CSS 11501 HTTP Redirect Troubles

Unanswered Question
May 22nd, 2007

Hi All,

We have installed a css 11501 to do simple http redirect load balancing. Things seem to be working, but there is one problem. Http traffic doesn't seem to be able to leave the NATed net behind the CSS. Meaning if you browse to the redirect service VIP you are redirected to a new Domain based on round robin. The web server sees the traffic and watching netstat you can see the connection is established. How ever the web client times out with out ever reciving anything.

From the web host you can ping the both the internal and external interfaces.

Doing a sh flows shows the connection progress and everything seems to be talking to the right interfaces and hosts.

Attached is the config.

I am looking at http redirect as it looks like the best option for a mixed http https enviroment with out upgrading to a 11501 w/SSl or a 115003.

Thanks for any help.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Gilles Dufour Wed, 05/23/2007 - 01:57


I do not see anything wrong in the config.

Are you sure the server response goes back through the CSS ?

Try to capture a sniffer trace on client and server side.

I'd like to say you have quite a tricky config for something that should be quite easy.

If you do a Layer3 rule and use sticky-srcip you should be able to loadbalance HTTP and HTTPS and guarantee that switching from one to another wil stick the client to the same server.


content main-rule

vip address

add service bb-app-live02

add service bb-app-live01

advanced-balance sticky-srcip


If you can't take a sniffer trace, you can also try to configure a source group to see if it solves the problem :

group client-nat

vip addr

add destination service bb-app-live01

add destination service bb-app-live02




mike.loether Wed, 05/23/2007 - 14:04

Well at least it did until I added the SSL certs. Now as soon as it tries to go HTTPS I get a 12263 error in firefox, page can't be displayed in IE.



This Discussion