Load Balance method for proxy - ISA or BlueCoat

Hi,
I would like to know that which load balance method such as src-ip, cookie or etc is most suitable for load balancing proxy servers such as ISA or Bluecoat. The Proxy will listen to many services - http, https, ftp, and etc. Thanks for the help.

The methods you mentioned are not loadbalancing technics, but stickyness features.
Stickyness is not always necessary.
Now, for caching devices, it is good to always send users requesting a same object to a single proxy, so that the same object is not cached in all the proxies.
Therefore, the solution in this case is loadbalancing with url hashing.
For HTTPs, if you terminate SSL on the loadbalancer, you can use the same solution.
For all the other traffic, I would suggest to start with roundrobin and see after a while if it requires some adjustments or not.
Gilles.

Similar Messages

Load balancing by the proxy plugin

Has anyone encountered this before:
I have a cluster of two WLS 5.1 servers, hosting servlets that serve web
requests. The requests are proxied through a web server ( I have tried
Weblogic, Apache as well as IIS). I also have a tool that simulates
concurrent web requests and fires them to the proxy server.
As per documentation, as the load balancing while proxying requests to
servlets is round robin, I expect that the requests are uniformly
distributed across the two weblogic servers. But what I see is a bit
different. In one case I fired 15 requests and found that 11 went to first
server and 4 went to the other.
Second time when I fired again 2 of them went to the first server and 13 to
the second one. I would expect that around half of the total requests
should be routed to each server everytime so that there is a proper load
balancing done by the proxy. I have not changed any configuration related
to the default load balancing algorithm. So I expect it is round-robin.
Has anyone encountered this before ? This happens to me irrespective of
which proxy server I use (i.e which proxy plugin I use). Is there some
other configuration required and I am missing something or is there some
inherent problem with the load balancing of the proxy plugins. Any info
would be highly appreciated.
Thanks
Mainak

Could you post this in weblogic.developer.interest.plug-in? This group is for
ejb related questions. Thanks.
Bill
Mainak Datta wrote:
Has anyone encountered this before:
I have a cluster of two WLS 5.1 servers, hosting servlets that serve web
requests. The requests are proxied through a web server ( I have tried
Weblogic, Apache as well as IIS). I also have a tool that simulates
concurrent web requests and fires them to the proxy server.
As per documentation, as the load balancing while proxying requests to
servlets is round robin, I expect that the requests are uniformly
distributed across the two weblogic servers. But what I see is a bit
different. In one case I fired 15 requests and found that 11 went to first
server and 4 went to the other.
Second time when I fired again 2 of them went to the first server and 13 to
the second one. I would expect that around half of the total requests
should be routed to each server everytime so that there is a proper load
balancing done by the proxy. I have not changed any configuration related
to the default load balancing algorithm. So I expect it is round-robin.
Has anyone encountered this before ? This happens to me irrespective of
which proxy server I use (i.e which proxy plugin I use). Is there some
other configuration required and I am missing something or is there some
inherent problem with the load balancing of the proxy plugins. Any info
would be highly appreciated.
Thanks
Mainak

Load Balance Configuration for OCS 10g

Hi guys,
A few question on the load balancer requirement and setup for a OCS 10g cluster.
1. Can Pound be used as the load balancer for the OCS cluster. (pound is an application for load balancer and reverse proxy).
2. Basically the load balancer will have two network interface, the first nic is connected to the
user network, and the second interface is connected at the backend network where the ocs cluster is located. My question is at which network interface the virtual server name (ldap, sso and http ) for the ocs cluster should be created ? at the user network interface or the ocs network interface ?. Do the virtual name need an ip addresses ?
Thanks for any info.
Regards
lanang

Which articles & documentation have you read already? I don't want to duplicate what they've covered.
http://catb.org/~esr/faqs/smart-questions.html#beprecise

LACP Load Balancing Method

We have two stack of 3750-X switchs interconnected through LACP, and a CheckPoint Firewall connected to one of the stack. The Firewall use a LACP bond to connect to the 3750-X Stack. On the Cisco switches we don't use any Layer3 functionality.
Since the switch are used in Layer2 mode, can we define the a load balancing method that use IP informations ?
For example Can we change the load balancing method from src-mac to src-dst-ip ?
BRgds

