Using Azure internal load balancer (ILB) for Sql Reporting Services

I am attempting to implement a scale-out SSRS deployment using the Azure ILB feature. I have created 2 Sql Reporting servers using the azure images and have created a ILB endpoint on both servers.  I am then attempting to access the servers via the
ILB from my .Net web application.  I can access the report server from my browser and am prompted for credentials using forms authentication.  there is no issue accessing the reports from a browser however my web application cannot access the reports
and returns a 500 error.  I have a hunch this is due to an authentication issue due to invalid kerberos proxy authentication.
Does anyone have any information regarding the possible authentication mechanisms that are supported using Azure ILB?  

Thanks for the response Swallow0417, but as I stated I already had configured this to work in a browser.  I should have mentioned that I already had set the machine key and altered the rsreportserver.config file as mentioned in
https://msdn.microsoft.com/en-us/library/cc281307.aspx.
It turns out this was due to the extended data validation that was introduced in SQL 2014. 
This page led me to alter rsreportserver.config so that:
<RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
<RSWindowsExtendedProtectionScenario>Any</RSWindowsExtendedProtectionScenario>
After restarting the report server service my application now can make the requests for the reports successfully.  I'll provide the other steps I took to hopefully help someone else in the future:
1. Create 2 or more SQL servers in an Azure availability group on the same service in a Reports server scale out deployment.  The SSRS Service account must be a domain account or it will not work
2. Create an Azure ILB using powershell and add the endpoints on your http(s) ports on the server in step 1. I also set the endpoint IdleTimeoutInMinutes to 30 on both endpoints as it seemed like there was some possible timeout issues. the endpoint MUST
also have DirectServerReturn Set to $true 
3. disable the loopbackcheck see method 2 here
http://support.microsoft.com/kb/896861
create a DWORD registry key value 1,
DisableLoopbackCheck,
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
4. Configure View state validation by setting an identical machine key on all servers behind the azure ILB
5. Create a Host record in your AD DNS for the Azure ILB IP Address. 
6. configure hostname
and URLRoot in rsreportserver.config - see
https://msdn.microsoft.com/en-us/library/cc281307.aspx
Setting the hostname tag breaks the report manager url. It is only
required to set the URLRoot tag. I do not think it is required in this configurtaion only for Windows
NLB
6. Configure the authentication method in rsreportserver.conig
  <RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
  <RSWindowsExtendedProtectionScenario>Any</RSWindowsExtendedProtectionScenario>

Similar Messages

  • Can someone suggest some good books for sql reporting services (SSRS) 2012 or above?

    Hi Everyone,
        Can someone suggest some good books for sql reporting services (SSRS) 2012 and above? I ave been working on ssrs for past 2 months and have a basic understanding of ssrs.
    Regards
    Regards

    Hi,
    you can look for below options;
    http://www.amazon.in/Microsoft-Server-Reporting-Services-Recipes/dp/0470563117#reader_0470563117
    http://www.goodreads.com/book/show/18147604-learning-sql-server-reporting-services-2012
    Thanks
    Please Mark This As Answer or vote for Helpful Post if this helps you to solve your question/problem. http://techequation.com

