Brocade Communications Systems 12.4.00 manuale d’uso

53-1 002 43 7-0 1 Januar y 20 12 ® Ser v erIron ADX Global Ser v er Load Balancing Guide Suppor ting Brocade Ser verIr on ADX version 12.4.00[...]

© 20 12 Brocade Comm unications Systems, Inc. All Rights Reserved. Broc ade, the B-wing symbol, B igIron, DCFM, D CX, Fabric OS , FastIr on, IronVie w, NetIron, SAN Heal th, Ser verIr on, T urboIr on, and Wi ngspan are regi stered trademarks, and Brocade Assurance , Brocade NET Health, Br ocade One, Extraor dinar y Network s, MyBro cade, VCS, and [...]

ServerIron ADX Global Server Load Balancing Guide iii 53-1002437-01 Contents About This Document Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix Suppor ted har dware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . ix Document conv entions . . . . . . . . . . . . . . . . [...]

iv ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Site persist ence in GSLB using stickiness . . . . . . . . . . . . . . . . . . . . . 64 Algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Enabling sticky GSLB . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 Allo[...]

ServerIron ADX Global Server Load Balancing Guide v 53-1002437-01 DNSSEC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112 V erification with DIG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 4 DNSSEC GSLB in DNS pr oxy mode . . . . . . . . . . . . . . . . . . . . . . 11 4 Config[...]

vi ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 Displaying sit e information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 Displaying real server inf ormation . . . . . . . . . . . . . . . . . . . . . . 1 68 Displaying DNS zo[...]

ServerIron ADX Global Server Load Balancing Guide vii 53-1002437-01 Displaying GSLB for IPv6 configurations . . . . . . . . . . . . . . . . . . . . . 23 1 Show commands f or basic GSLB configurations . . . . . . . . . . . 23 1 Show commands f or advanced f eatures . . . . . . . . . . . . . . . . . 2 45 T roubleshooting GSLB for IPv6 configurations [...]

viii ServerIron ADX Global Server Load Balancing Guide 53-1002437-01[...]

ServerIron ADX Global Server Load Balancing Guide ix 53-1002437-01 About This Document Audience This document is designed f or system administ rators with a working kno wledge of Lay er 2 and Lay er 3 switching an d routing. If you are using a Brocade Lay er 3 Sw itch, you should be familiar wit h the following prot ocols if applicable to y our net[...]

x ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 For readability , comma nd names in the narrative por tions of this guide are presented in bold: for exa mp le , show version . Notes, cautions, and danger notices The f ollowing notices and statements are used in this manual. They are list ed below in order of increasing sev erity o[...]

ServerIron ADX Global Server Load Balancing Guide xi 53-1002437-01 Related publications The f ollowing Brocade documents supplement the inf ormation in this guide: • Release Not es for ServerIron Switch and Rout er Sof tware T raf f icWorks 12.2.00 • Ser verIron ADX Graphical User Int er face • Ser verIr on ADX Ser ver Load Balancing Guide ?[...]

xii ServerIron ADX Global Server Load Balancing Guide 53-1002437-01[...]

ServerIron ADX Global Server Load Balancing Guide 1 53-1002437-01 Chapter 1 Global Server Load Balancing Global Server Load Balancing overview Global Server Load Balancing (GSLB) enables a Se r verIr on ADX to add int elligence to authoritativ e Domain Name System (DNS) servers b y ser ving as a proxy to these servers and pro viding optimal IP addr[...]

2 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Global Server Load Balancing overview 1 If the local DNS server does no t have an addre ss record f or the request ed ser ver , the local DNS ser ver makes a recursive query. When a request reaches an authoritativ e DNS ser ver , that DNS server responds to this DNS quer y . The clie[...]

ServerIron ADX Global Server Load Balancing Guide 3 53-1002437-01 Global Server Load Balancing overview 1 • Session table statistics and CPU load information — The sit e Ser verIron ADXs rep or t this information t o the GSLB Ser verIron ADX at regula r int er vals. By default, each remo te ServerIron ADX sends the status information to the GSL[...]

4 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Global Server Load Balancing overview 1 • IMAP4: the we ll -k n own na m e fo r p or t 143 • LD AP : the well-known name for port 389 • NNTP : the well-known name f or por t 119 • POP3: the well-known name f or por t 11 0 • SMTP : the well-known name f or por t 25 • TELNE[...]

ServerIron ADX Global Server Load Balancing Guide 5 53-1002437-01 Global Server Load Balancing overview 1 This example sho ws a Ser verIr on ADX configured as a DNS pro xy . The Ser verIron ADX is configured as a DNS pro xy for the DNS server that is author itativ e for the domain brocade.com. T o configure the ServerIron ADX as a DNS proxy , you i[...]

6 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Global Server Load Balancing overview 1 servers that receive the recor ds retain them in th eir databases f or only 1 0 seconds. Af ter the ten seconds expire, subsequent requests fr om the clien t initiate ano ther query to the authoritative DNS server . As a result, the client alwa[...]

ServerIron ADX Global Server Load Balancing Guide 7 53-1002437-01 Global Server Load Balancing overview 1 If the GSLB policy reje cts all of the sites, the GSLB Ser verIr on ADX sends the DNS reply unchanged to th e cl ie nt . All of these metrics ha ve def ault values but you ca n change the values if needed. In addition, you can disable in dividu[...]

8 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Global Server Load Balancing overview 1 NOTE Y ou cannot use the weight ed IP metric if the w eighted site me tric is enabled. The GSLB ServerIr on ADX uses relative per centages in order to achie ve 1 0 0% to tal weight distribution. T o configure weight ed IP metrics, ref er to “[...]

ServerIron ADX Global Server Load Balancing Guide 9 53-1002437-01 Global Server Load Balancing overview 1 Round-trip time between the remo te ServerIron ADX and the client The Round-trip time (RTT) is the amou nt of time that pass es between when t he remote site receives a T CP connection (T CP SYN) from the client and when th e remote sit e recei[...]

10 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Global Server Load Balancing overview 1 Site ServerIron AD X’s connection load A GSLB site’s connection load is the av erage numb er of new connections per second on the sit e, ov er a given number of int er vals. When y ou enable this GSLB metric, all po tential candidates are [...]

ServerIron ADX Global Server Load Balancing Guide 11 53-1002437-01 Global Server Load Balancing overview 1 Site ServerIron ADX’s administrative preference The administrative pref erence is an optional metric . This metric is a numeric pref erence value from 0-255 that you assign to each sit e Ser verIron ADX, to select that ServerIr on ADX if the[...]

12 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Global Server Load Balancing overview 1 Use the round robin selection metric instead of th e least response selectio n m etric when yo u want to pre vent the GSLB ServerIr on ADX from fa voring ne w or recently recov ered sites over pre viously configured active sites. The Least R e[...]

ServerIron ADX Global Server Load Balancing Guide 13 53-1002437-01 Minimum required conf iguration 1 NOTE The sum of number of VIPs configured and the number of GSLB hosts configured on the GSLB ServerIron ADX should not exce ed 102 4. Similarl y , the sum of real ser vers configured and the number of DNS IP addresses should not exceed 40 96. Minim[...]