Hi,
yes you can choose the method of Load balancing in LACP:
port-channel load-balance {dst-ip | dst-mac | src-dst-ip | src-dst-mac | src-ip | src-mac}
Configure an EtherChannel load-balancing method.
The default is src-mac.
Select one of these load-distribution methods:
•dst-ip—Load distribution is based on the destination-host IP address.
•dst-mac—Load distribution is based on the destination-host MAC address of the incoming packet.
•src-dst-ip—Load distribution is based on the source-and-destination host-IP address.
•src-dst-mac—Load distribution is based on the source-and-destination host-MAC address.
•src-ip—Load distribution is based on the source-host IP address.
•src-mac—Load distribution is based on the source-MAC address of the incoming packet.

Best HTTP load balancing method

This is probably basic, but how satisfactory is this http load balancing method:
service http-1
ip address 192.168.1.10
protocol tcp
port 80
keepalive type tcp
active
service http-2
ip address 192.168.1.9
protocol tcp
port 80
keepalive type tcp
active
owner http
content web-domains
vip address 10.0.0.1
add service http-1
add service http-2
protocol tcp
port 80
balance leastconn
active
Should I rather use sticky-mask 255.255.255.255 or advanced-balance sticky-srcip?

It really depends what you are doing.
Some people will find this acceptable and for others it will just not work.
Do you need persistency ?
To answer this question check with your webserver admin.
does this website have a shopping basket ?
Finally, changing the sticky-mask is useless if you do not have sticky-srcip. So your question should be ..or .. but .. and ..
Anyway, it all depends what is required for your website to work.
You can try this config and if you run into problem capture a sniffer trace and identify the problem to see if a configuration change is needed.
Regards,
Gilles.

Load balancing plugin for Sun WS 6.1

Where can I find details about the load balancing plugin for Sun Java Web Server 6.1?
Can I work around that by using the reverse proxy plugin and configure to work as a Load balancer?
thx
Anand

Details about using the reverse proxy plugin can be found here:
http://docs.sun.com/source/819-0902/rpp61.html
The reverse proxy plugin can be used for load balancing. Use the service-passthrough Service SAF for this purpose. You are particularly interested in the "servers" parameter
"servers - A quoted, space-delimited list of the servers that receive the forwarded requests. Individual server names may optionally be prefixed with http:// or https:// to indicate the protocol and/or suffixed with a colon and integer to indicate the port."

Help choose the appropriate etherchannel load balance method

Hi
I have 2 network architectures :case A and case B (found architecture below)
Case A : one server connected on the switch on each site
Case B : 3 server connected on the switch behind a router on each site
2 site are connected by 2 wireless link :each wireless link have 105 Mbps bandwith (I absolutly need the agregate bandwith 210)
Site headquarter is the principal site and site backup is use to backup data located on the principal site
I use Gbit cisco 2960 switch
I use etherchannel to agregate the 2 switch port (port 1 and port 2) where the 2 wireless link are connected
I configure src-mac for case A but all trafic is send only on one wireless link .
Please help me to choose the more appropriate load balance method to load balance traffic between the 2 link for the case A and for the case B
Please advise
Thanks in advance

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Your Case A might be handled by port hashing, but unfortunately most Cisco platforms don't support it.
Your Case B isn't much better, as you only have 3 hosts on each side, and according to your drawing, they are behind routers, so you don't want to use MAC hashes. If you don't have port hashing, next best choice might be src-dest-IP hashing. Again, though, with just 3 hosts, your distribution will likely not be very balanced, especially over shorter time intervals.
To obtain best utilization of your links, you need some kind of better link bonding, such as MLPPP (unfortunately, usually won't scale to FE rates) or a hardware MUX. Next best option, if you could route across the links, would be something like Cisco's OER/PfR which can dynamically load balance.

