CSS and Oracle Load Balancing

Hi,
I have CSS in single arm deployment model. I have multiple servers load balancing on this CSS on port 80 etc. Today I am trying to load balance one Oracle server but I am facing problem with it.
Real servers are accessible on port 80 without any problem but when we are trying to access the same servers on VIP we are not able to see the web page.
real server http://192.168.17.12/irs.htm
real server http://192.168.17.14/irs.htm
real server http://192.168.10.37/irs.htm
VIP
http://192.168.200.58/irs.htm
Below is the configuration. I can do the telnet on port 80 and I can ping the VIP IP address.
I will only put 192.168.200.58 in browser I can see the oracle page but with the full URL i am not able to see it.
Though I have other oracle servers which I have load balance with the same configuration and I can access the web page.
==========================================================================================
http://tptest.enoc.com/forms/frmservlet?config=tp  (This is working fine).
========================================================================
http://irs.enoc.com/irs.htm  (This is not working).
By name and by IP address both are not working.
http://192.168.200.58/irs.htm  (This is not working).
=============================================================================
service IRC_1
  ip address 192.168.17.12
  keepalive type tcp
  keepalive port 80
  active
service IRC_2
  ip address 192.168.17.14
  keepalive type tcp
  keepalive port 80
service IRC_DR
  ip address 192.168.10.37
  keepalive type tcp
  keepalive port 80
content ENOC_IRC
    add service IRC_1
    add service IRC_2
    add service IRC_DR
    vip address 192.168.200.58
    protocol tcp
    port 80
    advanced-balance sticky-srcip
    active
owner ENOC_GIT
content ENOC_IRC
    add service IRC_1
    add service IRC_2
    add service IRC_DR
    vip address 192.168.200.58
    protocol tcp
    port 80
    advanced-balance sticky-srcip
    active
group ENOC_IRC
  add destination service IRC_1
  add destination service IRC_2
  add destination service IRC_DR
  vip address 192.168.200.58
  active
===================================================================================================
ENOCDC-CSS01(config)# show service summary
Service Name                     State     Conn  Weight  Avg   State
                                                         Load  Transitions
IRC_1                            Alive         0      1     2            0
IRC_2                            Suspended     0      1   255            1
IRC_DR                           Suspended     0      1   255            1
ENOCDC-CSS01(config)# show summary
Global Bypass Counters:
   No Rule Bypass Count:     0
   Acl Bypass Count:         0
Owner            Content Rules    State     Services         Service Hits
ENOC_GIT        
              ENOC_IRC         Active    IRC_1            103
                                            IRC_2            10
                                            IRC_DR           7
=======================================================================================================
Same setting I am doing for other servers and working fine only for these servers I am facing problem. Curently only one server is active in the configuration.
Kindly let me know what I am missing and how to fix the problem.
I have also attached the full configuration of CSS.

Hi,
My point of concern is that I did the same for Oracle server and this is working fine
http://192.168.200.95/forms/frmservlet?config=tp
only when I am doing the load balancing for
http://irs.enoc.com/irs.htm  (This is not working).
By name and by IP address both are not working.
http://192.168.200.58/irs.htm  (This is not working).
I dont have a option for TAC case is there a a way to fix the problem by apply other load balancing method. Is there something to do with the Circut VLAN. I didnt create the Circut VLAN 17 where this server is located.
I am doing almost 8 differenceservers load balancing in this CSS.
your expert opinion will definately help me.

