F5 to load balance MS Sql Servers
Hello All: I am presented with a tricky situation by the business users here at my company. After seeing the performance and manageability with all the Web Servers and App Servers with F5 LTM, now they want to see if we can do the same for Database Servers. Right off my head, I said its doable but took time to get back with more details and here am. Is there a solutions guide or something that gives more insight on setting up Database servers behind LTM. I am not sure if anyone ever did this before, at least I never saw any company using F5 to load balance DB. I am not sure even this is possible. Please advice. Appreciate you help. Thanks, ChennaProblems load balancing printing
Followed this guide to configure load balancing MS printing with npath routing: http://blog.loadbalancer.org/load-balancing-microsoft-print-server/ The problem is when I try to connect to the printer with the FQDN of virtual server (eg. \\virtualserver.mydomain.com) I get the error "Operation could not be completed (error 0x00000709). Double check the printer name and make sure that the printer is connected to the network.". If I connect to the VIP (eg. \\192.168.0.10) it works fine. If I connect to the host directly (by hostname or IP) it works fine. Any ideas?f5 versus SAP Web Dispatcher
My organization is looking to load balance a number of SAP Enterprise Portal instances and a schism has developed between using f5 versus the SAP Web Dispatcher for this purpose. I've read through the other threads here and found *some* information that aids this discussion but I am looking for a more critical way to differentiate when to use the Web Dispatcher versus using f5. Does some sort of analysis exist out there that draws out the details between these two options?
RDS Farm not Balancing
Here's my setup: 1 server hosting RDS Gateway & Web Access roles 1 connection broker 2 RDS Sessions hosts in a farm (All are Windows Server 2008 R2) I have the Session Hosts load balanced via my LTM as described in the RDS Deployment Guide. The Gateway/Web Access server and the Connection Broker are just single servers and are not setup in the F5 at all. I have a RemoteApp published to the Web Access server, and it works just fine... However, the load is not being distributed. Right now I have 20 sessions on Session Host 2, and only two on Session Host 1. Of those, 11 are disconnected but still logged in, and 9 are actually active (all on Node 2) If I login to the F5 and look at the statistics for the Virtual Server, it says there is currently only 1 connection. I suspect this is part of the problem, since the pool is set to load balance via "Least Connections (member)" Not exactly related, but it also appears to not be creating persistence records, (The virtual server is set to use MSRDP persistence, but none show up on the Statistics report.) Any ideas?"403 - Forbidden: Access is denied." when accessing Exchange Control Panel (ECP)
I am running BIG IP VE 10.2.2, and have published Exchange 2010 using the Template Wizard. I can acces OWA fine, but when I try to view the ECP by going to Options > See All Options, I get the following error: "403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied." I have tried enabling Windows authentication on my ECP vdir in IIS with no luck. Anyone have any idea why this is happening? I can access the ECP just fine when bypassing the VIP and pointing my browser directly to the CAS, or when using TMG. Thanks, Adam
F5 Load Balancing with SAP PI
Hi all, I have an issue that I could use some assistance with. First off, I'll start by saying that I'm a Basis Admin and not a F5 Admin, so I hope the lingo comes across okay. We are moving from using the SAP Web Dispatcher to load balancing with our internal F5 devices. We've converted our ECC system over, and things seem to be working. Now, I'm attempting to do the same for our SAP PI systems. Our Network Admin in charge of the F5s created a virtual server for us that takes HTTP traffic on port 80 and redirects to the SAP port 5$$00, which in our case is 50000. I then changed the Exchange Profile in SAP PI to use the new virtual server for our Integration Server, Repository, and Directory. Restarted the SAP PI system, and all seems to work except for one thing. When you navigate to http:///rep, and try to access either the Integration Repository or the Integration Directory, the Java web app downloads and prompts for authentication, but then fails to authenticate because, and this is what I'm thinking, the virtual server is configured to only talk on a specific port (our case 50000), and the application is trying to authenticate on the SAP P4 port, which in our case is 50004. This is defined as the "rmiport" setting in the Exchange Profile of a PI system, and will be in the format 5$$04 where $$ is the system number. Is there a way that my F5 Admin can configure the virtual server, so that the virtual server will listen on port 80, redirect to port 50000, and also redirect to port 50004 when a user tries to download / run the application? Thanks for any and all help! JasonReplacing Citrix Secure Gateway with LTM/APM?
Currently we have a number of sites that have downstream Citrix Secure Gateways that sit infront of the Citrix Web Servers and inturn infront of the various downstream delivery controllers. As it stands, im looking to slowley ease the LTM/APM functionlity infront of the SG. Currently the SG proxes the ICA traffic within a HTTPS tunnlel , we simply expose TCP443 out to the WWW via LTM and setup the Citrix SG as a pool member; Client via WWW --> (x.x.x.x:TCP443) F5 LTM (SNAT x.x.x.y) --> (a.a.a.a:TCP443) Citrix Secure Gateway --> (a.a.a.b:TCP80)Citrix Web Interface Whilst it would seem that it should be quite easy to simply replicate the funcionality of the SSL offload that the Citrix SG does, it appears that it nativly handles the ICA proxy aswell.. from my research the 'proxying' is far less graceful than the Citrix doco would make it seem, i believe from my reading on various forums that it simply forces ICA traffic down TCP443.. and as ICA is not HTTP compliant traffic .. it causes issues with LTM (i.e. as soon as the desktop session launches.. it crashes). I found some interesting and ingenius iRule scripts that look for various aspects of the SSL handshake.. and .. if they are not present then assume its ICA and then dont enforce HTTP complicance but i couldnt seem to get them to function. Looking at F5 doco the claim is that you need APM to enable ICA proxying (remember im not trying to abstract auth) just replace the Citrix SG role. Under the VS configuration on on LTM (when you have the APM license installed) a config tickbox called 'Citrix & Java Support' becomes avaliable... no idea what its job is Citrix & Java Support - { Enable this check box if you want to provide connections to Citrix desktop resources or to support connections from Java applications.} All im really looking is remove the need for the Citrix Secure Gateway component so i assume i need to repliacte this fucntionality 1_ offload the SSL processing and be able to pass additional HTTP headers downstream (like XFF for example) 2_ allow ICA traffic to be rammed down the TCP443 listener (if that is infact how ICA is 'proxied') Has anyone else achieved this?
