SAP Mobile Platform Server Release Information" the Apache Reverse Proxy is not supported for Agentry clients. Agentry uses nginx for Reverse Proxy.
I also found the following document How-to-Guide for Reverse Proxy and Load Balancing in SAP Mobile Platform 3.x that explain how to set-up a reverse proxy and load balancer with nginx and apache.
Both the SAP note and the HOW to document are refereed to SMP 3.0 and not to SMP 2.3.
I would know if the NGINX must be used also for SMP 2.3.
Any suggestion/information is appreciated.
Thanks in advance
g.

Please see Agentry Network Landscapes

Moving SMTP server to Azure with Load balancer

How to
move SMTP server to Azure with Load balancer???

Hi TechM,
Base on my experience, Windows Azure Platform does not provide out-of-the-box mail server (neither SMTP nor POP3). You could use SendGrid to sent mail. About this issue, I recommend you could refer to
http://stackoverflow.com/questions/10631585/email-sending-approaches and
http://blogs.msdn.com/b/patrick_butler_monterde/archive/2010/10/11/sending-e-mail-from-windows-azure-part-1-of-2.aspx
Hope it helps.
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Setting up Load Balancing for 11i for Intranet & Internet Access

Our current environment for 11i (11.5.5) is accessed only internally (via Intranet). We need to allow outside access (via Internet) also for self-service apps (ie. HR). Oracle Support/Metalink has stated that Load Balancing (note 148155.1) is the only supported method to have multiple (Apps Servers) systems access a single database. Could I get feedback from anyone who has implemented Load Balancing for 11i? Additionally if someone has implemented this for both intranet and internet access how has your company setup? Do the secondary server(s) from the Load Balancing note reside in the DMZ? And thus the primary app server and database reside inside the firewall? Thanks....

Hi,
We are using 6 middle tiers for internal access for intranet access and 2 middle tiers in External DMZ with only web server running for Extrenal Access over Internet for Self Service.
You Implement one Load Balancer for first 6 internal Middle Tiers with site level profiles pointing to Internal .
You implement second Load balancer for external 2 middle tiers with server level profile options for these two servers pointing to External Load balancer .
To check how to implement load balancer vsiit
http://becomeappsdba.blogspot.com/2006/09/configure-hardware-load-balancer-at.html
Wait for my next post in above blog site with step by step procedure to implement above solution External & Internal one
Atul Kumar
Oracle Apps DBA
http://teachmeoracle.com

Load balancing for SAP R3 through ITS for EP .

Dear All
We are using ITS bease SAP R3 iviews in EP ..The landscape is as follows
EP --> ITS --> SAP R3 .
We need to configure a load balancing from EP to R3. Currently the ITS is set to hit one Application server on SAP r3 . How do i configure load balancing in EP for R3 .
Even if we use the Load Balancing Iview, it does not prompt to enter SAP R3 Application servers in the EP Load balancing iview properties.
all it asks is the ITS server and SAP server for connectors.
Regards
Jayesh

Please do the following steps to accomplish load balancing. It includes both ITS definition and system definition.
ITS Definition:
System definition alone will not help. Because you are using ITS to access SAP R/3. ITS uses global.srvc file to access SAP R/3 system.
When you install ITS you have option to choose connection with SAP R/3. You have two options here.
1) Message server with load balancing
2) Application server.
If you choose option 1, you will have load balancing on SAP R/3 using ITS.

CSS 11000 series with load balancing for high availablity servers

Similar Messages

Maybe you are looking for