Similar Messages

  • Question about FCF and Oracle load Balance

    We have recently set up the FCF and load balance advisory.
    We are using JDBC UCP connection Pool.
    Here is the service name is as following:
    CATEST_FCF =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = ptt-pt-ildb-01-vip)(PORT = 1521))
    (ADDRESS = (PROTOCOL = TCP)(HOST = ptt-pt-ildb-02-vip)(PORT = 1521))
    (LOAD_BALANCE = yes)
    (CONNECT_DATA =
    (SERVER = DEDICATED)
    (SERVICE_NAME = CATEST_FCF.THECPP.COM)
    (FAILOVER_MODE =
    (TYPE = SELECT)
    (METHOD = BASIC)
    (RETRIES = 180)
    (DELAY = 5)
    -- service goal is SERVICE_TIME and CLB_GOAL is LONG
    -- ons.config
    localport=6101
    remoteport=6200
    loglevel=9
    useocr=on
    I was trying some test as the link below.
    http://drdobbs.com/java/222700353?pgno=1
    but my client is always trying to connect to instance 2 even the sys.sys$service_metrics_tab already showed the instance 1 can take on more load.
    Total held connections: 9
    [0] Instance name [TZNTEST2]
    [1] Instance name [TZNTEST2]
    [2] Instance name [TZNTEST2]
    [3] Instance name [TZNTEST2]
    [4] Instance name [TZNTEST2]
    [5] Instance name [TZNTEST2]
    [6] Instance name [TZNTEST2]
    [7] Instance name [TZNTEST2]
    [8] Instance name [TZNTEST2]
    (CATEST_FCF, VERSION=1.0 database=CATEST service=CATEST_FCF { {instance=CATEST1 percent=88 flag=GOOD}{instance=CATEST2 percent=12 flag=GOOD} } timestamp=2011-04-12 11:59:36)
    am I correct here? the percent for CATEST1 is 88. Does it mean CATEST1 is able to take on 88% more load, so it is more attractive now?
    and why the connections always fell on CATEST2? How does oracle calculate the number of connections to each instance. Does it count inactive or killed session too? does it offer the load balance stats based on total number of connections on each instance or total number of connections just to this serivce on each instance?

    I don't know if this helps, but there is a reply comment from
    Macromedia at the bottom of the MX 6 LiveDocs for tag
    cfprocparam
    which was in response to a comment pointing out that calling
    overloaded stored procedures containing refcursors did not work. (I
    submitted a similar question to Adobe last night in the MX 7
    version of LiveDocs for cfprocparam and am waiting for it to post.)
    Macromedia jrunrandy said on Jun 30, 2005 at 9:45 AM :
    I checked and regret to say that this isn't supported. There
    is a bug for this issue,
    53122, but it hasn't been addressed as of CFMX 7.
    I think that this is going to be as official of a response
    from Macromedia/Adobe as you are going to get unless you open a
    trouble report yourself. I hope that this is enough to satisfy the
    requirements of your DBA. Otherwise, you are probably going to have
    to shell out the cash for an official trouble report to Adobe
    (unless you have paid support).
    Phil

  • Cisco CSS 11503 Arrowpoint/Load Balance question

    I am troubleshooting an issue with my 11503.  I am running version 07.40.0.04. I have it configured as follows:
      content upcadtoa-rule
        add service cadtoa-wls1-e0
        add service cadtoa-wls1-e1
        add service cadtoa-wls2-e0
        add service cadtoa-wls2-e1
        add service cadtoa-wls3-e0
        add service cadtoa-wls3-e1
        add service cadtoa-wls4-e0
        add service cadtoa-wls4-e1
        add service cadtoa-wls5-e0
        add service cadtoa-wls5-e1
        add service cadtoa-wls6-e0
        add service cadtoa-wls6-e1
        arrowpoint-cookie expiration 00:00:15:00
        protocol tcp
        port 8001
        advanced-balance arrowpoint-cookie
        redundant-index 2
        vip address 172.30.194.195 range 2
        arrowpoint-cookie name TOA
        active
    However, the load-balancing across the servers does not seem to be doing much balancing.  One of those servers is getting hit with 5 times as much traffic as another and another server is lucky to get a connection at all.  With the cookie expiration set, one would think that this would all balance out over time.
    I just came across this information from Cisco and I am wondering if it is relevant:
    If you configure a balance or advanced-balance method on a content rule that requires the TCP protocol for Layer 5 (L5) spoofing, you should configure a default URL string, such as url "/*". The addition of the URL string forces the content rule to become an L5 rule and ensures L5 load balancing or stickiness. If you do not configure a default URL string, unexpected results can occur.
    In the following configuration example, if you configure a Layer 3 (L3) content rule with an L5 balance method, the CSS performs L5 load balancing, but will reject UDP packets.
    content testing
    vip address 192.168.128.131
    add service s1
    balance url
    active
    The balance url method is an L5 load-balancing method in which the CSS must spoof the connection and examine the HTTP GET content request to perform load balancing. The CSS rejects the UDP packet sent to this rule because a UDP connection cannot be L5. Though the CSS allows this rule configuration, its expected behavior would be more clear if you promote the rule to L5 by configuring the url "/*" command.
    In the next example, if you configure an L3 content rule with an L5 advanced-balance method, L5 stickiness will not work as expected.
    content testing
    vip address 192.168.128.131
    add service s1
    advanced-balance arrowpoint-cookie
    active
    The advanced-balance arrowpoint-cookie method causes the CSS to spoof the connection, however, the CSS still marks it as an L3 rule. Thus, the CSS does not insert the generated cookie and the rule defaults to L3 stickiness (sticky-srcip). You must configure a URL like url "/*" to promote this rule to L5, ensuring that L5 stickiness works as expected.
    Thanks in advance for any help you can give.  The thing is not down, it is just balancing strangely causing application performance issues.
    James

