Flex Load Balancer Environment URL Redirect

Hi,
Our Flex application is running on a load balancer environment, where SSL is terminated. From the browser to load balancer, the connection is using https and from the load balancer to the server, it is http. What we are noticing is, when the https url is invoked on the browser, it immediately redirects the url from https to http. This breaks the connection and an error message unable to connect is shown on the browser. We traced the network traffic using the Live HTTP headers, it showed the same redirect in the url with the message HTTP/1.1 302 Moved Temporarily.
Please let me know, how i can resolve this issue. Also let me know, if you need any other information from me.
Thanks for your help.
Murugan.

I'm kind of a newbie on the netscaler. What od you mean by stick? We keep persistence by a cookie insert.
I did find out what the issue was, our E1 installation sits on port 8086, so from the netscaler we would reroute the port 80 calls from jdesso.xxx.local to the E1 server, but for some reason when the handoff came back from OID to E1 the load balancer somehow realized the app server was running from port 8086 and it mixed the whole process up (instead of keeping all traffic to and from the client on port 80). To workaround this I created a new virtual server to listen on port 8086, then I redirected the port 80 calls to new 8086 VS, and then from the 8086VS to the app server and it worked correctly.

Similar Messages

Issue in setting flex app in load balanced environment using SSL

I have developed the dashboard in my application using flex 3.0. For this I have used JSP wrapper around the flex application. My application runs on JBoss application server. for communication between flex app and my application i am using LCDS. HTTPService component is being used to receive data from the server. Channel definitions are given in service-config.xml for amf and http channels and for both secure secure and not secure mode. In my proxy-config.xml i have defined Channels and destinations.
services-config.xml
<channel-definition id="my-amf" class="mx.messaging.channels.AMFChannel">
    <endpoint url="http://{server.name}:{server.port}/{context.root}/messagebroker/amf" class="flex.messaging.endpoints.AMFEndpoint"/>
    <properties>
          <polling-enabled>false</polling-enabled>
    </properties>
</channel-definition>
<channel-definition id="my-secure-amf" class="mx.messaging.channels.SecureAMFChannel">
    <endpoint url="https://{server.name}:{server.port}/{context.root}/messagebroker/amfsecure" class="flex.messaging.endpoints.SecureAMFEndpoint"/>
    <properties>
          <add-no-cache-headers>false</add-no-cache-headers>
    </properties>
</channel-definition>
<channel-definition id="my-http" class="mx.messaging.channels.HTTPChannel">
    <endpoint url="http://{server.name}:{server.port}/{context.root}/messagebroker/http" class="flex.messaging.endpoints.HTTPEndpoint"/>
</channel-definition>
<channel-definition id="my-secure-http" class="mx.messaging.channels.SecureHTTPChannel">
    <endpoint url="https://{server.name}:{server.port}/{context.root}/messagebroker/httpsecure" class="flex.messaging.endpoints.SecureHTTPEndpoint"/>
    <properties>
        <add-no-cache-headers>false</add-no-cache-headers>
    </properties>
</channel-definition>
proxy-config.xml
<default-channels>
    <channel ref="my-http"/>
    <channel ref="my-amf"/>
    <channel ref="my-secure-http"/>
    <channel ref="my-secure-amf"/>
</default-channels>
<destination id="dashboardService">
    <properties>
<url>/kr/servlet/DashboardServlet</url>
    </properties>
</destination>
<destination id="dashboardJSPService">
    <properties>
<url>/kr/krportal/dashboardJSPService.jsf</url>
    </properties>
</destination>
In my development environment both secure and non secure mode were working fine. Now when I have deployed it behind the load balancer(which accepts secure requests only and if the request is not secure it redirects it to secure url) there is no response from the message broker servlet. One thing more I have observed is when the environment is non load balanced there are request like 'http://{server.name}:{server.port}/{context.root}/messagebroker/http'. and these requests are post request. But in load balanced environment with ssl the request is again like 'http://{server.name}:{server.port}/{context.root}/messagebroker/http' which is a post request and it is redirected to 'https://{server.name}:{server.port}/{context.root}/messagebroker/http' which is a get request. The content returned by this get request is null.
Looking for some comments
Thanks
Abhishek Gupta

if the load balancing environment is already well configured, thes rest is very easy, there is no difference between a configuration of load balancing environment and a simple one, for you that is transparent, except the manual deployment and manual copying
of files in the directory 15

