Re: [load balancing] alteon port IP appears

From: Sherwin T <sherwintIZZATgmail.com>
Date: Thu Apr 07 2005 - 23:39:33 EDT

Hi Peter,

I followed your intruction but still no good. What i observed is that
when the proxy is enabled on real server the output shows below:

3,2815: 210.25.115.18 2049, 210.23.234.22 23812 ALLOW age 0
 3,2816: 210.25.115.18 2032, 205.188.250.25 80 -> 210.25.115.65 8080 age 4 E
 3,2817: 210.25.115.18 2036, 205.188.250.25 80 -> 210.25.115.65 8080 age 4 E
 3,2818: 210.25.115.18 2037, 205.188.250.25 80 -> 210.25.115.65 8080 age 4 E

but if the proxy is disabled on the real server or port of the alteon
the port 8080 is missing (it looks that the redirection to port 8080
is not working)

3,2815: 210.25.115.18 2049, 210.23.234.22 23812 ALLOW age 0
 3,2816: 210.25.115.18 2032, 205.188.250.25 80 -> 210.25.115.65 age 4 E
 3,2817: 210.25.115.18 2036, 205.188.250.25 80 -> 210.25.115.65 age 4 E
 3,2818: 210.25.115.18 2037, 205.188.250.25 80 -> 210.25.115.65 age 4 E

                                                Internet
                                                    |
 pc---(port1)alteon(port 8)---switch---real server

Thank,
Sherwin

On Apr 7, 2005 11:04 AM, Peter Degrassi <degrassi@layer227.com> wrote:
> If the client is in the Internet, you need to source NAT the client IP
> to the PIP for that topology to work. This assumes of course that real
> server's default GW is NOT the Alteon.
>
> Having said that, the PC connected to port 1 should still work if you
> disable proxy on the real. This assumes that there is a route BACK to
> the client or the client and server are on the same network.
>
> Try this instead. Disable proxy on port 1. Enable proxy on port 8 and
> enable proxy on the real server. Also ensure that the server has a
> route back to the PC on port 1. With this configuration the Alteon will
> NOT source NAT (PIP) sessions entering port 1 but WILL source NAT
> sessions entering port 8 (from the Internet).
>
> Is this what you want?
>
> -----Original Message-----
> From: owner-lb-l@vegan.net [mailto:owner-lb-l@vegan.net] On Behalf Of
> Sherwin T
> Sent: Wednesday, April 06, 2005 9:58 PM
> To: lb-l@vegan.net
> Subject: Re: [load balancing] alteon port IP appears
>
> Hi,
>
> Here is the setup while the alteon OS version is 9.0.38-SSH :
>
> Internet
>
> |
> pc---(port1)alteon(port 8)---switch---real server
>
> Thanks,
> Sherwin
>
> On Apr 6, 2005 10:15 PM, Adilson Lemos <adilsonl@corp.globo.com> wrote:
> > Sherwin,
> >
> > You can configure server default gateway for Alteon interface and try
> to
> > disable proxy again from RIP. IF it is not possible, in the new switch
> > series 2xxx 3xxx you can enable xforward inside of service http which
> you
> > carry the real ip of the client, but I think that this feature is just
> > enable on 22.x AAS OS version.
> >
> > Adilson Lemos.
> >
> > -----Original Message-----
> > From: owner-lb-l@vegan.net [mailto:owner-lb-l@vegan.net] On Behalf Of
> > Sherwin T
> > Sent: Wednesday, April 06, 2005 8:14 AM
> > To: lb-l@vegan.net
> > Subject: Re: [load balancing] alteon port IP appears
> >
> > Hi Peter,
> >
> > Thank you for your reply. BTW, when I tried to disable the proxy on
> > RIP the client is unable to browse. Is there other way/s or option?
> >
> > regards,
> > sherwin
> >
> > On Apr 6, 2005 4:02 AM, Peter Degrassi <degrassi@layer227.com> wrote:
> > > I think you're saying saying that the GET request's source IP is a
> proxy
> > > IP assigned to one of your Alteon ports and you are seeing this at
> your
> > > real server. If that's the case, then disable proxy at the real
> > > (cfg/slb/real x/proxy dis).
> > >
> > > Your topology may require PIPs, so be careful.
> > >
> > > -----Original Message-----
> > > From: owner-lb-l@vegan.net [mailto:owner-lb-l@vegan.net] On Behalf
> Of
> > > Sherwin T
> > > Sent: Tuesday, April 05, 2005 2:58 AM
> > > To: lb-l@vegan.net
> > > Subject: [load balancing] alteon port IP appears
> > >
> > > Hi!
> > >
> > > I've encountering IP address reflecting or appears as source address
> > > (this ip is the port address of the alteon) instead the IP of dialup
> > > pool.
> > >
> > > 1112682950.387 287 <210.2.11.208> TCP_MISS/200 4402 GET
> > > http://photos.friendster.com/photos/55/13/4873155/2410595067529s.jpg
> -
> > > DIRECT/209.11.169.235 image/jpeg
> > > 1112682950.448 <299 210.2.11.208> TCP_MISS/200 4036 GET
> > > http://photos.friendster.com/photos/14/78/10078741/659458469010s.jpg
> -
> > > DIRECT/209.11.169.235 image/jpeg
> > >
> > > Does anyone who could help me to correct this?
> > >
> > > Thanks,
> > > Sherwin
> > > ____________________
> > > The Load Balancing Mailing List
> > > Unsubscribe: mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
> > > Archive: http://vegan.net/lb/archive
> > > LBDigest: http://lbdigest.com
> > > MRTG with SLB: http://vegan.net/MRTG
> > > Hosted by: http://www.tokkisystems.com
> > >
> > > ____________________
> > > The Load Balancing Mailing List
> > > Unsubscribe: mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
> > > Archive: http://vegan.net/lb/archive
> > > LBDigest: http://lbdigest.com
> > > MRTG with SLB: http://vegan.net/MRTG
> > > Hosted by: http://www.tokkisystems.com
> > >
> > >
> > ____________________
> > The Load Balancing Mailing List
> > Unsubscribe: mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
> > Archive: http://vegan.net/lb/archive
> > LBDigest: http://lbdigest.com
> > MRTG with SLB: http://vegan.net/MRTG
> > Hosted by: http://www.tokkisystems.com
> >
> > ____________________
> > The Load Balancing Mailing List
> > Unsubscribe: mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
> > Archive: http://vegan.net/lb/archive
> > LBDigest: http://lbdigest.com
> > MRTG with SLB: http://vegan.net/MRTG
> > Hosted by: http://www.tokkisystems.com
> >
> >
> ____________________
> The Load Balancing Mailing List
> Unsubscribe: mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
> Archive: http://vegan.net/lb/archive
> LBDigest: http://lbdigest.com
> MRTG with SLB: http://vegan.net/MRTG
> Hosted by: http://www.tokkisystems.com
>
> ____________________
> The Load Balancing Mailing List
> Unsubscribe: mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
> Archive: http://vegan.net/lb/archive
> LBDigest: http://lbdigest.com
> MRTG with SLB: http://vegan.net/MRTG
> Hosted by: http://www.tokkisystems.com
>
>
____________________
The Load Balancing Mailing List
Unsubscribe: mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
Archive: http://vegan.net/lb/archive
LBDigest: http://lbdigest.com
MRTG with SLB: http://vegan.net/MRTG
Hosted by: http://www.tokkisystems.com
Received on Fri Apr 8 00:45:33 2005

This archive was generated by hypermail 2.1.8 : Fri Apr 08 2005 - 00:49:24 EDT