Enterprise Deployment Guide/BigIP Load Balancer Question

In the Oracle Application Server Enterprise Deployment Guide, B13998-03, in appendix A, section A.2, it refers to using F5 software version 4.5, with a BigIP Application Switch. 4.5 seems a bit old. Has anyone used version 9.0.4 successfully?

You have to remember that the 9.0.4 release isn't that new either. However, you can basically use every load balancer out there if they support 1) Sticky/Persistent sessions and 2) Nat client.
You may also want to check this link:
http://www.oracle.com/technology/products/ias/hi_av/Tested_LBR_FW_SSLAccel.html
Regards,
Martin

Similar Messages

Forms Services availability checking for BIGIP Load Balancer

We are load balancing across a number of 10.1.2.2 Forms servers using a BIGIP load balancer. Currently our load balancing is done based on which server has the "least connections" to the BIGIP. So far we have been using the following test URL to allow BIGIP to check the availability of the Forms Services on each server.
http://server:port/forms/frmservlet?ifcmd=status
This works well however it only checks through to the HTTP level within Forms Services. We encountered a problem when the Forms Services failed to work on a particular server however the above URL showed that everything was OK. The effect of this was that all new users attempting to login were directed to the failed server as this server had the "least number of connections".
After raising an SR with Oracle they advised that the forking of runtime processes had probably failed and this was not detectable by the load balancer with the above URL. So they have recommended a number of options for checking the status of the Forms Services. These are:
a) http://server:port/forms/frmservlet
This loads the default Form and therefore by definition tests the forking of runtime processes. However BIGIP is unable to automatically process the information to distinguish whether the service is up or down. Oracle recommended that if using this method we would need to customise BIGIP to handle the various FRM-xxxx error codes.
b) http://server:port/forms/frmservlet?userid=scott/tiger@YOURDB&form=yourtestform.
fmx
Even more thorough would be to actual log on to the database using a test form as above.
My question is does anyone out there have experience in checking Forms Services availability using these last two methods as I'm not sure how to customize the load balancer so that it can handle the output of these URLs. Also when using the original URL is it normal to load balance using a "least connections" method or do people out there use a different algorithm.
Thanks for any help/advise that you can give.
Regards,
Philippe

Well SR followed up and it looks like the only course of action is to use the standard HTTP check: http://server:port/forms/frmservlet?ifcmd=status ...
... unless that is you want to do some serious customisation. Oracle don't support any other form of checking.
I'm guessing from the lack of responses to this thread that this hasn't been an issue for anybody else ... ???
Any thoughts/suggestions really welcome as we go into production in 4 weeks.
a) What do people recommend for load balancing Forms ... least connection, round robin ... ?
b) Do people use http://server:port/forms/frmservlet?ifcmd=status or have some of you used something else?
Thanks,
Philippe

Enterprise Deployment Guide and a Signed Enrollment Response

Im trying to follow the enrollment process in Enterprise Deployment Guide.
The device opens my url.
I send a xml containing the device information request.
The response i get is signed "using the device’s built-in identity (Apple-issued certificate), and sends it back to the profile distribution service using HTTP Post.
My question is why is it signed, and how do i verify the signature. And how do i read the relevant data from the response.
When i read it now, it it first some binary data, then the xml response and then some more binary data.
How do i process this response.
Thanks

It's a signed message in the PKCS#7 format. PKCS#7 is a standard (detailed in RFC 2315 http://www.faqs.org/rfcs/rfc2315.html ) for signed and encrypted messages. CMS (Cryptographic Message Syntax) is the name of the current standard based on PKCS#7.
There are many ways to extract the data and verify the signature of such a message. The easiest is probably to use OpenSSL (command-line or library). Several libraries in various languages can handle that too.

SO Load Balancing Question

Hi all,
I have a service object (SO1) which has been set to Load Balancing.
This service object has an attribute which serves as a number allocator
(NA1).
This NA1 provides a unique number across the whole application for each of
the record that require to store into DB.
The problem is, will the NA1 get replicated if the SO1 is replicated?
If yes, will NA1 crash?
Regards,
Martin Chan
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Senior Analyst/Programmer
Dept of Education and Training
Mobile : 0413-996-116
Email: martin.chandet.nsw.edu.au
Tel: 02-9942-9685

Hi Serge,
Could you prefix it with the PID of the load balanced process ?No I can't. At least not at the moment.
When a service object is replicated, it is automatically replicated into adifferent partition...
Thanks.
An advice, make the NA1 shared. So if you get to do multithreaded accessto
it, you won't screw up things.I am thinking it may be better off to create it as a service object on it's
own.
How is the number returned by the NA1 generated ?It gets generated by Forte's code.
... Try to make it so that the
load balanced partitions don't need to access the database more than onein
5 min. to get a new Seed Key. This would not need to PID.Thanks for your advise.
Regards
Martin Chan
-----Original Message-----
From: Serge Blais [mailto:Serge.BlaisSun.com]
Sent: Tuesday, 3 April 2001 14:17
To: Chan, Martin
Subject: RE: (forte-users) SO Load Balancing Question
Your right, they can generate the same number. How much control do you have
over the ID being generated? Could you prefix it with the PID of the load
balanced process ?
Just a note: When a service object is replicated, it is automatically
replicated into a different partition, possibly on the same machine or on a
different one.
An advice, make the NA1 shared. So if you get to do multithreaded access to
it, you won't screw up things.
How is the number returned by the NA1 generated ? If NA1 is using a stored
procedure, or something like:
Start TRX
read number
newnumber = number+5000
write back newnumber
End Trx
Something like will be very safe. The Database Index Table is taking care
of the critical section. Then you can be sure that each replicate can be
independent (not hit into each other) for 5000 iterations. Depending on the
frequency, you may want to up this number or lower this number. Too high it
would make the key very high very soon with wholes in the sequence. Too low
and you would have hit between the replicates. Try to make it so that the
load balanced partitions don't need to access the database more than one in
5 min. to get a new Seed Key. This would not need to PID.
Serge
At 01:59 PM 4/3/2001 +1000, you wrote:
Hi Serge,
The number return by the NA1 is used as a primary key for each of therecord
that stores in the DB.
The Number Allocator NA1 is required to access to DB to update an ID table
which carry the next available sequence number. NA1 will only update this
table for every 5000 records.
For example, the initial value of the sequence is: 1
The next update will change the value to 5001, next will be 10001 and soon.
>
The properties of this NA1 class at runtime
Shared - Disallowed
Distributed - Disallowed
Transactional - Is Default
Monitored - Disallowed
Unfortunately, this attribute is not a handle but is instantiated by theSO1
itself.
I have been thinking, if SO1 is replicated within the same partition, and
each replicate will carry its own NA1. NA1 and the replicate of NA1 may
return a same number if their initial values of the sequence are the same.
Correct?
Regards
Martin Chan
-----Original Message-----
From: Serge Blais [mailto:Serge.BlaisSun.com]
Sent: Tuesday, 3 April 2001 13:11
To: Chan, Martin; forte-userslists.xpedior.com
Subject: Re: (forte-users) SO Load Balancing Question
Let's see if I understand right.
You have a service object that keep a handle to an object that either keep
state information, or that generate state information. Now the thing to
figure out is which is it. Let's assume that NA1 is a number generator,
that does not need to be synchronized or that doesn't need to access any
external resource. It would still work, depending on the algorythm you are
using.
Will they share the same NA1? It depends on the nature of NA1, but for sure
NA1 would have to be an anchored object. An if multiple partitions would
share the same object "only" for key generation, you would bring down your
performance on key generation or key update (by adding one inter-process
call).
In short:
1. Many scenarios can happen, you need to be clearer on your description.
2. If you are sharing an object by load balanced partitions, this greatly
reduce the gain of load balancing the partition.
3. If NA1 is keeping state, any access to it would need to be controlled
"shared".
Have fun now...
Serge
At 12:30 PM 4/3/2001 +1000, Chan, Martin wrote:
Hi all,
I have a service object (SO1) which has been set to Load Balancing.
This service object has an attribute which serves as a number allocator
(NA1).
This NA1 provides a unique number across the whole application for each
of
the record that require to store into DB.
The problem is, will the NA1 get replicated if the SO1 is replicated?
If yes, will NA1 crash?
Regards,
Martin Chan
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Senior Analyst/Programmer
Dept of Education and Training
Mobile : 0413-996-116
Email: martin.chandet.nsw.edu.au
Tel: 02-9942-9685
For the archives, go to: http://lists.xpedior.com/forte-users and use
the login: forte and the password: archive. To unsubscribe, send in a new
email the word: 'Unsubscribe' to: forte-users-requestlists.xpedior.comSerge Blais
Professional Services Engineer
iPlanet Expertise Center
Sun Professional Services
Cell : (514) 234-4110
Serge.BlaisSun.comSerge Blais
Professional Services Engineer
iPlanet Expertise Center
Sun Professional Services
Cell : (514) 234-4110
Serge.BlaisSun.com

