Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ACE Reverse Proxy question

Hello, I have a client that needs to reverse proxy sessions to two backend servers. Can the ACE preform reverse proxies?

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ACE Reverse Proxy question

Gregg,

you need to create an action-list and assign it to your policy-map

switch/Admin(config)# action-list type optimization http avs_default

switch/Admin(config-actlist-optm)# ?

Configure optimization actions:

appscope Appscope measurement against optimization

cache Cache optimization

delta Delta optimization

do EXEC command

dynamic Enable just-in-time object accelaration

end Exit from configure mode

exit Exit from this submode

flashforward Flashforward optimization

flashforward-object Flashforward object optimization

no Negate a command or set its defaults

You will probably want to use cache forward or cache dynamic.

More info at

http://www.cisco.com/en/US/docs/net_mgmt/application_networking_manager/2.0/user/guide/UG_optimization.html

Gilles.

4 REPLIES
Cisco Employee

Re: ACE Reverse Proxy question

What do you expect from the reverse-proxy ???

Just caching ?

If so, the ACE module is not a solution but the ACE appliance C4710 will offer caching functionalities.

Gilles.

New Member

Re: ACE Reverse Proxy question

Gilles,

We do have a 4710. Attached is what we are trying to do. Can you point me in the right direction for setting this up? We are trying to reverse proxy an SSL traffic to two web servers. SSL traffic will be terminated on the ACE. I have also attached my configs, with how I have setup the VIP and server farm.

I am a switch and router guy not a load balancer expert by any means, any help or pointing to the correct docs would be very helpful.

Thanks,

Gregg

Cisco Employee

Re: ACE Reverse Proxy question

Gregg,

you need to create an action-list and assign it to your policy-map

switch/Admin(config)# action-list type optimization http avs_default

switch/Admin(config-actlist-optm)# ?

Configure optimization actions:

appscope Appscope measurement against optimization

cache Cache optimization

delta Delta optimization

do EXEC command

dynamic Enable just-in-time object accelaration

end Exit from configure mode

exit Exit from this submode

flashforward Flashforward optimization

flashforward-object Flashforward object optimization

no Negate a command or set its defaults

You will probably want to use cache forward or cache dynamic.

More info at

http://www.cisco.com/en/US/docs/net_mgmt/application_networking_manager/2.0/user/guide/UG_optimization.html

Gilles.

New Member

Re: ACE Reverse Proxy question

Get rid of your chain group, if you only have the root cert, you don't need a chain group.

crypto chaingroup HBSP_CHAIN_GROUP

cert ebscert.pem

ssl-proxy service SSL_PROXY_EBSAPP

key "ebskey.pem"

cert "ebscert.pem"

chaingroup HBSP_CHAIN_GROUP

688
Views
1
Helpful
4
Replies
CreatePlease to create content