ACE - Do I need a L7 policy to configure L4 load-balancing

Answered Question
Mar 30th, 2008
User Badges:

Hi - I simply need to load balance TCP traffic to a specific port to 2 servers in a serverfarm. There is nothing in the documentation that states how to associate a serverfarm with a policy. The only documentation I can find which explains how to associate a serverfarm with a policy is if you configure a L7 policy - Do I need to configure a L7 policy even if I just want to do L4 load balancing?

I'm sure I must be missing something simple but I've been through the docs at length and I cn't find any config examples on CCO

Many Thanks, Dom

Correct Answer by ciscocsoc about 9 years 3 months ago

Hi Dom,


You should only need a L7 policy if you are doing L7 inspection.


The skeleton config should be something like:



class-map match-all VIP

match virtual address 192.168.1.100 any


policy-map type loadbalance first-match LB-POLICY

class class-default

serverfarm FARM


policy-map multi-match VIPS

class VIP

loadbalance vip inservice

loadbalance vip LB-POLICY


(assuming that FARM is defined and the service policy applied to the interfaces)


If you look at the "getting started" guide there is a simple LB config in that. Although it does refer to an L7 policy it is more like an L4.


HTH


Cathy

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
ciscocsoc Mon, 03/31/2008 - 05:44
User Badges:
  • Silver, 250 points or more

Hi Dom,


You should only need a L7 policy if you are doing L7 inspection.


The skeleton config should be something like:



class-map match-all VIP

match virtual address 192.168.1.100 any


policy-map type loadbalance first-match LB-POLICY

class class-default

serverfarm FARM


policy-map multi-match VIPS

class VIP

loadbalance vip inservice

loadbalance vip LB-POLICY


(assuming that FARM is defined and the service policy applied to the interfaces)


If you look at the "getting started" guide there is a simple LB config in that. Although it does refer to an L7 policy it is more like an L4.


HTH


Cathy

Gilles Dufour Mon, 03/31/2008 - 08:13
User Badges:
  • Cisco Employee,

Cathy, looks like you became a pro of the ACE module :-) !!


Gilles.

d-fillmore Tue, 04/01/2008 - 08:36
User Badges:

Thanks Cathy - I raised a TAC case in the ned as I needed to know on Monday.


It's the fact that the documentation doesn't say that you need a L7 policy to do basic L4 load-balancing.


Many Thanks for your help =)

Actions

This Discussion