Load Balancing Microsoft Proxy

Hello
We have a CSS11503 and two Microsoft ISA Server 2000 that work as Proxy. We would like to place the ISA Servers behind the CSS so that Client's proxy connections (port 8080) are balanced. It seems to work with navigation.
Now we are trying to make the Microsoft Proxy client work but we can't.
There's a dialog (port 1745) which is MSProxy and it's not properly balanced. The client sends a HELLO to the VIP but the message is answered by the physical address. The proxy also sends its's physical address to the client the message's payload (it should be substitued by the balancer). The client answers with UNKNOWN.
Can anybody help me??

if the proxy sends its ip address in the payload, there is no way this will work since the CSS does not nat addresses in the payload for this particular protocol.
Gilles.

Similar Messages

  • Low Cost Load Balancer / Reverse Proxy for 2 Oracle Application Servers

    If you have 2 OAS and you need to setup a load balancer / reverse proxy infront of it and you can't use webcache or a hardware load balancer what's the best way to setup a low cost solution that would preserve your session state if you have a OC4J clustered application running on the MT?

    Just a quick answer, please:
    If you think about Oracle WebCache as a general application, you will find some useful Technical White Papers on http://otn.oracle.com/clusterware They will explain, how Oracle Clusterware can be used to protect any kind of application.
    In general, Oracle Clusterware and Oracle WebCache must be installed on the same set of servers (cluster nodes) in this case. Regarding the question of whether or not you can re-use your 2 SUN servers: It depends.
    Oracle Clusterware requires shared storage and a private interconnect. Your current infrastructure might need to be reviewed and enhanced in those regards, especially, since your servers are geographically separated as you said.
    Just some ideas. Thanks.

  • Load balancer vs. proxy plug-in

              Using WebLogic 6.1 SP2, the proxy plug-in handles the logic of connecting to
              the secondary server (stored in a cookie) if the primary is down. How does
              this work if you use a hardware load balancer in place of the proxy
              plug-ins?
              

    More info at http://edocs.bea.com/wls/docs61/cluster/alteon.html#591902 and
              http://edocs.bea.com/wls/docs61/cluster/bigip.html#591902.
              Kumar Allamraju wrote:
              > Hi:
              >
              > yeah this was a problem in 5.1
              > We relaxed this restriction in 6.x release. This is the main reason WLS
              > clustering will now
              > work with hardware load balancers.
              >
              > Starting from 6.x, any server can become a primary server when failover
              > happens.
              > For e.g. if S1 and S2 are primary & secondary servers for client1 and when
              > the HW LD detects
              > that the primary is down, it will route the request to any of the servers
              > (can be S3, S4, S5) in the cluster
              > and that server(e.g. S3) will become the primary server for this
              > request(i.e. client1) and get this client's session data
              > from S2. At this point S3 become primary and S3 will nominate another server
              > (e.g. S4) as a secondary server
              > (based on the replication groups, if any)
              > We will only do this for active clients. For e.g if client2 doesn't make a
              > request when S1 is down, we don't try to
              > get it's data and chose a new secondary for him. This is called lazy
              > initialization/replication.
              >
              > Hope it helps.
              >
              > --
              > Kumar
              > "Joe" <[email protected]> wrote in message news:[email protected]...
              > >
              > > Using WebLogic 6.1 SP2, the proxy plug-in handles the logic of connecting
              > to
              > > the secondary server (stored in a cookie) if the primary is down. How
              > does
              > > this work if you use a hardware load balancer in place of the proxy
              > > plug-ins?
              > >
              > >
              > >
              > >
              Rajesh Mirchandani
              Developer Relations Engineer
              BEA Support
              

  • Load Balancing Microsoft RDS server

    Hi there, we have two servers hosting remote desktop service roles, is there any way to setup load balancing on these two? 
    Say setup a pointer "xxx.rdsfarm.com"? The pointer points to two servers with round robin? We have third party LB doing load-balance work for Citrix Xenapp. 
    Thanks
    Regards
    Ying Liu
    Ying Liu MCSE, CCNAV

    Hi Ying,
    Thank you for your posting in Windows Server Forum.
    Can you please let me know the OS Version of RDS Server?
    Yeah, you can load balance the two RDS Server and can combine with RDCB server for setting up RDS load balancing environment. Please check below article for information.
    1.  Remote Desktop Server farms explained (Part 1)
    2.  2012 R2 Load-Balanced RDS farm
    To load balance sessions in an RD Session Host server farm, you can use the RD Connection Broker Load Balancing feature together with Domain Name System (DNS) round robin. To configure DNS, you must create a DNS host resource record for each RD Session Host
    server in the farm that maps the RD Session Host server’s IP address to the RD Session Host server farm name in DNS.
    Checklist: Create a Load-Balanced RD Session Host Server Farm by Using RD Connection Broker
    Hope it helps!
    Thanks,
    Dharmesh

  • How to see the Source IP Address of a client using ACE One-armed-mode to load balance HTTP proxy request

    I'm using an Ace 4710 Appliance deployed in One-Armed mode, using Source NAT to loadbalance HTTP request to a couple of Proxy servers.
    Everything is working fine, but the thing is that I can't see the Clients IP addresses on Proxy's logs, so I can't keep track of them.
    The Interfaces and Nat configs are:
    interface vlan 200
      description Server-Side-VLAN
      bridge-group 5
      nat-pool 5 10.1.1.5 10.1.1.5 netmask 255.255.255.0 pat
      service-policy input VIPS
    interface vlan 300
      description Client-Side-VLAN
      bridge-group 5
    interface bvi 5
      ip address 10.1.1.3 255.255.248.0
      description Client-Server-Virtual-Interface
    ip route 0.0.0.0 0.0.0.0 10.1.1.1
    and the policy map looks like this
    policy-map multi-match VIPS
      class Port80
        loadbalance vip inservice
        loadbalance policy Port80
        nat dynamic 5 vlan 200
    Resource assignment:
    sticky ip-netmask 255.255.255.255 address both RESOURCE-CLASS
      timeout 5
      serverfarm Service80
    Any suggestions will be appreciated,
    Thanks

    Hi Kanwal,
    Thanks for your quick reply,
    I've already tried this but it didn't work. The problem is that I don't manage the proxy servers so I rely on their skills to see the logs.
    The Proxies are Squid. Do you know if they need to do something else on the servers to see that field of the HTTP header?
    But I'll try again tomorrow and let you know how it goes.
    Thank you again.

  • CSS Load Balancing for MS Winsock Proxy Client

    Has anyone load balanced Microsoft Winsock Proxy client? I am trying to load balance internal users using the Winsock client to two MS ISA Servers running Winsock proxy for application access to the internet.

    Thanks for the post, I got this from Microsoft:
    I wanted to update you on the information I investigated on the firewall client. I found the the actual port connection used to control the connection thru ISA is by default UDP. This UDP session is over 1745 to the ISA server. This intial connection then allows for a connection over an ephemeral port to the ISA server for the actual data transfer. The data transfer is done via a TCP connection. The connection control is UDP based by default. This can be changed in the Wspcfg.ini file. By adding the ControlChannel value to the WSP_client_app section of this file, you can use WSP.TCP to allow the connections to be based with TCP. In your situation, this may be the best scenario due to the connections being load balanced.
    TCP is used by default when checking the Firewall configuration. This is why the traces showed the connection with TCP.
    Information on this can be found in the ISA help files. In the search panel of the ISA help, type in "ControlChannel" without the quotes and it will show information on this feature.
    I will re-test with TCP only setup, and see if this helps. I also have some sniffer traces I need to review to see if maybe NAT is killing me, not UDP traffic.
    I'll post back my findings next week.

  • Load balancing by the proxy plugin

    Has anyone encountered this before:
    I have a cluster of two WLS 5.1 servers, hosting servlets that serve web
    requests. The requests are proxied through a web server ( I have tried
    Weblogic, Apache as well as IIS). I also have a tool that simulates
    concurrent web requests and fires them to the proxy server.
    As per documentation, as the load balancing while proxying requests to
    servlets is round robin, I expect that the requests are uniformly
    distributed across the two weblogic servers. But what I see is a bit
    different. In one case I fired 15 requests and found that 11 went to first
    server and 4 went to the other.
    Second time when I fired again 2 of them went to the first server and 13 to
    the second one. I would expect that around half of the total requests
    should be routed to each server everytime so that there is a proper load
    balancing done by the proxy. I have not changed any configuration related
    to the default load balancing algorithm. So I expect it is round-robin.
    Has anyone encountered this before ? This happens to me irrespective of
    which proxy server I use (i.e which proxy plugin I use). Is there some
    other configuration required and I am missing something or is there some
    inherent problem with the load balancing of the proxy plugins. Any info
    would be highly appreciated.
    Thanks
    Mainak

