OS level load balancing in OEL

Hi,
Would like to know if we can do OS level load balancing with OEL?
I know in Windows there is Network Load Balancing NLB, that would do this, so I am hoping is there something similar in OEL?
Thanks.

Optimus prime wrote:
Would like to know if we can do OS level load balancing with OEL?Any kernel automatically "+load balances+" processing across the resources (e.g. CPUs) available to the kernel. The 2.6 kernel uses the Completely Fair Scheduler
I know in Windows there is Network Load Balancing NLB, that would do this, so I am hoping is there something similar in OEL?Kind of. There are a number of clustering options for Linux. Including commercial products like Oracle Grid.
I think the one of the oldest (and well known) Linux clustering s/w projects is Beowulf.
For networking specifically (comparing it with what I read in Microsoft's FAQ for NLB) is Linux Virtual Server. Quote:
"<i>The Linux Virtual Server as an advanced load balancing solution can be used to build highly scalable and highly available network services, such as scalable web, cache, mail, ftp, media and VoIP services.</i>"
There are also other options - such a network devices (in addition to standard switches and routers) that specifically provides load balancing for networking. Though personally, I did not like this approach much for Oracle RAC and we rolled our own load balancing using NAT and iptables.
Bonding, as mentioned above, is one of many technical considerations when implementing a load balancer. This is (in my experience) primarily for high availability - and provides redundant paths from the server to a resource. Does not need to be IP based - it can be Infiniband based too (e.g. like used by Oracle Database Machine for redundant storage fabric paths to the Exadata Storage Server).
Typically 2 separate interfaces/dual ports will be wired into separate switches that in turn will be wired into the greater network or storage system or whatever. This is then bonded on the server as a single logical interface. If an interface, port, cable or even switch fail, that logical interface still have a secondary path providing full connectivity. Bonding is discussed at http://www.linuxfoundation.org/collaborate/workgroups/networking/bonding.
This is however a very low level of dealing with load balancing (and redundancy). It alone should not be considered as a load balancing solution.

Similar Messages

Software load balancer

Hi,
os platform= oracle linux
database = 11g 11.1.0.7
apps = 12.1.2
regarding choosing load balancer which load balancer is good for Ebusiness suite instance
Hardware level or software level
kibndly advice

If we want to go with hardware level do we have to do something with Apache loadbalancer or skip that step?Which configuration you are planning to go with? You still need to do configuration changes at the application tier nodes.
If we choose Hardware level load balancer its configuration has few steps compare to software level ?Going with hardware load balancer still requires many changes and configurations at the application tier nodes as well as the hardware load balancer and I would say the steps are not less comparing to software load balancer.
what is the major difference between hardware level and software levelI believe this is not answered in any of the docs/links referenced above, so please log a SR to get the correct/proper answer.
Thanks,
Hussein

Hardware load balancing with session stickiness

Hello,
          We are looking for a hardware based solution to load balance 4
          unclustered weblogic servers. These servers are software replicas of
          each other and share a common database. We need a solution that
          provides session level server stickiness based on jsessionid as both a
          cookie and url rewrite. Currently we have Cisco load balancers which
          do not handle the url rewrite due to the fact the the load balancer
          only "sees" what is after the question mark in the url and the
          jsessionid is before the question mark. Example:
          http://somehost.com/some/url.jsp;jsessionid=26D5C566075663ABD8E17AD255974323?parm=value
          I'm sure we are not the only ones trying to do this. Any suggestions
          would be greatly appreciated.
          Thanks,
          Alan George


          Having worked on Cisco load balancer and WLS clustered, you would loose sessions
          when the requests are failed over.
          S
          "Shawn Kircher" <[email protected]> wrote:
          >
          >Has anyone got this type of scenario working where you load balance sticky
          >sessions
          >from a Cisco load balancer between non-clustered weblogic servers?
          >
          >Thanks,
          >
          >Shawn
          >
          >"Aravind Krishnasamy" <[email protected]> wrote:
          >>F5 or BigIp provides hardware level load balancing and it injects date
          >>inside weblogic cookie and maintains server affinity.
          >>Thanks
          >>Aravind
          >>"ageorge" <[email protected]> wrote in message
          >>news:[email protected]...
          >>> Hello,
          >>>
          >>> We are looking for a hardware based solution to load balance 4
          >>> unclustered weblogic servers. These servers are software replicas
          >>of
          >>> each other and share a common database. We need a solution that
          >>> provides session level server stickiness based on jsessionid as both
          >>a
          >>> cookie and url rewrite. Currently we have Cisco load balancers which
          >>> do not handle the url rewrite due to the fact the the load balancer
          >>> only "sees" what is after the question mark in the url and the
          >>> jsessionid is before the question mark. Example:
          >>>
          >>>
          >>http://somehost.com/some/url.jsp;jsessionid=26D5C566075663ABD8E17AD255974323
          >>?parm=value
          >>>
          >>> I'm sure we are not the only ones trying to do this. Any suggestions
          >>> would be greatly appreciated.
          >>>
          >>> Thanks,
          >>>
          >>> Alan George
          >>
          >>
          >