  • Internal load balance ilb on ServiceConfiguration LoadBalancers

    Hi everybody, I try to setup an internal load balancer using this configuration:
    from cscfg:
    <NetworkConfiguration>
     <VirtualNetworkSite name="WE" />
     <AddressAssignments>
      <InstanceAddress roleName="Role1">
       <Subnets>
        <Subnet name="WE_WWW" />
       </Subnets>
      </InstanceAddress>
      <InstanceAddress roleName="Role">
       <Subnets>
        <Subnet name="WE_SERVICE" />
       </Subnets>
      </InstanceAddress>
     </AddressAssignments>
     <LoadBalancers>
      <LoadBalancer name="WEB_ILB">
       <FrontendIPConfiguration type="private" subnet="WE_WWW" staticVirtualNetworkIPAddress="192.168.1.5" />
      </LoadBalancer>
      <LoadBalancer name="API_ILB">
       <FrontendIPConfiguration type="private" subnet="WE_SERVICE" staticVirtualNetworkIPAddress="192.168.2.5" />
      </LoadBalancer>
     </LoadBalancers>
    </NetworkConfiguration>
    from csdef:
    <WebRole name="Role1" vmsize="Small">
     <Sites>
      <Site name="Web">
       <Bindings>
        <Binding name="httpIn" endpointName="httpIn" />
        <Binding name="httpsIn" endpointName="httpsIn" />
       </Bindings>
      </Site>
     </Sites>
     <Endpoints>
      <InputEndpoint name="httpIn" protocol="http" port="80" loadBalancer="WEBILB" />
      <InputEndpoint name="httpsIn" protocol="https" port="443" certificate="Valuta" />
     </Endpoints>
     <Imports>
      <Import moduleName="Diagnostics" />
      <Import moduleName="RemoteAccess" />
      <Import moduleName="RemoteForwarder" />
     </Imports>
     <Certificates>
      <Certificate name="Valuta" storeLocation="LocalMachine" storeName="CA" />
     </Certificates>
    </WebRole>
    <WebRole name="Role2" vmsize="Small">
     <Sites>
      <Site name="Web">
       <Bindings>
        <Binding name="httpIn" endpointName="httpIn" />
       </Bindings>
      </Site>
     </Sites>
     <Endpoints>
      <InputEndpoint name="httpIn" protocol="http" port="8080" loadBalancer="APIILB" />
     </Endpoints>
     <Imports>
      <Import moduleName="Diagnostics" />
      <Import moduleName="RemoteAccess" />
     </Imports>
    </WebRole>
    as you can see I have two webroles linked to a vnet:
    Role1 has two input endpoint: https and http (the one I want to "internal" load balance)
    Role2 has only an http input endpoint (again the one I want to "internal" load balance)
    and I try to configure an internal loadbalancer (see here:
    vs2013-update3)
    When I try to deploy the package I receive this error:
    Error: The specified configuration settings for Settings are invalid. Verify that the service configuration file is a valid XML file, and that role instance counts are specified as positive integers.  Http Status Code: BadRequest  OperationId:
    874024071e88327f8cb73c16f15f3ac2
    I'm sure it depends on the ilb configuration because when I remove it the deploy succeed...
    Does anybody try something like this?
    Thanks,
    Simone

    I've found a solution by myself with the help of a friend (Sandro Vecchiarelli): the "problem" is that I try to setup two load balancers in one cloud service. Trying with only one work correctly; the error probably is a schema validation and I
    really don't know if the error is on "client" schema that allow me to configure more than one ILB (note the node name
    LoadBalancers... its plural...) or online (the one on Azure).
    By the way...at the moment use just one ILB per cloud service.
    Hope this help.

  • FQDN or NetBIOS for SQL Reporting Services Point installation in a cluster

    Hi Folks
    We have a SQL cluster for config mgr database & SQL reporting services installed on nodes because it is not cluster aware. During SCCM 2012 installation, we mentioned the details of SQL cluster only & it got installed successfully. When we checked
    in console, it is showing 3 site servers  related to SQL. SQL cluster is having site system role only & site database role moved under 2 nodes. Only NetBIOS names of the SQL nodes are being displayed in console.
    Now when I installed reporting service point role by selecting one of the node, wizard picks the FQDN of this node automatically & role installed successfully.
    Now in the console, I have another site server listed publishing the FQDN of the same node which I selected during installation which means one SQL node (site database role present at this) is displaying with NetBIOS name & the same SQL node
    (reporting services point role at this) is displaying with FQDN.
    My concerns is that - 
    Is there any issue if same SQL node displaying 2 times in SCCM console i.e. with NetBIOS name & with FQDN name?
    Why reporting services point role not placed under the node which is already there with NetBIOS name?
    I hope I explained my issue properly however If you guys need any more information regarding this, then let me know. 
    Cheers | Navdeep Sidhu

    This is the default behavior when installing site DB on cluster - all nodes will be visible as NetBIOS.
    I face a problem in two separate environments with SQL cluster when configuring Auto client push for servers, you will get the following error message in CCM.log in site server:
    SQL Server Native Client 11.0][SQL Server]Invalid length parameter passed to the LEFT or SUBSTRING function. : sp_CP_CheckNewAssignedMachine
    AND
    Failed to execute SQL cmd exec [sp_CP_CheckNewAssignedMachine]
    I believe this is a bug in the product.
    There is a workaround FIX editing the SP in SQL DB but it is UNSUPPORTED.
     

  • Data Collector Reports not available for SQL Reporting Services only SSMS

    I never understood this one, why would you program Reporting Services (SSRS) reports inside SQL Server Management Studio (SSMS)?
    The reports are available only through the SSMS interface, buried somewhere in the GUI, not easy to find. 
    Please make the MDW reports available on Reporting Services!