    Could you post this in weblogic.developer.interest.plug-in? This group is for
    ejb related questions. Thanks.
    Bill
    Mainak Datta wrote:
    Has anyone encountered this before:
    I have a cluster of two WLS 5.1 servers, hosting servlets that serve web
    requests. The requests are proxied through a web server ( I have tried
    Weblogic, Apache as well as IIS). I also have a tool that simulates
    concurrent web requests and fires them to the proxy server.
    As per documentation, as the load balancing while proxying requests to
    servlets is round robin, I expect that the requests are uniformly
    distributed across the two weblogic servers. But what I see is a bit
    different. In one case I fired 15 requests and found that 11 went to first
    server and 4 went to the other.
    Second time when I fired again 2 of them went to the first server and 13 to
    the second one. I would expect that around half of the total requests
    should be routed to each server everytime so that there is a proper load
    balancing done by the proxy. I have not changed any configuration related
    to the default load balancing algorithm. So I expect it is round-robin.
    Has anyone encountered this before ? This happens to me irrespective of
    which proxy server I use (i.e which proxy plugin I use). Is there some
    other configuration required and I am missing something or is there some
    inherent problem with the load balancing of the proxy plugins. Any info
    would be highly appreciated.
    Thanks
    Mainak

  • Any concern on persistent search through a load balancer?

    We have access manager 7 installed which make use of persistent search. My understanding is that persistent search required to maintain a connection so that the server can refresh/update the client whenever entry in the result set changed. If we configure the system to connect to ldap through load balancer, will that cause any problem? What will happen if the load balancer refresh connection after a period of time? Or , if the original ldap server failed and the load balancer try load balance the client to another ldap server, will the persistent search still works?
    Also, if the ldap server that the persistent search initially established connection with crashed, will the client get error message and in that case, is it the client's responsibility to re-run/retry the persistent search with other failover ldap server?
    Thanks,

    Your best bet, even when using a hardware load balancer, is to front your DS instances with a pair of load-balanced Directory Proxy Servers. This way, you have physical redundancy at the load balancer level, and intelligent LDAP-aware load balancing at the proxy server level. DPS 6 is very nice in that you can split binds, searches, and updates amongst several backend DS instances, and the connection state is maintained by the proxy, not the DS instance (i.e. if an instance fails, you really shouldn't be forced to rebind, the proxy fails-over to another DS for searching).
    We have our Directory Servers on a pair of Solaris 10 systems, each with a zone for a replicated Master DS, and another zone each for a DPS instance. The DPS instances are configured to round-robin binds/searches/updates/etc. among the DS master zones. This works out very well for us.

  • OSB Load Balancing

    Is there any way to load balance a proxy service in OSB?
    For my project, I have an http/wsdl based proxy service that is transforming a pretty large message and routing it to a business service based on a jca adapter. If I monitor my cluster(2 nodes and an admin server) during a load test through soap ui, I only see one of the nodes doing work. The other looks untouched. The url I am hitting is the load balancing url setup on the http tab of the cluster in the weblogic console.
    In this doc it says that proxy services are pinned to a single managed server for polling service, but nothing about http:
    http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/deploy/cluster.html
    Is it possible to have the proxy service load balanced across multiple nodes, or is there some other method of doing this?
    Thanks for any help.

