F5 to load balance MS Sql Servers
Hello All: I am presented with a tricky situation by the business users here at my company. After seeing the performance and manageability with all the Web Servers and App Servers with F5 LTM, now they want to see if we can do the same for Database Servers. Right off my head, I said its doable but took time to get back with more details and here am. Is there a solutions guide or something that gives more insight on setting up Database servers behind LTM. I am not sure if anyone ever did this before, at least I never saw any company using F5 to load balance DB. I am not sure even this is possible. Please advice. Appreciate you help. Thanks, ChennaProblems load balancing printing
Followed this guide to configure load balancing MS printing with npath routing: http://blog.loadbalancer.org/load-balancing-microsoft-print-server/ The problem is when I try to connect to the printer with the FQDN of virtual server (eg. \\virtualserver.mydomain.com) I get the error "Operation could not be completed (error 0x00000709). Double check the printer name and make sure that the printer is connected to the network.". If I connect to the VIP (eg. \\192.168.0.10) it works fine. If I connect to the host directly (by hostname or IP) it works fine. Any ideas?f5 versus SAP Web Dispatcher
My organization is looking to load balance a number of SAP Enterprise Portal instances and a schism has developed between using f5 versus the SAP Web Dispatcher for this purpose. I've read through the other threads here and found *some* information that aids this discussion but I am looking for a more critical way to differentiate when to use the Web Dispatcher versus using f5. Does some sort of analysis exist out there that draws out the details between these two options?"403 - Forbidden: Access is denied." when accessing Exchange Control Panel (ECP)
I am running BIG IP VE 10.2.2, and have published Exchange 2010 using the Template Wizard. I can acces OWA fine, but when I try to view the ECP by going to Options > See All Options, I get the following error: "403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied." I have tried enabling Windows authentication on my ECP vdir in IIS with no luck. Anyone have any idea why this is happening? I can access the ECP just fine when bypassing the VIP and pointing my browser directly to the CAS, or when using TMG. Thanks, Adam
RDS Farm not Balancing
Here's my setup: 1 server hosting RDS Gateway & Web Access roles 1 connection broker 2 RDS Sessions hosts in a farm (All are Windows Server 2008 R2) I have the Session Hosts load balanced via my LTM as described in the RDS Deployment Guide. The Gateway/Web Access server and the Connection Broker are just single servers and are not setup in the F5 at all. I have a RemoteApp published to the Web Access server, and it works just fine... However, the load is not being distributed. Right now I have 20 sessions on Session Host 2, and only two on Session Host 1. Of those, 11 are disconnected but still logged in, and 9 are actually active (all on Node 2) If I login to the F5 and look at the statistics for the Virtual Server, it says there is currently only 1 connection. I suspect this is part of the problem, since the pool is set to load balance via "Least Connections (member)" Not exactly related, but it also appears to not be creating persistence records, (The virtual server is set to use MSRDP persistence, but none show up on the Statistics report.) Any ideas?Replacing Citrix Secure Gateway with LTM/APM?
Currently we have a number of sites that have downstream Citrix Secure Gateways that sit infront of the Citrix Web Servers and inturn infront of the various downstream delivery controllers. As it stands, im looking to slowley ease the LTM/APM functionlity infront of the SG. Currently the SG proxes the ICA traffic within a HTTPS tunnlel , we simply expose TCP443 out to the WWW via LTM and setup the Citrix SG as a pool member; Client via WWW --> (x.x.x.x:TCP443) F5 LTM (SNAT x.x.x.y) --> (a.a.a.a:TCP443) Citrix Secure Gateway --> (a.a.a.b:TCP80)Citrix Web Interface Whilst it would seem that it should be quite easy to simply replicate the funcionality of the SSL offload that the Citrix SG does, it appears that it nativly handles the ICA proxy aswell.. from my research the 'proxying' is far less graceful than the Citrix doco would make it seem, i believe from my reading on various forums that it simply forces ICA traffic down TCP443.. and as ICA is not HTTP compliant traffic .. it causes issues with LTM (i.e. as soon as the desktop session launches.. it crashes). I found some interesting and ingenius iRule scripts that look for various aspects of the SSL handshake.. and .. if they are not present then assume its ICA and then dont enforce HTTP complicance but i couldnt seem to get them to function. Looking at F5 doco the claim is that you need APM to enable ICA proxying (remember im not trying to abstract auth) just replace the Citrix SG role. Under the VS configuration on on LTM (when you have the APM license installed) a config tickbox called 'Citrix & Java Support' becomes avaliable... no idea what its job is Citrix & Java Support - { Enable this check box if you want to provide connections to Citrix desktop resources or to support connections from Java applications.} All im really looking is remove the need for the Citrix Secure Gateway component so i assume i need to repliacte this fucntionality 1_ offload the SSL processing and be able to pass additional HTTP headers downstream (like XFF for example) 2_ allow ICA traffic to be rammed down the TCP443 listener (if that is infact how ICA is 'proxied') Has anyone else achieved this?Health Monitor
Hi, guys! I have a problem with an F5 Health Monitor for Oracle with an OracleRac 11gR2 environment. We checked the next manual http://www.f5.com/pdf/deployment-guides/oracle-rac-database-dg.pdf to deploy the health monitor but it doesn't work. We make a trace and get the next error in the Oracle Listener: ORA-12505, TNS:listener does not currently know of SID given in connect descriptor Also, we checked the F5 logs in /var/log/ and we get the next message: 9/13/11 2:29 PM: jdbc:oracle:thin:@10.0.3.202:1522:oraculo(Thread-9070): getConnection (Io exception: The Network Adapter could not establish the connection) 9/13/11 2:29 PM: jdbc:oracle:thin:@10.0.3.206:1522:oraculo(Thread-9072): getConnection (Io exception: The Network Adapter could not establish the connection) 9/13/11 2:29 PM: jdbc:oracle:thin:@10.0.3.204:1521:oraculo(Thread-9068): getConnection (Listener refused the connection with the following error: ORA-12505, TNS:listener does not currently know of SID given in connect descriptor The Connection descriptor used by the client was: 10.0.3.204:1521:oraculo ) The conclusion is: The F5 use the Oracle SID in the connection string but, with an OracleRAC enviroment, the SERVICE_NAME must be used instead the SID. Also, these connection string is an old fashion of the Oracle JDBC. So,what can we do? and can we use ". ", like such as an oracle.example.com in the Database? Jessy
