Forum Discussion
F5 loadbalnce configs and Apache plus Weblogic
we had requirements to load balnce two front Apache server and 2 weblogic servers. F5 configured as ssl offloading for Apache VIp and Weblogic port is confiured on 9000 port
according to app owner Users are re-directed back to the login screen after a successful login attempt. on HTTP profile on Apache VIP is enable rewrite to "matching" alos add WL-Proxy-SSL: true.per :https://devcentral.f5.com/Community...fault.aspx .
any help .
thx
27 Replies
- KJ_50941
Nimbostratus
ok, here it is:
as soon as I removed Source address persist from weblogic VS I can see from LTM that it does laod balance however when I am hitting Apache web i amgetting "session is invalide or has timed out." also one connect didn't seems to do any improvemnt.
also on HTTP profile for Apache Virtual server do I need to enable rewite,redirct ( matching) ?
thx - What_Lies_Bene1
Cirrostratus
Do the Weblogic servers not share session state? I know the web servers wouldn't but normally the back end servers would. I'm guessing not. So re-instate persistence but perhaps change the lb method to round robin so it should be impossible for both Apache servers to be persisted to the same Weblogic server (in theory). I'd also suggest enabling OneConnect on the Weblogic Virtual Server. - KJ_50941
Nimbostratus
One connect is enbaled on weblogic , and loadbalnce for weblogic pool is now round robin. I made some chnages to http ptofile to redriect-rewrite = Matching, and insert WL-Proxy-SSL: true . that didn't improve any thing,. I am still stuck to one weblogic host.
on one connect profile what is recommnd configurations? just default?
Thx - What_Lies_Bene1
Cirrostratus
Hmmm, I wonder if this is a CMP issue where each TMM instance is making the an independent decision. What BIG-IP hardware do you have? It might be worth switching back to Least Connections but you might get the same issue I suspect. - KJ_50941
Nimbostratus
we are using 8400 with BIG-IP 10.2.3 Build 123.0 Hotfix HF1 . what is CMP issue, what about if we just go to fastL4 on apache _VS ? and move CERT on Apache server.
- What_Lies_Bene1
Cirrostratus
OK, so a single (dual core) CPU. I'd say CMP is your issue here. New connections are load balanced across each TMM instance (you'll have two with this hardware) using round robin and each TMM will make a load balancing decision independently. I'm looking into how you can force use of only one TMM instance.
- What_Lies_Bene1
Cirrostratus
OK, so try this for the Weblogic Virtual Server: tmsh modify ltm virtual 'name' cmp-enabled no and see if it looks any better. Info on CMP can be found here: http://support.f5.com/kb/en-us/solutions/public/7000/700/sol7751.html - KJ_50941
Nimbostratus
Thx, I will let you know as soon as this one done on F5 probaly tomorrow morring.
Thx again - What_Lies_Bene1
Cirrostratus
You're welcome. Hopefully we're close to a solution now. - KJ_50941
Nimbostratus
ok, I am sorry , it look slike F5 we have is 6900 not 8400my apology. Do I still need to do tmsh modify ltm virtual 'name' cmp-enabled ?
PLATFORM INFORMATION --
| Marketing Name: BIG-IP 6900
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com