ACE issues w/ regex matching

Darren Sasso · ‎04-18-2008

I have one site were i'm using regex matching to redirect certain requests to a different serverfarm. When i test the site it seems to work okay but when i role it into production this don't work correctly. I see alot of 404 messages and i can see in the server logs requests are bouncing around many times to the incorrect server.

We also use Akamai for our web acceleration and they stated that sticky cookies is what we should use for stickyness. The config is pretty straight forward but it seems to be an issue with load because when i test i don't see similiar results. Anyone have an issue like this or any other thoughts would be appreciated.

parameter-map type http HTTP-PARAM

case-insensitive

persistence-rebalance

length-exceed continue

ssl-proxy service http://www.microchipdirect.comSSL

key http://www.microchipdirect.com.key

cert http://www.microchipdirect.com.cer

chaingroup http://www.microchipdirect.com

serverfarm host http://www.microchipdirect.com/prog_sf

predictor leastconns

probe http

rserver chn-sv-iis-wfb1.dmz.mc-web.microchip.com

inservice

rserver tech.microchip.com

inservice

serverfarm host http://www.microchipdirect.com_sf

predictor leastconns

probe http

rserver microchipdirect_01

inservice

rserver microchipdirect_02

inservice

rserver microchipdirect_03

rserver microchipdirect_04

sticky http-cookie http://www.microchipdirect.com_prog http://www.microchipdirect.com_prog

cookie insert browser-expire

timeout 20

replicate sticky

serverfarm http://www.microchipdirect.com/prog_sf backup outofservice.microchip.com_sf

sticky http-cookie http://www.microchipdirect.com_cookie http://www.microchipdirect.com_cookie

cookie insert browser-expire

timeout 20

replicate sticky

serverfarm http://www.microchipdirect.com_sf backup outofservice.microchip.com_sf

class-map type http loadbalance match-any http://www.microchipdirect.com/prog

2 match http url /programming.*

3 match http url programming.*

class-map match-any http://www.microchipdirect.com_443_vs

2 match virtual-address 10.10.215.121 tcp eq https

class-map match-any http://www.microchipdirect.com_80_vs

2 match virtual-address 10.10.215.121 tcp eq www

policy-map multi-match VIPS

class http://www.microchipdirect.com_80_vs

loadbalance vip inservice

loadbalance policy http://www.microchipdirect.com_80_l7slb

loadbalance vip icmp-reply

appl-parameter http advanced-options HTTP-PARAM

class http://www.microchipdirect.com_443_vs

loadbalance vip inservice

loadbalance policy http://www.microchipdirect.com_443_l7slb

loadbalance vip icmp-reply

appl-parameter http advanced-options HTTP-PARAM

ssl-proxy server http://www.microchipdirect.comSSL

Gilles Dufour · ‎04-19-2008

since you said the config does work in the lab, it means the config is correct for regular traffic.

You need to catch your problem with a backend AND frontend sniffer trace and see what is different with the traffic when it fails.

Gilles.

Darren Sasso · ‎04-19-2008

I gathered a sniff trace yesterday and sent it off to Cisco. I know i said this already but i actually see connections which are suppose to be destined for the class default go to the programming site. It seems to be load related as if some of the sticky sessions get confused or something. I also removed one of the servers from each serverfarm and still the same issue.