Load Balance & redundancy for internet from 2 different sites?

Hi,
we have 2 core sites where our servers are situated. Both sites are connected via a ptp link.
All of our clients/sites reach these two sites via our MPLS network and they never route via the ptp link which is solely used between the two core sites.
One of the sites has an ASA which goes out to our internet. We are thinking of replicating this on our other site.
How would we go about load balancing the internet connection ie 50% go out on site A & 50% go out on site B?
And if site A goes down, everything goes out via site B and vice versa?
Diagram attached....
Thank you,
Louis

Hi Louis, you could set default routes on the ASA's with tracking, and use ospf downstream to inject the default route in to the network with default information originate - this will only advertise out a default route if it has it in the routing table. With SLA you can track internet reachability by IP SLA echo to something like 8.8.8.8. Both sides can advertise this in to the network, if one goes then there is one left. Just be mindful of the policies and NAT required, you will have to duplicate the rules on the ASA's. With the NAT you have to ensure, that outgoing traffic comes back in the same path it left so it doesn't break connections.

Similar Messages

Load balancing 10g forms - Connection from new browser window not supported

Load balancing 10g forms - Connection from new browser window not supported
We're experimenting with using webcache to load balance between multiple applications servers running OC4J forms processes.
We currently have one machine with infrastructure and mid-tier (BI & Forms) installed, which is being used for the webcache functionality, this is load balancing between 2 other servers each of which just have the mid-tier (BI & Forms) installation
In order to get this to work, I had to follow the instructions in the Forms deployment guide : http://download-uk.oracle.com/docs/cd/B14099_11/web.1012/b14032/tuning.htm#sthref707
The main gist of this is that you need to set the following in the orion-web.xml file in order that the sessions are maintained:
<session-tracking
cookies="enabled">
</session-tracking>
This all works fine in most cases.
The problem I am having is if I do one of the following on the client machine:
1) From IE6 / IE7 run a copy of a forms application. Then open a new window using the "New Window" menu option, and attempt to run another forms application.
2) In IE7 or Firefox 2.0 open a copy of the forms application, and then open a new tab and try and open another forms application.
If I try either of these I get a FRM-92101 error, and the following is displayed in the java console:
oracle.forms.net.ConnectionException: Connection from new browser window not supported
From trawling various forums (including metalink and otn) it looks like a problem with the way coockies are handled.
Unfortunately the usual workaround is to ensure that the session tracking option in the orion-web.xml file is disabled.
The problem is that I need this enabled in order for the load balancing to work.
Does anyone know of any other workarounds or patches that might help resolve this?
We're using Application server 10.1.2.0.2 running on windows 2003 servers.

You were right. Carriage returns were stopping it from working (the document is laid out over separate lines, so I assumed it would make no difference...).
I've now managed to get it so the forms at least run, but they are all being run in the forms OC4J instance on the same machine as the OHS.
Has anyone actually managed to get this to work, or am I doing something wrong?
I did wonder if using an OHS instance on a machine with no forms installation would make any difference?
I had raised a support call via metalink on this subject, but they eventually came to the conclusion that the only way to do this is with a hardware load balancer (Despite several documents suggesting that webcache is the way to go (including the forms deployment manual)).
I'm at the point now of giving up and writing some custom scripts to do the job instead...

Problem Load Balancing connections for Grid Control Console on port 80!

I have two OMS and I'm balancing connections for Grid Control Console using a Software Load Balancer according with "Oracle Enterprise Manager Advanced Configuration". I have success where the load balancer is listening on port different to 80. When I configure Load Balancer to listen on port 80(architecture requirement) and distribute load between the two OMS(Port 7779), when login to Enterprise Manager Console the URL on the web browser changes to the port configured for HTTP server (port 7780) wich produces an "unable to connect" error message; and this behaviour also happends in some of the internal links of Grid Control Console too. Any ideas?
Thanks in advance!
Message was edited by:
user463224

I got it working, changing the "Port" directive to 80 on httpd.conf on HTTP Server

LOAD BALANCE BEHAVIOR FOR 7600 ON ETHERCHANNELS

Hi Everyone,
Currently I'm planning to implement ether-channels on 7600 routers, but there's something that's still not clear to me, regarding the load balancing behavior, for L2VPN and L3VPN.
I've read that 7600 in MPLS default load balance behavior is to take the SIP and DIP if present and the bottom of the stack label or the 5th label depending upon the number of labels on the stack. In l2VPN scenarios when ether-channel is used, if no IP traffic is present what is the default behavior of the etherchannel to calculate the load balancing hash function to select a given link on the bundle.
I'll appreciate any feedback regarding this.

