Ley de participación ciudadana y control social

This feature places a session in an accelerated session timeout queue upon seeing the first FIN in DSR (as opposed to the standard two FINs). The session is timed out in 8 seconds instead of the standard session age.

To place a session in an accelerated session timeout queue, enter commans such as the following:

server virtual vs

port <port> dsr fast-delete

Upon receiving first FIN from a client, the ServerIron puts sessions in a deletion queue, thus speeding up the deletion process.

Syntax: [no] port <port> dsr fast-delete

NOTE: If there is pending data delayed beyond the accelerated timeout, the session may become prematurely aged out. Exercise caution when enabling this command.

SwitchBack Configuration Example

The following table and Figure 3.29 show an example of a SwitchBack configuration for a High Availability scenario.

Because multiple VIPs are mapping to the same ports on the same real servers, TCP/UDP port binding is used. Thus, port 180 on VIP2 on ServerIron A and on VIP1 on ServerIron B is a logical port that is bound to port 80 on the real servers. For more information, see “Many-To-One TCP/UDP Port Binding” on page 3-11.

ServerIron Domain Name Virtual IP (VIP) Address Priority VIP’s TCP Port Real IP Address Real Server’s TCP Port A www.abc.com VIP1: 209.157.22.100 254 80 Real Server 1: 10.0.0.1 Real Server 2: 10.0.0.2 80 80 A www.def.com VIP2: 209.157.22.101 2 80 Real Server 1: 10.0.1.1 Real Server 2: 10.0.1.2 180 180 B www.abc.com VIP1: 209.157.22.100 2 80 Real Server 3: 10.0.0.1 Real Server 4: 10.0.0.2 180 180 B www.def.com VIP2: 209.157.22.101 254 80 Real Server 3: 10.0.1.1 Real Server 4: 10.0.1.2 80 80

Figure 3.29 ServerIrons deployed in SwitchBack configuration

To implement the configuration shown in Figure 3.29, configure ServerIrons A and B.

Note the dsr parameter on the port commands that add the HTTP port (TCP port 80) to the VIPs. To enable SwitchBack for additional TCP/UDP ports, you use the dsr parameter for each port when you add the port to a VIP.

NOTE: Be sure you configure all the real servers on both ServerIrons, and bind the VIPs on each ServerIron to all the real servers.

NOTE: Foundry recommends that you specify 2 (instead of 1) as a low priority or 254 (instead of 255) as a high priority. This way, you can easily force failover of the high priority ServerIron to the low priority ServerIron by changing the priority on just one of the ServerIrons. For example, you can force a failover by changing the priority on the high priority ServerIron from 254 to 1. Since the priority on the low priority ServerIron is 2, the low priority ServerIron takes over for the VIP. Likewise, you can force the low priority ServerIron to take over by changing its priority to 255, since the priority on the high priority ServerIron is only 254.

Configuring ServerIron A

Notice that all four real servers must be configured, and bound to the VIPs, on both ServerIrons. Notice also that two HTTP ports are added to each real server. This type of configuration requires that you use the TCP/UDP port binding feature to bind the ports on the two real servers to the same port on the virtual server. For information, see “Many-To-One TCP/UDP Port Binding” on page 3-11.

To configure the real servers, enter the following commands:

ServerIronA(config)# server real-name Real_Server_1 10.0.0.1 Internet Real Server 1 IP address = 10.0.0.1 Loopback addresses = 209.157.22.100 209.157.22.101 VRRP, FSRP, or HSRP

Remote Access Server Remote Access Server

VIP1, 209.157.22.100 priority 255 = Active VIP2, 209.157.22.101 priority 1 = Standby VIP1, 209.157.22.100 VIP2, 209.157.22.101 priority 1 = Standby priority 255 = Active Real Server 2 IP address = 10.0.0.2 Loopback addresses = 209.157.22.100 209.157.22.101 Real Server 3 IP address = 10.0.0.3 Loopback addresses = 209.157.22.100 209.157.22.101 Real Server 4 IP address = 10.0.0.4 Loopback addresses = 209.157.22.100 209.157.22.101

