Problem accessing VIP via HTTP from service servers

I thought I had a pretty simple config on my CSS11501- but have run into an issue I'm having trouble resolving.
I have two unix webservers (IPs are .99 and .100) on ports e1 and e2, and my uplink for the CSS is on port e8.
The CSS has a VIP address (.105) that load balances HTTP requests to .99 and .100.
From .99 and .100 I can ping the VIP address - and from outside the CSS - almost everything works great for the site I'm hosting on .105.
I do have two web pages however that attempt to make calls directly to the VIP address - I noticed I can't load those pages.
Nor can I just browse the website on the VIP address from either of the servers. The webservers can browse their own pages via IP, and each other's pages via IP.
Just not pages on the VIP.
I think it may be a case of the servers thinking that IP spoofing is occurring - or maybe I missed something simple in the config.
Here's what I see in a 'show flows' when I try and browse the VIp address (.105) from the .100 server.
Src Address SPort Dst Address DPort NAT Dst Address Prt InPort OutPort
65.207.212.100 53758 65.207.212.105 80 65.207.212.100 TCP e2 e2
65.207.212.100 80 65.207.212.100 53758 65.207.212.100 TCP e2 e2
Since it appears that the CSS NATs the request to the same IP the server is using, will the reply from the server ever make it back to the CSS?
Or does it think that it shouldn't need to reply - becauuse it is that IP?
Should I be able to browse the VIP site from the webservers.
Below is the full CSS config if someone can help me figure this out.
Thanks in advnace for any and all help.
Paul
CSS11501# show run
!Generated on 08/30/2005 12:08:11
!Active version: sg0750004
configure
!*************************** GLOBAL ***************************
no restrict web-mgmt
acl enable
logging subsystem acl level debug-7
ip route 0.0.0.0 0.0.0.0 65.207.212.1 1
!************************** CIRCUIT **************************
circuit VLAN1
ip address 65.207.212.104 255.255.255.0
!************************** SERVICE **************************
service www2
keepalive type tcp
keepalive port 80
ip address 65.207.212.99
active
service www3
keepalive type tcp
keepalive port 80
ip address 65.207.212.100
active
!*************************** OWNER ***************************
owner WWW
content rule1
vip address 65.207.212.105
add service www2
add service www3
port 80
protocol tcp
advanced-balance sticky-srcip-dstport
active
!**************************** ACL ****************************
acl 1
clause 10 permit any any destination any
apply circuit-(VLAN1)

Paul,
simple config and well-know basic mistake :-)
If a server tries to access the vip, the css will forward the request to the same server or the other one.
Both ways, the response from the server will go directly to the client-server, bypassing the CSS.
For this to work, you need to do client nat so the server making the HTTP connection appears to be coming from the CSS.
Create a group like this
group servernat
vip addr 65.207.212.105
active
and add the following to your acl
clause 5 permit any 65.207.212.99 destination content www/rule1 sourcegroup servernet
Do a similar clause for the 2nd server.
re-apply the acl.
Everything should work now.
Gilles.
Thanks for rating.

Similar Messages

Problem accessing em via browser

Hi,
Anyone know what the problem? I got the error message from the sysman/log folder. Anyone know where i can find the documentation of the setting up of oem?
Beside starting the dbconsole service, what others services and things need to be started or done before i can use em via browser. (http server, any agents, set up repository)
Currenlty I managed to load the http://<host>:5500/em page. Although the database instance is already started up, the web page still indicate that the db instance is down and need to be started up.
Check the sysman/log folder and found the below error message from the trace files. Anyone know what the problem?
2005-03-28 12:47:44 Thread-5 ERROR command: nmejcn:
received no status header from epository at
http://slasun11:5501/em/upload/ sponse header from repository
Thread-810 ERROR pingManager: nmepm_pingReposURL:
Did not receive a response header from repository

According to http://support.apple.com/kb/PH2618 you should be able to access it via a browser by going to https://www.icloud.com/#mail

SL5 client accessing an secured (HTTPS) Odata service

I have a SL5 client that is hosted on Windows Azure.
I have some OData WCF services that work perfectly fine. Calling the odata services from the SL5 client works fine both running locally and remotely on Azure. The problem is https. I've uploaded the bought certificate and I can call the odata wcf services
secure by using https from Fiddler2 and it gets the proper results.
When I run the SL5 client locally in my VS2012 environment it also works fine calling the https endpoint. After deployment to Windows Azure the client stops working and the calls to the https endpoints don't work anymore :-(
anybody has a clue?