Hi Louis, you could set default routes on the ASA's with tracking, and use ospf downstream to inject the default route in to the network with default information originate - this will only advertise out a default route if it has it in the routing table. With SLA you can track internet reachability by IP SLA echo to something like 8.8.8.8. Both sides can advertise this in to the network, if one goes then there is one left. Just be mindful of the policies and NAT required, you will have to duplicate the rules on the ASA's. With the NAT you have to ensure, that outgoing traffic comes back in the same path it left so it doesn't break connections.

Best Load Balancing solution for NMS 4.15

What is the best load balancing solution for Messaging Server with 250 users?

What are you trying to achieve? I do not understand from your question what it is you are trying to accomplish. What component(s) of NMS are you trying to load balance?

UCCE Call flow to load balance & redundancy

Dear NetPro gurus,
I have used Cisco UCCX for a number of years but I'm a newbie to UCCE.
1. For UCCE, can each site have multiple PGs, Routers, Loggers & ICMs (for instance, can i have 2 PGs on site A & 2 PGs on site B (a total of 4 x PGs)? Or each site can only have 1 PG, 1 Router / 1 Logger and 1 ICM?
2. Is there a way where i can say force all my Customer Services CSQ to go via Site A? And all my IT Helpdesk CSQ to go via Site B? But if either site failover, the traffic will automatically fialover to the other sites PG, Loggers / Routers, and ICMs?
Would greatly appreciated if anyone can shed some lights on this.
Cheers,
Hunt

Hi Lee,
answer to your first Q:
UCCE will be having one router, one logger in each sites for one UCCE instance.
with respect to PG, you can have 2 PG on each side. It will work as active stand by mode.
for second question, you can do this based on selecting routing client from different site. Please provide call flow and what will be the VRU (CVP or IPIVR)
hope above will give you some light on your query.
Regards,
Shalid K.C

Load balancing algorithm for groups in RZ12

Hello,
I would like to know the load balancing algorithm for groups defined in RZ12.
I know that log on groups for external connections are administered via SMLG and table RZLLICLASS.
I also know that RFC resources can be managed for RFC logon groups via RZ12.
Kind regards,
Peter
<removed_by_moderator>
Point awarding is at your discretion, but read and follow the "Rules of Engagement"
Edited by: Juan Reyes on Dec 3, 2010 10:21 AM

Hello!
Found this post while searching information about RFC and Logon Groups...
I have some mess in my head with SMLG functionality and RZ12. As I know SMLG we can use to distribute users to application server instances, it gives us good achievement in performance. With RZ12 we can distribute RFC connection of particular job for parallel execution on predefined application server. With SMQS and SMQR transaction we can set "Name of AS Group" to route RFC-execution on certain server or servers. But I have troubles with understanding. Imagine, we set up group 1 with 2 servers (name it RFC_GR1), and group 2 with another 2 servers (name it RFC_GR2). How could qRFC scheduler decide on which RFC server group (RFC_GR1 or RFC_GR2) distribute RFC-execution? How to interact "Name of AS Group" with RFC groups if we can set only one group? How could we distribute RFC-execution depending on our logon groups (smlg)? We would like to distribute RFC depending on SAP logon groups. Is it possible? Or do I compare apple and orange?
Regards,
Artem Ivashkin

Can't Download itunes 6.0.3 For Windows from This Site

I have tried for days to download itunes 6.0.3 for Windows from this site. It says it will auto download but no download box ever comes up.
Have others had problems??

Yes, turning off McAfee privacy service and any web accelerator software you have, should let the download begin.

