For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vvskaladhar_488's avatar
vvskaladhar_488
Icon for Nimbostratus rankNimbostratus
Aug 31, 2012

Load balancing suggestion

Hi All,

 

 

Can some one Please help me with the problem I have below .

 

 

1.We have 4 share point servers need to be load balanced via VIP on ports http,https,ftp

 

2. my requirement is I want load to be shared to all the servers .and I also need sticky session.

 

 

I am Aware that I can go with Round robin as method of load balancing and Persistence ( Cookie, or HASH ) on VIP. but challenge I have here is all my users hitting this vip are coming VIA proxy.

 

 

Can some one please suggest me How to achieve my requirement ( Equal Load balancing across the Servers along with Sticky session for users VIA proxy ?)
config
design

5 Replies

  • Wire's avatar
    Wire
    Aug 31, 2012
    Hi,

     

     

    Cookie insert persistence will still work over a proxy as the browser will re-present the cookie for the duration of the session (default).
  • vvskaladhar_488's avatar
    vvskaladhar_488
    Icon for Nimbostratus rankNimbostratus
    Sep 03, 2012
    HI ,

     

     

    Thanks a lot for the help. How about HTTPS ? Will X-forwarding with HASH works ? to serve my requirement ?
  • Thomas_Schocka1's avatar
    Thomas_Schocka1
    Icon for Altocumulus rankAltocumulus
    Sep 04, 2012
    Hello vvskaladhar,

     

     

     

    You will simply need to terminate the SSL on your F5 so you can apply the cookie persistence profile to the virtual server.

     

    You can still use SSL on the backend server if you like.

     

     

     

    Kind regards,

     

     

    Thomas Schockaert
  • vvskaladhar_488's avatar
    vvskaladhar_488
    Icon for Nimbostratus rankNimbostratus
    Sep 04, 2012
    Thanks Thomas,

     

     

    Do I need to buy Any additional Lisence for Offloading SSL traffic ? What can I do for FTP traffic ?

     

     

    Thanks in advance.

     

     

    Regards,

     

    kaladahr
  • Thomas_Schocka1's avatar
    Thomas_Schocka1
    Icon for Altocumulus rankAltocumulus
    Sep 04, 2012
    Hi vvskaladhar,

     

     

     

    SSL Offloading works without additional licenses being required.

     

    FTP traffic however doesn't lend itself very well as a protocol for being load balanced based on anything other than source address (sure, there are possibilities (iRules), but keeping it simple: there are not).

     

     

     

    Kind regards,

     

     

    Thomas