    Please refer OSB Deployment Guide -
    3.3.1 Load Balancing HTTP Functions in a Cluster
    Web services (SOAP or XML over HTTP) can use HTTP load balancing. External load balancing can be accomplished through the WebLogic HttpClusterServlet, a WebServer plug-in, or a hardware router. For an overview of a cluster topology that includes load balancing, see Figure 5-1. Oracle WebLogic Server supports load balancing for HTTP session states and clustered objects. For more information, see "Communications in a Cluster" in Oracle Fusion Middleware Using Clusters for Oracle WebLogic Server.
    http://download.oracle.com/docs/cd/E17904_01/doc.1111/e15022/cluster.htm#i1483852
    Regards,
    Anuj

  • Cisco Load balancer and Web Dispatcher to the same portal

    Hello Experts,
    We have implemented intranet portal with Cisco as the load balancer. Now we need to expose this intranet to the outside world as an extranet portal. So the same portal will be accessed from both intranet and from outside. We are thinking of installing a web dispatcher in the DMZ so that outside users can access the Web Dispatcher URL to access the intranet portal. In effect intranet users will use load balancer and extranet users will use Web Dispatcher to access the same portal. Now my question is if we configure Load Balancer and Web Dispatcher to the same portal, will the portal be able to load balance properly? Is this the right approach?
    Thank You,
    mansooralip1

    Dear Andrew,
    We need to provide access to our intranet to some outside companies for them to also use some of our portal applications. As per your answer, I understand that I can configure Web Disptacher to talk to the Cisco Load Balancer of our portal. In this case Web Dispatcher will work just as a reverse proxy. But when I discussed this with one of our basis resource, he told me that when we install and configure Web Dispatcher, it always ask for the Message Server URL and Port number, even if I just want to use Web Dispatcher as a Reverse Proxy. If his concerns are valid, I do not think I will be able to configure Web Dispatcher to access the cisco Load Balancer because I cannot put Cisco load banacer URL and port instead of the Message Server URL and Post Number. Can you kindly share your comment on the same?
    Now the second part of my question, if Web Dispatcher cannot be configured to talk to Load Balancer(as mentioned by our basis resource), I will have to use two load balancers. One web Dispatcher in DMZ as a Load Balancer *** Reverse Proxy for the external users. Second the internal Cisco Load Balancer for the intranet users. So the same portal will be accessed by two load balancers. My question here is, in this set up, can the portal work efficieintly here by distributing equal loads two both the server instances?
    Thank You,
    mansooralip1

  • Load Balance TMG with Cisco CSS

    I am working with a Customer that is using Cisco CSS to load balance Microsoft TMG 2010.
    From the Microsoft TMG, I can see the https probes hitting the TMG Servers. The TMG 2010 recongnizes that the Cisco is trying to establish a 3-way handshake and is dropping every 3rd connection with the following error: "non-SYN packet was dropped because it was sent by a source that does not hane an established connection with the Forefron TMG computer." Since the Microsoft Forefront TMG 2010 Server is Stateful packet inspection firewall, what is the best load balance method for this service? TCP or even worst ICMP.
    Below is a snipet of the configuration:
    Thank You
    Avery
    CSS-A# show service Server1-ssl
    Name: Server1-ssl  Index: 70   
      Type: Local            State: Alive
      Rule ( x.x.x.x  TCP  443 )
      Session Redundancy: Enabled
      Redundancy Global Index: 206
      Redirect Domain: 
      Redirect String:
      Keepalive: (SSL-443   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 03/05/2012 16:33:14
      Mtu:                       1500        State Transitions:            4
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0           Weight Reporting:             None
      Weight:                    1           Load:                         2
    CSS-A#
    CSS-A# show service Server2-ssl 
    Name: Server2-ssl  Index: 71   
      Type: Local            State: Alive
      Rule ( x.x.x.x  TCP  443 )
      Session Redundancy: Enabled
      Redundancy Global Index: 207
      Redirect Domain: 
      Redirect String:
      Keepalive: (SSL-443   5   3   5 )
      Keepalive Encryption:      Disabled
      Last Clearing of Stats Counters: 03/05/2012 16:53:49
      Mtu:                       1500        State Transitions:            6
      Total Local Connections:   0           Total Backup Connections:     0
      Current Local Connections: 0           Current Backup Connections:   0
      Total Connections:         0           Max Connections:              65534
      Total Reused Conns:        0           Weight Reporting:             None
      Weight:                    1           Load:                         2

    Hi,
    It would good to have a capture from the server itself, the TCP keepalive is really simple, as you explained, it is just a 3-way-handshake on port 443.
    The CSS is going to use it's vlan IP to generate this keepalive.
    So if the server is dropping the connection, it would be good to se the actual behavior of the keepalive.
    ICMP is just a ping, and lets say port 443 is not longer open on the server, at the point that the CSS gets the ICMP reply back from the server, the service is going to remain as alive, but the traffic is not going to work, so ICMP is not a good option.
    Thanks!