MPLS/VPN network load balancing in the core

Hi,
I've an issue about cef based load-balancing in the MPLS core in MPLS/VPN environment. If you consider flow-based load balancing, the path (out interface) will be chosen based on source-destination IP address. What about in MPLS/VPN environment? The hash will be based on PE router src-dst loopback addresses, or vrf packet src-dst in P and PE router? The topology would be:
CE---PE===P===PE---CE
I'm interested in load balancing efficiency if I duplicate the link between P and PE routers.
Thank you for your help!
Gabor

Hi,
On the PE router you could set different types and 2 levels of load-balancing.
For instance, in case of a DUAL-homed site, subnet A prefix for VPN A could be advertised in the VPN by PE1 or PE2.
PE1 receives this prefix via eBGP session from CE1 and keep this route as best due to external state.
PE2 receives this prefix via eBGP session from CE2 and keep this route as best due to external state.
                             eBGP
                     PE1 ---------CE1
PE3----------P1                          Subnet A
                     PE2----------CE2 /
                            eBGP
Therefore from PE3 point of view, 2 routes are available assuming that IGP metric for PE3/PE1 is equal to PE3/PE2.
The a 1rst level of load-sharing can be achieve thanks to the maximum-paths ibgp number command.
2 MP-BGP routes are received on PE3:
PE3->PE1->CE1->subnet A
PE3->PE2->CE2->subnet A
To use both routes you must set the number at 2 at least : maximum-paths ibgp 2
But gess what, in the real world an MPLS backbone hardly garantee an equal IGP cost between 2 Egress PE for a given prefix.
So it is often necessary to ignore the IGP metric by adding the "unequal-cost" keyword: maximum-paths unequal-cost ibgp 2
By default the load-balancing is called "per-session": source and destination addresses are considered to choose the path and the outgoing interface avoiding reordering the packets on the target site. Overwise it is possible to use "per-packet" load-balancing.
Then a 2nd load-sharing level can occur.
For instance:
         __P1__PE1__CE1
PE3           \/                   Subnet A
        \ __P2__PE2__CE2
There is still 2 MP-BGP paths :
PE3->P1->PE1->CE1->subnet A
PE3->P1->PE2->CE2->subnet A
But this time for 2 MP-BGP paths 4 IGP path are available:
PE3->P1->PE1->CE1->subnet A
PE3->P1->PE2->CE2->subnet A
PE3->P2->PE1->CE1->subnet A
PE3->P2->PE2->CE2->subnet A
For a load-balancing to be active between those 4 paths, they must exist in the routing table thanks to the "maximum-path 4 "command in the IGP (ex OSPF) process.
Therefore if those 4 paths are equal-cost IGP paths then a 2nd level load-balancing is achieved. the default behabior is the same source destination mechanism to selected the "per-session" path as mentionned before.
On an LSP each LSR could use this feature.
BR

Load balancing solution for 2-3 web servers

i am looking for a solution for load balancing between 2-3 servers in the same datacenter. i saw the ACE 4710 but that seems expensive compared to the rest of the the cisco gear in that datacenter. anybody knows what would be an entry level load balancing solution (2-3 web servers)? thanks in advance.

the Ace appliance is the new generation and if you take the lowest license 1/2 Gig you should pay a lower price.
You can still buy the old generation.
This would be the CSS11501.
If you need SSL offload this comes by default with ACE but no the CSS.
CSS11501-K has the SSL offload feature.
Also note the appliance has many more features which can be turned on by simply adding a new license.
So, if your site grows and you require more functionalities or more BW, you won't need new hardware.
Gilles.