14 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Minimum required configuratio n 1 Issue show gslb site on the controller to display site communication information. The stat e displays “CONNECTION EST ABLISHED” when communication is successful. A protocol v ersion o f 1 corresponds to “ A TTEMPTING CONNEC TION”. Establishe[...]

ServerIron ADX Global Server Load Balancing Guide 15 53-1002437-01 Configuring GSLB 1 Configuring GSLB The examples in the pr ocedures in this sectio n are based on the configuration shown in Figu re 1 on page 4 . TA B L E 1 Configuration t asks: Global SLB Feature See page... DNS pr oxy paramet ers Configure a sour ce IP address. The source IP add[...]

16 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB 1 Y ou can configure the GSLB ServerIr on ADX to be a pr oxy f or more than one DNS server . As shown in the example in Figure 1 on page 4 , y ou implement GSLB by connecting a Ser verIr on ADX to an authoritativ e DNS ser ver . T o configure the ServerIron ADX f or[...]

ServerIron ADX Global Server Load Balancing Guide 17 53-1002437-01 Proxy for DNS server 1 Proxy for DNS server NOTE The f ollowing scenario is fo r switch sof tware. If yo u are using r outer software, then all y ou need is an interface IP on the ServerIr on ADX that can reach the DNS ser ver . T o configure the GSLB ServerIr on ADX as a pro xy for[...]

18 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Proxy for DNS server 1 For e xample, the GSLB ServerIr on ADX shown in Figure 1 on page 4 needs a source IP address in the subnet 209. 15 7 .23.x. Without this source IP a ddress, La yer 4 and La yer 7 health checks t o the ServerIron ADXs at the S unnyvale sit e (209. 15 7 .22.x) a[...]

ServerIron ADX Global Server Load Balancing Guide 19 53-1002437-01 Proxy for DNS server 1 Syntax: [no] ser ver real-name <t ext> <ip- addr> Syntax: [no] por t dns pro xy Syntax: [no] por t <por t> [disable | enable] Syntax: [no] por t <por t> [keepaliv e] Syntax: [no] ser ver virtual-na me-or-ip <t ext> [ <ip-addr&g[...]

20 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Proxy for DNS server 1 ServerIronADX(config-gslb-site-sunnyvale)# si-name slb-2 209.157.22.210 200 NOTE The administrative pref erence metric is disabled b y default, which means it is no t used by the GSLB policy . The GSLB polic y uses the preference valu es only if you enable thi[...]

ServerIron ADX Global Server Load Balancing Guide 21 53-1002437-01 Proxy for DNS server 1 Specifying GSLB controller locations By default, the GSLB contr oller is assigned to the Nor th America geographic. Specify the GSLB controller location by entering the f ollowin g command at the global configuration leve l. ServerIronADX(config)# gslb default[...]

22 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Proxy for DNS server 1 • IMAP4 : the well-kno wn nam e f or por t 1 43 • LDAP: the well-known name for por t 389 • NNTP: the well-known name f or por t 119 • POP3: the well-known name f or por t 11 0 • SMTP : the well-known name f or por t 25 • TELNET : the well-known na[...]

ServerIron ADX Global Server Load Balancing Guide 23 53-1002437-01 Proxy for DNS server 1 T o display the status of CNAM E, enter the f ollowing command. ServerIronADX(config-gslb-policy)# show gslb policy   Default metric order: ENABLE  Metric processing order:  1-Remote ServerIronADX's session capacity threshold  2-Round trip [...]

24 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Proxy for DNS server 1 Syntax: host-info <h ost-name> http | <TCP-portnum> status-code <range> [<range> [ <range> [ <range> ]]] Y ou can specify up to four ra nges (total of eigh t values). T o specify a single message code for a range, ente r the[...]

ServerIron ADX Global Server Load Balancing Guide 25 53-1002437-01 Proxy for DNS server 1 Syntax: host-info <h ost-name> alias <alias-name> NOTE Make sure y ou configu re the alias only af ter config uring the zone and the host application the alias is for , as shown in the e xample abo ve. In addition , make sure yo u specify the fully[...]

26 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Private VIPs for GSLB 1 ServerIronADX(config)# gslb dns zone brocade.com  ServerIronADX(config-gslb-dns-brocade.com)# host-info www http  ServerIronADX(config-gslb-dns-brocade.com)# host-info www ip-list 209.157.23.59 When the ServerIron ADX receiv es a reply from the c lient?[...]

ServerIron ADX Global Server Load Balancing Guide 27 53-1002437-01 Private VIPs for GSLB 1 FIGURE 3 GSLB and privat e VIPs Using the ex ample in Figure 3 , suppose the configu ration specifies that the public IP address will be us e d by b ot h t he p ee r GS L B S e r ve rI ro n A D X A a nd t he si te Se r ver Iro n A D X B . I f Se r verI ro n A[...]

28 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Private VIPs for GSLB 1 Private VIP display information T o obtain more information about the publ ic an d private IP addresse s configured for a VIP on a Ser verIr on ADX, use the follo wing commands: • show gslb dns zone (see “Displa ying the results of traf fic distribution f[...]

ServerIron ADX Global Server Load Balancing Guide 29 53-1002437-01 Configuring GSLB protoc ol parameters 1 The displa y shows that the public IP address, 20 7 .95.55.23, is used by both the local and pee r GSLB ServerIron ADXs. Syntax: show server vir tual-name-or-ip NOTE For a comple te description of the fields shown in this screen displa y , ref[...]

30 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 The <tcp-por tnum> paramet er specifies the TCP port number you want the Ser verIr on ADX to use fo r exc h a n g i n g G S L B i n fo r m a t i o n with other ServerIr on ADXs. If you change the G SLB protocol port number , yo u must wr[...]

ServerIron ADX Global Server Load Balancing Guide 31 53-1002437-01 Configuring GSLB protoc ol parameters 1 Removing IP addresses for sites th at fail a health check By default, the S er verIron ADX does no t remov e an IP address from a DNS re ply even if the address fails a health check. Y ou can configure the ServerIron AD X to remov e IP address[...]

32 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 T o display the stat e of this feature, enter the sh ow gslb policy command. The DNS best-only field indicates whether the feature is enabled or disabled. Ref er to “Displa ying the default GSLB policy” on page 17 5 . Changing the query in[...]

ServerIron ADX Global Server Load Balancing Guide 33 53-1002437-01 Configuring GSLB protoc ol parameters 1 ServerIronADX(config-gslb-policy)# no dns ttl Syntax: [no] dns ttl Enabling DNS override By default, the GSLB ServerIr on ADX selects the best site IP address from among the addresses contained in the DNS reply . Y ou can ov erride the DN S re[...]

34 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 When you enable DNS override, th e GSLB Ser verIr on ADX replaces the IP addresses in the DNS reply with the “b est” of the pro xy ser ver a ddresses y ou specify . The GSLB Ser verIr on ADX determines which proxy server IP address is the [...]

ServerIron ADX Global Server Load Balancing Guide 35 53-1002437-01 Configuring GSLB protoc ol parameters 1 TA B L E 2 GSLB policy metrics Metric Default Configuration options Ser ver (host) health Enabled. The GSLB ServerIr on ADX per for ms Layer 4 health checks on the TCP or UDP port and Layer 7 health checks on the application, if the appli cati[...]

36 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 Connection load Disabled. Y ou can enable this metric. Y o u also can change the data collection int er val, the number of intervals used t o calculate the connection load a verage, and the relativ e weights of the int er vals. Av ailable sess[...]

ServerIron ADX Global Server Load Balancing Guide 37 53-1002437-01 Configuring GSLB protoc ol parameters 1 Af ter changing policy values, you can displa y the new v alues using the show gslb policy command. I f y o u de c i d e yo u wa n t to ch an g e a v a lu e b ac k t o it s d e f a ul t ( us in g “ no ” in front of the command y ou used to[...]

38 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 • active bindings: The ServerIr on ADX’s preference f or the IP address with the highest number of active bindings. • capacity : The remote Ser verIron ADX’s session capacity threshold. • connection-load: The site ServerIr on ADX’s[...]

ServerIron ADX Global Server Load Balancing Guide 39 53-1002437-01 Configuring GSLB protoc ol parameters 1 ServerIronADX(config)# gslb policy  ServerIronADX(config-gslb-policy)# health-check  ServerIronADX(config-gslb-policy)# geographic T o enable the administrative pref erence metric, which is disabled b y default, enter the f o llowing com[...]

40 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 Implementing the we ighted IP metric Beginning with rout er sof tware release 08. 1. 00R, you can configure the ServerIron ADX t o distribute GSLB traffic among IP addresses in a DNS reply , based on weights assigned to the I P addresses. The [...]

ServerIron ADX Global Server Load Balancing Guide 41 53-1002437-01 Configuring GSLB protoc ol parameters 1 • The number of eligible I P addresses to be ev aluated b y the weighte d IP metric and their wei gh ts • The weight assigned to the IP address If an IP address has a relative weight of zer o, or if it does not ha ve a weight assigned to i[...]

42 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol paramete rs 1 <IP address> is the IP address f or which you are assigning a weight. <weight> is a value from 0 t o 100. The def ault value is 0. Howe ver , this command wi ll result in an error if the IP argu ment for ip-weight has not been pre [...]

ServerIron ADX Global Server Load Balancing Guide 43 53-1002437-01 Configuring GSLB protoc ol parameters 1 Now consider the e xample in Ta b l e 6 . In this example, the to tal of the Configured weight ed site metrics (second column) does not equal 1 00. Howe ve r , as illustrated in the last column, the GS LB ServerIron ADX uses relative per centa[...]

44 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 Traffic distribution sp ecifications In general, DNS response selection count ers are maintained per IP address, per domain name. Fo r exam ple, suppose you configure three GSLB sites wi th assign ed weights. All three sites host the applicati[...]

ServerIron ADX Global Server Load Balancing Guide 45 53-1002437-01 Configuring GSLB protoc ol parameters 1 Displaying results of traffic distribution for Weighted Sites T o view the results of traffic distribution af ter co n figuring weighted sit e m etrics, enter the f ollowing command. ServerIronADX(config)# show gslb traffic site  SITE: loca[...]

46 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol paramete rs 1 The second example sho ws the third site.  SITE: THREE   * a.b.c  DNS Requests: 36   ServerIronADX VIP Selection (%)  == === =============  1.1.1.3 1.1.1.183 0 (0 %)  Site Selection for Domain: 0 (0 %)   * b.b.[...]

ServerIron ADX Global Server Load Balancing Guide 47 53-1002437-01 Configuring GSLB protoc ol parameters 1 For each VIP of interest, the GSLB Ser verIron ADX stores the number of acti ve bindings for the respective application port. If the agent is running a software image that does not suppor t the activ e bindings metric, it does not report any i[...]

48 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 GSLB active bindings enhancements The follo wing features ha ve been added to GSLB active bindings: • Weighed activ e bindings • Minimum activ e bindings • T racking an application por t for active bindings Configuring weighted activ e b[...]

ServerIron ADX Global Server Load Balancing Guide 49 53-1002437-01 Configuring GSLB protoc ol parameters 1 ServerIronADX# configure terminal  ServerIronADX(config)# gslb dns zone company.com  ServerIronADX(config-gslb-dns-company.com)# host-info www http  ServerIronADX(config-gslb-dns-company.com)# host-info www ssl  ServerIronADX(confi[...]

50 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 ServerIronADX(config)# gslb policy  ServerIronADX(config-gslb-policy)# connection-load limit 500 This command sets t he site connection limit to 500 connections. During sit e comparison, the GSLB policy discards sit es that have an av erage[...]

ServerIron ADX Global Server Load Balancing Guide 51 53-1002437-01 Configuring GSLB protoc ol parameters 1 Changing the sample interv al weight The interval weights are the relative weights of each data sample within a set of sampling intervals. When the data samples are averaged t ogether , the relative w eights of the samples can af f ect the out[...]

52 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 Yo u c a n c h a n g e t h e s e p a r a m e t e r s on an individual basis. T o change the session-table capacity metric, enter commands such as the following: ServerIronADX(config)# gslb policy  ServerIronADX(config-gslb-policy)# capacity[...]

ServerIron ADX Global Server Load Balancing Guide 53 53-1002437-01 Configuring GSLB protoc ol parameters 1 Modifying round-trip time values The Round-trip time (RTT) is the amou nt of time that pass es between when t he remote site receives a T CP connection (sends a TCP S YN) from th e client and when the remo te site rece ives the client’s ackn[...]

54 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Configuring GSLB protocol parame ters 1 Syntax: [no] round- trip-time cache-interval <num> The <num> parameter specifies the aging interval and can be from 1 0-1,000,000 se conds (about 11-1 /2 days). The def ault is 120 seconds. Changing the RTT cache prefix Y ou can ch[...]

ServerIron ADX Global Server Load Balancing Guide 55 53-1002437-01 Configuring GSLB protoc ol parameters 1 ServerIronADX(config)# gslb policy  ServerIronADX(config-gslb-policy)# round-trip-time explore-percentage 10 The command in this example changes the R TT explore percentage fr om 5% to 1 0 %. Syntax: [no] round- trip-t ime explore-percentag[...]

56 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Secure GSLB 1 The <ip-addr> specifies the address of the c ache entr y. This is not necessarily the address of a remote sit e. The address you specify here is combin ed with the prefix length t o result in a network prefix (network por tion of an IP ad dres s). The prefix leng[...]

ServerIron ADX Global Server Load Balancing Guide 57 53-1002437-01 Secure GSLB 1 • Peer authentication — Each netwo rk device must be authenticated bef ore it can connect to the GSLB netw ork. This check ensures that any peer a G SLB device communicat es with is the legitimate peer . Peer authentic ation is prov ided by using the Rivest-Shamir [...]