    Hey James,
    You will need to suspend the content rule in order to add the url statement.  This will cause a quick downtime until the content rule is activated again.  I have shown below the commands to add the statement.  Perhaps you can create your commands in a Notepad file, then paste them all in so they execute quickly to minimize your downtime:
      content MY-SITE
        vip address 10.201.130.140
        port 80
        protocol tcp
        add service MY-SERVER
        active
    CSS11503# config t
    CSS11503(config)# owner TEST
    CSS11503(config-owner[TEST])# content MY-SITE
    CSS11503(config-owner-content[TEST-MY-SITE])# url "/*"
    %% Attribute may not be modified on active rule
    CSS11503(config-owner-content[TEST-MY-SITE])# suspend
    CSS11503(config-owner-content[TEST-MY-SITE])# url "/*"
    CSS11503(config-owner-content[TEST-MY-SITE])# active
    CSS11503(config-owner-content[TEST-MY-SITE])# exit
    CSS11503(config-owner[TEST])# exit
    CSS11503(config)# exit
    CSS11503# show run
      content MY-SITE
        vip address 10.201.130.140
        add service MY-SERVER
        port 80
        protocol tcp
       url "/*"       <--------
        active
    Hope this helps,
    Sean

  • H-REAP and Client Load-Balancing

    I'm told by Cisco that H-REAP does not support client load-balancing.
    We have a situation where we want to deploy LWAPPs using H-REAP into a conference room where training would take place.
    Any suggestions on how to overcome the inevitable slowness these people are going to experience from being unevenly associated with the APs?
    We can't re-write the application so we are looking for a wireless solution.
    Anyone hear about how other organizations have dealt with this type of situation?
    I'll be glad to supply more details if I am not being clear in my description of the problem.
    Thanks in advance. All responses will be rated.
    Paul

    This is the functionality which is missing in H-REAP: Client and Network Load Balancing
    "Radio Resource Management (RRM) load-balances new clients across grouped lightweight access points reporting to each controller. This function is particularly important when many clients converge in one spot (such as a conference room or auditorium) because RRM can automatically force some subscribers to associate with nearby access points, allowing higher throughput for all clients. The controller provides a centralized view of client loads on all access points. This information can be used to influence where new clients attach to the network or to direct existing clients to new access points to improve wireless LAN performance. The result is an even distribution of capacity across an entire wireless network.
    Note: Client load balancing works only for a single controller. It is not operate in a multi-controller environment."
    I suppose if we limit the number of users that can associate with a particular AP then we will achieve some client load-balancing. Though a hard limit on the number of end-users will also lead to situations where some end users will not be allowed any access.

  • ASA and vpn load balancing

    Hi,
    I am configuring 2 ASA5540 for internet trafic inside to outside ,
    outside to inside (web,smtp) but also vpn load balancing for client to site , site to site and webvpn.
    In the doc I can configure them for internet trafic as Active/Standby or Active/active.
    for vpn : I can use vpn load balancing
    But no information if I want to use the active/passif and vpn load balancing together.
    Any thoughts on which way to go? what is the best thing to do ?
    Regards

    Hi,
    I think that you cannot use an Active/Active configuration for VPN connections as it is stated on Cisco's documentation: "Note: VPN failover is not supported on units that run in multiple context mode as VPN is not supported in multiple context. VPN failover is available only for Active/Standby Failover configurations in single context configurations" available at http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml
    Hope it helps