Setting up SharePoint 2013 Apps in a load balanced environment

All,
Looking for some articles on how to configure SharePoint 2013 Apps in a load balanced farm (2 WFEs, 2 APP servers, 2 SQL DBs).
Thank you!

if the load balancing environment is already well configured, thes rest is very easy, there is no difference between a configuration of load balancing environment and a simple one, for you that is transparent, except the manual deployment and manual copying
of files in the directory 15

Load Balancer virtual URL not working with analytics page

We have configured Load Balancer virtual URL. But it is working for only iAS. We have Oracle Application Server 10.1.3
Our OBIEE is 10.1.3.4.1
Here is the virtual configuration
Listen 7877
+<VirtualHost default:7877>+
+# General setup for the virtual host+
DocumentRoot "/apps_base/obiee/ias/Apache/Apache/htdocs"
ServerName uat.bi.company.com
ServerAdmin [email protected]
ErrorLog "|/apps_base/obiee/ias/Apache/Apache/bin/rotatelogs /apps_base/obiee/ias/Apache/Apache/logs/error_log 43200"
TransferLog "|/apps_base/obiee/ias/Apache/Apache/bin/rotatelogs /apps_base/obiee/ias/Apache/Apache/logs/access_log 43200"
Port 443
+# SSL Engine Switch:+
+# Enable/Disable SSL for this virtual host.+
SSLEngine on
https://uat.bi.company.com -> WORKS great
https://uat.bi.company.com/em -> WORKS great
https://uat.bi.company.com/analytics -> page cannot be displayed
We have SSO configured. So i do get the SSO login page, but clicking on submit button, I get page cannot be displayed.
Everything works if I disable the load balancer virtual.
THe Load Balancer is configured to listen on 443 and then routes to 7877 on the physical server coorldas04.company.com
Can you assist in this one ??

Is this still a problem?

CSS load balancing issue: url isn't accessible even though services are up

service Server1:80
ip address 10.10.10.34
protocol tcp
port 80
keepalive type http
keepalive uri "/test.asp"
active
service Server2:80
protocol tcp
port 80
keepalive type http
keepalive uri "/test.asp"
ip address 10.10.10.35
active
owner Ow1
content LBR1:80
    vip address 192.168.1.159
    port 80
    protocol tcp
    url "/*"
    balance weightedrr
    add service Server1:80
    add service Server2:80
    advanced-balance sticky-srcip
    sticky-inact-timeout 21
    flow-timeout-multiplier 8
    active
service Server1:80
ip address 10.10.10.34
protocol tcp
port 80
keepalive type http
keepalive uri "/test.asp"
active
service Server2:80
protocol tcp
port 80
keepalive type http
keepalive uri "/test.asp"
ip address 10.10.10.35
active
owner OW1
content LBR2:80
    vip address 192.168.1.98
    protocol tcp
    port 80
    url "/*"
    balance weightedrr
    add service Server1:80
    add service Server2:80
    advanced-balance sticky-srcip
    sticky-inact-timeout 21
    flow-timeout-multiplier 8
    active
All services are alive all the time and both contexts are alive all the time.
when user tries to access LBR2:80's URL it works all the time. but when user tries to access LBR1:80's url then it works sometimes and some times it doesn't work.
could you advise what the issue could be?

When the SYN comes in the CSS will first check for the srcip in the sticky database and if it finds a match will forward to the stuck server. If the source ip is not in the sticky database the request will be load balanced using weightedrr and a server selected. That sticky server will then be added to the sticky database.
If the sticky-srcip is used between 2 content rule, it will use separate sticky table.
You may need to take packet capture to understand what is really failing along with
a following outputs :
sh flow
sh rule Ow1 LBR1:80 ser
regards
Andrew

Load balance multiple URLs on single VIP

Hello,
I have a fairly typical load balance configuration on a pair of ACE appliances running (A3)2.5 and now I need to load balance multiple URIs to these same servers on port 80 to the one VIP. Can someone direct me to a doc that shows a good example of this, or explain it below?
Thanks,
Dave
serverfarm host application
rserver webserver1 80
probe server-80-PROBE
inservice
rserver webserver2 80
probe server-80-PROBE
inservice
sticky ip-netmask 255.255.255.255 address source application-80-STICKY
replicate sticky
serverfarm application
class-map match-all application-80-CLASS
2 match virtual-address 1.1.1.1.1 tcp eq www
policy-map type loadbalance first-match application-80-POLICY
class class-default
sticky-serverfarm application-80-STICKY
insert-http X-Forwarded-For header-value "%is"
class application-80-CLASS
loadbalance vip inservice
loadbalance policy application-80-POLICY
loadbalance vip icmp-reply
nat dynamic 22 vlan 424
appl-parameter http advanced-options CASE_PARAM