58 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Secure GSLB 1 RSA challenge dialogue Once the initial peer au thentication is complete , there is a challenge response dialogue betw een the two ServerIr on ADXs as follow s. F rom GSLB contr oller to site Ser verIron ADX: • GSLB contr oller uses the site ServerIron AD X public ke[...]

ServerIron ADX Global Server Load Balancing Guide 59 53-1002437-01 Secure GSLB 1 Configuring secure-communi cation on the controller On the GSLB contr oller , to enable the secure pr otocol instead of the standard one, ent er commands such as the following: SLB-Ctrl-ServerIronADX(config)# gslb site sfo  SLB-Ctrl-ServerIronADX(config-gslb-site-sf[...]

60 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Secure GSLB 1 ServerIron(config)#wr mem  .Write startup-config in progress.  ..Write startup-config done.  ServerIron(config)#Saving SSH host keys process is ongoing. Please wait ................................................................................. ......Writing[...]

ServerIron ADX Global Server Load Balancing Guide 61 53-1002437-01 Secure GSLB 1 NOTE When you specify a TCP port for the k ey e xchange communication, DO NO T use por t 182, or the por t that you configured for GSLB communicati on traf fic. The default destination T CP por t f or key e xchange is 56895. T o change default T CP por t when doing pub[...]

62 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Secure GSLB 1 9. Af ter the k ey-exchange (fingerprint) tak es place, the ke y must be save d on both the controller and site ServerIr on ADX using the cr ypto k ey-ex change sav e-peer-k ey command. Notice there is an erase-peer- key option also. SLB-Ctrl-ServerIronADX(config)#cryp[...]

ServerIron ADX Global Server Load Balancing Guide 63 53-1002437-01 Secure GSLB 1 The one-ti me option configures the peer public ke ys for a one-ti me usage, which is the highest level of security . They e xpire af ter each T CP session to the peer device is disconnect ed. T o set up a ne w connection between the de vices to f or ward GSLB messages[...]

64 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Site persistence in GSLB using stickiness 1 The <si-name> paramet er specifies the name of the peer sit e ServerIron ADX t o regenerate the session keys f or . The <s i-ip-addr ess> parameter specifies the I P address of the peer site ServerIr on ADX. The regenerat e-k e[...]

ServerIron ADX Global Server Load Balancing Guide 65 53-1002437-01 Site persistence in GSLB using stickiness 1 • Client IP address/prefix • Domain name the client requ ested • Selecte d IP address for the req uest This information is sa ved in a session table when the Sticky GSLB feature is enabled, and the GSLB controller creat es a sticky s[...]

66 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Site persisten ce in GSLB using stickiness 1 Enabling sticky GSLB Enabling sticky GSLB is the minimum required configuration. On the GSLB contr oller , to enable S ticky GSLB gl obally f or all the domain s, enter commands such as the fo llowing: SLB-Ctrl-ServerIronADX(config)#gslb [...]

ServerIron ADX Global Server Load Balancing Guide 67 53-1002437-01 Site persistence in GSLB using stickiness 1 Syntax: [no] sticky NOTE No special CLI command s need to be issued on the sit e ServerIron ADX. Allowing sticky sessions for a specific prefix length Y ou can all ow sticky sessions for a specific prefix length (not all hosts). For added [...]

68 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Site persistence in GSLB using stickiness 1 Displaying current sticky GSLB sessions T o display current Sticky GSLB sessions, rcon s o le into a barrel processor (BP) and enter the following command. 2/3 #show session all 0 Session Info: Flags - 0:UDP, 1:TCP, 2:IP, 3:INT, 4:INVD, H:[...]

ServerIron ADX Global Server Load Balancing Guide 69 53-1002437-01 Site persistence in GSLB using stickiness 1 Sticky GSLB counters T o display ho w many times an IP address was sele ct ed as the best cand idate f or a client request, enter the f ollowing command. 2/3 #show gslb dns detail ZONE: gslb.com HOST: www: (GSLB policy: test) Flashback DNS[...]

70 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Site persistence in GSLB using hashing 1 Deleting sticky GSLB sess ion for a specific client T o delete Sticky GSLB sessions for a specific client, enter a command such as the f ollowing: ServerIronADX#clear gslb sticky-session client-ip 100.1.1.101 Syntax: clear gslb stic ky -sessi[...]

ServerIron ADX Global Server Load Balancing Guide 71 53-1002437-01 Site persistence in GSLB using hashing 1 T o display the hash table for all domains or a specific zone-name, ente r a command on the BP , such as the fo llowing: ServerIronADX# rconsole 1 1  ServerIronADX1/1#show gslb phash table all Syntax: show gslb phash table This command dis[...]

72 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Site persistence in GSLB using hashing 1 Example 1. 1. 1.42 yields hash inde x 45 {(1+1+1+42 %256) = 45 } 1 72. 1 68. 10. 1 yields hash index 95 {(1 72+1 68+10+1 %2 56) = 95} Af ter the Client IP address is hashed t o an index in the hash table, the IP address associated with the ha[...]

ServerIron ADX Global Server Load Balancing Guide 73 53-1002437-01 Site persistence in GSLB using hashing 1 The hash table allocation look s like the f ollowing: Now the ne w IP address 1. 1. 1.43 is configured f or domain www .foo. com . The ServerIron ADX sorts the IP addresses for domain www .foo.com as fo llows. 1. 1.1.42 (rank 1)  1. 1.1.43[...]

74 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Site persistence in GSLB using hashing 1 SLB-ServerIronADX(config)#gslb policy  SLB-ServerIronADX(config-gslb-policy)#hash-persist persist-rehash-disable The second command disables the be ha vior described in the section “Rehash: ne w IP address for a domain or change of state[...]

ServerIron ADX Global Server Load Balancing Guide 75 53-1002437-01 Site persistence in GSLB using hashing 1 SLB-ServerIronADX#clear gslb phash table zone-name gslb.com host-name www Syntax: clear gslb phash zone-name <zone-n ame> host-name <host-name> Show commands Many e xisting show commands f or GSLB global and host-l ev el policy ha[...]

76 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Weighted distribution of sites with hash-based persistence 1 In the pre vious screen shot, the field "persist en t hash se lection count =7" means IP 1 00. 1. 1. 163 had been select ed 7 times in result of a match in the hash persistent policy . T o display the hash table [...]

ServerIron ADX Global Server Load Balancing Guide 77 53-1002437-01 Weighted distribution of sites with hash-based persist ence 1 • “Disabling rehash on change in hash weig ht configuration” on page 79 GSLB hash-b ased persiste nce GSLB pr ovides two methods f or persistence- Stic ky method and Hash-based persistence. Sticky GSLB is s uitable [...]

78 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Weighted distribution of sites with hash-based persistence 1 In our example, Hash bucket 0 will be assigned to 1.1.1.42 Hash bucket 1 will be assigned to 1.1.1.43 Hash bucket 2 will be assigned to 1.1.1.44 Hash bucket 3 will be assigned to 1.1.1.44 Hash bucket 4 will be assigned to [...]