Load balancing plugin for Sun WS 6.1

Where can I find details about the load balancing plugin for Sun Java Web Server 6.1?
Can I work around that by using the reverse proxy plugin and configure to work as a Load balancer?
thx
Anand

Details about using the reverse proxy plugin can be found here:
http://docs.sun.com/source/819-0902/rpp61.html
The reverse proxy plugin can be used for load balancing. Use the service-passthrough Service SAF for this purpose. You are particularly interested in the "servers" parameter
"servers - A quoted, space-delimited list of the servers that receive the forwarded requests. Individual server names may optionally be prefixed with http:// or https:// to indicate the protocol and/or suffixed with a colon and integer to indicate the port."

Load Balancing 11i for both Intranet & Internet Access

Our current environment for 11i (11.5.5) is accessed only internally (via Intranet). We need to allow outside access (via Internet) also for self-service apps (ie. HR). Oracle Support/Metalink has stated that Load Balancing (note 148155.1) is the only supported method to have multiple (Apps Servers) systems access a single database. Could I get feedback from anyone who has implemented Load Balancing for 11i? Additionally if someone has implemented this for both intranet and internet access how has your company setup? Do the secondary server(s) from the Load Balancing note reside in the DMZ? And thus the primary app server and database reside inside the firewall? Thanks....

Hi,
We are using 6 middle tiers for internal access for intranet access and 2 middle tiers in External DMZ with only web server running for Extrenal Access over Internet for Self Service.
You Implement one Load Balancer for first 6 internal Middle Tiers with site level profiles pointing to Internal .
You implement second Load balancer for external 2 middle tiers with server level profile options for these two servers pointing to External Load balancer .
To check how to implement load balancer vsiit
http://becomeappsdba.blogspot.com/2006/09/configure-hardware-load-balancer-at.html
Wait for my next post in above blog site with step by step procedure to implement above solution External & Internal one
Atul Kumar
Oracle Apps DBA
http://teachmeoracle.com

Azure Load Balancer - Query for VMs in rotation or removed from rotationq

From what I can tell, there is no way to know if any of the VMs configured as part of a Load-Balanced Set has been taken out of rotation. I see a PS script to set the Azure Load Balancer Endpoint -
Set-AzureLoadBalancedEndpoint. But there is no way from what I can tell via
PS or in the Portal to notify or alert me when a VM is no longer part of the LB Set due to some issue. What is the roadmap to make this available via a PS Script, Azure Portal, or via SCOM?

Hi,
From my experience, this issue was more related with Windows Azure network, I suggest you move to that forum for a better help.
The forum link was:
http://social.msdn.microsoft.com/Forums/en-US/home?forum=WAVirtualMachinesVirtualNetwork
Best Regards
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Load balance 2 xDSL VPN from 2821 to PIX515e ?

I have a PIX515e terminating IPSEC tunnels from what is usually Draytek Vigor routers. I have a requirement to load balance across 2 (or more) ADSL circuits and I have a 2821 router available for the remote end. My question is, is it possible to load balance across these 2 circuits ? would this involve establishing 2 seperate tunnels with the PIX ? I have seen enough to suggest that load balancing across the circuits on a 2821 may be possible, but I am not sure whether the PIX can do this ? and if so, how ? Any suggestions ?

In addition to being an excellent primary WAN link, the cable HWICs are well suited for used as a secondary WAN link for businesses of all sizes. This secondary link can be used to offload Web traffic directly to the Internet, provide a redundant option for a primary link in case of failure, or provide load balancing with a xDSL or other type of WAN link.
Increasingly, Internet connectivity is crucial to a branch or small business employee's productivity. However, as more streaming media and rich content is placed on the Web, the WAN bandwidth requirements to provide this connectivity continue to grow. In the case of a branch office, as shown in Figure 2, using Policy-Based Routing, all HTTP (Port 80) traffic can be diverted from a primary low-bandwidth link to the DOCSIS link to minimize the amount of traffic being routed back to corporate headquarters. The ISRs can optionally provide end-to-end security with advanced firewall, intrusion prevention, and URL filtering capabilities to help ensure security and proper usage of the Internet.

