Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Owen

Pages: [1] 2 3 ... 5
1
Zeus Traffic Manager / Re: Zeus error log
« on: April 26, 2013, 03:52:34 pm »
This warning message indicates that the peer (the remote client) closed the connection when Stingray was not expecting it to (in this case, Stingray was still trying to read the request from the client).

Check the section entitled 'Detailed debugging of connections' in the Stingray user manual

In general, you should not be concerned by this.  The error was almost certainly provoked by the client misbehaving or failing in some way.

regards

Owen

2
Zeus Traffic Manager / Re: multiple network adapters same network
« on: April 26, 2013, 02:38:56 pm »
> Are there any issues in bringing up multiple network adapters that are are connected to the same network?

Odd routing will result, and outbound packets in the connection may use a different interface to the one the connection was received on.

> I will have to add adapters to only one virtual machine at a time, will this cause any issues with the ZTM cluster once I reboot to pickup new adapters?

No, this should be find so long as the ZTMs can still see each other and their IPs don't change

Owen

3
Zeus Traffic Manager / Re: Generic client first for TCP 139
« on: April 26, 2013, 02:35:57 pm »
Difficult question - best to raise with Riverbed support to investigate

4
Zeus Traffic Manager / Re: Changing ZXTM hostname
« on: April 26, 2013, 02:34:10 pm »
If you're using the Stingray/ZXTM virtual appliance, go to the System > Networking tab and update the hostname.

If you're using the Stingray software on Linux/Solaris, it's a little more involved...

There's a config file in ZEUSHOME/zxtm/conf/zxtms that has the same name as the hostname, and the file ZEUSHOME/zxtm/global.cfg is a symlink to that file.  It should be sufficient to rename the file in zxtm/conf/zxtms and then update the symlink.

It gets more complex when you're in a cluster: easiest to manually rename the config file on each cluster member, update the symlink on the machine you've renamed and hope for the best ;-)

5
Zeus Traffic Manager / splash.riverbed.com/stingray
« on: April 25, 2013, 06:27:14 pm »
Hi zeus-users,

Some of you may recall the Zeus 'KnowledgeHub' site, where we (Zeus) posted ideas and examples of how to use Zeus Traffic Manager...

I'm pleased to say that finally, "it's back!".  If you're using Zeus Traffic Manager, or the Riverbed-branded Stingray Traffic Manager (same product, new name), then please check out http://splash.riverbed.com/stingray - the beginning of a new Riverbed-hosted community around each of our products.

Almost all of the old Zeus KnowledgeHub content is there, updated and re-tested against the latest release.  There's a discussion/question forum to raise questions or comments if you wish, and a lot of new internal documentation.

If you have time, check it out, register for an account and then hit the 'Follow' button on the Stingray page, and on any content or users you are interested in.  We'll email you a regular digest of content updates, and you can ask questions or contribute answers.

Any questions/comments - please reply to this thread or email me directly - thanks

Owen

ps.  None of this takes away from the great zeus-users.org community, and I'll continue to keep an eye open and contribute when I can - thank you Karsten for hosting and managing it

6
Hi Jugger,

You could add a couple of log.info()'s to your script  to help debug it - it's important to ensure that the (quite complex) condition matches when you want it to.

For example, just before the condition, call:

log.info( "Remote IP: " . $remoteip . "; path: " . $path . "; url: " . $url );

and inside each condition add a log.info:

log.info( "Rewriting path to " . $newurl );

... or

log.info( "Redirecting client to http://lukket.l2013test.dk" );

This will help you to debug the rule.

A second point - http.setPath() does not do a redirect.  It rewrites the path in the request, and then the modified request is forwarded to the selected server.  If you want to do a redirect (and in most situations, this is better), then call http.redirect().

Cheers

Owen

7
Zeus Traffic Manager / Re: encrypted data
« on: May 17, 2012, 12:46:33 pm »
Hi Mark,

HTTPS applies to the entire connection, not just the body in the response, so it looks like you've got that part working OK.

It's not common to encrypt the XML response (more common just to SSL-encrypt the entire transaction).  Could you provide an example response, including all of the HTTP response headers, and we will take a look to understand what is going on.