Sean,
Maybe a little confused.
I have built the new serverfarm, policy-map and class-map in bold, I am just not sure how it gets referenced. Do I add it to the multi-match class statement? My complete config for this particular app is below.
Thanks,
Dave
serverfarm host application-80
rserver server1 80
    probe server-80-PROBE
    inservice
rserver server2 80
    probe server-80-PROBE
    inservice
serverfarm host application-L7
rserve rserver1 80
    probe server-80-PROBE
    inservice
rserver server2 80
    probe server-80-PROBE
    inservice
class-map match-all application-80-CLASS
2 match virtual-address 1.1.1.1 tcp eq www
class-map type http loadbalance match-any application-L7-CLASS
3 match http url /uri1/
4 match http url /uri2/uri2
5 match http url /uri2/uri3.htm
policy-map type loadbalance first-match application-80-POLICY
class class-default
    sticky-serverfarm application-80-STICKY
    insert-http X-Forwarded-For header-value "%is"
policy-map type loadbalance first-match application-L7-POLICY
class application-L7-CLASS
    serverfarm application-L7
policy-map multi-match POLICY-424
class application-80-CLASS
    loadbalance vip inservice
    loadbalance policy application-80-POLICY
    loadbalance vip icmp-reply
nat dynamic 22 vlan 424
    appl-parameter http advanced-options CASE_PARAM

URL Load balance

Hi,
I have CSS in single arm deployment model. I want to do the load balance following URL.
http://irs.abc.com/irs.htm
I have configure the following steps
service IRC_1
ip address 192.168.17.12
keepalive type tcp
keepalive port 80
active
service IRC_2
ip address 192.168.17.14
keepalive type tcp
keepalive port 80
service IRC_DR
ip address 192.168.10.37
keepalive type tcp
keepalive port 80
group TEST_IRC
add destination service IRC_1
add destination service IRC_2
add destination service IRC_DR
vip address 192.168.200.58
active
But when I m configure the content rule it is showing following error
content IR_URL
    protocol tcp
    port 80
url "http://irs.abc.com/*"
%% Unsupported or invalid content rule URI
Please let me know how to do this. Also is there anything further to configure to achive the load balancing.
Thanks in advance.

Hi,
I have tried with 9000 but no luck. Even the web page is coming up with error. Below is the configuration
service IRC_1
ip address 192.168.17.12
keepalive type tcp
keepalive port 80
port 9000
active
service IRC_2
ip address 192.168.17.14
keepalive type tcp
keepalive port 80
port 9000
service IRC_DR
ip address 192.168.10.37
keepalive type tcp
keepalive port 80
port 9000
CSS01# show service summary
Service Name                     State     Conn Weight Avg   State
                                                         Load Transitions
ITSMWEB_1_HTTPS                  Alive         0      1     2            0
ITSMWEB_2_HTTPS                  Alive         0      1     2            0
ORALCE_PRD1                      Alive         3      1     2            0
ORALCE_DR1                       Down          0      1   255            0
ORALCE_PRD2                      Down          0      1   255            0
IRC_1                            Alive         0      1     2            4
IRC_2                            Suspended     0      1   255            2
IRC_DR                           Suspended     0      1   255            2
end of buffer
CSS01# show rule-summary
VIP Address     Port Prot Url                CntRuleName    OwnerName Stat Idx
192.168.200.95 80    TCP                     TP        GIT Act 5
192.168.200.58 80    TCP /*                 IRC       GIT Act 9
192.168.200.65 Any   Any                     EFAX      GIT Act 2
192.168.205.28 8002 TCP                     ORACLE_DEV GIT Act 6
192.168.200.106 30005 TCP                     ITSMAPP   GIT Act 3
192.168.200.105 80    TCP                     ITSM_WEB GIT Act 4
192.168.210.57 80    TCP                     XPENAPP GIT Act 1
192.168.200.101 443   TCP                     ITSM_HTTP GIT Act 7
I can telnet real server 192.168.17.12 on port 9000.
I have also capture the packet while access the real server with success and caputre on VIP which shows error.

Load balancing Reports Services 10g with WebCache?

Hi Guys
Does anybody have any good ideas on how to load balance Oracle Reports Services?
Can I do it with WebCache as with Forms Services?
/Jacob :)

My java application resides in a different server (weblogic) from the Oracle Application server (which has the report server). I do a browser redirect from my java application to a URL of OAS . I have hard coded Oracle Application server and report server name in one of my config files in my java weblogic server
In the above URL, servername:7770 is the Oracle Application Server. I would not have a problem with this since this will be the name of the cluster.
But the problem is server=<report server> . The report server which will pickup my request will be identified only after the browser has redirected to the URL. SO I cannot hard code it in my ajava application.
Can I just remove server=<report server name> when generating URL from my java application when I need to run report server in a clustered load balancing environment?
Sorry if my earlier post was confusing

Load balancer + Fed auth cookies + Sharepoint

I have a login page which creates a fed auth cookie and establishes session in sharepoint
Now, Since the time site moved to load balancer environment, it started behaving differently
The fed auth cookie is being created. But still I am not logged in!! Which means I am again being redirected to login page for authentication
After another 2-3 attempts, things start working again. Can anyone help as to what is impacting cookies in load balancer? are they being rejected ?

Does the ext directory have the php_oci8.dll? In the original steps the PHP dir is renamed. In the given php.in the extension_dir looks like it has been updated correctly. Since PHP distributes php_oci8.dll by default I reckon there would be a very good chance that the problem was somewhere else. Since this is an old thread I don't think we'll get much value from speculation.
-- cj

SSO with SAP R/3 with load balancing as backend over the Web AS

Hi,
we have Netweaver 2004 at this time and we have to connect the portal to a BSP application in a load balancing environment.
We set user mapping for the user and set the connection type from SAPLOGONTICKET to UIDPW. This is running for a test environment with only one R/3 system without load balancing.
Does anyone know the setting parameters for a load balancing environment (ok, the message server and...?).
Thank you.
Best regards
Patrizia

Hi all,
run into the same problem. Setting up a mapping with UIDPW in a non load balanced WEB-AS enviroment for BSP or Webdynpro for ABAP works fine. But if I go to set it up in a balanced system I can see the following behavior. The http request is send to the messageserver. This request enclosed my mapped user and password. The messageserver responds with an HTTP 301 wich contains one of my applicationservers, so far so good. The client sends a new request to the mentioned applicationserver but this time without the UIDPW. So the user will not be logged in.
I was wondering if my backend have to issue logonticket too, cause today it only accept tickets from the portal.
Is this is a bug or a feature?
Regards,
Bernd

Load Balancing E-Business Suite 11i using BIG-IP

"Has anyone deployed an Oracle E-Business Suite 11i solution in a load balanced environment based on the F5 BIG-IP 2400 device?"
Background:
When loadbalanced, Oracle forms requires a form of persistence to be in place, presumably to maintain state information.
If using simple persistence based on client source IP address, then there is no problem.
However in our environment, 1000s of clients are hidden behind the single IP address of a proxy server, therefore simple persistence will provide true load balancing.
The alternative is cookie based persistence which will allow true load balancing even with clients hidden behind a proxy. However the challenge here is that Oracle Forms is java and not http based which means that BIG-IP cannot insert an http cookie into the java packets sent to the client by the Oracle server.
If anyone has come across this issue and found a way round it, could you please describe how this is achieved? Either by configuration of the BIG-IP switch or at the Oracle Application side.

Metalink doc id 290807.1 says that Internet Explorer 8 is now ccertified using Sun JRE 1.6.0_03 and higher. I have JRE 1.6.0_07 with Internet Explorer 8 for my Oracle 11i and the windows are freezing up consistently and works fine with IE 7, but i have users in IE 7 and IE 8, could you anyone help me with this issue. my full version is oracle 11.5.10.2 and my desktop in Windows XP.
Thanks in advance

Load Balancing Microsoft RDS server

Hi there, we have two servers hosting remote desktop service roles, is there any way to setup load balancing on these two?
Say setup a pointer "xxx.rdsfarm.com"? The pointer points to two servers with round robin? We have third party LB doing load-balance work for Citrix Xenapp.
Thanks
Regards
Ying Liu
Ying Liu MCSE, CCNAV