    Hello,
    These are not SSRS reports, these are RDLC reports for local rendering in a client application like SSMS; similar, but not the same. The reports are embedded as a resource in an assembly, that's
    the reason why you can't find them.
    You can have a SQL Server installation without Reporting Services; where should be the reports hosted then, if not in SSMS?
    You can create your own SSRS based report; simply use SQL Profiler to capture the queries used by the origin reports.
    Olaf Helper
    [ Blog] [ Xing] [ MVP]

  • Geting IP address for Internal Load Balancer

    I've recently been experimenting with internal load balancing for VMs. I'm able to create and delete an internal load balancer (ILB) using the .NET wrapper for the API (https://github.com/Azure/azure-sdk-for-net).  What I cannot do though is actually
    get the internal address for it. Nor does it seem you can get it from the REST API (which, as far as I know, is what .NET wrapper wraps).   The only method I can see that claims to get the address is Powershell.
    Can anyone confirm if there is any way using the REST API or its .NET wrapper to obtain the internal address for the ILB?

    I have not looked into the .NET wrapper that you mentioned here, but according to this powershell script:
    http://msdn.microsoft.com/en-us/library/azure/dn690125.aspx
    $svc="<Cloud Service Name>"
    $ilb="<Name of your ILB instance>"
    $subnet="<Name of the subnet within your virtual network-optional>"
    $IP="<The IPv4 address to use on the subnet-optional>"
    Add-AzureInternalLoadBalancer -ServiceName $svc -InternalLoadBalancerName $ilb –SubnetName $subnet –StaticVNetIPAddress $IP
    IP address is optional, so maybe the wrapper hasn't implemented this, which is kind of undesirable. But maybe it allows you to specify the IP?
    Frank

  • Internal load balancer for ADFS, Web Application Proxy join problem

    Hello,
    we deployed 2 x ADFS (2012 R2) behind a internal Azure load balancer.
    In front are two WAP servers, which should be joined to the ADFS farm based on the internal load balancer IP.
    Unfortunately the WAPs fail to join and sometimes after 5 tries it works. The problem is (based on the event logs) that the ADFS Servers dont trust the WAP certificate.
    It seems, that during the join process the ADFS internal load balancer does not stick to one ADFS server. If we join the WAP directly (without the ILB) to one of the ADFS servers, everything works fine.
    As soon as we try to join via the ADFS internal load balancer IP, the abover occurs.
    Did anyone experience the same problems? How does the internal load balancer distribute the requests? Seems to be not sticky at all.
    Thanks for any Feedback,
    Thomas

    Thomas -
    This article talks (in detail) about a recently updated distribution mode - Source IP affinity.
    http://azure.microsoft.com/blog/2014/10/30/azure-load-balancer-new-distribution-mode/
    Hope this helps!
    /Arvind

  • Internal Load Balancer status - how to get it?

    Hello,
    is there any possibility to get the info, whats the status of the internal load balancer?
    We would need to know, if e.g. one endpoint for forwarding is recognized as down.
    Thanks,
    Thomas

    Hi Thomas,
    Based on my exprience, you can use
    Get-AzureInternalLoadBalancer cmdlet to get the internal load balancer configuration of a deployment. However, there is no other way to obatin the information of internal load balancer.
    I recommend you to submit your request in Azure feedback below:
    http://feedback.azure.com/forums/34192--general-feedback
    Best regards,
    Susie
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Internal Load Balancing

    I'm after a definitive answer as to whether you can do internal load balancing with Roles as its a highly desirable feature but also i've seen conflicting information on it. For instance the following Azure blog article suggests you can but I can't find
    any sign as to how you do it (assuming the assertion that you can is accurate).
    http://azure.microsoft.com/blog/2014/05/20/internal-load-balancing/
    So can it be done? If so how? If not then is it a forthcoming feature?

    Hi,
    As far as I know, we can use powershell to configure Internal Load Balancing at currently, please have a look at this article:
    http://msdn.microsoft.com/en-us/library/dn690125.aspx, if I misunderstand, please feel free to let me know.
    Regards

  • Moving SMTP server to Azure with Load balancer

    How to
     move SMTP server to Azure with Load balancer???