  • CSS on multiple subnets and separate load balancing

    Hello,
    I've a situation where I need to load balance incoming clients on subnet A to 3 real servers on subnet B - no problems there.
    But I also need to load balance different clients on subnet C to 3 other servers on subnet D and clients on subnet E to 2 servers on subnet F.
    Basically I want to use the CSS for 3 different load balancing operations.
    Rather than using 3 separate CSS11503s can I do all this with multiple VLANs on the LAN switches and 1 CSS?
    Any help appreciated
    Regards Tony

    you can have as many vlan as you want.
    So yes you can do what you want.
    Just be aware that the CSS can route as well between those vlans, so if you separation between them you may have to use ACL.
    Gilles.

  • CSS 11501 http load balancing

    Hi,
    i have configured to load balancing the http traffic to 2 servers, servers have the ip address 10.10.50.100 and 10.10.50.101 resp and the vip is 10.10.46.10
    iam not able to access the http through the vip, can some one help on this
    am i required to the nating, below is the connectivity
    User -->SW->ASA->CSS->SW->server1 & server2
    iam not able to access the server through vip
    Please help
    Thanks
    Ravi
    Ravi

    What is the default gateway defined on Servers?
    Is it CSS circuit IP or the ASA?
    How is CSS conected? Are there diff vlans connected to servers and ASA? Or CSS is connected to the Switch in one arm mode?
    You need to make sure that the return traffic from Servers should pass through the CSS.
    Syed

  • CSS arrowpoint cookie load balancing issue

    Hi guys,
    I need some advice on a load balancing issue.
    We have connections hitting the CSS via a proxy environment. As a result i see only one source ip address. I want to use arrowpoint cookies for session stickeyness. However when i enable the rule the tcp session negotiation fails. The CSS sends a TCP/RST which terminates the session.
    Here's the rule config:
    content HTTP_rule
    add service ZSTS299102
    add service ZSTS281101
    vip address <filtered>
    add service LONS299102
    add service LONS281101
    balance weightedrr
    change service ZSTS299102 weight 5
    change service ZSTS281101 weight 5
    advanced-balance arrowpoint-cookie
    protocol tcp
    port 80
    url "/*"
    active
    Any help would be much appreciated.

    Remko,
    in L3/L4 the CSS sends the SYN directly to the server.
    So when the FIN comes in, we simply pass it to the server.
    With L5 the CSS spoofs the connection and we select the server only after receiving the GET.
    If there was some delay between the GET and the FIN, the CSS would have time to establish a connection with the server and the FIN could be simply forwarded.
    Unfortunately, in this case the FIN is right after the GET with no delay.
    Gilles.

  • SSL Cetificate and F5 load balancer.

    Hi All,
    I need to created SSL certificate to enable SSL on the HTTP server can you please give me the steps for that also i need to configure SSL on the load balancer how would i do that, i will be thankful if anybody can provide me detail steps, thanks in advance.
    Thanks,
    Virendra

    Hi,
    What is the application release?
    For SSL, please see these documents.
    Note: 123718.1 - 11i: A Guide to Understanding and Implementing SSL for Oracle Applications
    Note: 300969.1 - Troubleshooting SSL with Oracle Applications 11i'
    Note: 376700.1 - Enabling SSL in Release 12
    For Load Balancing, please refer to:
    Note: 380489.1 - Using Load-Balancers with Oracle E-Business Suite Release 12
    Note: 727171.1 - Implementing Load Balancing On Oracle E-Business Suite - Documentation For Specific Load Balancer Hardware
    Note: 601694.1 - How To Check Session Persistence On BigIP F5 And Cisco Ace Load Balancer Appliances
    Note: 603325.1 - Using Cisco ACE Series Application Control Engine with Oracle E-Business Suite Release 12
    Regards,
    Hussein

  • Web dispatcher and J2EE load balancing

    I have portal DBCI on one server and DI on multiple servers. I implemented Web dispatcher in front of the DI and it does the load balancing across all DI and CI. What I want to do though is not to route any users to CI instance - ie take CI server processes out of load balancing.
    In ABAP environment you could create a logon group and not put CI in the group and users coming through the logon group do not go to the CI. I would like to do the same with Portal Java processes. In help.sap.com I found that web dispatcher uses default !J2EE group if there are no groups defined - to distribute users but I can not find anyway to define a logon group for J2EE java.
    Does anybody out there know how to do this - define a logon group and include only DI and not CI in that?

    > Raj,
    >
    > Which versions are you on J2EE? EP?
    > If you are on EP SP14 or NW01 you can do workload
    > distribution within the portal.
    >
    > James
    We are using NW 04 based EP 6 SP 16. I am looking for to use web dispatcher to distribute users on the DI servers and not distribute any users on the CI server. What can I do so that if admin user enter http://CI_server:50000/irj then they can login to the CI server if users come through webdispatcher then they are not put on the CI but go to one of the DI servers only. By default web dispatcher would send some users to CI and I don't want that.

  • Lync 2010 and ACE load balancing

    Hi there,
    Has anyone deployed [or will be deploying] Lync 2010 utilising the ACE as a hardware load balancer. The ACE is not {yet] on the Microsoft list of supported devices for this product, but I am told this because of lack of documentation from Cisco.
    The consensus from a few colleagues is that it should work as it did for OCS, which we have already deployed, so assuming that the set up and operation is similar, there shouldn't be much difference in the configurations.
    regards,
    Glenne.

    Hey Glenne,
    It seems you got that working already but I wanted to share this simple sample:
    parameter-map type http PARAMETER
      set header-maxparse-length 65535
      set content-maxparse-length 65535
    ============================================
    interface vlan 112
      ip address 10.198.16.71 255.255.255.192
      alias 10.198.16.124 255.255.255.192
      peer ip address 10.198.16.72 255.255.255.192
      mac-sticky enable
      access-group input anyone
      nat-pool 25 10.198.16.125 10.198.16.125 netmask 255.255.255.0 pat
      service-policy input ANS-MGT
      service-policy input VIPS
      no shutdown
    ============================================
    policy-map multi-match VIPS
      class LYNC_VIP
        loadbalance policy  LYNC_POLICY
        ssl-proxy server SSL_LYNC_TERMINATION
        loadbalance vip icmp-reply active
        nat dynamic 25 vlan 112
        appl-parameter http advanced-options  PARAMETER
    ============================================
    class-map match-all LYNC_VIP
      2 match virtual-address 10.198.16.125 tcp eq https
    ============================================
    ssl-proxy service SSL_LYNC_TERMINATION
      key tac-key
      cert tac-cert
      chaingroup tac-chaingroup
    ============================================
    policy-map type loadbalance first-match LYNC_POLICY
      class class-default
        sticky-serverfarm LYNC_COOKIE
    ============================================
    sticky http-cookie ACE_COOKIE LYNC_COOKIE
      timeout 30
      replicate sticky
      serverfarm LYNC_FARM
    ============================================
    serverfarm host LYNC_FARM
      rserver LYNC_SERVER1 80
        inservice
      rserver LYNC_SERVER2 80
        inservice
    ============================================
    rserver host LYNC_SERVER1
    ip address 10.198.16.93
    inservice
    rserver host LYNC_SERVER2
    ip address 10.198.16.113
    inservice
    ===========================================
    Jorge

  • New ASA5512- 5515: content filter and WAN load balancing

    Hi,
    it's possible to make the content filter with the new models of asa?
    One of our customers would like to have content filter with the possibiliy to monitor the single client activity (log).
    It' s possible also make the load balancing between 2 WAN?
    Now in HQ they have 2 WAN with WAN backup (ASA5505) and VPN to another site.
    Thanks in advance,
    Paolo.

    I saw that you can add CX feature:
    CX - Context Aware Security Feature:
    Cisco  ASA CX Context-Aware Security is a modular security service that  extends the ASA platform with next-generation capabilities. It is  available with SSD purchase for model such as 5512-X, 5515-X, 5525-X,  55545-X and 5555-X.
    Application Visibility Control (AVC):
    This  is additional feature in CX. Activation of this feature require  seperate license. This is the feature that do deep packet inspection for  Application recognition. provide context-aware firewall security.
    Web Security Essentials (WSE):
    This  is additional feature in CX. Activation of this feature require  seperate license. It deliver features like "URL Filtering" and "Global  Threat Intelligence".
    Can somebody confirm that?
    Have somebody already used and configured this features?
    Thank you,
    Paolo.