Load balancing algorithm for groups in RZ12

Hello,
I would like to know the load balancing algorithm for groups defined in RZ12.
I know that log on groups for external connections are administered via SMLG and table RZLLICLASS.
I also know that RFC resources can be managed for RFC logon groups via RZ12.
Kind regards,
Peter
<removed_by_moderator>
Point awarding is at your discretion, but read and follow the "Rules of Engagement"
Edited by: Juan Reyes on Dec 3, 2010 10:21 AM

Hello!
Found this post while searching information about RFC and Logon Groups...
I have some mess in my head with SMLG functionality and RZ12. As I know SMLG we can use to distribute users to application server instances, it gives us good achievement in performance. With RZ12 we can distribute RFC connection of particular job for parallel execution on predefined application server. With SMQS and SMQR transaction we can set "Name of AS Group" to route RFC-execution on certain server or servers. But I have troubles with understanding. Imagine, we set up group 1 with 2 servers (name it RFC_GR1), and group 2 with another 2 servers (name it RFC_GR2). How could qRFC scheduler decide on which RFC server group (RFC_GR1 or RFC_GR2) distribute RFC-execution? How to interact "Name of AS Group" with RFC groups if we can set only one group? How could we distribute RFC-execution depending on our logon groups (smlg)? We would like to distribute RFC depending on SAP logon groups. Is it possible? Or do I compare apple and orange?
Regards,
Artem Ivashkin

LOAD BALANCE BEHAVIOR FOR 7600 ON ETHERCHANNELS

Hi Everyone,
Currently I'm planning to implement ether-channels on 7600 routers, but there's something that's still not clear to me, regarding the load balancing behavior, for L2VPN and L3VPN.
I've read that 7600 in MPLS default load balance behavior is to take the SIP and DIP if present and the bottom of the stack label or the 5th label depending upon the number of labels on the stack. In l2VPN scenarios when ether-channel is used, if no IP traffic is present what is the default behavior of the etherchannel to calculate the load balancing hash function to select a given link on the bundle.
I'll appreciate any feedback regarding this.

Hi Louis, you could set default routes on the ASA's with tracking, and use ospf downstream to inject the default route in to the network with default information originate - this will only advertise out a default route if it has it in the routing table. With SLA you can track internet reachability by IP SLA echo to something like 8.8.8.8. Both sides can advertise this in to the network, if one goes then there is one left. Just be mindful of the policies and NAT required, you will have to duplicate the rules on the ASA's. With the NAT you have to ensure, that outgoing traffic comes back in the same path it left so it doesn't break connections.

Best Load Balancing solution for NMS 4.15

What is the best load balancing solution for Messaging Server with 250 users?

What are you trying to achieve? I do not understand from your question what it is you are trying to accomplish. What component(s) of NMS are you trying to load balance?

Load Balancing Method

I want to lod balance two servers using CSS 11503. The requirement is to send all the traffic to Server1 untill it dies. Meaning that...Server2 will be sitting idle and only become active when Server 1 is not available. I am not sure which load balancing method should be used to acheive this result.
Any suggestions !!!!!

you should use the sorry server function.
Here is a link to a sample config.
http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a0080093de8.shtml
Gilles.

Load Balancing with Reverse Proxy Plug-in in SunOne 6.1

Hello
we are configuring our reverse proxy web server SunOn 6.1 for load balancing and we have some conflicting information that we have found on the internet. The options we have found are the following:
1- In one case, it seems that all we need to do is add the destination servers to the servers parameter (quoted, space-delimited). We have read that the proxy server will simply round-robin requests.
2- In another case, we have seen that we have to use an loadbalancer.xml file with the server names and reference the file from both magnus.conf and obj.conf.
I have doubts about the second option because I really think this is configuration in 7.0 not 6.1.
Also, I also need to configure session stickiness but it is not clear how this works. There is an option for sticky cookies that defaults to JSESSIONID if not configured. Does this mean that I will have session stickiness but simply without the use of cookies?
ANY HELP? We need to solve this in the next day.

HI,
This may work for you.
obj.conf
<Object name="passthrough1">
Service fn="service-passthrough" servers="http://localhost:8080"
</Object>
<Object name="default">
AuthTrans fn="match-browser" browser="MSIE" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" from="/idm(|/*)" name="passthrough1"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="D:/Sun/WebServer6.1/ns-icons" name="es-internal"
NameTrans fn="document-root" root="$docroot"
PathCheck fn="nt-uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index" index-names="intro.htm,index.html,home.html,index.jsp"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="~magnus-internal/" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log" name="access"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
============================================
magnus.conf
# The NetsiteRoot, ServerName, and ServerID directives are DEPRECATED.
# They will not be supported in future releases of the Web Server.
NetsiteRoot D:/Sun/WebServer6.1
ServerName abc
ServerID https-www.abc.com
RqThrottle 128
DNS off
Security off
ExtraPath D:/Sun/WebServer6.1/bin/https/bin
Init fn=flex-init access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
Init fn="load-modules" shlib="D:/Sun/WebServer6.1/bin/https/bin/j2eeplugin.dll" shlib_flags="(global|now)"
Init fn="load-modules" shlib="D:/Sun/WebServer6.1/plugins/passthrough/passthrough.dll"

