Forum Discussion

sanjai_126162's avatar
sanjai_126162
Icon for Nimbostratus rankNimbostratus
Sep 26, 2016

clientless mode making issue

we have published web-service application under one VIP which clientless mode "1" irule using and mapped the default pool member,its working fine as expected in browser as well as soap tool.

 

We tried to add one more application in the same vip,ie external single domain [https://sanjai.split.com/] and internal 2 different doamin http://abd.com/ws and http://kdm.com/ed

 

We used clienless mode plus additional irule by uri contains "/ws" goto pool member1 and /ed to pool member2 and rewrite to internal domain also. but its resetting the connection in the handshake.

 

Could you anyone assistance on this

 

devops
iRules

2 Replies

Sort By
  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Sep 27, 2016

    Hi Sanjai,

    I'd like to recommend to temporary rule out APM (e.g. via 

    ACCESS::disable
    for a specific Client IP) to see if your LTM is already able to route the request correctly.

    If you're required to switch pools/nodes based on the provided URI you have to apply a OneConnect Profile (recommended) or 

    LB::detach
    the connection before each node selection (not optimal) to allow LTM to switch the server side connections as needed.

    If this is working stable and the request are able to pass to every single web application, then you should reenable APM and tweak the SSO profiles as needed. Keep in mind, that in combination with OneConnect you're limited to NTLM, Basic, Forms SSO or something homegrown that doesn't require a Session_based-Authentication. If NTLM is used, then you have to attach a NTLM profile to allow LTM to reuse idle OneConnect connections on a per-user basis.

    Cheers, Kai

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 30, 2016

    Hi,

     

    Is your SOAP request greater than 64K?

     

    The clientless mod limit request size to 64K during authentication, this limit can be change since version 11.5