How to change the OraSSO login link in webcache/load balance

Hi
we have 10gAsR1 installed as a Portal instance. We have 6-server
load balancer => webcache as loadbalancer (listening port 80)
Wb ch1 and wb ch2 => webcache (listening port 7777)
portal1 and portal2 => Portal listening 7778
infra =>Infrastruture with repository Portal/Oracle SSO (listening 7777)
This set up is working fine for our intranet setup, now we need to open this for couple of external clients. Well initially we need to open on the load balancer server on port 80 for external team to access, it works fine when we make it publc access.
Now when we need to make it SSO (siteminder) enables, when users click on login link it first goes oracle sso then it internally redirects the page to site minder sso.
Well, I have noted that the sso server details are mentioned in global setting sso/oid details. Since we need to open this for external client we have to add a DNS entry for this so that we can allow its access over firewall..
Now I have made DNS name change at my infrserver level, now I need to update the change at the load balancer server (where wheb chache is running).
Any one know how to chang the URL at load balancer.
I am struck at this point please suggest how should i proceed..
Thanks,

Extract from Personalization Guide - Page Footer - Personalization Considerations
* If you wish to personalize the URL that points to the Privacy Statement for a page that displays a standard Copyright and Privacy (that is, its Auto Footer property is set to true), set the Scope to OA Footer, in the Choose Personalization Context page of the Personalization UI.
* If you wish to personalize the URL that points to the Privacy Statement for a page that displays a custom Copyright and Privacy (that is, its Auto Footer property is set to false), set the Scope to Page in the Choose Personalization Context page of the Personalization UI. In the following Page Hierarchy Personalization page , identify and personalize the Privacy page element.

Error while load balancing two servers

i have two Solaris servers running 9iAS R2 OC4j.
current patch level is 9.0.2.3
i'm trying to load balance the instances according
to the instructions in this document:
Oracle9i Application Server: mod_oc4j Technical Overview
all i should need to do is run the command:
dcmctl addOPMNLink <IP>:<PORT>
but when i do this i get this error:
ADMN-906026
i could not find any info on this error with searches of:
Google, Google Groups, Oracle MetaLink, Oracle OTN.
ideas? suggestions? anything?
thanks,
.rich

i just tried running a "dcmctl getError", and got this:
ADMN-906026
This Oracle9iAS instance is currently using a database repository to store configuration information. The OPMN link functionality is not supported when a database repository is being used. An Oracle9iAS cluster should be created to associate Oracle9iAS instances when using a repository.
the two OC4J instances in question are associated with an Infrastructure instance on their respective servers. do i need to de-couple the OC4J instances? or create a "cluster of one" instance?
.rich

Load Balancing, Server and / or Client ?

Hi
I am experiencing a problem with the connection pooling in odp.net. I have a simple test app that creates a connection, executes a query, populates an object then closes the connection. I have found that when I have client side load balancing on via the odp.net connection string property many connections are made unnecessary (sometime the actual number created reaches the max pool size but the numbers differ randomly). It appears that rather than a free connection in the pool being used more connections are being created which defeats the point of having a connection pool. I do have server side load balancing configured correctly also. Due to this finding can someone possibly answer the following questions.
a) Do I need both server side and client side load balancing set?
b) If I do why is the above behaviour being seen? If not could you give me a short explanation as to why not?
Current set up is 11g (patched to 6, awaiting 7 to be applied) RAC, 2 nodes.
Below is the C# code used while testing this. The table queried is a simple person table containing 16000 rows if data.
OcConnection = "User Id=XXX; Password=XXX; Connection Lifetime = 60; Data Source=(DESCRIPTION=(ADDRESS_LIST=(FAILOVER=on)(LOAD_BALANCE=off)(ADDRESS=(PROTOCOL=tcp)(HOST=XXX)(PORT=1521))(ADDRESS=(PROTOCOL=tcp)(HOST=XXX)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=MyFirstTest))); Pooling=true; HA Events = true; Load Balancing = true";
Code:-
Oracle.DataAccess.Client.OracleConnection con;
con = new Oracle.DataAccess.Client.OracleConnection();
con.ConnectionString =OcConnection;
con.Open();
// the command object to use for this test
OracleCommand cmd = con.CreateCommand();
cmd.CommandText = "select * from PERSON";
OracleDataReader rdr = cmd.ExecuteReader();
List<test> listTest = new List<test>();
while (rdr.Read())
test dc = new test();
if (!rdr.IsDBNull(0))
dc.id = Convert.ToInt32(rdr.GetValue(0));
if (!rdr.IsDBNull(1))
dc.forename = rdr.GetString(1);
if (!rdr.IsDBNull(2))
dc.surname = rdr.GetString(2);
if (!rdr.IsDBNull(3))
dc.street = rdr.GetString(3);
if (!rdr.IsDBNull(4))
dc.city = rdr.GetString(4);
if (!rdr.IsDBNull(5))
dc.postcode = rdr.GetString(5);
if (!rdr.IsDBNull(6))
dc.country = rdr.GetString(6);
if (!rdr.IsDBNull(7))
dc.email = rdr.GetString(7);
if (!rdr.IsDBNull(8))
dc.dateadded = rdr.GetDateTime(8);
if (!rdr.IsDBNull(9))
dc.randWords = rdr.GetString(9);
if (!rdr.IsDBNull(10))
dc.uniqueNumber = Convert.ToInt32(rdr.GetValue(10));
listTest.Add(dc);
rdr.Close();
con.Close();
rdr.Dispose();
cmd.Dispose();
con.Dispose();
Thanks for your time
Victoria

