Persistence For Filter Redirection - Radware Alteon Application Manual

Persistence for Filter Redirection

The persistence feature ensures that all connections from a specific client session reach the same
real server. Alteon provides the following options for persistence when using filter redirection:
• Layer 3/4 persistence—The hash is based on Layer 3/4 session parameters. You can choose
from a number of options for the hash input (also called tunable hash): source IP address,
destination IP address, both source and destination IP addresses, or source IP address and
source port.
• HTTP Layer 7 persistence—The hash is based on any HTTP header value.
• Persistence binding per filter—The /cfg/slb/filt <filter number>/adv/redir/pbind
command enables persistent binding for redirection. It is applicable when using redirect filters
for SLB instead of virtual services. When enabled, persistence is maintained across multiple
sessions from the same client (same source IP).
Persistence-based SLB enables the network administrator to configure the network to redirect
requests from a client to the same real server that initially handled the request. For example,
when a server has data associated with a specific user that is not dynamically shared with other
servers at the site.
Persistence binding per filter is similar to client IP-based persistence for virtual services, where
the cip, dip, rport, and dport values force sessions with values that match the filter to be
redirected to the same server in the group.
Notes
• When either Layer 3/4 or Layer 7 persistence is required, the group metric must be set to hash
or minmiss.
• HTTP Layer 7 persistence, when configured, overwrites the Layer 3/4 persistence setting.
• Persistence binding per filter cannot be enabled with Layer 7 content lookup (/cfg/slb/filt
<filter number>/adv/layer7/l7lkup) because pbind server selection uses Layer 3 and 4
criteria, while the l7lkup command can use Layer 7 SLB strings attached to the server.
• If Firewall Load Balancing (FWLB) is enabled, the FWLB filter which hashes on the source and
destination IP addresses overrides the tunable hash filter. For more information, see
Load Balancing, page
To configure Layer 3/4 persistence (tunable hash) for filter redirection
1. Configure hashing based on source IP address:
>> # /cfg/slb/filt 10/ena
>> Filter 10 # action redir
>> Filter 10 # proto tcp
>> Filter 10 # group 1
>> Filter 10 # rport 3128
>> Filter 10 # vlan any
>> Filter 10 # adv
>> TCP advanced menu # thash sip
Hashing on the 24-bit source IP address ensures that client requests access the same cache.
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
657.
Filtering and Traffic Manipulation
(Enable the filter)
(Specify the redirection action)
(Specify the protocol)
(Specify the group of real servers)
(Specify the redirection port)
(Specify the VLAN)
(Select the Advanced Filter menu)
(Select source IP address for hashing)
Firewall
377