Enterprise Deployment Guide for Oracle Identity Management 11g

Hi,
I am looking for Enterprise Deployment Guide for Oracle Identity Management 11g for latest verion 11.1.1.5
Please help
Thanks

Thanks for the reply.
Actually I am looking for Enterprise Deployment Guide for Oracle Identity Management for 11.1.15(similar like E12035-06).I am not able to find same in the link provided.
Thanks

Enterprise Deployment Guide

11.1.1.5 docs (http://download.oracle.com/docs/cd/E21764_01/im.htm) do not have a Enterprise Deployment Guide (EDG)
11.1.1.4 docs (http://download.oracle.com/docs/cd/E17904_01/im.htm) have the EDG.
Why was the EDG removed from 11.1.1.5 docs? We know there were some errors in the 11.1.1.4 EDG but overall it was a useful reference document.
An updated version with OES in the deployment reference topologies section (http://download.oracle.com/docs/cd/E17904_01/core.1111/e12035/whatis_im.htm#CHDJDIEH) would be very helpful. Thanks.

It's a signed message in the PKCS#7 format. PKCS#7 is a standard (detailed in RFC 2315 http://www.faqs.org/rfcs/rfc2315.html ) for signed and encrypted messages. CMS (Cryptographic Message Syntax) is the name of the current standard based on PKCS#7.
There are many ways to extract the data and verify the signature of such a message. The easiest is probably to use OpenSSL (command-line or library). Several libraries in various languages can handle that too.

Load balance question on services deployed in two slaves

Case:
One master: 192.172.1.1
Two slaves: 192.172.2.1/192.172.2.2
There is service A deployed in slave1(192.172.2.1) and slave2(192.172.2.2). Service A will call Service B, which is also deployed in slave1 and slave2.
Condition:
If I tmshutdown -s service_A in slave1, there is a service_A alive only in slave2.
Question:
Now there is requests to service A in slave2. Whether service B in slave1 will be called by service A in slave2 or not?
My experiment proves it true. However, in my mind, the request to service A in slave2 will only call service B in slave2 not slave1. Is that wrong?
Thanks for your kindly reply.

Bill,
There is no unit for LOAD and NETLOAD other than to compare to other values of LOAD and NETLOAD. The objective is to send a request to the server with the lowest total load. If there is an idle local server offering the service requested then a local server will always be chosen.
Tuxedo keeps track of the total load sent from this machine to other machines. Every sanityscan interval the load balancing statistics are reset to 0.
Assume that service B has a LOAD of 50 on both machine 1 and machine 2 and that NETLOAD is 80. There is only 1 server offering this service on each machine, it is 1:00:00, queues are empty, the sanity scan has just run, and SCANUNIT*SANITYSCAN=120. We are on machine1. Service B takes 5 seconds to complete on both machine 1 and machine 2.
1:00:00 [M1 total work = 0, M2 total work = 0]
1:00:01 request arrives, route to M2 due to idle local server preference [M1 total work = 0, M2 total work = 50]
1:00:02 request arrives, route to M2 since 0+50+80 > 50+50+0 [M1 total work = 0, M2 total work = 100]
1:00:03 request arrives, route to M1 since 0+50+80 < 100+50+0 [M2 total work = 130, M2 total work = 100]
1:00:04 request arrives, route to M2 since 130+50+80 > 100+50+0 [M2 total work = 130, M2 total work = 150]
1:00:05 request arrives, route to M2 since 130+50+80 > 150+50+0 [M2 total work = 130, M2 total work = 200]
You're correct that although NETLOAD is set the remote service can sometimes still be called.
Either LOAD or NETLOAD could have a greater effect depending on how big LOAD is compared to NETLOAD. In the example above approximately 13 requests would be sent to the local machine for every 5 requests setnt to the remote machine. If there are frequently idle local servers on the local machine then a greater percentage of requests will be sent to the local machine, and if there is always an idle local server then all requests will be sent to the local machine. The periodic reset of load balancing statistics can also affect how many requests are sent to each machine.
Regards,
Ed