hi RiccardoBecker,
Thanks for posting!
Base on my experience, when hosted WCF service on windows azure, we could use Service Bus (http://msdn.microsoft.com/en-us/library/windowsazure/ee173579.aspx )to access
it on client side in intranet or internet. So if you used in intranet, I suggest you could create service bus to access it. Or if you use internet, I suggest you check your endpoint address setting. You need use your cloud address to access
wcf service on client side. You could download those code sample (http://code.msdn.microsoft.com/windowsazure/CSAzureWCFServices-20c7d9c5 &
http://www.codeproject.com/Articles/188464/Host-WCF-Services-in-an-Azure-Worker-Role ) and try it.
Any question, please let me know.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Problem accessing mail via Safari browser

How do I access iCloud Mail via my Safari browser on my iPhone? If I go to iCloud.com it just offers me the option to install it on my phone.
The problem is, I already have it installed on my phone and it works fine EXCEPT at my new job - the wifi is not very good and I can access internet/Facebook etc but every time I try and load email it always says it 'cannot find the server .' I therefore tried to access email via safari browser - my other email provider works fine that waybut iCloud doesn't even give me the option to login, just keeps suggesting I install it.
Any ideas how I can check iCloud email at work? Can't do it on work computers, site is blocked....and there is no 3G/4G signal.
Thanks for any advice!

According to http://support.apple.com/kb/PH2618 you should be able to access it via a browser by going to https://www.icloud.com/#mail

Having problem access the EJB 3 from Web Component

Hi ,
I have an EJB 3 entity AuctionItem and a session ItemProcessor only implements the local interface IItemProcessor, then I use a servlet to access the findAll method in the ItemProcessor. I've created a Enterprise Applicaiton project to contain the ejb jar and the war file, but after I deploy the ear successfully, I couldn't access to my servlet through http://localhost:8080/AuctionWeb/AuctionServlet, it keeps giving me error like follwoing. Do you know why, your help will be very appreciated !
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
java.lang.NullPointerException
     at web.AuctionServlet.doGet(AuctionServlet.java:43)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:397)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:278)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
     at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:240)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:179)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:73)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:182)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at com.sun.enterprise.web.VirtualServerPipeline.invoke(VirtualServerPipeline.java:120)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:137)
     at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
     at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
     at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:231)
     at com.sun.enterprise.web.connector.grizzly.ProcessorTask.invokeAdapter(ProcessorTask.java:667)
     at com.sun.enterprise.web.connector.grizzly.ProcessorTask.processNonBlocked(ProcessorTask.java:574)
     at com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:844)
     at com.sun.enterprise.web.connector.grizzly.ReadTask.executeProcessorTask(ReadTask.java:287)
     at com.sun.enterprise.web.connector.grizzly.ReadTask.doTask(ReadTask.java:212)
     at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:252)
     at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:75)
My code sample:
public class AuctionServlet extends javax.servlet.http.HttpServlet implements javax.servlet.Servlet {
      @EJB
         private IItemProcessor itemProcessor;
     public AuctionServlet() {
          super();
     protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
          response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        out.println("<html>");
        out.println("<head>");
        out.println("<title>Servlet AuctionServlet</title>");
        out.println("</head>");
        out.println("<body>");
        out.println("<h1>Servlet AuctionServlet at " + request.getContextPath () + "</h1>");
        List items = itemProcessor.findAll();
       for (Iterator it = items.iterator(); it.hasNext();) {
        AuctionItem elem = (AuctionItem) it.next();
       out.println(" <b>"+elem.getItemid()+" </b><br />");
       out.println(elem.getTitle()+"<br /> ");
        out.println("</body>");
        out.println("</html>");
.....And the session bean is :
package sessions;
import javax.annotation.Resource;
import javax.ejb.Local;
import javax.ejb.Stateless;
import javax.persistence.*;
import javax.sql.DataSource;
import java.util.List;
import entities.AuctionItem;
@Stateless(name = "ItemProcessor")
public class ItemProcessor implements sessions.IItemProcessor {
     @PersistenceContext
     EntityManager entityManager;
     public Long createItem(String title, Double value, String description,
               String status) {
          AuctionItem item = new AuctionItem();
          item.setTitle(title);
          item.setValue(value);
          item.setDescription(description);
          item.setStatus(status);
          entityManager.persist(item);
          return item.getItemid();
     public String findItemByKey(Long id) {
          AuctionItem item = entityManager.find(AuctionItem.class, id);
          return item.getTitle();
     public List findAll() {
        return entityManager.createQuery("select object(o) from AuctionItem as o").getResultList();
}

The most common reason for this failure is if your web.xml does not refer to the latest web application
.xsd :
<web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http
://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/x
ml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
Otherwise, the web application is considered to be a J2EE 1.4 application and annotations
are not processed. If that's not the case you can also run the application through the
verifier to see if it identifies any issues.

