Forum Discussion
Problem with a PACFILE VS
I configured a VS that is used to Access 2 servers with a PACFILE service. Even though de members of the pool are up the PACFILE service is not working when I open a Browser that has configured the option to use an external script.
In this case, the PACFILE is used for prxy purposes, but the browser doesn't show me the window to put my user / pwd to define which categories I am able to Access.
5 Replies
- Kevin_Stewart
Employee
I'm going to assume that you're talking about Capistrano here. If so, can you elaborate on your configuration and what you're trying to do?
- Kevin_Stewart
Employee
So just to clarify, you have a VIP in front of your autoproxy service to load balance distribution of a pacfile? Is the browser getting the pacfile?
- Kevin_Stewart
Employee
Okay, so let's say you have an HTTP URL configured in your browser. That URL points to an F5 VIP, and that F5 VIP load balances the pacfile servers. If you open the browser and only see traffic TO the VIP, but no return traffic, then there's a good chance the VIP itself is misconfigured. If you see return traffic, but none of it is the requested pacfile data, there's a good chance that either pool or pacfile servers are misconfigured. Do a packet capture on the server side of the proxy to see if there's any request and/or response traffic going to/from the pacfile servers.
- Kevin_Stewart
Employee
mm, ok. do you mean that I have to analyze the traffic going out from the servers that contain the Pac File?
Yes. If you can establish that you see request and response traffic on the server side of the proxy, then you know it's at least working at layer 4. Probably the easiest approach is to tcpdump on the F5.
- Kevin_Stewart
Employee
Rene, when you insert a proxy between the client and a server, you essentially create two network paths. You have the client side between the browser and the proxy, and another between the proxy and the server. What we need to assess here then is WHERE the traffic is failing. I'm assuming you performed the tcpdump on the client side, so you now need to run another capture on the server side of the proxy. If you don't see traffic to the server on the server side, then you can reasonably assume that there's something wrong at the proxy.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com