Office Web App Load balancing Question

I am going to install office web app in load balanced farm behing f5. There are few questions i want to ask:
Do i first put servers in load balancer and start installing office web app or after installation of office web app in one server put that in load balancer and add another one or put both in load balancer and start installing.
While i tried without putting servers in load balancer with offload ssl parameter , when i tried to join second server in the farm it gave me error destination unreachable. Is it because with offload ssl parameter it is looking for load balancer or something
else? I checked port 809 from the servers and also verified the user was local admin in both machines.
Any insight will be helpful.
Adit

Pls refer below link for configuration of NLB for OWA servers:
http://blogs.technet.com/b/meamcs/archive/2013/03/27/office-web-apps-2013-multi-servers-nlb-installation-and-deployment-for-sharepoint-2013-step-by-step-guide.aspx
Please ensure that you mark a question as Answered once you receive a satisfactory response.

Clustering problems and load balancing question

          I am using Weblogic 6.1. My Windows NT environment consists of 10 web client-simulator
          machines, 2 App. Server machines and one database server machine. I have defined
          one cluster on each app. server. Each cluster is running 3 Weblogic instances, or
          so it should be when I fix my problems!
          My questions/problems are the following:
          1. Can I use a software dispatcher to perform workload balancing between the 2 weblogic
          clusters? That is, the client-simulator machines send the requests to the software
          dispatcher which performs workload balancing between the 2 Weblogic clusters. The
          clusters perform round-robin amongst all instances. Note that the documentation only
          talks about Hardware Balancing.
          2. I am having problems with my multicast IP addresses. For instance, on one App.
          Server machine, I am using the multicast IP address: 239.0.0.1 for MyCluster. When
          I start the Admin Server, I get a JDBC error: "... multicast socket error: Request
          Time Out". I have used the utils.MulticastTest utility which shows the packets not
          being received:
          I (S1) sent message num 1
          I (S1) sent message num 2
          I (S1) sent message num 3
          I (S1) sent message num 4
          What am I doing wrong?
          3. Re. the cluster configuration:
          NOTE: I have executed my workload using 2 independent App. Server machines with a
          software dispatcher - no clustering. Each App. Server used a jdbc connection pool
          of 84 database connections. The db connections happened to become my bottleneck.
          When I tried to increase the number of connections in the jdbc pool, throughput decreased
          dramatically. Thus, I decided to add a cluster of Weblogic instances to each one
          of my 8 x 900Mhz machines in order to scale up. Unfortunatly, adding clusters have
          not been that simple a task - probably because I am totally new to the Web Application
          Server world!
          Here is what I've got so far:
          I have obtained 3 static IP addresses for the 3 instances of Weblogic instances that
          I wish to run within the cluster. All servers in the cluster use port number 80.
          There is a corresponding DNS entry for each IP address. My base assumption is that
          one of these instances will double up as the Administration Server... Is it true,
          or do I need to define a separate Admin server if I wish to run 3 Weblogic instances
          (each with a connection pool of 84 database connections for a total of 252 database
          connections)?
          Do I need to re-deploy my applications for the cluster? And if so, would this explain
          why I am having problem starting my Admin Server?
          I think this is it for now. Any help will be greatly appreciated!
          Thanks in advance,
          Guylaine.