  • Load Balancer and Web Dispatcher "keepalive page"

    I would like our monitoring and load balancer to be able to perform http status check against SAP web dispatchers.
    Is there a built in "keepalive" page that can be queried within Web Dispatcher, or will a URL rule be needed?

    Dear Andrew,
    We need to provide access to our intranet to some outside companies for them to also use some of our portal applications. As per your answer, I understand that I can configure Web Disptacher to talk to the Cisco Load Balancer of our portal. In this case Web Dispatcher will work just as a reverse proxy. But when I discussed this with one of our basis resource, he told me that when we install and configure Web Dispatcher, it always ask for the Message Server URL and Port number, even if I just want to use Web Dispatcher as a Reverse Proxy. If his concerns are valid, I do not think I will be able to configure Web Dispatcher to access the cisco Load Balancer because I cannot put Cisco load banacer URL and port instead of the Message Server URL and Post Number. Can you kindly share your comment on the same?
    Now the second part of my question, if Web Dispatcher cannot be configured to talk to Load Balancer(as mentioned by our basis resource), I will have to use two load balancers. One web Dispatcher in DMZ as a Load Balancer *** Reverse Proxy for the external users. Second the internal Cisco Load Balancer for the intranet users. So the same portal will be accessed by two load balancers. My question here is, in this set up, can the portal work efficieintly here by distributing equal loads two both the server instances?
    Thank You,
    mansooralip1

  • Reverse Proxy and Load Balancer for SMP 2.3 and Agentry Application

    Hi Expert,
    I'm putting in place a mobile solution composed by SMP 2.3 SPS 4 and SAP ECC 6.0. In the SMP 2.3 I created the agentry server and I have deployed my agentry application.
    My SMP/Agentry infrastructure is composed by two servers therefore I need a load balancer for balance the load into the several servers. Furthermore I need to use a reverse proxy in my DMZ zone.
    Based on what indicated in the SAP note "1904213 - SAP Mobile Platform Server Release Information" the Apache Reverse Proxy is not supported for Agentry clients. Agentry uses nginx for Reverse Proxy.
    I also found the following document How-to-Guide for Reverse Proxy and Load Balancing in SAP Mobile Platform 3.x that explain how to set-up a reverse proxy and load balancer with nginx and apache.
    Both the SAP note and the HOW to document are refereed to SMP 3.0 and not to SMP 2.3.
    I would know if the NGINX must be used also for SMP 2.3.
    Any suggestion/information is appreciated.
    Thanks in advance
    g.

    Please see Agentry Network Landscapes

  • ABAP Proxy Set up and Load balancing

    Hi All,
    We have a SAP ECC 5.0 PRD server in our landscape. I need to set up ABAP Proxy in the server.
    They have implemented Load balancing in the ECC 5.0 PRD server. They have two servers (One Central Server and another APP Server) and one of the servers will be used at any point in time based on load conditions.
    Now where exactly i have to perform the ABAP Proxy set up and how does it work at runtime.
    Thanks in advance.
    Regards,
    Sudharshan N A

