<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="Section1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">Greetings,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">I’m facing strange situation and need advise on this issue. I’m trying to use L7 heath check with cookie persistence, L7 is working fine and the cookie was
inserted as I can see it using http analyzer. However, the foundry did not functioning as it should be by providing stickiness between the Clint and the real server based on the server ID. Each time I open new session or refresh the opened one it flip me to
the other server for http requests. For https, it always switched the requests to server “B” all the time.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">Below is the configuration I’m using, please advise me why this is happening.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Context test<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">healthck check_A tcp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dest-ip 10.1.180.14<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol http<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol http url "GET /enable.html"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> l7-check<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">healthck checkSSL_A tcp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dest-ip 10.1.180.14<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol ssl<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol ssl use-complete<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> l7-check<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">healthck checkSSL_B tcp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dest-ip 10.1.180.7<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol ssl<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol ssl use-complete<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> l7-check<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">healthck check_B tcp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dest-ip 10.1.180.7<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol http<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> protocol http url "GET /enable.html"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> l7-check<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">healthck checkboth_A boolean<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> and check_A checkSSL_A<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">healthck checkboth_B boolean<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> and check_B checkSSL_B<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">csw-rule "r2" header "cookie" search "ServerID="<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">csw-policy "p2"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> match "r2" persist offset 0 length 4 group-or-server-id<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> default forward 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> default rewrite insert-cookie<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">server real A 10.1.180.14<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> source-nat<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> weight 1 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 healthck check_A<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 keepalive<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 server-id 1218<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 group-id 1 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 healthck checkboth_A<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 keepalive<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 server-id 1218<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 group-id 1 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">server real B 10.1.180.7<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> source-nat<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> weight 1 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 healthck check_<b>B</b><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 keepalive<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 server-id 1211<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44444 group-id 1 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 healthck checkboth_B<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 keepalive<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 server-id 1211<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port 44445 group-id 1 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">server virtual Final_test 10.1.180.10<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> predictor repons-time<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port http<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port http reset-on-port-fail<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port http cookie-name "serverID"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port http csw-policy "p2"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port http csw<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port http cookie-age 5<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port ssl sticky<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">port ssl sticky-age 5<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> port ssl reset-on-port-fail<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> bind http A 44444 B 44444<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> bind ssl A 44445 B 44445<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
</div>
<br>
<hr>
<font face="Verdana" color="Black" size="2">The contents of this email, including all related responses, files and attachments transmitted with it (collectively referred to as “this Email”), are intended solely for the use of the individual/entity to whom/which
they are addressed, and may contain confidential and/or legally privileged information. This Email may not be disclosed or forwarded to anyone else without authorization from the originator of this Email. If you have received this Email in error, please notify
the sender immediately and delete all copies from your system. Please note that the views or opinions presented in this Email are those of the author and may not necessarily represent those of Saudi Aramco. The recipient should check this Email and any attachments
for the presence of any viruses. Saudi Aramco accepts no liability for any damage caused by any virus/error transmitted by this Email.<br>
</font>
</body>
</html>