Here are the HTTP Headers as monitored on the client side. Notice the good.txt file includes a GET as it's initial request. All works fine in this case. However, the initial request in the bad.txt is a POST. This is odd since the URL was opened using the same shortcut in both incidents and the browser was closed between each trace that was taken. I've also reviewed the shortcut with notepad to verify it does not include unwanted data such as the JSESSIONID info....etc.
Once you have reviewed the HTTP headers, I have these questions.
1. IIS is sending the 100 Continue messages as you mention, but why is the CSS injecting the cookie in a 100 response that is not typically processed by the client? The bad.txt file shows the client receiving two ARPT cookies because the first cookie in the 100 continue response was ignored.
2. I know Cisco is not really in the business of troubleshooting browser behaviour. But do you know why the browser would behave differently....GET in one request and a POST in the next? We do not wish to get into modifying the browser, so I'm hoping we can provide a solution on the server side that will allow the browser to function this way if it chooses to do so. Do you think it would make sence to push the state management up a level to the cookie handed out by JRUN? This way, the cookie would not be handed back in a 100 response from IIS, and we could tell the CSS to monitor the JRUN cookie. Of course this would require we determine how to manage this cookie either by modifying to cookie to have static data for each server, or by using the right method of hashing...etc.
Chris

How can I support a health check, from a load balancer?

My company has load balancers which use health checks to determine if the end point is available for client traffic. The basic health check is a tcp ping, and will tell you if the device is on the network. The next level of health check is an http request. This request, and the response are static, you can’t create your own version of the request and response. The standard request is this:
     http://host:port/healthcheck/hc.html
The standard response is this:
     “The server is available”
I want to use the load balancer as part of my total deployment. The problem is that I am not seeing how to support this health check request and response in the MDEX engine. What I see is this request
     http://host:port/admin?op=ping
Will return this response
     dgraph <host>: <port> responding at <day month year time>
It is nice that there is a built in ping, but I am not able to make use of it. I am new to Endeca and still poking around. The dgraph process listens on a port set up in <…>/config/script/AppContext.xml
<dgraph id="Dgraph1" host-id="MDEXHost" port="3281">
<properties>
<property name="restartGroup" value="A" />
<property name="updateGroup" value="a" />
</properties>
<log-dir>./logs/dgraphs/Dgraph1</log-dir>
<input-dir>./data/dgraphs/Dgraph1/dgraph_input</input-dir>
<update-dir>./data/dgraphs/Dgraph1/dgraph_input/updates</update-dir>
</dgraph>
(I am not using the default port, as I only have an instance on a shared server and have to worry about port clashing. But that is a different thread.)
In a standard tc Server install I can support this health check by doing this:
* Create a directory named “healthcheck”, in the “webapps” directory.
* Place a file name “hc.html” in that directory, which contains “The server is available”
The one hack which comes to mind is to write a servlet which would be able to be a smart proxy for the load balancer health check. It would pass along any regular traffic to the MDEX engine. But if the request was a health check it would send “admin?op=ping” to the MDEX engine, and for a good response from the engine, create and pass back the correct response to the load balancer.
Ideas, comments, flames, …
Thanks