    Hi TechM,
    Base on my experience, Windows Azure Platform does not provide out-of-the-box mail server (neither SMTP nor POP3). You could use SendGrid to sent mail. About this issue, I recommend you could refer to
    http://stackoverflow.com/questions/10631585/email-sending-approaches and
    http://blogs.msdn.com/b/patrick_butler_monterde/archive/2010/10/11/sending-e-mail-from-windows-azure-part-1-of-2.aspx
    Hope it helps.
    Will
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Problem Load Balancing connections for Grid Control Console on port 80!

    I have two OMS and I'm balancing connections for Grid Control Console using a Software Load Balancer according with "Oracle Enterprise Manager Advanced Configuration". I have success where the load balancer is listening on port different to 80. When I configure Load Balancer to listen on port 80(architecture requirement) and distribute load between the two OMS(Port 7779), when login to Enterprise Manager Console the URL on the web browser changes to the port configured for HTTP server (port 7780) wich produces an "unable to connect" error message; and this behaviour also happends in some of the internal links of Grid Control Console too. Any ideas?
    Thanks in advance!
    Message was edited by:
    user463224

    I got it working, changing the "Port" directive to 80 on httpd.conf on HTTP Server

  • Using StoneBeat WebCluster load balancing with WebLogic

              Hi,
              I have done some testing of WebLogic Server with my company's StoneBeat WebCluster
              distributed load balancing software. This might be one more option to consider
              as a load balancing solution for WLS. It is advanced in the sense that load balancing
              is really dynamic, there are no single-points of failure (distributed architecture)
              and there is a very good, configurable test subsystem that runs on each cluster
              node to check for overload situations, HW/OS failures, ...
              In the initial testing, the WebCluster load balancing works with WebLogic replication,
              although there are some cases that need mroe consideration (please see below).
              I had to get a patch to WLS6SP1 on NT to make WLS' multicast work when there are
              several NICs on the cluster nodes.
              However, there is one case which causes problems:
              - I have 3 cluster nodes
              - P: 2, S: 3 (SessionServlet = 1)
              - 2: offline - P: 3, S: 1 (SessionServlet = 2; WebCluster randomly selected a
              new node to handle the connection)
              - 2: online - P: 2, S: ? (SessionServlet = 3, WebCluster redistributes the load
              when a node goes online)
              - 2: offline
              - P: 3, S: 1 (__SessionServlet = 1__) NB!
              The log messages show that when node 2 comes back online it retrieves the replica
              from the secondary (node 1) and not from the primary (node 3). After a while (5-6
              minutes), node 3 tries to update the replica on node 1. Node 1 considers this
              a stale update request and removes the Primary 16... (node name) and then the
              secondary for 16... (the replicated object). Then there's a message (still on
              node 1) that it is unable to find object 16... Back on node 3 the primary for
              16... is removed.
              From the WLS6 documentation (under the discussion of using replication with external
              HW load balancing solutions) I thought that this case would have been handled:
              - it is stated that after the failure of a node, if the HWLB box sends the next
              request to a node where there is no replica, WLS is able to retrieve the replica
              - to be fair, this is what happens: when node 2 came back online, it retrieved
              the replica from node 1 (the secondary) - I suppose that there is an assumption
              that if a request arrives to a node without a replica, the primary __must have
              failed__
              Is there any way to get around this problem?
              Admittedly, WebCluster has a problem in that the stickyness of connections is
              not perfect: - when a node goes online, a connection that was correctly persisted
              (based on either source-ip or source-network address) may be moved to a new node
              since the load is redistributed. Our load balancing is very dynamic, but doesn't
              maintain a list of who is connected to which node when resistribution takes place
              Regards,
              Frank Olsen
              Stonesoft
              

    Rick,
    You may want to look at the Alteon and F5 configuration we have on edocs.
    Take a look at the following URLs for a possible solution
    http://edocs.bea.com/wls/docs61/cluster/alteon.html#591902
    http://edocs.bea.com/wls/docs61/cluster/bigip.html#591902
    Chuck Nelson
    DRE
    BEA Technical Support

  • Load Balancing Rules for BIGIP

    I am running single-user applications that fall into two
    categories:
    1.) recording and uploading audio
    2.) streaming audio and video over rtmp, rtmpt, and rtmps
    The files being streamed are on a NAS.
    Is anyone using a hardware load balancer in conjunction with
    FMS? Is it possible to do SSL offloading for rtmps? Would anyone be
    willing to share your pools, iRules, and other configuration data?
    Thanks!