ACE Load Balancing Configuration For NATed User Traffic

Hello,
I am currently working on a requirement where the shared application services will be hosted in DC and these services will be accessed by multiple (thousands) users from different corporates/customers. The user traffic will be hidden behind customer's proxy servers or firewalls so the load balancer (ACE modules) services hosted in DC will not be able to see requests coming in from induvidual users IP addresses.
In this scenario what are options of load balancing are available in Lyer3/4 and Layer7 ?
Thanks in advance for your help.
Sanjay

Hi Sanjay,
In a set up where all users are coming from behind a proxy, all users will be loadbalanced to same server thus overloading it. This is when you are doing standard L3/L4 LB.
In the situation of proxies, for HTTP applications you shall use L7 LB and use information(cookie) in HTTP client request or server response. The ace will use this information to stick the user to same server for persistence. If a client comes with no cookie it will be loadbalanced according to the predictor method configured. Below is the link for L7 configuration example and other TS steps you can take while configuring L7 policies on ACE. For more informatin i would suggest reading ACE user guide too.
http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_(ACE)_Troubleshooting_Guide_-_Troubleshooting_Layer_7_Load_Balancing
If you have any questions please feel free to ask.
Regards,
Kanwal

I downloaded a program and it never shiowed up in the download box. I can't find it anywhere on my computer. I tried it a few different times and from different sites but still nothing. What can I try next?

I downloaded a program several times and from different download sites. It never showed up in the download box but it said all downloads have completed. I searched for it anywhere on my computer but the search produced no results.

I suppose there is a possibility that you have security software than may be blocking quarantining or even deleting the downloaded file.
Normally if Firefox says in the download manager that the file is downloaded then it is on your computer, and if you right click you should get the option to open the folder the er the downloaded file is in.
#Use keyboard keys '''Ctrl + J''' to open Firefox's download manager
#* or use ( press''' alt''' to display the menubar) Tools -> Downloads
# in the downloads window find the file entry you are looking for and right click
# use the option ''open containing folder''
* see [[downloads window]] <-- clickable link --
* and [[unable to download or save files]]
Please post back with how you get on.

Load-balancing Algorithm for NX-OS Port Channels

Hi, all
I do not understand description of port-channel load-balance ethernet command.
switch(config)# port-channel load-balance ethernet ?
destination-ip         Destination IP address
destination-mac        Destination MAC address
destination-port       Destination TCP/UDP port
source-dest-ip         Source & Destination IP address (includes l2)
source-dest-ip-only    Source & Destination IP addresses only
source-dest-mac        Source & Destination MAC address
source-dest-port       Source & Destination TCP/UDP port (includes l2 and l3)
source-dest-port-only Source & Destination TCP/UDP port only
source-ip              Source IP address
source-mac             Source MAC address
source-port            Source TCP/UDP port
Please tell me what the following descriptions mean.
Source & Destination IP address (includes l2)
Source & Destination TCP/UDP port (includes l2 and l3)
What are the meaning of "includes l2" and "includes l2 and l3" ?
Thank you for your cooperation in advance.

Hi Satoru,
On the Nexus 5000/6000 platforms, all FEXs will inherit the global hashing algorithm from the parent device.
On the Nexus 7000 platform, hashing algorithms can be assigned on a per FEX basis (all load balancing changes must be made from the Admin VDC):
N7K-A(config)# port-channel load-balance src-dst ip-l4port fex 134
Any FEX without a hashing algorithm configured with inherit the global hash. Making changes to the modular/global hash will not alter FEX specific hashing algorithms.
To verify the configuration applied you can use this command:
N5K_A# show port-channel load-balance
On the Nexus 7000, the per FEX algorithm can be checked by appending the ‘fex <#>’ to the end of the command in the Admin VDC or the FEX’s respective VDC:
N7K-A(config)# show port-channel load-balance fex 134
Regards,
Richard

Load Balance & redundancy for internet from 2 different sites?

Similar Messages

Maybe you are looking for