Forum Discussion

tocotti_331571's avatar
tocotti_331571
Icon for Nimbostratus rankNimbostratus
Aug 28, 2017

Load Balancer to web servers

Hi, I would well balance workload on two different web servers listening on https   Web Server 1 : 2: Web Server 2 : I was thinking to use a Load Balancer that is running on an host A.B.C....
application delivery
BIG-IP
LTM
security
tocotti_331571's avatar
tocotti_331571
Icon for Nimbostratus rankNimbostratus
Aug 29, 2017

Hi, Following above suggestions, I have applied these changes:

 

  • WebServer1 is on 10.10.10.56 listening on https 9343
  • WebServer1 is on 10.10.10.58 listening on https 9343

On linux system hosting the F5 BIG IP, I configured : - a network interface with ip 10.10.10.54 communicating with 10.10.10.56 and 10.10.10.58; - F5 management interface is on IP 1.1.1.54; - Defined Virtual Server , with Destination address 9.A.B.54 , port 443 - https;

 

with Source addresses 0.0.0.0/0, with Client and Server SSL profiles;

 

with node members associated to the web servers 10.10.10.56 and 10.10.10.56 (up and running OK);

 

But if I launch from external client browser : it opens the F5 Management Interface instead of redirect to one of web servers

 

I see only for less than 1 second a string "redirect" in the middle of browser page, but it returns to the F5 management interface

 

  • P_K's avatar
    P_K
    Icon for Altostratus rankAltostratus
    Aug 29, 2017

    Try VS destination IP from same subnet as your self IP or your back-end servers instead of 9.A.B.54.

     

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Aug 29, 2017

    why show all IPs and then do 9.a.b.54, it feels like you are trying to hide things which make it difficult for us to trouble shoot and really don't matter as this is test any way right?

     

    should us some configuration snippets of what you created.

     

  • tocotti_331571's avatar
    tocotti_331571
    Icon for Nimbostratus rankNimbostratus
    Aug 29, 2017

     

    I followed this configuration got in a demo video of F5 , and I applied the ip in green, red and blue. I would not hide things . Actually A is 49 and B is 35 . Then consider the network 9.49.35.x

     

  • tocotti_331571's avatar
    tocotti_331571
    Icon for Nimbostratus rankNimbostratus
    Aug 30, 2017

    The linux system hosting F5 has three network interfaces : eth0: 1.1.1.54;

     

    eth1: 10.10.10.54; eth2: 9.A.B.54;

     

    1.1.1.54 planned for F5 local management;

     

    10.10.10.54 planned to communicate internally with web servers: 10.10.10.56 and 10.10.10.58;

     

    9.A.B.54 planned to be Destination Address.

     

  • preslav_ilevski's avatar
    preslav_ilevski
    Icon for Cirrus rankCirrus
    Aug 30, 2017

    Hi toccoti,

     

    Can you provide log from /var/log/ltm from the time of request?

     

    Regards,

     

    Preslav

     

  • tocotti_331571's avatar
    tocotti_331571
    Icon for Nimbostratus rankNimbostratus
    Aug 30, 2017

    I see only these few tracks: 9.A.C.27 is the source form where I tried

     

    Aug 30 05:21:05 nc135054 err mcpd[7474]: 0107028a:3: The source address (9.A.C.27) for virtual server (/Common/nc135054_vs) must have a prefix length. Aug 30 06:08:36 nc135054 notice mcpd[7474]: 010719e7:5: Virtual Address /Common/10.10.10.54 general status changed from BLUE to RED. Aug 30 06:08:36 nc135054 notice mcpd[7474]: 010719e8:5: Virtual Address /Common/10.10.10.54 monitor status changed from UNCHECKED to DOWN.