ServerIron ADX Global Server Load Balancing Guide 79 53-1002437-01 Weighted distribution of sites with hash-based persist ence 1 The ServerIron ADX sorts the IP addresses for domain www .foo.com in ascending or der of the addresses as follo ws. 1.1.1.42 (rank 1)Hash Weight: 1 1.1.1.43 (rank 2)Hash Weight: 1 1.1.1.44 (rank 3) Hash Weight: 2 The hash[...]

80 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Weighted distribution of sites with hash-based persistence 1 NOTE All the existing CLI for old hash-based persist ence is applicable to w eighted hash based persistence also. It is not described in this document for the sake of brevity . For further details on existing CLI f or hash[...]

ServerIron ADX Global Server Load Balancing Guide 81 53-1002437-01 Weighted distribution of sites with hash-based persist ence 1 Configuring weights for domain IP addresses Weight ed Hash-based GSLB persist ence enables the user to d istribute the hash buck ets for th e domain in propor tion to the weights configured f o r the domain IP addresse s.[...]

82 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Weighted distribution of sites with hash-based persistence 1 ServerIronADX(config-gslb-policy)# hash-persist disable-weight-rehash Use the f ollowing command line interface to disa ble rehashing on weight change for host-le vel GSLB policy . ServerIronADX# config t ServerIronADX(con[...]

ServerIron ADX Global Server Load Balancing Guide 83 53-1002437-01 Weighted distribution of sites with hash-based persist ence 1 Manually forcing rehash for a domain Consider the case where user disables rehashing on i ntro du cti on of a new I P a dd re ss o r c ha nge of IP address state fr om down to healthy or on chan ge in the IP weight config[...]

84 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying the contents of active RTT cache entries 1 ******************************************************** Client IP address: 30.30.1.2 Domain : www.l47qa.com Number of hashed IPs for domain : 3 Number of active IPs for domain : 3 Client IP hashes to bucket number: 63 IP associa[...]

ServerIron ADX Global Server Load Balancing Guide 85 53-1002437-01 Affinity 1 Affinity The GSLB affinity feature configures the GSLB Se rverIron ADX to alwa ys prefer a specific sit e ServerIron ADX f or queries fr om clients whose addre sses are within a given IP pref ix. This feature is useful in the follo wing situations: • When you want t o u[...]

86 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Affinity 1 • If the reply contains a VIP on the ServerIron ADX associated with the prefix that the client’s IP address is in, the ServerIron ADX places the VIP at the top of the address list in the reply . (This assumes that the VIP passes the applicable health checks if they ar[...]

ServerIron ADX Global Server Load Balancing Guide 87 53-1002437-01 Affinity 1 The <si-ip-addr > parameter specifies the sit e Ser verIr on ADX’s management IP address. NOTE In either case, the running-config and the star tup-co nfig file ref er to the ServerIron ADX b y its IP address. The <ip-addr> <ip-mask> or <ip-addr> [...]

88 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB domain-level affinity 1 Displaying affinity selection counters Y ou can display the number o f times an IP addre ss is selected based on af finity. T o displa y the information, enter the f ollowing command. ServerIronADX(config)# show gslb dns detail  ZONE: gslb.com  HOS[...]

ServerIron ADX Global Server Load Balancing Guide 89 53-1002437-01 GSLB domain -level affinity 1 Command line interface Users will now be able t o configure domain-lev el af fi nity gr oups in addition t o the global affinity definitions. The ne w command line interface for the domain-lev el af fini ty feature is described below . Creating a domain[...]

90 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB domain-level affinity 1 Show commands • “show gslb affinity -group <group-number>” • “show gslb resources” • “show gslb dns zone” • “show gslb dns detail” show gslb affinity-group <gr oup -number> Use this command to display the af finity gro[...]

ServerIron ADX Global Server Load Balancing Guide 91 53-1002437-01 DNS cache proxy 1 TCP APP Count (%) * 1.1.1.16: cfg real-ip ACTIVE N-AM 5 17 0 (0%) * 1.1.1.108: cfg v-ip ACTIVE N-AM 0 0 5 (100%) show gslb dns detail Use this command to display the affinity group associat ed with the domain and the number of selections based on af finity . Syntax[...]

92 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 DNS cache proxy 1 In configurations where the Ser verIr on ADX and DNS server are co-l ocated, the additional r ound trip time between the ServerIron ADX and DNS se rver is usually negligible. Howe ver , if the ServerIron ADX and DNS ser ver are in different netw orks, the delay can[...]

ServerIron ADX Global Server Load Balancing Guide 93 53-1002437-01 DNS cache proxy 1 • DISABLE (the def ault) • ENABLE Displaying DNS cache proxy statistics The GSLB ServerIron ADX maintains statistics fo r the transparent DNS as well as DNS pr oxy mode query intercept and D NS cache proxy f eatures. The follo wing statistics are displayed f or[...]

94 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 DNS cache proxy 1 The Direct response field, under “DNS cache pr oxy stat”, lists how many DNS q ueries the GSLB ServerIron ADX has responded t o using the DNS cache pro xy feature inst ead of forwarding the queries t o the DNS server . In this example, the G SLB Ser verIr on AD[...]

ServerIron ADX Global Server Load Balancing Guide 95 53-1002437-01 Transparent DNS query intercept 1 GSLB ServerIron ADX performs GSLB on client qu eries f or IPv4 address records (A recor ds). In GSLB t opologies, when the client query comes in for an y of the other recor d types, the GSLB ServerIron f or war ds the quer y to the back end DNS ser [...]

96 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Transparent DNS query intercept 1 • Redirect the client queries to a pr oxy DNS server and send the reply unchanged. The ServerIron ADX redirects the client request to the alternate DNS ser ver and sends the response, as is, t o the client. The alternat e DNS server could be a Ser[...]

ServerIron ADX Global Server Load Balancing Guide 97 53-1002437-01 Transparent DNS query intercept 1 Redirecting queries T o configure transparent DNS q uer y intercept t o redirect queries to a pr oxy DNS ser ver or ano ther GSLB ServerIron ADX: • Configure a real server with the IP ad dress of the pro xy DNS ser ver or other GSLB ServerIron AD [...]

98 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Transparent DNS query intercept 1 Use the f ollowing CLI method t o configure this f eature. T o configure the ServerIr on ADX to red irect quer ie s to an alt ernativ e DN S ser ver , enter commands such as the fo llowing: ServerIronADX(config)# source-ip 209.157.23.100 255.255.255[...]

ServerIron ADX Global Server Load Balancing Guide 99 53-1002437-01 Transparent DNS query intercept 1 This command conf igures a vir tual ser ver that ha s the DNS server’s actual IP address. When the ServerIron ADX receiv es a DNS query addressed to the DNS server IP address, the ServerIr on ADX inter cepts the packet inst ead of fo r warding it [...]

100 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Transparent DNS query intercept 1 ServerIronADX(config)# server virtual-name-or-ip dns-intercept 209.157.23.130 intercept  ServerIronADX(config-vs-dns-intercept)# port dns  ServerIronADX(config-vs-dns-intercept)# bind dns dns-redirect dns  ServerIronADX(config-vs-dns-inter[...]

ServerIron ADX Global Server Load Balancing Guide 101 53-1002437-01 Transparent DNS query intercept 1 NOTE For non-direct respond transparent int ercept, you s hould not en able dns transparent-interc ept in the gslb policy . Notice that unlike the types of transparent DNS query intercept shown in “Redirecting q ueries” on page 97 , the type sh[...]

102 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Enabling DNS request logging 1 For inf ormation about the statisti cs in the DNS cache pro xy stat section , refe r to “Displa ying DNS cache proxy statistics” on page 93 . Enabling DNS request logging Y ou can enable logging of the following inform ation f or DNS requests assi[...]

ServerIron ADX Global Server Load Balancing Guide 103 53-1002437-01 Enabling DNS request logging 1 Support for the RTT metric When GSLB ran on the MP , the contr oller cached an RTT update only if tha t par ticul ar IP addr ess had made a DNS quer y earlier . This was to elimin at e unnecessar y RTT entries in the controller's local cache. Whe[...]

104 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Enabling DNS request logging 1 BP support as GSLB agent If the ServerIron ADX is used as a GSL B agent, the BP synchronizes RTT information collected fr om clients that make T CP SLB connections to the Se r verIro n ADX, to the MP . The MP communicates this RTT info rmati on to all[...]

ServerIron ADX Global Server Load Balancing Guide 105 53-1002437-01 Enabling DNS request logging 1 The configuration required for the GSLB distribu ted health c heck feature depends on whe ther the GSLB ServerIron ADX and the site ServerIron ADX suppor t the distributed health check f eature or not. R efer to the table below f or more informatio n [...]

106 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Enabling DNS request logging 1 Enabling the distributed health check feature for an indivi dual site ServerIron ADX Y ou ca n enable the d istributed health chec k feature f or an individual site ServerIron AD X. Enter the commands such as the following on the GS LB Ser verIron ADX[...]

ServerIron ADX Global Server Load Balancing Guide 107 53-1002437-01 Enabling DNS request logging 1 T o globally configure the hea lth status repor ting interval, enter commands su ch as the following on the GSLB ServerIr on ADX. GSLB-ServerIronADX(config)# gslb policy  GSLB-ServerIronADX(config-gslb-policy)# health-status-interval 3 Syntax: [no][...]

108 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Enabling DNS request logging 1 Impact of distributed health checks on the Flashback metric If the GSLB ServerIr on ADX suppor ts the distribu ted health check feature, then the F lashback metric is disabled b y default in release 08. 1.00S. Flashback is defined as the r ound-trip t[...]

ServerIron ADX Global Server Load Balancing Guide 109 53-1002437-01 Enabling DNS request logging 1 Configuration exampl es FIGURE 7 To p o l o gy Example 1 In this example: • The GSLB ServerIron ADX suppor ts the distributed health check f eature. • Site S er v erIron ADXs 1. 1. 1. 1 05, 1. 1. 1. 1 06 and ServerIron ADX 1 . 1. 1. 10 7 all belon[...]

110 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Enabling DNS request logging 1 In order to globally configure the hea lth status in terval to 7 seconds, configure the f ollowing on the GSLB ServerIron ADX. GSLB-ServerIronADX(config)# gslb policy  GSLB-ServerIronADX(config-gslb-policy)# health-status-interval 7  GSLB-Server[...]

ServerIron ADX Global Server Load Balancing Guide 111 53-1002437-01 Enabling DNS request logging 1 The GSLB ServerIron AD X does not suppor t the dist ributed health check f eature, so the distribut ed health check configuration is neither suppo r ted no r applicable t o the GSLB ServerIron ADX. The non-distributed health ch eck GSLB Ser verIr on A[...]

112 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 DNSSEC 1 DNSSEC DNSSEC (Domain Name System Secu rity Extensions) is a set of extensions that pr ovide DNS resolvers origin authentication of DNS data, data int egrity and authenticated denial of e xistence. It pro tects DNS resolvers fr om forged D NS data (f rom cache poisoning, e[...]

ServerIron ADX Global Server Load Balancing Guide 113 53-1002437-01 DNSSEC 1 1. LDNS sends a normal type A request with the DO bit set t o the mydnssec.com ADNS 2. If the ADNS support s DNSSEC, the response ha s the DO bit set and a RRSIG record f o r the response RRset in the answer section 3. The LDNS will the n fetch the DNS KEY used in the RRSI[...]

114 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 DNSSEC 1 Verification with DIG The f ollowing example show s dig being used to validate a DNSSEC response. DNSSEC GSLB in DNS proxy mode The ServerIron ADX suppor ts GSLB for DNSSEC in the DNS pro xy mode. In this mode, when the ServerIron ADX sees a DNS response, it re-order s the[...]

ServerIron ADX Global Server Load Balancing Guide 115 53-1002437-01 DNSSEC 1 (IP address) are used in the signature. The TTL s of individual resourc e records are not part of the data used in signing to allow f or aging. Since the TT L of the RRSIG recor d is par t of the signed data, a caching resolv er is expected to cache a respon se up t o the [...]

116 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 DNSSEC 1 Configuring load balancing of plai n DNS request across all servers If zones and real ser vers a re configur ed for DNSSEC, then non-dnssec ser vers are used f or requests on non-dnssec zones. T o load-balan ce non-dnssec (plain DNS) requ ests across all ser vers, use one [...]

ServerIron ADX Global Server Load Balancing Guide 117 53-1002437-01 Host-level policies for site selection 1 Syntax: show gslb global-statistics Host-level policies for site selection ServerIron ADX pr ovides the f ollowing support fo r configuring GSLB policies f or specified GSLB hosts: • Configuring GSLB policies and apply them to hosts within[...]

118 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Host-level policies for site selection 1 1. Define a name f or the host-lev el GSLB policy . Ref er to page 118 . 2. Configure the parameters fo r the policy. R efer t o page 118 . 3. Apply the policy to a host or mult iple hosts. Refer t o page 125 . Defining a name for a host-lev[...]

ServerIron ADX Global Server Load Balancing Guide 119 53-1002437-01 Host-level policies for site selection 1 Y ou must specify a connection limit to enable th e Connection Load metric. Y ou can speci fy a value from 1 to as high a value as y ou need. There is no def ault. Howe ver , the actual value of the Connection Load limit, and other connectio[...]

120 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Host-level policies for site selection 1 Some of the DNS parameters are no t conf igurable in the host-level GSLB policy . These paramete rs include: • dns cache-pro xy : Enable s the Ser verIron ADX to act as a pro xy for a DNS ser ver , by responding directly t o the client que[...]

ServerIron ADX Global Server Load Balancing Guide 121 53-1002437-01 Host-level policies for site selection 1 When the ServerIron ADX co mpares the Flashback speeds, it compares the Layer 7 (application-lev el) Flashback speeds firs t, if applicab le. If th e application has a Layer 7 health check and if the Flashback speeds are not equal, the Serve[...]

122 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Host-level policies for site selection 1 GSLB-ServerIronADX(config)# gslb-host-policy abc  GSLB-ServerIronADX(config-gslb-host-policy-abc)# metric-order set health-check round-trip-time capacity num-session flashback Syntax: [no] metric-orde r set <list> The <list> p[...]

ServerIron ADX Global Server Load Balancing Guide 123 53-1002437-01 Host-level policies for site selection 1 Enabling the Num-s ession metric The capacity threshold spec ifies how close to the maximum ses sion capacity the si te ServerIronADX (remot e Ser verIr on ADX) can be and st ill be eligible as the b est site f or the client. This mechanism [...]

124 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Host-level policies for site selection 1 Syntax: [no] round-r obin Enabling the Round-Trip-Time metric Y ou can enable the GSLB metric for the r ound-trip time between the remot e Ser verIr on ADX and the DNS client. The Round-trip time (RTT) is the amount of time that passes betwe[...]

ServerIron ADX Global Server Load Balancing Guide 125 53-1002437-01 Host-level policies for site selection 1 GSLB-ServerIronADX(config)# gslb-host-policy abc  GSLB-ServerIronADX(config-gslb-host-policy-abc)# weighted-site Syntax: [no] weight ed-site Use the no f orm of the command to disable the weig ht ed IP metric for the host-level policy . A[...]

126 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Host-level policies for site selection 1 Displaying all GSLB policies T o view all defined host-level poli cies, ent er the follo wing command. GSLB-ServerIronADX# show gslb policy host-policy-all GSLB POLICY: abc Default metric order: ENABLE Metric processing order: 1-Server healt[...]

ServerIron ADX Global Server Load Balancing Guide 127 53-1002437-01 Host-level policies for site selection 1 Displaying the policy used for hosts T o view which GSLB policy is being used for hosts, ent er the follo wing command. ServerIronADX# show gslb dns zone ZONE: gslb1.com HOST: www: (GSLB policy: test) Flashback DNS resp. delay selection (x10[...]

128 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Host-level policies for site selection 1 Deleting GSLB host-level policies Deleting a policy that is not applied to a host Y ou can delete a ho st-level GSLB policy directly using the no gslb host-policy -name <policy-name> command as long as the policy is not applied t o a h[...]

ServerIron ADX Global Server Load Balancing Guide 129 53-1002437-01 Geographic region for a prefix 1 GSLB-ServerIronADX(config-gslb-dns-gslb1.com)# exit  GSLB-ServerIronADX(config)# gslb dns zone foo.com  GSLB-ServerIronADX(config-gslb-dns-foo.com)# host-info ftp ftp  GSLB-ServerIronADX(config-gslb-dns-foo.com)# host-info ftp gslb-policy t[...]

130 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Geographic region for a prefix 1 management IP address.  If you configure a g eographic prefix entr y that matches the management IP address of the remote Ser verIron ADX and also specify a geographic location f or the GSLB site where the remote ServerIr on ADX resides, then the[...]

ServerIron ADX Global Server Load Balancing Guide 131 53-1002437-01 Geographic region for a prefix 1 Syntax: [no] geo-prefix { <ipv4-prefix> | <ipv6-prefix> } [asia | eur ope | n-amer ica | s-america | africa] The command configures an as so ciation between a prefix and a geographic location. The <ipv4-pref ix> and <ipv6-pr efi[...]

132 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Geographic region for a prefix 1 T o view all geographic prefix es on the GSLB ServerIron ADX , enter the fo llowing command. GSLB-ServerIronADX# show gslb cache all geographic user-configured prefix length = 24, prefix = 1.1.1.0, region = EUROPE  prefix source = geographic (use[...]

ServerIron ADX Global Server Load Balancing Guide 133 53-1002437-01 Smoothing mec hanism for RTT measurements 1 The abov e output shows that the geographic lo cation is Asia. The geographic location for 1 0.1 0.1 0.200 is still N or th America (N- AM) be cause it does not match the user -configured geographic prefix. Smoothing mechanism for RTT mea[...]

134 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Smoothing mechanism for RTT measurements 1 This release introduces a new smoothing mechanis m along with a proprietary smoothing algorithm for GSLB RTT measurements to effectiv ely deal with variances in RTT measurements. These mechanisms allow yo u to define what is a very high or[...]

ServerIron ADX Global Server Load Balancing Guide 135 53-1002437-01 Smoothing mec hanism for RTT measurements 1 Each successively high RTT sam ple will be graduall y factored int o the existing RTT v alu e using an additive increase. The ramp up fact or spec ifies the step f or the additive increase. F or ex a m p l e , i f th e r a mp u p f a c t [...]

136 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Smoothing mechanism for RTT measurements 1 Syntax: enable-site-rtt-smoothing Disabling enhanced RTT smoothing T o disable enhanced RTT smoo thing for a GSL B Site, enter commands such as the f ollowing: GSLB-ServerIronADX# configure terminal  GSLB-ServerIronADX(config)# gslb sit[...]

ServerIron ADX Global Server Load Balancing Guide 137 53-1002437-01 Smoothing mec hanism for RTT measurements 1 Specifying the ramp-up-factor The ramp-up f actor specifies the increments in which su ccessively new high RTT samples should be fact ored into the ex isting RTT value. If you wa nt t o specify the ramp-up fact or , enter commands such as[...]

138 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Smoothing mechanism for RTT measurements 1 Syntax: enable-sim-new- r tt-smooth This command enables enhanc ed RTT smoothing only for simulation purposes. T o disable the enhanced smoot hing mechanism during simulation, configure th e follo wing: GSLB-ServerIronADX(config-gslb-rtt-s[...]

ServerIron ADX Global Server Load Balancing Guide 139 53-1002437-01 Smoothing mec hanism for RTT measurements 1 RTT state before application of RTT smoothing mechanism:  ------------------------------------------------------------------  RTT val = 114, RTT decimal val = 0.0 Applied RTT smoothing algorithm for new RTT sample 30 RTT state after[...]

140 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Smoothing mechanism for RTT measurements 1 ----------------------------------------------------------------  RTT value after smoothing = 27, RTT decimal val = 0.100  ignore-larger-rtt-count = 1  ignore-smaller-rtt-count = 0, increment-rtt-factor = 1 GSLB-ServerIronADX(conf[...]

ServerIron ADX Global Server Load Balancing Guide 141 53-1002437-01 Round-trip times 1 GSLB-ServerIronADX(config-gslb-rtt-sim-test)# exit Note that the resulting RTT value obtained after smoothing the f ollowing set of RTT samples (30, 1, 1000,30 ,30,30,30) using the old smoothing me chanism is 90.0. The result and is 28.96 with the enhanced smooth[...]

142 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 c o n f i g u r e d o n t h e r e m o t e s i t e S e r v e r I r o n A D X , t h e p a s s i v e R T T i n f o r m a t i o n i s a l s o g a t h e r e d a n d s e n t out to the GSLB controller . Y ou can check the f eatures on a ServerIron ADX using show featur[...]