Accessing NetStorage via WebDAV from Windows 7

Until last week we were running Netware 6.5 SP8. I was aware that accessing NetStorage via WebDAV (using Microsoft Web Folders) does not work on Windows 7. Now I migrated the server to OES 11 SP2 and I decided to re-investigate the issue. Currently, I still can't access NetStorage from WebDAV on Windows 7. When I try to add new network location in Windows, enter the correct URL and I'm prompted for username and password. After entering the correct password, the username/password window re-appears. On entering the username and password second time, I get error message "The folder you entered does not appear to be valid. Please choose another."
Is the situation still such that accessing NetStorage via Microsoft Web Folders on Windows 7 does not work, or do I have something misconfigured?
From web browser, there are no problems accessing NetStorage.

Originally Posted by vatson
Until last week we were running Netware 6.5 SP8. I was aware that accessing NetStorage via WebDAV (using Microsoft Web Folders) does not work on Windows 7. Now I migrated the server to OES 11 SP2 and I decided to re-investigate the issue. Currently, I still can't access NetStorage from WebDAV on Windows 7. When I try to add new network location in Windows, enter the correct URL and I'm prompted for username and password. After entering the correct password, the username/password window re-appears. On entering the username and password second time, I get error message "The folder you entered does not appear to be valid. Please choose another."
Is the situation still such that accessing NetStorage via Microsoft Web Folders on Windows 7 does not work, or do I have something misconfigured?
From web browser, there are no problems accessing NetStorage.
My limited understanding is that MS seriously mangled/changed WebDav in Windows 7 and if you google for webdav webfolders and windows 7 you'll find all sorts of differing things that may be needed for things to work.
I do know that you can download the free NetDrive client software somewhere and that should work on Win7 against NetStorage.
I vaguely recall there was something special you had to do with Web Folders on Windows 7 if you wanted to use WEBDAV against FILR, so perhaps those same steps are necessary against NetStorage.
Also, are you accessing NetStorage directly, or going through a reverse proxy such as NAM?

Problem accessing LDAP via sqlnet

Hello,
I have installed OID 10.1.2 for accessing targets databases in 9.2, with oracle enterprise user, and that run correctly when I access to the taget database in local.
If I use sqlnet I receive the error 28030!
If someone have an idea!
Thanks

ORA 28030
Text: Server encountered problems accessing LDAP directory service
http://www.oracle.com/technology/products/oid/oidhtml/sec_idm_training/html_masters/handson.htm
or
did you see the How to set up Enterprise User Security
http://www.oracle.com/technology/deploy/security/db_security/howtos/eus-how-to.html
regards,
--Olaf

Problem accessing Sql server Procedure from Crystal with JDBC driver

I have some Crystal reports using SQL Server procedures, most of them are working very well; however, I have 2 that have problems accessing sql server procedures. These reports are working using OLE DB connection without problem, but when I try to relocate the connection to JDBC Crystal generates an error like that the procedure not return records.
The procedure is working with other products including OLE DB connections from crystal.
What can I do?
Thanks in Advance,
JaimeC

I am using:
Crystal report 11 - 11.0.0.1282 and Crystal 2008 = 12.0.0.683
SQL Server 2005 - Microsoft SQL Server Management Studio Express 9.00.4035.00
Windows XP
I have discovered that the procedures create and work temporary tables. In other cases when is working ok, the procedures have not working temporary tables.
Thanks,
Jaime Carrillo

Access Essbase via MS Reporting Services

Does anyone know if it is possibe to connect and retrieve data from an Essbase cube via Microsoft Reporting Services? Any assistance would be appreciated.

I have trying to figure this out also. Please respond if you figured out if this can be done.

Can you access BIEE via HTTPS?

We're in the process of implementing BIEE. However, it must be in a secure environment. Does anyone know if u can access this tool via https?

