Forum Discussion
Siva_107534
Nimbostratus
Jan 27, 2010Not able to connect the domain name behind LTM
Hi All,
Using forward proxy, i achieved the connectivity based on IP from the internal server to external world.
While i trying to connect the client end using the domain name, i am not able to connect.
Kindly any one help me out to solve this issue.
24 Replies
- hoolio
Cirrostratus
Hi Siva,
How do you have LTM configured to pass this traffic? Which protocol is the traffic? Is the client able to resolve hostnames to domain names?
Aaron - Siva_107534
Nimbostratus
Hi Aaron,
We are using Performance Layer4, fastL4 profile and SNAT Pool as automap and the Default pool contains client end public IP for the forward proxy .
The scenario as follows,
One of our client having domain for ex: http://server1.example.com as their one the virtual host, when we trying to connect them through the Public IP , which is maintained in the pool of the forward proxy VS, they observed the hit is going to another Virtual Host have the domain for ex: http://server2.example.com having the same Public IP. .
Hence we need to connect them using the domain name instead of the IP - hoolio
Cirrostratus
So you want to have LTM send the requests to a specific pool or pool member based on the requested host header? If so, you could define one pool each for the two servers or sets of servers, configure a standard IP VIP on port 80 with an HTTP profile and then use an iRule or HTTP class to select the pool based on the requested host header. Using HTTP classes might be the simplest and most efficient option.
If you'd like examples for an iRule, try searching the iRule forum for "switch" and "[HTTP::host]". If you have questions, reply here and we can give you more detailed suggestions.
Aaron - Siva_107534
Nimbostratus
Hi Aaron,
Pls find my detailed scenario, which could help you to provide us some ideas,
Performance L4 VS with
VIP (10.x.x.x)
App server ----> with Pool contain Client IP ----> Client (server1.example.com) x (200.y.y.y) (server2.example.com)
We are trying to connect the server1.example.com from our App server through VIP.
Based on the Performance L4 VS we can connect the client based on IP (200.y.y.y), though the client having the virtual host which having 2 domains as above mentioned to the same Public IP.
When we give some hits it goes to server2.example.com (later confirmed they have the reverse dns entry for the 200.y.y.y to server2.example.com)
Though it is the outbound connection, can we obtain the same connectivity through ordinary HTTP profile? - Siva_107534
Nimbostratus
Hi Aron,
Pls find the attachment for the test scenario - Siva_107534
Nimbostratus
Dear Aaron,
Can you pls share the iRule for Performance Layer 4 profile to achieve this outbound connectivity based on the domain name.
This would be much helpful for us. - hoolio
Cirrostratus
So you're saying that if the app server, acting as a client, makes an HTTP request to the 10.x.x.x VIP on port 80, the request is successfully load balanced to either server1 or server2 in the pool? But when the client makes a request for server1.example.com by name, it resolves to a 200.y.y.y.y IP address and fails?
Wouldn't you want to use a single hostname that resolves to the VIP address of 10.x.x.x? Or do you want to allow the app server to connect directly to server1.example.com and server2.example.com?
Thanks,
Aaron - Siva_107534
Nimbostratus
Dear Aaron,
In our pool it contains only one node (ie., server1.example.com's IP) . Though our remote client have name based virtual hosting for 200.y.y.y, if we try to hit them using 200.y.y.y as pool member it goes to server2.example.com and not to expected server1.example.com
I want to connect the server1.example.com from my App server through LTM VIP - hoolio
Cirrostratus
So could you create a DNS record or host file entry on the App server (the client) which resolves whatever hostname you need to use for the 200.y.y.y address to the VIP address? Something like server2.example.com -> 10.x.x.x? Or maybe server2.vip.example.com -> 10.x.x.x? This option wouldn't require changing the VIP configuration or using an iRule.
Aaron - Siva_107534
Nimbostratus
Hi Aaron,
Any way if i add the domain entry in hosts of app server it should locally resolve, but when the same hit reach the client server it will reach based on the IP. not as domain-name
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects