Help with connect control and server load balancing
From: memdy (michael_at_emdy.com)
Date: 05/25/03
- Next message: Peter Wilson: "Re: What's going on here? Anonymous surfing using another companies ISP."
- Previous message: chadg: "Re: Annoying POP-UPS (not web-browser)- SOLUTION"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 24 May 2003 15:50:34 -0700
I'm trying to use the connect control module within FW1 to do server
load balancing to two web servers. I followed the configuration
guides/.PDF's but have had no success.
It seems that the problem is that the firewall just isn't answering
for the Logical server address.
I've performed the following configuration:
1. Defined a network group object [HTTP_SERVERS]containing all the
internal IP's of the real web servers and defined their external NAT
properties.
2. Defined a network group object [WEB_FARM] containing all the
external IP's as defined above.
3. Defined a logical server object [LOAD_BALNANCER] defining the
external IP address to be used for load balancing facing the public
Internet. I defined the group to be redirected to [WEB_FARM]
4. I added two rules, one for permitting ANY to [LOAD_BALANCER]
service HTTP action ACCEPT. The second rule for permitting the
redirect of ANY to [WEB_FARM] service HTTP action ACCEPT.
I can reach any [WEB_FARM] address just fine if i go directly, but I
cannot hit them from the [LOAD_BALANCER] address. It seems as though
the FW1 is not listening for that IP address.
I defined a static arp for it using:
arp -s 65.106.231.3 00:04:5A:7E:0A:84 pub
What else do I need to do?
- Next message: Peter Wilson: "Re: What's going on here? Anonymous surfing using another companies ISP."
- Previous message: chadg: "Re: Annoying POP-UPS (not web-browser)- SOLUTION"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