Hi, we are using following String to test the MDEX ping response but we get the invalid version formation on dgraph.log -
following is on F5
GET /admin?op=ping HTTP/1.1/r/nHost:myhost.endeca.com:19000/r/nConnection:close/r/n/r/n
Following gets logged on Dgraph.log
WARN 09/05/12 05:30:03.799 UTC (1346823003799) DGRAPH {dgraph} Invalid version format in 'HTTP/1.1/r/nHost:myhost.endeca.com:19000/r/nConnection:close/r/n/r/n'
Please let me know - if you have any suggestions to solve this issue.
I know that it works from browser and wget from unix with following commands.
wget http://myhost.endeca.com:19000/admin?op=ping - from unix command line
from browser:
http://myhost.endeca.com:19000/admin?op=ping
Thanks,
Ram

Store Asymmetric Key Container In Load Balanced Cloud Environment

I've been tasked with signing some data with the
RSACryptoServiceProvider.SignData() Method. In order to generate the public and private key i've used the RSACryptoServiceProvider and passed a keycontainername in order to store the keys safely.
When i run the MSDN example
to generate a set of public/private keys on my machine with the fixed keycontainername, the expected public / private keys are generated every time the same.
This will work fine on a single server environment, however, we are operating on an elastic environment where the servers are load balanced. If i encrypt the data with a private key on any one single machine and store this data in through the RSACryptoServiceProvider
the data will only exist at the machine level. Each machine will use a different key to sign the data and the user of the public key won't be able to verify the signature.
Is it that important that i use the RSACryptoServiceProvider to store the private key, the example is explicit in that i should never store the key in a text file but why is this more of a risk than storing the keycontainername in a text file?
Thanks
Aaron

Yes, It is important. Per my understanding, there is a X509Certificate2 class to create RSACryptoServiceProvider to get a private key. The certificate and private key itself would be kept in the
Windows certificate store. You can then limit access to the private key through the certificate store to certain accounts.

Message load balancing in PI 7.0

Hi Experts,
We have the below requirement. Please suggest a way to make it feasible.
There would be a threshold limit for the count of messages that are processed by a communication channel.
The messages being processed by a communication channel have to be counted for a day and if the limit is crossed, the channel has to stop processing the messages for that day.
We have only File and JMS communication channels in our landscape.
This activity is being done for load balancing on the system per interface.
Please suggest if there is any possible way to achieve this.
If this is not possible, please suggest any other possible way to achieve the load balancing.
Thank you.
Regards,
Subbu

Hi Subbu,
You can try this below solution,
Maintain table in SAP PI (ABAP Stack),evry time when interface executes enter count value in table, next time exeuction read old count value and update new on in Table.
once coutn reaches max value then you can kill message in mapping level.
But this is not good desisgn..just idea thats it.
Regards,
Raj