SI-A

SI-B

ServerIronA(config-rs-Real_Server_1)# port http ServerIronA(config-rs-Real_Server_1)# port 180 ServerIronA(config-rs-Real_Server_1)# exit

ServerIronA(config)# server real-name Real_Server_2 10.0.0.2 ServerIronA(config-rs-Real_Server_2)# port http

ServerIronA(config-rs-Real_Server_2)# port 180 ServerIronA(config-rs-Real_Server_2)# exit

ServerIronA(config)# server real-name Real_Server_3 10.0.1.1 ServerIronA(config-rs-Real_Server_3)# port http

ServerIronA(config-rs-Real_Server_3)# port 180 ServerIronA(config-rs-Real_Server_3)# exit

ServerIronA(config)# server real-name Real_Server_4 10.0.1.2 ServerIronA(config-rs-Real_Server_4)# port http

ServerIronA(config-rs-Real_Server_4)# port 180 ServerIronA(config-rs-Real_Server_4)# exit

To configure the VIPs, enter the following commands:

ServerIronA(config)# server virtual-name VIP1 209.157.22.100 ServerIronA(config-vs-VIP1)# port http dsr

ServerIronA(config-vs-VIP1)# bind http Real_Server_1 http Real_Server_2 http Real_Server_3 http Real_Server_4 http

ServerIronA(config-vs-VIP1)# sym-priority 254 ServerIronA(config-vs-VIP1)# exit

ServerIronA(config)# server virtual-name VIP2 209.157.22.101 ServerIronA(config-vs-VIP2)# port http dsr

ServerIronA(config-vs-VIP2)# bind http Real_Server_1 180 Real_Server_2 180 Real_Server_3 180 Real_Server_4 180

ServerIronA(config-vs-VIP2)# no http port translate ServerIronA(config-vs-VIP2)# sym-priority 2

ServerIronA(config-vs-VIP2)# exit ServerIronA(config)# write memory

Configuring ServerIron B

To configure the real servers, enter the following commands:

ServerIronB(config)# server real-name Real_Server_1 10.0.0.1 ServerIronB(config-rs-Real_Server_1)# port http

ServerIronB(config-rs-Real_Server_1)# port 180 ServerIronB(config-rs-Real_Server_1)# exit

ServerIronB(config)# server real-name Real_Server_2 10.0.0.2 ServerIronB(config-rs-Real_Server_2)# port http

ServerIronB(config-rs-Real_Server_2)# port 180 ServerIronB(config-rs-Real_Server_2)# exit

ServerIronB(config)# server real-name Real_Server_3 10.0.1.1 ServerIronB(config-rs-Real_Server_3)# port http

ServerIronB(config-rs-Real_Server_3)# port 180 ServerIronB(config-rs-Real_Server_3)# exit

ServerIronB(config)# server real-name Real_Server_4 10.0.1.2 ServerIronB(config-rs-Real_Server_4)# port http

ServerIronB(config-rs-Real_Server_4)# port 180 ServerIronB(config-rs-Real_Server_4)# exit

To configure the VIPs, enter the following commands:

ServerIronB(config)# server virtual-name VIP1 209.157.22.100 ServerIronB(config-vs-VIP1)# port http dsr

ServerIronB(config-vs-VIP1)# bind http Real_Server_1 180 Real_Server_2 180 Real_Server_3 180 Real_Server_4 180

ServerIronB(config-vs-VIP1)# no http port translate ServerIronB(config-vs-VIP1)# sym-priority 2

ServerIronB(config-vs-VIP1)# exit

ServerIronB(config)# server virtual-name VIP2 209.157.22.101 ServerIronB(config-vs-VIP2)# port http dsr

ServerIronB(config-vs-VIP2)# bind http Real_Server_1 http Real_Server_2 http Real_Server_3 http Real_Server_4 http

ServerIronB(config-vs-VIP2)# sym-priority 254 ServerIronB(config-vs-VIP2)# exit

ServerIronB(config)# write memory

Configuring the Loopback Address on a Real Server