Yes, this is possible. See chapter 6 of the deployment guide: http://download.oracle.com/docs/cd/E10415_01/doc/bi.1013/b40058.pdf
10.1.3.2 introduced SSL everywhere support.
Bryan

Problem accessing WL6.1 server from IE browser

          Hello,
          Im currently running weblogic server 6.1sp4 on microsoft xp home edition.
          I started weblogic using the startWebLogic.cmd file. For the most part it looks
          like the server starts up correctly but when I try to access the index.html page
          through internet explorer 6.0 by typing http://localhost:8001/index.html I get
          a "The page cannot be displayed" error.
          The server log looks alright upon start up.
          below is the output from the logs.
          C:\bea\wlserver6.1\config\mydomain>startWebLogic.cmd
          C:\bea\wlserver6.1>set PATH=.\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\Syst
          em32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel
          C:\bea\wlserver6.1>set CLASSPATH=.;.\lib\weblogic_sp.jar;.\lib\weblogic.jar
          C:\bea\wlserver6.1>echo off
          * To start WebLogic Server, use the password *
          * assigned to the system user. The system *
          * username and password must also be used to *
          * access the WebLogic Server console from a web *
          * browser. *
          C:\bea\wlserver6.1>"C:\bea\jdk131\bin\java" -hotspot -ms64m -mx64m -classpath
          ;.\lib\weblogic_sp.jar;.\lib\weblogic.jar" -Dweblogic.Domain=mydomain -Dweblogic
          .Name=myserver "-Dbea.home=C:\\bea" -Dos.name="windows 2000" -Dweblogic.manageme
          nt.password=arnold79 -Dweblogic.ProductionModeEnabled=true "-Djava.security.poli
          cy==C:\bea\wlserver6.1/lib/weblogic.policy" weblogic.Server
          Starting WebLogic Server ....
          <Nov 22, 2003 10:42:07 PM EST> <Notice> <Management> <Loading configuration file
          .\config\mydomain\config.xml ...>
          <Nov 22, 2003 10:42:08 PM EST> <Notice> <WebLogicServer> <Starting WebLogic Admi
          n Server "myserver" for domain "mydomain">
          <Nov 22, 2003 10:42:10 PM EST> <Notice> <Management> <Applications will only be
          copied to managed servers when needed. To force applications to be copied to man
          aged servers when they are started, specify system property -Dweblogic.managemen
          t.forceApplicationCopy=true on your startup command.>
          <Nov 22, 2003 10:42:11 PM EST> <Notice> <Management> <Application Poller not sta
          rted for production server.>
          <Nov 22, 2003 10:42:11 PM EST> <Notice> <WebLogicServer> <ListenThread listening
          on port 8001>
          <Nov 22, 2003 10:42:11 PM EST> <Notice> <WebLogicServer> <SSLListenThread listen
          ing on port 8002>
          <Nov 22, 2003 10:42:12 PM EST> <Notice> <Management> <Starting discovery of Mana
          ged Server... This feature is on by default, you may turn this off by passing
          -D
          weblogic.management.discover=false>
          <Nov 22, 2003 10:42:12 PM EST> <Notice> <WebLogicServer> <Started WebLogic Admin
          Server "myserver" for domain "mydomain" running in Production Mode>


"Anant Kadiyala" <[email protected]> wrote in message
news:3f79ca48$[email protected]..
>
Have anyone browsed the Embedded LDAP server successfully in 8.1GA usingan external
LDAP browser?
I followed instructions onhttp://edocs.bea.com/wls/docs81/secmanage/ldap.html#1100263
but hit a road block. The broswer is not able to connect when using UserDN. When
I connect using anonymous mode, it is able to connect fine.
Is there a bug in the 8.1 Embedded LDAP server?
Are you using the cn=Admin dn or a user dn? If you are using a user dn, you
will need to
modify acls.prop.