  • Wlp and apache load balancing

    Hi,
              I have been trying to understand webloigc clustering and load balancing capabilities. I have been through the edocs but it does not explain how things work, instead they only emphasis on how to configure.
              Consider the following scenario:
              --------cisco firewall/load balancer------------
              apatche1 apache2 apache3
              -------------------firewall-------------------------
              WLP1 WLP2 WLP3 WLP4
              My questions are:
              (1) how apache servers load balance incoming requests amongst the four portal instances? I understand that it will use weblogic proxy plug-in. the httpd.config also should be configured to proxy requests to WLP instances by adding the corresponding address:prot entries for each instance, using WebLogicCluster keyword.
              (2) Weblogic cluster will have nothing to do with load balancing? The only benefit I get of configuring weblogic cluster is session replication, right?
              (3) even failover is going to be handled by apache servers?
              (4) if I need to use SSL and I need to have my SSL encryption/decryption to be done on WLP instances; apache servers will only forward requests, no encryption/decryption to be done on the web tier. Is this possible?
              See in WebSphere the edge component will handle the load balancing and through it I can assign load weights for each appserver instance.
              (5) Are there any best practice to implement load balancing and failover on weblogic portal?
              I appreciate any input in this regards.

    1. yes, configure the apache plugin. put your 4 servers in the WeblogicCluster property (host:port,host:port...). The proxy will round robin requests between the servers in the cluster, although sessions are pinned to a single server. So if a request with a session (jsessionid cookie) comes in, it will read the primary server from the cookie and route it to that server.
    note that we have had trouble with keep alives ON and load balancing. we had to turn keep alives off to get load balancing working.
    2. right, the cluster allows failover by replication. apache plugin will perform the failover.
    3. the plugin will keep a dynamic server list so if a server goes down, it will update the cluster list and not route to it. it will also retry requests on another server on an error or timeout connecting. you can tweak timeout settings like WLSocketTimeoutSecs and ConnectTimeoutSecs. and keep idempotent ON which allows failover, unless you aplpication can't handle this.

  • WLS 5.1 JMS and Message load balancing

    Would I be right in thinking that WLS 5.1 offers no out of the box component that distributes incoming messages over a series of JMS Destinations? (much like a distributed destination would do in WLS 8.1?)
              Is it BEA's recommendation then that any JMS Client sending to these JMS destinations pick's up the responsibility for carrying out load balancing?
              regards
              Barry

    Would I be right in thinking that WLS 5.1 offers no          > out of the box component that distributes incoming
              > messages over a series of JMS Destinations? (much
              > like a distributed destination would do in WLS 8.1?)
              Yes.
              >
              >
              > Is it BEA's recommendation then that any JMS Client
              > sending to these JMS destinations pick's up the
              > responsibility for carrying out load balancing?
              Application dependent.
              For example, you could set up an EJB that enqueues to the local queue - where the local queue's name is inferred from the server the EJB is running on.
              Load balancing (and fail-over) would then be accomplished by invoking the EJB and depending on standard EJB features...
              >
              > regards
              > Barry

  • NW04 Portal and Cisco Load balancer

    Hi everybody,
    does anyone have a similar landscape as I have?
    Reverse Proxy - Cisco Content Switch Module for Load Balancing - two NW04 Portal Servers.
    How did you configure the stickyness / Load balancing mechanism on the load balancer in order to get it running?
    Cheers
    Jochen

    Hi,
    Web AS Java issues a cookie called saplb.
    You can check its value by connecting to the portal and then launching the command
    "javascript:alert(document.cookie)"
    within the browser. You will get a cookie value like
    saplb_*=(J2EE6202500)6202551          
    The value in brackets determines the Instance; the second number equals the actual ClusterID (can also be found in the VisualAdmin. Usually 50 indicates the 1st server node, 51 the second one etc.
    The saplb_*-cookie can be checked by the cisco see Cisco-Link above. Just configure the Cisco to be sticky on the  instance number (value in the first brackets, in the example 6202500).
    Several Customers do it like this, and actually the SAP Webdispatcher is also using this cookie to determine the instance to distribute the request to.
    Good luck Bernhard

Maybe you are looking for