Thanks

Owen

8
You can either whitelist the IP addresses of the proxies (this may not be possible if there are many or they change frequently) or you could implement the connection limiting in TrafficScript:

If there is no X-Forwarded-For header in the request, then rate-limit transactions on a per-client-IP basis


I hope that this will help you to achieve what you desire

Owen

9
Hi,

Transparent session affinity works by inserting a tracking cookie into the first response (once the load balancing decision has been made and the node selected).  If that cookie is present in subsequent requests, then the request is routed to original node.  It's simple and reliable, but does not work in cases where clients do not support or honor cookies.

J2EE Session Persistence works by locating the J2EE Session ID, which may be found either in the URL or a cookie.  This session ID (and the selected node) is shared across the cluster using a cache (j2ee_cache_size determines the size of the cache).  As Karsten points out, you may need to increase the size of the cache, as the default (2048 entries) is rather small.

If you can replicate the problem, then you can use the request logging to understand what is happening.  There are three relevant values that may be logged:

%F     The favored node for this connection 
%n     Node that was used for the connection 
%N     Node required to handle this connection (because of session persistence) 

If session persistence applies, %N will tell you the persisted node and this should match %n (the selected node) unless that node has failed.  In that case, the failuremode setting of the persistence class will define what the traffic manager does.

%F indicates a weekly-preferred node.  If there is no session persistence selection in effect (for example, it's the first request in the session), then we apply heuristics such as preferring the node that most recently responded to the same URL.  These influence the load balancing decision, but are not mandatory and will be ignored if a different node is strongly favoured by the load balancer.

Best regards

Owen

10
Zeus Traffic Manager / Re: ZXTM and TMG 2010
« on: September 19, 2011, 06:15:21 pm »
Hi Kosch

I understand that you're needing to load balance HTTPS traffic.

First of all, you can select either a client-first or ssl-passthrough virtual server type.  There's little difference between the two - SSL passthrough allows you to persist on the SSL session id, but neither allow you to modify the data (e.g. to insert an HTTP header).  See http://www.zeus.com/community/answer/whats-difference-between-ssl-virtual-server-and-simple-client-first-virtual-server-

If you want to modify the data, you will need to decrypt it on the traffic manager first.

There is another solution - if you can use the IP Transparency module, then Zeus will spoof the source IP address of the data it sends to the server to match the originating client's IP address.  This requires some additional configuration (the servers need to use the Zeus system as their default gateway for example) but you can use this technique with any traffic (including SSL).

regards

Owen

11
The counters that you graph are also published through the SOAP API (and SNMP), generally in the API's System.Stats interface.

The functions 'getNodeCurrentConn' and 'getNodeCurrentRequests' will give you the information you require.

regards

Owen

12
Good find - I've updated the Community article with your tip concerning the location and cache_wsdl parameters.  http://www.zeus.com/community/code-samples/list-running-virtual-servers-using-php5  Regards, Owen

13
Hi Paul,

This might help?

http://www.php.net/manual/en/soapclient.setlocation.php

I've not tried it, but please let us know if it solves the problem (and I'll update the knowledgehub example if so)

regards

Owen

14
Hi Paul,

For more details on using Perl, this may help:

http://www.zeus.com/community/articles/how-can-i-use-perls-soaplite-zeus-control-api

Chapter 5 of the Control API manual has a bunch of debugging and troubleshooting tips that may help.

If you can get the ListVS php or perl examples working, then use these as templates and modify them to use the other methods you want to access.  Once you hit a block where you make a modification and it stops working, post here and we'll do our best to help

Owen

15
The URI in the WSDL specification is not a web address; you can't resolve and download it.  Using a 'fake' URI is the usual convention for defining a unique namespace.

If you want to create a SOAP client, then you need to investigate the SOAP library support in your preferred language.  Some SOAP libraries require access to the WSDL file (which you can download from the admin interface - https://zeus:9090/apps/zxtm/help.fcgi?section=Manuals), and some are more lax and infer the WSDL specification (e.g. Perl SOAP::Lite).

There are simple examples for a range of languages on the Zeus community:

    http://www.zeus.com/community/search/list%20running%20virtual%20servers%20using

These examples compare and contrast the approaches used by each language to invoke the same SOAP methods

Pages: [1] 2 3 ... 5