source_addr persistency on sequencial virtual servers

 

Hello Community ,

 

 

we have implemented the following traffic flow:

 

Client -> LB_VS_1 -> Pool_1 -> LB_VS_2 ->Pool_2

 

-Client IPs are using several /16 subnets

 

-LB_VS_1 is set with persistency profile Persist1 ( based on source_addr)

 

-Pool_1 has 5 pool members ( HTTP service)

 

-Pool_2 has 8 pool members (ICAP service)

 

The requirement is that HTTP requests from the same client IP should triger ICAP requests towards the same ICAP pool ( Pool_2) .

 

The Persist 1 profile will assure that the same client IP will always be handled by the same HTTP server ( Pool_1) . Now , we consider to setup src_addr persistency on LB_VS_2 .

 

Do you believe that this will that cover the requirement ?

 

Since LB_VS_2 will be triggered by 5 different IP addresses but we have 8 Pool_2 members availiable , does this mean that 3 Pool_2 members will not handle traffic?

 

And in genaral , persistency is applied only to the Pool_2 members that are active ? For example , in case a Pool_2 member comes offline , will its persitent sessions be deleted ?

 

Any different approach that can be suggested ?

 

Configuration abstract:

 

================

 

virtual LB_VS_1 {

 

pool Pool_1

 

destination 10.10.10.10:webcache

 

ip protocol tcp

 

persist Persist1

 

profiles fastL4 {}

 

vlans radio-external enable

 

}

 

 

pool Pool_1 {

 

lb method least conn

 

action on svcdown reset

 

slow ramp time 30

 

monitor all tcp

 

members {

 

192.168.122.101:http {}

 

192.168.122.102:http {}

 

192.168.122.103:http {}

 

192.168.122.104:http {}

 

192.168.122.105:http {}

 

}

 

}

 

 

 

virtual LB_VS_2 {

 

snat automap

 

pool Pool_2

 

destination 10.11.1.20:icap

 

ip protocol tcp

 

vlans www-internal enable

 

}

 

 

pool Pool_2 {

 

monitor all tcp

 

members {

 

10.11.1.51:icap {}

 

10.11.1.52:icap {

 

}

 

10.11.1.53:icap {

 

}

 

10.11.1.54:icap {

 

}

 

10.11.1.55:icap {

 

}

 

10.11.1.56:icap {

 

}

 

10.11.1.57:icap {

 

}

 

10.11.1.58:icap {

 

}

 

}

 

}

 

 

 

profile persist Persist1 {

 

defaults from source_addr

 

mode source addr

 

timeout 1260

 

map proxies enable

 

across virtuals enable

 

 

==========