Wgate Load Balancing Problem

Hi Folks,
We have ITS 6.20 Patch level 33 installed which connects to our R/3 system. We are trying to add multiple Agate servers (not multiple Agate processes) to one Wgate. We installed agates on two hosts, host1 and host2. We then installed wgate on host1 which we connected during the time of installation to agate on host2. It connected fine and we were able to get the webgui and also able to login to R/3 system. At that time we had problem in going to native ADM instance as we were getting http 500 error (we had re-installed ADM instance on both the hosts after the whole exercise of installating agate and wgate). Hoping that we can solve native ADM problem later, we added the the second agate which is on hosts1(the same host on which wgate is) by adding the entry for agate 2 in the wgate registry xml file.
<key name="Agates">
      <key name="Agate1">
       <value name="Host" type="text">host2</value>
       <value name="PortAGate" type="text">sapavw00_******</value>
       <value name="PortMManager" type="text">sapavwmm_******</value>
       <value name="Type" type="text">1</value>
       <value name="SncNameAGate" type="text"/>
       <value name="SncNameWGate" type="text"/>
       <value name="MultiProcess" type="text">no</value>
       <value name="Available" type="text">yes</value>
      </key>
      <key name="Agate2">
       <value name="Host" type="text">host1</value>
       <value name="PortAGate" type="text">sapavw00_******</value>
       <value name="PortMManager" type="text">sapavwmm_******</value>
       <value name="Type" type="text">1</value>
       <value name="SncNameAGate" type="text"/>
       <value name="SncNameWGate" type="text"/>
       <value name="MultiProcess" type="text">no</value>
       <value name="Available" type="text">yes</value>
      </key>
The second agate added fine and is doing load balancing as well as we can see requests getting routed to both the agate in the load balancing screen. However we are not able to access the global.srvc file under configuration->Performance->global services->All settings as we are getting the following message:
Error loading service file "global.srvc"!
Also when we go to services under configuration, we are getting a message "error accessing services directory!"
In default R/3 system also all the fields are empty although we had given the application server details while installing both the agates.
We are getting the below messages in diagnostics.log file:
2010-11-22T12:30:04.401 --- log opened -
A 2010-11-23T13:55:53.346 [agate,sapdiag ] 00, s00000000061DB140, CsRead returned rd=-100
2010-11-23T14:17:06.863 --- log closed -
2010-11-23T14:17:07.753 --- log opened -
A 2010-11-23T14:30:48.618 [agate,sapdiag ] 00, s00000000061DB220, Cannot handle request from login
A 2010-11-23T14:38:45.615 [agate,        ] 00, s0000000000000000, WorkDoGetReq: ContReceiveContainer() failed, rc=0xffffffff
A 2010-11-23T14:38:45.615 [agate,        ] 00, s0000000000000000, WorkDoWork: WorkDoGetReq() failed, rc=0xffffffff
A 2010-11-23T14:38:45.677 [agate,sapxgdk ] 00, s0000000000000000, ContSendContainer: FAILED, send length is 0
A 2010-11-23T14:38:50.958 [agate,        ] 00, s0000000000000000, WorkDoGetReq: ContReceiveContainer() failed, rc=0xffffffff
A 2010-11-23T14:38:50.958 [agate,        ] 00, s0000000000000000, WorkDoWork: WorkDoGetReq() failed, rc=0xffffffff
A 2010-11-23T14:38:50.974 [agate,sapxgdk ] 00, s0000000000000000, ContSendContainer: FAILED, send length is 0
Please let me know if this procedure of adding the agate was wrong or there are some parameter settings that we may have missed. Would it have been better to go for a single host wgate+agate installation on host1 and then add agate2 on host2?

Hi Edgar,
Thanks for the reply. I had re-installed ADM instance on both the hosts after the whole exercise of installing agate and wgate.
Anyways, Now we have uninstalled the earlier instances on both hosts and installed wgate+agate on host1 as a single host installation and agate2 on host2. Then we added agate2 to wgate1 and load balancing is working fine. Now the issue of not being able to access the service file and directories, etc has also been resolved. The only problem that remains is that we are not able to go into the native ADM. We get a http 500 error, although the redirect URL is correct. Is the any additional setting required for that to happen?

Load balancing testing.

Hi Gurus,
For load balancing purpose we have installed sap in one more box (crm
quality system). now i need to test whether load balancing is
happening or not in below scenarios..
1.) Test the Load balancing on the C.I and D.I.
2.) Take Multiple Logins and compare the Load Balancing
3.) Maintain the Variation of Job such as on-line process and background.
4.) Monitor the Login System for each Variation
So first i tested the transaction codes like sm04, and smlg and checked with users and how much bytes they are occuping i have tested.
please give me your inputs in which way i could test it better and what are all the various aspects??
Thanks
Sahad

HI ,
For load balancing you can check the load on the Ci and DI .
Just goto SM51 ,there you shall see the CI and the DI there.double click on the ci.
Now run St02 and st03n and St06 and check the performance.
Do the same for the Application Server.
I shall suggest that if you have more application server Just Remove the CI from the logon load balancing to have better performance.
for more details go through this Link to check logon load balancing at os level
http://help.sap.com/saphelp_nw70/helpdata/en/64/32a5682e6a4e0cbb3f8a33970d11a8/content.htm
Thanks
Rishi Abrol

