ACE: design/config question: trans.slb + slb + mngt

wim.juste · ‎10-01-2008

Hi,

Could this ACE setup/design work?

I want PROXIED sessions (to VIP proxy 10.0.0.10) to be loadbalanced

All other sessions (eg. Some public ip's) will have to transparent loadbalanced to proxy servers. Thus not destinations NAT

ACE is inline between firewalls and proxy servers.

Vip definitions:

class-map match-all P_PXYVIP_VS_LB

2 match virtual-address 10.0.0.10 255.255.255.255 tcp 8080

class-map match-all P_PXYTRANS_VS_LB

2 match virtual-address 0.0.0.0 0.0.0.0 tcp any

Question in this case: would it still be possible to have management sessions towards proxy servers routed by the ACE ? (physical ip addresses of proxy)

Probably the classmap PXYTRANS is catching those sessies also.

Are there other design/config solutions to solve this one?

Thank you!

Wim

wim.juste · ‎10-03-2008

Let me repose the question:

How could one still be able to access the realserver IP (which is directly connected

to the ACE) for manangement.

Knowing that there is 1 VIP which (normal) loadbalance to the realservers

and

there is 1 VIP 0.0.0.0 tcp any which is configure to catch all other traffic to be

transparant loadbalanced.

The VIP 0.0.0.0 is always catching the sessions which need only to be routed

to the real servers ip.