Hi Ying,
Thank you for your posting in Windows Server Forum.
Can you please let me know the OS Version of RDS Server?
Yeah, you can load balance the two RDS Server and can combine with RDCB server for setting up RDS load balancing environment. Please check below article for information.
1. Remote Desktop Server farms explained (Part 1)
2. 2012 R2 Load-Balanced RDS farm
To load balance sessions in an RD Session Host server farm, you can use the RD Connection Broker Load Balancing feature together with Domain Name System (DNS) round robin. To configure DNS, you must create a DNS host resource record for each RD Session Host
server in the farm that maps the RD Session Host server’s IP address to the RD Session Host server farm name in DNS.
Checklist: Create a Load-Balanced RD Session Host Server Farm by Using RD Connection Broker
Hope it helps!
Thanks,
Dharmesh

Load Balancing -- preserve client IP?

Does the Flash Media Streaming Server need to know the client's IP address in a load-balanced environment?
We will be doing straight-forward hardware load balancing -- we are not architecting the cluster for communication between Flash Media Servers.
We're trying to determine whether we need to configure the hardware load balancer to use SNAT to preserve the original client IP, which for us has ramifications about subnet choices for both the LB and server.
Thanks!

I dont think the server would need the client's IP. How do you plan to server your content - RTMP or HTTP ?
Shiven

Load Balancing in SICF Service

Hi,
I have set Up Load Balancing for a Logon Group in the SICF service.
In transacion SMMS, the parameter ms_Service_port_xx is maintained for HTTP for each server in the landscape.
Is this all I have to do for Load Balancing or there is any additional settings ?
Also, how to use the Session Timeout parameter in the SICF service (Just below Load Balancing )
Thanks
Anand

Hello,
The Logon group in SICF does not do any load balancing by itself.
HTTP Load balancing is the job of the SAP web dispatcher which connects with HTTP to the message server to get the information about application servers and logon groups.
You can also use directly the message server bu it is a bad solution because it's not really load balancing but merely redirects. A browser shortcut would redirect always to the same application server.
Regards,
Olivier

Load balancing OIF

I have two servers running two different OIF instances (http://oif1.domain.com:7777, http://oif2.domain.com:7777)
We have a F5 load balancing with url (https://f5oif.domain.com) balancing the above urls
How do I load balance these oif instances. They run both as idp and sp mode.
I tried changing the server name in each as F5 url but get error in oif restart. I changed the SP and IdP metadata but still the same error.
Is it possible to load balance OIF instances ? What special steps I have to do ? Do I have to reinstall OIF for enabling load balancing.
Can the SSL of F5 work with non SSL OIF instances ?
Thanks for the help.

There is no need to choose a virtual hostname, as it is required for Cold Failover
Cluster in the advanced installation procedure.
3. Choose the transient data store in the advanced installation procedure.
4. Install all Oracle Identity Federation instances pointing to the same transient data
store.
5. In the F5 load balancer administration console, create a pool with all Oracle
Identity Federation instances, and enable the application persistence property for
this pool. Set the persistence type to Active HTTP Cookie, set the method to
insert, and the set expiration to the desired value.
6. Create a virtual server member mapped to the newly created pool.
7. Enable HTTP monitoring on all member nodes in the pool.
8. On all Oracle Identity Federation servers instances, change the ServerName and
Port parameters in the httpd.conf file to the Virtual Server name and port.
9. For all Oracle Identity Federation servers that are both load-balanced and
integrated with OracleAS Single Sign-On, register the load balancer URL (for
example, http://lbr.us.oracle.com:80) to all load-balanced Oracle
Identity Federation servers by running this command from the command prompt:
<OIF_HOME>/sso/bin/ssoreg.bat -oracle_home_path %ORACLE_HOME% -site_name
<Load_Balancer_Host_Name> -config_mod_osso TRUE -mod_osso_url
<Load_Balancer_URL:Port>
10. On all Oracle Identity Federation servers, update the configuration by running this
command from the command prompt:
dcmctl updateconfig
11. Restart the HTTP server from the Oracle Enterprise Manager console on all the
Oracle Identity Federation server instances.
12. In the Oracle Identity Federation administration console, under Server
Configuration - > Server Properties, change the server hostname and port
number to the Virtual Server name and port number of the load balancer.
13. Restart the Oracle Identity Federation instances from the Oracle Enterprise
Manager console.
14. Distribute the new metadata file to the peer providers.
Edited by: user11129635 on May 31, 2009 2:15 PM

Flex Load Balancer Environment URL Redirect

Similar Messages

Maybe you are looking for