          Guylaine Cantin wrote:
          > I am using Weblogic 6.1. My Windows NT environment consists of 10 web client-simulator
          > machines, 2 App. Server machines and one database server machine. I have defined
          > one cluster on each app. server. Each cluster is running 3 Weblogic instances, or
          > so it should be when I fix my problems!
          >
          > My questions/problems are the following:
          >
          > 1. Can I use a software dispatcher to perform workload balancing between the 2 weblogic
          > clusters? That is, the client-simulator machines send the requests to the software
          > dispatcher which performs workload balancing between the 2 Weblogic clusters. The
          > clusters perform round-robin amongst all instances. Note that the documentation only
          > talks about Hardware Balancing.
          >
          We also support software load balancers (for e.g. resonate)
          The software dispatcher should be intelligent enough to decode the
          cookie and route the request to the appropriate servers. This is
          necessary to maintain sticky load balancing.
          > 2. I am having problems with my multicast IP addresses. For instance, on one App.
          > Server machine, I am using the multicast IP address: 239.0.0.1 for MyCluster. When
          > I start the Admin Server, I get a JDBC error: "... multicast socket error: Request
          > Time Out". I have used the utils.MulticastTest utility which shows the packets not
          > being received:
          >
          > I (S1) sent message num 1
          > I (S1) sent message num 2
          > I (S1) sent message num 3
          > I (S1) sent message num 4
          > ...
          >
          > What am I doing wrong?
          >
          You should run the above utility from multiple windows and see if each
          of them being recognized or not.
          i.e. java utils.MulticastTest -N S1 -A 239.0.0.1
          java utils.MulticastTest -N S1 -A 239.0.0.1
          > 3. Re. the cluster configuration:
          >
          > NOTE: I have executed my workload using 2 independent App. Server machines with a
          > software dispatcher - no clustering. Each App. Server used a jdbc connection pool
          > of 84 database connections. The db connections happened to become my bottleneck.
          > When I tried to increase the number of connections in the jdbc pool, throughput decreased
          > dramatically. Thus, I decided to add a cluster of Weblogic instances to each one
          > of my 8 x 900Mhz machines in order to scale up. Unfortunatly, adding clusters have
          > not been that simple a task - probably because I am totally new to the Web Application
          > Server world!
          >
          You have to stress test your application several times and set
          maxCapacity of the conn pool accordingly.
          > Here is what I've got so far:
          >
          > I have obtained 3 static IP addresses for the 3 instances of Weblogic instances that
          > I wish to run within the cluster. All servers in the cluster use port number 80.
          > There is a corresponding DNS entry for each IP address. My base assumption is that
          > one of these instances will double up as the Administration Server... Is it true,
          > or do I need to define a separate Admin server if I wish to run 3 Weblogic instances
          > (each with a connection pool of 84 database connections for a total of 252 database
          > connections)?
          BEA recommends to use Admin server for administrative tasks only
          like configuring new deployments, jdbc conn pools, adding users etc..
          It's not a good idea to have admin server part of cluster.
          >
          > Do I need to re-deploy my applications for the cluster? And if so, would this explain
          > why I am having problem starting my Admin Server?
          >
          You have to target all your apps to the Cluster.
          > I think this is it for now. Any help will be greatly appreciated!
          >
          > Thanks in advance,
          >
          > Guylaine.
          >

Connection Load Balancing question

Hi All,
this is from oracle net8 Administrator's Guide (between double quotes):
"Connection load balancing improves connection performance by balancing the number of active connections among multiple dispatchers. In an Oracle Parallel Server environment, connection load balancing also has the capability to balance the number of active connections among multiple instances. "
My question is, from that statement above, does it mean that the connection load balancing can only be useful on a OPS with MTS instances?
and second is , does it make sense (or can it be done) to implement it on single instance of MTS?
TIA,
Andi

Hi Andi,
CLB is only used in cluster configuration! In single node instance there is no advantage for ovbious reason of putting one more layer.
you are right...use only with OPS and preferably with MTS.
Best,
G

Load Balancing question

My company is in the process of building a small scale network architecture strictly for testing purposes. We have a DMZ area that contains 2 load balancers and 1 web server. The web server is a SunFire 280 and has two gig e nics. They want to cable one nic to one load balancer and one nic to the other. Since this is only one box we have to put the nics on separate subnets. The question is, can I configure the load balancers in a failover situation of an active active situation with one load balancer on one vlan and another load balancer on a separate vlan.

