05-07-2009 10:54 AM
Hi
I try to configure the HTTP header insertion feature based on the action-list type modify http. Unfortunately it does not works.
The config looks like that
action-list type modify http TEST
header insert both Host header-value test:test.
I added this action-list to the correct policy-map.
When I checked the snifer output on the server side, there is no test value in the HTTP header.
I test the same feature based on the "insert-http" command in the policy-map and this one works.
Could anybody help me with this problem?
Thank you in advance
Regards
Lucas
Solved! Go to Solution.
05-14-2009 01:47 AM
05-14-2009 11:59 AM
Hi Lukas,
Add a new parameter-map named PRMAP_PERST_REBLNC and add this to the policy map using command appl-parameter http advanced-options PRMAP_PERST_REBLNC as shown below:
action-list type modify http test-insert
header insert both My-Header header-value test
header insert both SSL header-value TRUE
policy-map type loadbalance http first-match HtppInsert
class class-default
serverfarm linux1-80
action test-insert
policy-map multi-match SLB1
class VIP-122-80
loadbalance vip inservice
loadbalance policy HtppInsert
loadbalance vip icmp-reply active
loadbalance vip advertise active
loadbalance vip advertise metric 1
connection advanced-options SetTos
appl-parameter http advanced-options PRMAP_PERST_REBLNC
parameter-map type http PRMAP_PERST_REBLNC
persistence-rebalance
Hope this will make all the packets are inserted with the http header not the first one only.
If it works then plz inform.
Kind Regards.
Sachin Garg
05-19-2009 11:41 AM
Instead of persistence-rebalance in your parameter map. Use header modify per-request in the parameter map. This introduces less overhead as we don't need to make a load balance decsion just insert the header.
05-21-2009 07:12 AM
Lucas,
analyzing data requires time, cpu, memory ... resources.
So we try to only analyze a minimum of data.
Without persistence rebalance, once we have made our loadbalancing decision, we simply switch the traffic without looking into the data.
This is the best option to achieve best performance.
By configuring 'persistence rebalance' you forces ACE to inspect every request.
You'll get lower performance but since we inspect all request we are able to insert the header to each of them.
Gilles.
05-08-2009 12:30 AM
I just gave it a try in my lab and it works.
action-list type modify http test-insert
header insert both My-Header header-value "gilles"
header insert both Host header-value "192.168.30.24:80"
policy-map type loadbalance http first-match HtppInsert
class class-default
serverfarm linux1-80
action test-insert
policy-map multi-match SLB1
class VIP-122-80
loadbalance vip inservice
loadbalance policy HtppInsert
loadbalance vip icmp-reply active
loadbalance vip advertise active
loadbalance vip advertise metric 1
connection advanced-options SetTos
My version: A2(1.4a)
G.
05-08-2009 02:12 AM
Ok thank you. I did my tests on version A2(1.4) so I'll try to do that on A2(1.4a)
Lucas
05-13-2009 12:34 PM
Hi
I've done some tests on A2(1.4) and I confirm that the feature works, but the problem is that the new header field in being inserted only into the first packet of the flow. The rest of the packets do not have this parameter set.
Do you know how it can be fixed ?
Regards
Lucas
05-13-2009 05:20 PM
Hi Lukaszk,
Enter an unquoted text string with no spaces and a maximum of 255 alphanumeric characters in the expression part as shown below.
action-list type modify http test-insert
header insert both My-Header header-value gilles
header insert both Host header-value 192.168.30.24:80
header insert both Host header-value www.cisco.com
Kind Regards,
Sachin Garg
05-13-2009 10:36 PM
He
I tried to do that, but the results are the same.
My config is as below
action-list type modify http test-insert
header insert both My-Header header-value test
header insert both SSL header-value TRUE
I attached this action-list to the SSL policy-map, and what I saw is that the new headers appeared only in the first HTTP packet of the flow.
Regards
Lucas
05-14-2009 01:47 AM
configure persistence rebalance with a parameter-map.
G.
05-14-2009 11:59 AM
Hi Lukas,
Add a new parameter-map named PRMAP_PERST_REBLNC and add this to the policy map using command appl-parameter http advanced-options PRMAP_PERST_REBLNC as shown below:
action-list type modify http test-insert
header insert both My-Header header-value test
header insert both SSL header-value TRUE
policy-map type loadbalance http first-match HtppInsert
class class-default
serverfarm linux1-80
action test-insert
policy-map multi-match SLB1
class VIP-122-80
loadbalance vip inservice
loadbalance policy HtppInsert
loadbalance vip icmp-reply active
loadbalance vip advertise active
loadbalance vip advertise metric 1
connection advanced-options SetTos
appl-parameter http advanced-options PRMAP_PERST_REBLNC
parameter-map type http PRMAP_PERST_REBLNC
persistence-rebalance
Hope this will make all the packets are inserted with the http header not the first one only.
If it works then plz inform.
Kind Regards.
Sachin Garg
05-19-2009 11:41 AM
Instead of persistence-rebalance in your parameter map. Use header modify per-request in the parameter map. This introduces less overhead as we don't need to make a load balance decsion just insert the header.
05-21-2009 05:21 AM
Hello
I've done a test and it works as well as the persistent-rebalance.
Could you please explain to me why when using persistent-rebalance I see the header value in each packet ?
Thank you in advance
Regard
Lucas
05-21-2009 07:12 AM
Lucas,
analyzing data requires time, cpu, memory ... resources.
So we try to only analyze a minimum of data.
Without persistence rebalance, once we have made our loadbalancing decision, we simply switch the traffic without looking into the data.
This is the best option to achieve best performance.
By configuring 'persistence rebalance' you forces ACE to inspect every request.
You'll get lower performance but since we inspect all request we are able to insert the header to each of them.
Gilles.
05-21-2009 10:25 AM
ok, now it is clear for me.
Thank you
Lucas
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide