Tag Info

New answers tagged

2

The question is: Each ISP has there own DNS, how to make the dns resolving based on the used ISP? Why do you care? The last time I used an ISP DNS was many many years ago. Run your own or go to the public Google DNS Servers. Finished. ISP's sometimes do crazy stuff with their DNS to "Improve service" - stuff that may break applications. If you avoid ...


0

Answering my own question, as I finally figured it out. I added this to applicationHost.config under configuration/system.applicationHost: <webLimits connectionTimeout="00:10:00" minBytesPerSecond="0" /> But even after saving and pressing Restart under Manage Server in IIS Manager, it still responded with 502 after two minutes. However, today when ...


0

To answer your first question: yes. Well, in my personal opinion anyway, don't take it personally. The thing is that you are trying to set the limits on your TCP stack, while you have yourself a loadbalancer in front of it with many counters and options. If you limit yourself in the TCP stack, you run into way more problems when you hit those limits. I would ...


0

Yes, it's valid. But... Some programs do a "double-reverse lookup" or as Wikipedia calls it, Forward-confirmed reverse DNS. Quoting from the wikipedia entry, "RFC 1912 and RFC 1033 (Informational) recommend it as a best practice, but it is not a requirement of standard defining RFCs governing operation of the DNS." (emphasis, mine). The programs that do ...


2

You have two possible approach : 1. A single VIP for both farms : In this case, your VIP will be your NGinx server single ip address. http { upstream web.example.com { least_conn; server mywebserver1.loc; server mywebserver2.loc; server mywebserver3.loc; } upstream api.example.com { least_conn; server myapiserver1.loc; ...


0

Varnish does not do SSL, so doing Varnish->nginx, or Varnish->HAProxy won't work with SSL. On the other hand, putting anything in front of Varnish (besides SSL termination) will probably strip you of the performance benefits Varnish provides. Having Varnish (cache) share hardware and/or OS with webserver may, or may not be a problem. It hugely depends on ...


0

Redis Sentinel will allow you to run multiple instances of redis and handles failover for you. http://redis.io/topics/sentinel


2

It depends what you tell nginx to do in your configuration and what proxying mode is set. If your use case is proxy_pass or fastcgi_pass this is controlled by proxy_http_version and fastcgi_keep_conn combined to the keepalive directive in the upstream server block.


1

I wrote up an extended blog post about how to do this with Apache 2.4 using OSSEC (a FOSS host-based intrusion detection system). Here's the TLDR: Use mod_remoteip to log client IPs in place of your load-balancer IPs. In your vhost config, use an IncludeOptional directive inside a RequireAll directive to source in a directory that will contain other ...


2

I doubt you'll get a positive answer. They may well use something like HAProxy, but the nature of the abstraction provided by ELB means they could probably swap that out for something else at any time. Also they probably have their own modifications to whatever they're using. However, if you're interested in the design of Load-Balancing-as-a-Service in ...


4

In case you use nginx as a load-balancer, the stream will be : Redirect : Step 1 : Client => LB (HTTP request) Step 2 : LB => Client (HTTP reply) Step 3 : Client => Backend (HTTP request) Step 4 : Backend => Client (HTTP reply) Proxy : Step 1 : Client => LB (HTTP request) Step 2 : LB => Backend (HTTP request) ...


1

If the web application requires that a user stay connected to the same server, then the load balancer has to understand the session management method of the web application. For example, the load balancer can inject its own cookie in to the session that says which backend server to connect to. The load balancer can also read a cookie placed by the web app. ...


1

Hardware load balancers have supported "active/passive" or "active/active" setups for years, in both cases they are then set up in parallel from a layer 1/2 perspective... active/passive uses monitoring/keepalive mechanisms as described, active/active can be implemented in numerous ways. To appear as a single IP at the frontend, two or more balancers might, ...


0

No, it is not possible to terminate SSL at the Azure endpoint directly, unfortunately. Your options are either to terminate at the VM, or use a different load balancer such as Kemp VLM.


2

The recommended way to do this is to have a custom health probe in your load balanced set. For example, you could have a simple healthcheck.html page on each of your VM's (in wwwroot for example) and direct the probe from your load balanced set to this page. As long as the probe can retrieve that page (HTTP 200), the Azure load balancer will keep sending ...


1

In the following logs, sub.example.com represents a subdomain which is different from that actually being hosted by the servers in question. [Fri May 01 06:28:37.315175 2015] [ssl:debug] [pid 13873] ssl_engine_io.c(1201): (70014)End of file found: [client 10.0.0.123:37617] AH02007: SSL handshake interrupted by system [Hint: Stop button pressed in ...


9

There are couple of ways to achieve HA of a Load Balancer - or in that regards any service. Lets assume you have two machines, with IP addresses: 192.168.100.101 192.168.100.102 Users connect to an IP, so what you want to do is separate IP from specific box - eg create virtual IP. That IP will be 192.168.100.100. Now, you can choose HA service which ...


1

Using Nginx as your load balancer should allow you to follow the redirect detailed in this post by altering your config to detect a no response timeout: nginx automatic failover load balancing In theory if you have a HA environment, multiple load balancers clustered should allow service to be maintained if one was to fail. Hope this helps.


1

I found this article which seems pretty similar to your problem: http://willwarren.com/2014/01/27/running-apache-tomcat-with-ssl-behind-amazon-elb/ Basically states on changing server.xml to this: <Connector port="8080" protocol="HTTP/1.1" proxyPort="443" scheme="https" secure="true" proxyName="myapp.example.com" ...


0

You can use a stick table in HAProxy and the tips used in this blog article: http://blog.haproxy.com/2014/01/17/emulating-activepassing-application-clustering-with-haproxy/ It describes how to fix your 4 points. Baptiste


0

This is a sample after a real wold configuration that works for me I had to use individual ProxyPassReverse directives to get redirections/links to work. Even the final / seems important. <Proxy balancer://mycluster> Order deny,allow Allow from all BalancerMember http://192.168.151.101 BalancerMember http://192.168.151.102 BalancerMember ...


0

Following apache recommendations (http://httpd.apache.org/docs/2.2/mod/mod_proxy.html), if your apache only works as ReverseProxy you must configure this: ProxyRequests Off # Then the config you actually have <Proxy balancer://mycluster> BalancerMember http://192.168.151.101 BalancerMember http://192.168.151.102 BalancerMember http://192.168.151.103 ...


0

I strongly recommend the use of a link balancer for this type of environment. I make heavy use of the Elfiq Link Balancers at my customers' locations because it allowed them to accommodate multiple ISPs and transit options, while retaining one firewall (usually Cisco ASA). A solution like this gives you incredibly granular control over inbound and ...


3

As one of the previous answers states, you can use Policy Based Routing and set up a route map on your router. However, instead of using VLANs or Static IPs, you could use QoS Marking instead. This could be rolled out in a group policy to your Windows PCs, and the route map on your router could be configured to look out for a particular DSCP value to ...


1

EDIT: The below should work with a Cisco ASA and Cisco Layer 3 Switch This might work: Configure two VLANs - one for Windows and one for MAC's Assign independant DHCP scopes to the two VLAN's Configure routing to allow VLAN's to pass traffic between each other, which will allow both MAC & Windows to speak to Exchange server. Then you can configure ...



Top 50 recent answers are included