How to preserve data in a HTTP 302 redirect of a POST
Hi, We are trying to implement the following scenario and would like to know if the LTM can do the following: An application execute an HTTP POST request with parameters inside the HTML body LTM sends back a 302 redirect request back to the client to another local url How can LTM sends back in the 302 redirect with the same parameters that were availble in the initial packet (see 1))? Can LTM look into HTML body and use them in packet 2) with an iRule? In initial packet 1) these parameters can be a small text or a large file that is being posted to the servers behind LTM Thanks, Giulio.
f5 versus SAP Web Dispatcher
My organization is looking to load balance a number of SAP Enterprise Portal instances and a schism has developed between using f5 versus the SAP Web Dispatcher for this purpose. I've read through the other threads here and found *some* information that aids this discussion but I am looking for a more critical way to differentiate when to use the Web Dispatcher versus using f5. Does some sort of analysis exist out there that draws out the details between these two options?
F5 Load Balancing with SAP PI
Hi all, I have an issue that I could use some assistance with. First off, I'll start by saying that I'm a Basis Admin and not a F5 Admin, so I hope the lingo comes across okay. We are moving from using the SAP Web Dispatcher to load balancing with our internal F5 devices. We've converted our ECC system over, and things seem to be working. Now, I'm attempting to do the same for our SAP PI systems. Our Network Admin in charge of the F5s created a virtual server for us that takes HTTP traffic on port 80 and redirects to the SAP port 5$$00, which in our case is 50000. I then changed the Exchange Profile in SAP PI to use the new virtual server for our Integration Server, Repository, and Directory. Restarted the SAP PI system, and all seems to work except for one thing. When you navigate to http:///rep, and try to access either the Integration Repository or the Integration Directory, the Java web app downloads and prompts for authentication, but then fails to authenticate because, and this is what I'm thinking, the virtual server is configured to only talk on a specific port (our case 50000), and the application is trying to authenticate on the SAP P4 port, which in our case is 50004. This is defined as the "rmiport" setting in the Exchange Profile of a PI system, and will be in the format 5$$04 where $$ is the system number. Is there a way that my F5 Admin can configure the virtual server, so that the virtual server will listen on port 80, redirect to port 50000, and also redirect to port 50004 when a user tries to download / run the application? Thanks for any and all help! Jason
Timeout settings
Hello, We have notices that it seems that http sessions appear to timeout more quickly when using the f5 than when using a direct connection to the server. I have done my own testing and have seen that side by side, a connection utilizing the alias that passes through the f5 did in fact timeout before another browser session that I had where I logged in directly using the server hostname (and with a different userID to make sure that the sessions were completely separate). Here is the error: 500 Internal Server Error SAP J2EE Engine/7.00 The Web Dynpro Application 'WebUI' has expired. Restart the application using the Refresh button or via the following link WebUI. Details: No details available Again I tested this side by side with and without the f5, so I do not believe it is an application setting. I am sure there is a simple setting on the f5 that can address this, but not being an f5 administrator, I will need your help to know what to ask for. Along the same lines, we have also seen that when making a large number (50 to 100) of web service calls through the f5 at the same time, some of them will not execute successfully, as opposed to executing the calls using the hostname of an application server where all of the calls are successful. I was thinking this may be some kind of timeout on the f5 side as well. These are two completely separate issues, but I would appreciate any advice on either. Thanks, Brian
ABAP webdynpro in EP url are HTTP vs. HTTPs - popup errors - need to adapt F5 config
We've been live with F5 load balancing our SAP EP java traffic for 3 years now - We introduced ABAP web dynpro to our customer EP and they now receive pop-ups; HTTP watch trace files show that the themes url built are HTTP vs. HTTPS. With that said, we've gotten recommendation from SAP to change our "Ports" and "ProxyMappings" configuration settings thru Visual administrator in the Dispatcher for the HTTP provider. We need to 1) Configure the Ports parameter in the following way: (Port:54100,Type:http)(Port:54101,Type:ssl)(Port:54102,Type:http) 2) Configure the ProxyMappings in the following way: 54100=(Host:hostname.com,Port:80,Scheme:http, Override:true),54101=(Host:hostname.com,Port:443, Scheme:http,Override:true),54102=(Host:hostname.com, Port:443,Override:true) With this configuration, all the HTTP requests sent to port 54102 will be mapped on the Java dispatcher to the proxy server's host (hostname.com) and HTTPS port (443). OK - so being a Basis admin techie --- we KNOW how and what to do on the SAP/EP side to make these changes - GOT IT SAP has said "you need to adapt the F5 configuration" -- this is where we fall short and do not have the skill set to define what / how needs to be done to our F5 configuration; we've always contracted out our F5 configuration which to date has been basic enough that it didn't warrant a resource with both SAP and F5 skills Any F5 / SAP guru's out there willing to talk this thru with us and perhaps get us to where we need to go? Thank you in advance Doreenf5 and Kerberos SSO sap BI
Hi We are using F5 load balancer and we enable kerberos sso . Its works like a charm with direct link . However its not working with f5 Dns name bi.temp.com Full url is https://bi.temp.com Service user. Sapuser Direct url. Domain. Xyz.com Spn Setspn -a http/biserver sapuser Setspn -a http/biserver.xyz.com sapuser Setspn -a http/biserver2 sapuser Setspn -a http/biserver2.xyz.com sapuser Setspn -a http/bi.temp.com Its prompting for username and password Any inputsiRule for HTTPS Virtual Server without applying http profile
Hi, We have create the Virtual server for redirection of http to https traffic and https traffic for BMC application and almost successful in achieving the desired result; but since end result was not upto requirement, we have revert back the VIP configuration for BMC to http traffic. below is details :- Pool of BMC Server :- 192.168.220.205 and 192.168.220.206 (working on port 8443) Virtual Server IP Address for BMC server :- 192.168.199.71 (working on port 443) Virtual Server IP Address for BMC server :- 192.168.199.71 (working on port http for redirection of http to https) When we created the virtual server in F5 with 10.3.199.71 on 443 service port; https://xyz/arsys website link was working; as same URL website has been hosted on webserver and redirection of http to https also happening without any issue. we are facing issue with accessing https://xyz/ link while trying to access website through F5; as web server don't have any website link for below site.We tried to redirect the traffic on F5 for https://xyz/ to https://xyz/arsys ; but unable to achieve the desired result. Please help. Any help is welcome to create irule.
Pool member FQDN on server side, Virtual server name on client side web browser
Hi everyone! I am having a hard time trying to find/figure-out an iRule that sends the FQDN (http://poolmem1.domain.com) to the selected pool member just on the server side, leaving the Virtual server name on the client side (http://vserver.domain.com). I have tried these iRules: https://devcentral.f5.com/wiki/iRules.rewrite_host_header_to_server_name.ashx https://devcentral.f5.com/questions/append-fqdn-to-https-request But they keep changing the address on the client side web browser to http://poolmem1.domain.com, so the F5 LTM doesn't participate in the LB anymore. The application we are trying to balance is SAP Enterprise Portal, and it needs that the server's FQDN be used when it is accessed so that the SSO feature works. Thanks in advance for your help! Luis Villafuerte from Guatemala