I did not able to understand why you want to give ip to two NICs from different subnets.
There is NO any requirement, like that. If you have your own requirement can you explain me that?
Ashman

CSS load balancing questions

I hope that someone can help with 2 simple (i think) CSS questions.
1. When configured properly for load balancing, should the CSS round-robin between servers or will it continue to use only one server until triggered by some event or parameter?
2. If 1 of 2 load balanced servers fails, how does load balancing proceed? Will it continue to try to load balance between the servers or will it give up on the failed server unitil some event or timeout occurs?
Thanks in advance,
Eliot

Hi Eliot,
The CSS can be configured to perform load balancing in a variety of different ways. Least connections, round robin, ACA etc. Each new connection through the CSS will be round robined over each of the servers in your server group.
If a server fails then the CSS will know it has failed through the use of keepalives (based on TCP connection, ICMP etc) and no longer send requests through to that server. Traffic associated with a previous connection to the failed server will be sent to on of the surviving servers. It is then up to the behavior of the application as to if the user experiences any disruption.
Hope this helps
Brett

JMS cluster and distributed destination load balancing question

          Hi All
          Scenario: 2 WL 7 servers in cluster with distributed queue in both of them and
          both the servers have an MDB deployed for the queue. Now if a producer in server
          #1 writes to the Queue - he will write to the local queue - right?
          In that case will the local MDB pick up the message or that can be load balanced?
          OR the write it self can be load balanced?
          I really want either the write or the read to be load balanced - but I suspect
          server affinity will play a mess here. Can anyone pls clarify.
          thanks
          Anamitra


          Hi All
          Scenario: 2 WL 7 servers in cluster with distributed queue in both of them and
          both the servers have an MDB deployed for the queue. Now if a producer in server
          #1 writes to the Queue - he will write to the local queue - right?
          In that case will the local MDB pick up the message or that can be load balanced?
          OR the write it self can be load balanced?
          I really want either the write or the read to be load balanced - but I suspect
          server affinity will play a mess here. Can anyone pls clarify.
          thanks
          Anamitra

VO's and load balancing question

Hi guys,
As anyone got any experience in load balancing a web application using ADF BC's (EO's and VO's) and any problems that I face?
I am researching possible problems that will pop up while deploying my application. I want to have my app running on two servers and put some form of load balancer (hardware or software) in front of them. One issue I can think of is that when someone commits something on one server the VO cache on the other server will not get updated. This is a problem if there is a user on each server and they are both accessing the same row.
Regards
Barry
JDev: 10.1.3.2
JHS: 10.1.2.26

Hi,
this is what you want to read :
http://download-uk.oracle.com/docs/html/B25947_01/bcstatemgmt.htm#sm0318
You can handle state across instance of an AM within BC using a database
Frank

IPlanet sticky load balancing question

We have two iPlanet Application Servers v6.0 sp3 and two iPlanet
Enterprise Web servers v4.1. All machines are on the same domain name.
All machines point to the same LDAP server. The application has been
installed on both App servers. Clustering has been configured in the
App server Admin tool to be based upon system load. For non-sticky load
balancing, all works fine, and session information is carried over
properly. However, for sticky load balancing, hits going into either of
the Web servers do not always go back to the App server that first
started the session.
The online iPlanet documentation says it can be done, but we have found
differently. Has anybody else gotten this to work?
Thank you,
David Shade

Hi David,
With sticky load balancing enabled, when you execute the application first
time it will go to any kjs depending on your load banancing criteria which
you set (Round robin or server responce or whatever), this applies to only
for the first time when you send request, afterwords it will be executed in
that perticular KJS process only till that KJS is alive, whatever may be
your LoadB creteria.
You please kill that kjs and see, you will be able to see the failover.
Feel free to mail me for any further information.
Sanjeev,
Developer Support Team iAS-India.
David Shade wrote:
We have two iPlanet Application Servers v6.0 sp3 and two iPlanet
Enterprise Web servers v4.1. All machines are on the same domain name.
All machines point to the same LDAP server. The application has been
installed on both App servers. Clustering has been configured in the
App server Admin tool to be based upon system load. For non-sticky load
balancing, all works fine, and session information is carried over
properly. However, for sticky load balancing, hits going into either of
the Web servers do not always go back to the App server that first
started the session.
The online iPlanet documentation says it can be done, but we have found
differently. Has anybody else gotten this to work?
Thank you,
David Shade--
I have never learn not to learn...
------------------------------------------------------------------

Enterprise Deployment Guide/BigIP Load Balancer Question

Similar Messages

Maybe you are looking for