ACE Load Balancing Configuration For NATed User Traffic

Hello,
I am currently working on a requirement where the shared application services will be hosted in DC and these services will be accessed by multiple (thousands) users from different corporates/customers. The user traffic will be hidden behind customer's proxy servers or firewalls so the load balancer (ACE modules) services hosted in DC will not be able to see requests coming in from induvidual users IP addresses.
In this scenario what are options of load balancing are available in Lyer3/4 and Layer7 ?
Thanks in advance for your help.
Sanjay

Hi Sanjay,
In a set up where all users are coming from behind a proxy, all users will be loadbalanced to same server thus overloading it. This is when you are doing standard L3/L4 LB.
In the situation of proxies, for HTTP applications you shall use L7 LB and use information(cookie) in HTTP client request or server response. The ace will use this information to stick the user to same server for persistence. If a client comes with no cookie it will be loadbalanced according to the predictor method configured. Below is the link for L7 configuration example and other TS steps you can take while configuring L7 policies on ACE. For more informatin i would suggest reading ACE user guide too.
http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_(ACE)_Troubleshooting_Guide_-_Troubleshooting_Layer_7_Load_Balancing
If you have any questions please feel free to ask.
Regards,
Kanwal

Load Balancing 11i for both Intranet & Internet Access

Our current environment for 11i (11.5.5) is accessed only internally (via Intranet). We need to allow outside access (via Internet) also for self-service apps (ie. HR). Oracle Support/Metalink has stated that Load Balancing (note 148155.1) is the only supported method to have multiple (Apps Servers) systems access a single database. Could I get feedback from anyone who has implemented Load Balancing for 11i? Additionally if someone has implemented this for both intranet and internet access how has your company setup? Do the secondary server(s) from the Load Balancing note reside in the DMZ? And thus the primary app server and database reside inside the firewall? Thanks....

Hi,
We are using 6 middle tiers for internal access for intranet access and 2 middle tiers in External DMZ with only web server running for Extrenal Access over Internet for Self Service.
You Implement one Load Balancer for first 6 internal Middle Tiers with site level profiles pointing to Internal .
You implement second Load balancer for external 2 middle tiers with server level profile options for these two servers pointing to External Load balancer .
To check how to implement load balancer vsiit
http://becomeappsdba.blogspot.com/2006/09/configure-hardware-load-balancer-at.html
Wait for my next post in above blog site with step by step procedure to implement above solution External & Internal one
Atul Kumar
Oracle Apps DBA
http://teachmeoracle.com

Load Balancing Methods in Planning

Ware planning on Load Balancing our two web servers for performance reasons and our consultant and IT side had two different ideas of what this would mean.
Our IT side wants to us IIS and set up a Virtual Machine/IP that sits on both web servers (which are NIC card connected) thus creating the virtual entry point that would move activity to the least busy server.
Our consultant was thinking we'd have a seperate piece of HW (like CISCO or Baracuda - F5) that would perform the load balancing on it's own and direct traffic accordingly. He was not aware of an install utilizing the first method and we're wondering if this IIS solution will work or not.
We are using TOMCAT out of the box here too.
Any help is appreciated! We're toast on getting a new piece of HW in here in time for us to complete our migration but I just want to make sure we don't waste time going down a path that isn't viable.

Hi Paul,
The bulk of the work of a Planning server is performed by the Java App Server.
To have a highly available Planning environment you will need to look at clustering Tomcat and may need to use something like BEA Weblogic instead.
Check out the Clustering EPM Web Applications in the below PDF document.
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_manual_deployment.pdf
Regards,
-John

Load Balance method for proxy - ISA or BlueCoat

Similar Messages

Maybe you are looking for