Load balancing across multiple application servers not working with JCo RFC

We have a problem where inbound messages to the Mapping Runtime engine (ABAP -> J2EE) are not load balanced over application servers. However, load balancing does take place across server nodes within one application server.
Our system comprises of the following:
Central Instance (2 X server nodes)
Database Instance
2 X Dialog Instances (with 2 X server nodes each)
The 1st application server that starts is usually the one that is used for inbound messaging.
We have looked at the sap gateway configuration and have tried various options without much luck:
i.e.: local gateways vs. one central gateway, load balancing type by changing parameter gw/reg_lb_level, see: http://help.sap.com/saphelp_nw70/helpdata/EN/bb/9f12f24b9b11d189750000e8322d00/frameset.htm
Here are our release levels:
SAP_ABA     700     0012     SAPKA70012
SAP_BASIS     700     0012     SAPKB70012
PI_BASIS     2005_1_700     0012     SAPKIPYJ7C
ST-PI     2005_1_700     0005     SAPKITLQI5
SAP_BW     700     0013     SAPKW70013
ST-A/PI     01J_BCO700     0000          -
Any help would be greatly appreciated.
Many thanks

Tim
Did you follow the guide here:
How to Scale Up SAP Exchange Infrastructure 3.0
Learn what the most likely scaled system architecture looks like, and read about a step by step procedure to install additional dialog instances. The guide also walks you through additional configuration steps and the application of Support Package Stacks.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/c3d9d710-0d01-0010-7486-9a51ab92b927
We followed this guide for XI3.0 and PI7.0 and works successfully!

Webdispatcher SSL load balance server mismatch errors

We are setting up a webdispatcher to access an Enterprise Portal with multiple instances. Currently it is working but we are having to overide host mismatches. in webdispacther log we see
[Thr 4856] Mon Mar 07 11:38:02 2011
[Thr 4856] MatchTargetName("aaa.mycompany.com", "CN=bbb.mycompany.com, OU=xxx, O=ooo, L=ccc, SP=sss, C=US") FAILS
[Thr 4856] SSL NI-sock: local=##.21.13.137:50746 peer=##.21.13.131:51001
[Thr 4856] <<- ERROR: SapSSLSessionStart(sssl_hdl=0000000008565100)==SSSLERR_SERVER_CERT_MISMATCH
The Portal instances are on
aaa.mycompany.com
bbb.mycompany.com
Currently have a CA approved certificate for each server installed in the portal. Dispatcher on aaa uses aaa cert, dispatcher on bbb uses bbb cert.
Message server is on aaa, but it will load balance and place you on either instance.
have following related parameters
wdisp/ssl_encrypt = 2
wdisp/ssl_auth = 2
wdisp/ssl_cred = C:\usr\sap\XXX\W00\sec\XXX.pse
wdisp/ssl_certhost = aaa.mycompany.com
wdisp/ssl_ignore_host_mismatch = TRUE
C:\usr\sap\XXX\W00\sec\XXX.pse has ssl cert of both aaa and bbb servers.
All seems to be working, as users are load balancing. They are not getting certificate mismatches in their browser anymore. We are getting the SSSLERR_SERVER_CERT_MISMATCH errors, but the messages do not seem to cause an issue since we have wdisp/ssl_ignore_host_mismatch set.
Can we eliminate those mismatch errors instead of masking the problem with wdisp/ssl_ignore_host_mismatch?
Should each portal instance have their own ssl cert, or is there a way to use one cert such as the aaa.mycompany.com cert on each portal instance? It seems like that might eliminate the mismatch errors. However, what happens when you go directly to the bbb.mycompany.com portal instance? there is a certificate error if you specify aaa's and you go to bbb. I was wondering if the wdisp/ssl_auth and wdisp/ssl_certhost are valid in the portal system so that each server uses the aaa server and certificate. I could not tell if this parameter is valid for java-only portal systems.
Thanks for your help.
Edited by: Fett Patrick on Mar 7, 2011 8:35 PM

Thank you Martin for your prompt reply. Can you clarify please, can we use the wdisp/ssl_certhost parameter in the instance profiles of the portal instances? I wasn't sure if that is only valid for webdispatchers or can also be used in abap/java systems?
We orginally had the aaa server certificate listed for each dispatcher in the portal under ssl provider runtime server identity. That caused a browser "certificate error" when accessing the bbb server. So we then installed an ssl certificate for bbb for its dispatcher. We could then go to either server with no browser "certificate mismatch" error.
Then when we added the webdispatcher, we started getting the server mismatch errors at the webdispatcher level. If the wdisp/ssl_certhost can be used in the portal profiles, then that would hopefully resolve direct access or via web dispatcher aceess mismatches. I.E. only the aaa ssl certificate would be used and parameters would be set at both the webdispatcher and portal profiles
Thanks, Pat.

OS level load balancing in OEL

Similar Messages

Maybe you are looking for