    Hey,
        refer to this.
    R3 side
    SLDCHECK
      Use this transaction to access the SLD of XI.
    SLDAPICUST
      Create an entry for respective XI server
      requires hostname, port username and ip.
      Can have multiple enteries for different servers.
      But you can check only one entry.
      based on the entry that is checked, respective SLD API will be triggered from
      SLDCHECK.
    SM59 (T type connections).
      To connect to the SLD you need 2 types of TCP/IP connections.
      1)LCRSAPRFC:-
          In this you require the gateway host(ip address) and gatewayservice(sapgw[system no.])
          YOu also need to give Program ID.
          Entry of corresponding Program ID must be maintained in SMGW.
          IN SMGW Click GoTo->logged on Clients.
          If entry is not there for corresponding XI.
          Create a communication channel in XI, pointing to R3 and give a Program ID
          in the channel. Once the channel is activated, corresponding Program ID wil
          appear in SMGW.
      2)SAPSLDAPI:-
         In this case follow the same porcedure as for LCRSAPRFC.
       As far as the Program ID is concerned te procedure mentioned above is for
       Customized RFC's
       The RFC destinations mentioned here are both standard RFC's
       Hence for these two RFC's no need to Create Program ID's. you just need to
       change the System ID of the Program ID.
       Both these RFC's are maintained in the J2ee server of XI.
    SPROXY.
       In this transcation you can check the Proxies.
       If the proxies are not activated (i.e. if the message interfaces are not active)
       this step is optional
       then you need to maintain one G type RFC destination pointing the resepctive XI server.
       In the G tpye RFC destination give the Ip adress of the XI server in the target
       host and set the path prefix as /rep.
       Goto SPROXY->Goto->connection test-> click on the table SPROXSET.
       In this table maintain enteries for ADDRESS_ONLY_FROM_SPROXSET and IFR_HTTP_DEST
       The values corresponding to these enteries will be the G tpye RFC destination.
    In order to connect R3 to the Integaration server you need to maintain H type
    The default RFC is XI_INTEGRATIONSERVER. In you need to give the Target host entry as the
    Ip address and Path Prefic as.../sap/XI/engine/?type=entry (this you can get from SXMB_ADM of XI)
    You can also create the H type RFc of your own.
    goto SXMB_ADM(r3) and open Integration engine configuration.
    regards,
        Milan

  • Web Proxy Server Load Balancing

    I deployed Sun Jave Web Proxy Server 4.0 as a Reverse Proxy. I would also like to use it as a load balancer. As per the instructions, I configured the obj.conf file as shown below
    Route fn="set-origin-server" server="https://xx.xx.xx.xx" server="https:yy.yy.yy.yy" sticky-cookie="JSESSIONID" sticky-param="jsessionid" route-hdr="Proxy-jroute" route-cookie="JROUTE" rewrite-host="true" rewrite-location="true" rewrite-content-location="true"
    But, it is not doing load balancing. It always sends to the first server (xx.xx.xx.xx). I guess that is because I used mapping as follows:
    NameTrans fn="reverse-map" from="https:xx.xx.xx.xx" to="https://server.net" rewrite-location="true" rewrite-content-location="true"
    NameTrans fn="redirect" from="http://server" url="https://xx.xx.xx.xx"
    NameTrans fn="map" from="https://server" to="https://xx.xx.xx.xx" rewrite-host="true" name="pa-server-farm1" NameTrans fn="map" from="/" to="https://xx.xx.xx.xx" rewrite-host="true" name="pa-server-farm1"PathCheck fn="url-check"ObjectType fn="block-ip"
    ObjectType fn="cache-enable" cache-auth="1" cache-https="1" query-maxlen="0" min-size="0" Service fn="proxy-retrieve"
    I don't understand how routing and mapping work togother. Any help in this regard is appreciated.

    Motor,
    the following is from the Web Proxy Sever Administration guide. Please, check the last paragraph for the explanation. Any how, the problem is simple. I am using the Proxy Server as the Reverse proxy. And at the same time, I would like to use two origin servers (for load balancing) instead of one. How do I make both load balancing and reverse proxy functions work together?
    Thanks
    To Create Regular or Reverse Mapping
    Access the Server Manager, and click the URLs tab.
    Click the Create Mapping link.
    The Create Mapping page is displayed.
    In the page that appears, provide the source prefix and source destination for the regular mapping,
    for example,
    Source prefix: http://proxy.site.com
    Source destination: http://http.site.com/
    Click OK.
    Return to the page and create the reverse mapping, for example,
    Reverse mapping:
    Source prefix: http://http.site.com/
    Source destination: http://proxy.site.com/
    To make the change, click OK.
    Once you click the OK button, the proxy server adds one or more additional mappings. To see the mappings, click the lView/Edit Mappings link. Additional mappings would be in the following format:
    from: /
    to: http://http.site.com/
    These additional automatic mappings are for users who connect to the reverse proxy as a normal server. The first mapping is to catch users connecting to the reverse proxy as a regular proxy. The �/� mapping is added only if the user doesn't change the contents of the Map Source Prefix text box provided automatically by the Administration GUI. Depending on the setup, usually the second mapping is the only one required, but the extra mapping does not cause problems in the proxy.

Maybe you are looking for