A very odd question about accessing cube via HTTP PUMP

hi there:
Everything was fine a couple of days ago when I used excel to connect to cube. Today, when I use excel -> from Other sources, I can select the AS database but can not see the cube at all... The odd thing is that if I choose to use Existing Connections
which contains the connection to the CUBE before, after put my user id and password, I am able to connect and navigate cube data.
There is a role for the AS database and myself has been granted as Full control ( administrator). I've also switched to SSMS and access cube over there directly, no issues at all.
Question: why excel is not allowing me to see the list of cubes for an AS database???
Thanks
--Currently using Reporting Service 2000; Visual Studio .NET 2003; Visual Source Safe SSIS 2008 SSAS 2008, SVN --

Hello,
How have you setup permissions for the HTPP access. If e.g. IIS and SSAS running on different machines, the permissions settings are a little bit difficult. So may a different user is used and that one may don't have permissions to access the cube.
See Configure HTTP Access to Analysis Services on Internet Information Services (IIS) 7.0 => Step 3: Configure IIS authentication and add the extension + Step 5: Grant data access
permissions
Olaf Helper
[ Blog] [ Xing] [ MVP]

Problems Accessing Gracenote CDDB: "HTTP Processing Error" Help Please

I'm hoping for a bit of help here people, having a few problems I would be grateful for your assistance with!
I've been having trouble accessing Gracenote for a couple of months now. What was happening was that when I tried to search for the CD info on Mediasource, the gracenote icon would appear in the top left corner, and the screen loading as if obtaining the info, but then nothing happens and the info is left blank.
I have tried everything I know, and everything that has been suggested here! I have altered the ZoneAlarm settings, deleted the cddb file, checked that the settings in Mediasource are correct, downloaded the latest drivers, re-registered for gracenote manually and various other things. None of these have solved the problem.
Finally, I decided to completely re-install Creative Mediasource. After doing this, I tried to access gracenote again, and was asked to re-register. I did this, but then recieved an error message stating "Internal Socket Error". THis happened a couple of times, before the message was replaced with "HTTP Processing Error", whenever I try to access gracenote. It still will not recognise the music!
Basically, I am at the end of my knowledge and the end of my patience!!! I really don't know what more to do and so I'm throwing this open to you guys - any help would be so, so appreciated! The only this I can think is that my dad got an ipod two months ago, and has installed itunes on the PC. From what I understand, that uses gracenote too - are the two programmes clashing? If so, can anyone suggest a way I can alter this?
You're my last hope before I'm condemmed to a lifetime of filling in CD's by hand!!! I'll be really grateful if any of you guys can help me out!
Thanks!
David

Try delete the file "cddb.db" or/and "cddb.ds" (if they exist) under the directory "C:\Documents and Settings\YourName\Application Data\Creative\NetContent\MediaSource". See whether it hel
ps.
If the above does not help, then try the following:- Go to Start->All Programs->Accessories->Command Prompt. - Run the following commands in the command line to unregister the files: cd "C:\Program Files\Creative\Shared Files" CTRegsvr /u CDDBControlCreative.dll CTRegsvr /u CDDBUICreative.dll CTRegsvr /u CTCDDB.nco CTRegsvr /u NetCoMgr.nco- Run the following commands in the command line to register the files: CTRegsvr CDDBControlCreative.dll CTRegsvr CDDBUICreative.dll CTRegsvr CTCDDB.nco CTRegsvr NetCoMgr.nco

Logging into access manager via http arguments

HI ,
I am looking to login into the access manager through some web applett, its like i want to pass my username and password in the form of arguments to the login url. I inted to do it for passing passwords between servers ( details are insignificant) . To explain more , i used to do this on oracle identtity server.
i Launched explorer with the arguments
iexplore <oracle IM URI>?username=xxx&pass=yyy
as a result i used to log in to the server.
the reason was oracle IM URI is a java applett that accepts username and password as html parameters.
My question is :
Is there any similar applett for access manager?
Any suggestions of what alternatives i can use ? i dont want to use the java API ,
regards
kimi

You can use so called zero-page login with AM auth-service.
However is only allowed with HTTP-POSTs and not HTTP-GETs.
This is for serucity reasons, if GETs could be used username and passwords would be logged by systems in their log files (proxies, deployment-container).
-Bernhard

Problems adding attribute via OID Self-Service Console

I have added a new attribute via the Oracle Directory Manager tool, but when I map it to the Self-Service Console and select the Predefined List from the User Interface Type, and add the values to the list, only the last value will show up as many times as entries are in the list. For example, the list has the values Y N R, and when updating the value in the Console, the attributes list values are R R R.
I have not found anything on Metalink indicating a bug. Has anybody have any experience with this problem?
any help will be appreciated.
thanks

Please open a SR on this issue or open a bug.
regards,
--Olaf

Problem accessing VIP via HTTP from service servers

Similar Messages

Maybe you are looking for