    Hello!
    Found this post while searching information about RFC and Logon Groups...
    I have some mess in my head with SMLG functionality and RZ12. As I know SMLG we can use to distribute users to application server instances, it gives us good achievement in performance. With RZ12 we can distribute RFC connection of particular job for parallel execution on predefined application server. With SMQS and SMQR transaction we can set "Name of AS Group" to route RFC-execution on certain server or servers. But I have troubles with understanding. Imagine, we set up group 1 with 2 servers (name it RFC_GR1), and group 2 with another 2 servers (name it RFC_GR2). How could qRFC scheduler decide on which RFC server group (RFC_GR1 or RFC_GR2) distribute RFC-execution? How to interact "Name of AS Group" with RFC groups if we can set only one group?   How could we distribute RFC-execution depending on our logon groups (smlg)? We would like to distribute RFC depending on SAP logon groups. Is it possible? Or do I compare apple and orange?
    Regards,
    Artem Ivashkin

  • Load balancing algorithm for groups in RZ12

    Hello,
    I would like to know the load balancing algorithm for groups defined in RZ12.
    I know that log on groups for external connections are administered via SMLG and table RZLLICLASS.
    I also know that RFC resources can be managed for RFC logon groups via RZ12.
    Kind regards,
    Peter
    <removed_by_moderator>
    Point awarding is at your discretion, but read and follow the "Rules of Engagement"
    Edited by: Juan Reyes on Dec 3, 2010 10:21 AM

    Hello!
    Found this post while searching information about RFC and Logon Groups...
    I have some mess in my head with SMLG functionality and RZ12. As I know SMLG we can use to distribute users to application server instances, it gives us good achievement in performance. With RZ12 we can distribute RFC connection of particular job for parallel execution on predefined application server. With SMQS and SMQR transaction we can set "Name of AS Group" to route RFC-execution on certain server or servers. But I have troubles with understanding. Imagine, we set up group 1 with 2 servers (name it RFC_GR1), and group 2 with another 2 servers (name it RFC_GR2). How could qRFC scheduler decide on which RFC server group (RFC_GR1 or RFC_GR2) distribute RFC-execution? How to interact "Name of AS Group" with RFC groups if we can set only one group?   How could we distribute RFC-execution depending on our logon groups (smlg)? We would like to distribute RFC depending on SAP logon groups. Is it possible? Or do I compare apple and orange?
    Regards,
    Artem Ivashkin

  • Load Balance Configuration for OCS 10g

    Hi guys,
    A few question on the load balancer requirement and setup for a OCS 10g cluster.
    1. Can Pound be used as the load balancer for the OCS cluster. (pound is an application for load balancer and reverse proxy).
    2. Basically the load balancer will have two network interface, the first nic is connected to the
    user network, and the second interface is connected at the backend network where the ocs cluster is located. My question is at which network interface the virtual server name (ldap, sso and http ) for the ocs cluster should be created ? at the user network interface or the ocs network interface ?. Do the virtual name need an ip addresses ?
    Thanks for any info.
    Regards
    lanang

    Which articles & documentation have you read already? I don't want to duplicate what they've covered.
    http://catb.org/~esr/faqs/smart-questions.html#beprecise

Maybe you are looking for

  • Not Reading ipod

    I have a problem with my mini ipod. I went to update it with songs so when i plugged to ipod in to update. i get this message saying " attempting to copy to the disk my name failed The disk could not be read from or written to." Everything is updated

  • Vendor International Name in DME file

    Hello All, I am configuring DME payment file for Taiwanese client who use chinese charecters. Requirement- They need the vendor name to be displayed in chinese language (maintained in international Version in master data) and rest all other payment d

  • Size in nullLayout from own components

    hi there, I have a null layout JPanel in which the user can add some components. The height and the width of the components are different and can be changed, by setting a text into it and so on..... I add the component by setBound(x, y, 200, 200) x =

  • Dynamic Quorum and new DAG (no CNO)

    With Exchange 2013 SP1 on Windows 2012 R2, you can create a DAG without a CNO.  Which is great, I no longer need a CNO or IP address for my DAGs.  Which should make it much simpler to have a stretched DAG.  However without the CNO, I cannot figure ou

  • Where are my pics!!!!!!

    Hi i have recently changed from the bb 8520 to the bb 9300 & cannot find my pictures that were on my memory card, my songs & videos are there but no piccys, please help, thank you