ServerIron ADX Global Server Load Balancing Guide 143 53-1002437-01 Round-trip times 1 Activ e RTT is alwa ys measured between the Site ServerIron ADX and the client LDNS. This method of measuring RTT enables the GSLB Ser verIr on ADX to use this activ ely gathered RTT e ven if the client and its LDNS do not share the same network prefix. FIGURE 1 [...]

144 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 GSLB ServerIron ADXs on which active RTT gatherin g is enabled is compatible with Sit e Ser verIr on AD X s t ha t ar e ru n ni n g p as s ive RT T g at he r in g, a nd v ic e ver s a. Y o u c a n have an a ct ive R TT ga t he r in g GSLB ServerIron ADX with some[...]

ServerIron ADX Global Server Load Balancing Guide 145 53-1002437-01 Round-trip times 1 Syntax: [no] gslb active-rtt-gathering Once you ent er this command on the GSLB Server Ir on ADX, the GS LB Ser verIron ADX per f orm s a message ex change with each Site ServerIron AD X to determine if it is running a v ersion that suppor ts active RTT gathering[...]

146 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 Configuring active RTT parameters Configuring active RTT query message interval The active R TT quer y message interval ref ers to the time intervals at which the GSLB S er v erIron ADX sends the list of LDNS addresses to the Sit e Ser verIr on ADXs. These are th[...]

ServerIron ADX Global Server Load Balancing Guide 147 53-1002437-01 Round-trip times 1 Configuring the active RTT refresh interval The Site ServerIr on ADX maintains a timestamp for each of the LDNS prefixes in its activ e RTT cache. The time stamp indicat es the last time R TT was probed. If the time that has elapsed since the last probe is gre at[...]

148 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 In the exam ple above, assume that the GSLB Serv erIr on ADX is configured as Mode 2. Also assume that this GSLB ServerIr on ADX is pro viding GSLB f or www .foo.com where the IP addresses for this domain are IP-1, IP-2, and IP-3. IP-1 is a VIP on Ser v erIr on A[...]

ServerIron ADX Global Server Load Balancing Guide 149 53-1002437-01 Round-trip times 1 GSLB-ServerIronADX# configure terminal  GSLB-ServerIronADX(config)# gslb policy  GSLB-ServerIronADX(config-gslb-policy)# round-trip-time active-rtt use-active-and-passive-rtts T o configure a host-lev el GSLB policy to use both passiv e and active R TT valu[...]

150 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 If neither of these co mmands is configured, then the GSLB ServerIron ADX will no t use any DNS probe measure ment repor t ed by the Sit e Ser verIr on ADXs and will use only the RTT values reported by the ICMP pr obe for the best IP address selection. Enabling t[...]

ServerIron ADX Global Server Load Balancing Guide 151 53-1002437-01 Round-trip times 1 If both the ICM P and DNS fast-aging commands are enabled o n the Site ServerIr on ADX, then failure of either ICM P or DNS probes will quickly age out LDNS prefixes from the active RTT ca che. T ypically you should enable only one o f these co mmands . Follow th[...]

152 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 Displaying RTT information Displaying the RTT gather ing mechanism T o view the RTT gathering mechanism for a Site ServerIron ADX, ent er the following command on the GSLB ServerIr on ADX. ServerIronADX# show gslb site SITE: local  Enhanced RTT smoothing: OFF [...]

ServerIron ADX Global Server Load Balancing Guide 153 53-1002437-01 Round-trip times 1 Displaying the active RT T gathering configuration T o view the active RTT gathering configuratio n parameters, enter the f oll owing command. ServerIronADX# show gslb active-rtt-info Controller Information:  -----------------------  Active RTT gathering: E[...]

154 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 Displaying the RTT informati on of a client IP address The GSLB ServerIr on ADX maintains a cache of RTT inf ormatio n received fr om the site Ser verIron ADXs through the GSLB pr otocol. Y ou can displa y the RTT informatio n the GSLB Ser verIro n ADX has for a [...]

ServerIron ADX Global Server Load Balancing Guide 155 53-1002437-01 Round-trip times 1 This output shows that the prefix 1. 1.0.0, prefix length = 20 was creat ed due to an active R TT update fr om the Site ServerIr on ADX. The primar y RTT repor ted f or this prefix by Sit e Ser verIr on ADX 1. 1.1 .1 15 is 2000 use c, the source is active RT T ga[...]

156 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Round-trip times 1 Displaying the RTT algorithm mode T o display the RTT algorithm mode, ent er the following command. GSLB-ServerIronADX#show gslb policy Default metric order: DISABLE  Metric processing order:  1-Round trip time between remote ServerIronADX and client  2-[...]

ServerIron ADX Global Server Load Balancing Guide 157 53-1002437-01 GSLB affinity for high availability 1 GSLB affinity for high availability The GSLB Affinity feature configures the GSLB Se rverIron AD X to alwa ys prefer a specific Site ServerIron ADX f or queries fr om clients (or client LDNS servers) whose addresses are within a configu red IP [...]

158 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB affinity for high availability 1 Syntax: [no] gslb ha-group <ServerIron ADX-IP-addre ss-1> <Ser verIron ADX-IP-add ress-2> Enter the IP address of the two Sit e Ser verIr on ADXs in a HA group f or <ServerIron ADX-IP-address-1> and <Ser verIron ADX -IP -ad[...]

ServerIron ADX Global Server Load Balancing Guide 159 53-1002437-01 GSLB affinity for high availability 1 1. Make sure you configure HA groups f or the Ser verIr on ADX. (Ref er to “C onfiguring an HA group” on page 157 .) 2. Enable dynamic det ection as a backup me chanism b y ent ering commands such as the follo wing on the GSLB Ser verIron A[...]

160 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB affinity for high availability 1 Syntax: show gslb sit e <site-name > The field "Cfg HA peer" shows the config ured HA pee r Site ServerIron AD X for this Sit e Ser verIr on ADX. Displaying the dynamically detected HA pairs T o view the dynamically det ected Se[...]

ServerIron ADX Global Server Load Balancing Guide 161 53-1002437-01 GSLB affinity for high availability 1 FIGURE 1 1 GSLB af f inity for HA ServerIron ADX 1. 1. 1. 102 is a GSLB ServerIr on ADX that is pro viding GSLB for domain www .foo.com . One of the IP addresses f or ww.f oo.com is 2. 1. 1.23. ServerIron ADX 2.1 .1 . 103 and Ser verIron ADX 2.[...]

162 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB optimization 1 Client LDNS 2. 1. 1.53 sends a DNS request t o GSLB Ser verIr on ADX for www. foo.com . GSLB ServerIron ADX rearranges th e DNS reply as fo llows. 1. It checks if there is any affinity definit ion associated with the client LDNS network. In this exam ple, it fin[...]

ServerIron ADX Global Server Load Balancing Guide 163 53-1002437-01 GSLB optimization 1 1. On contro ller , enable VIP list pr ocess optimization by issuing the f ollowing command at global config level. ServerIronADX(config)# gslb process-vip-list-optimize  ServerIronADX(config)# write memory  ServerIronADX(config)# reload NOTE A system relo[...]

164 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB optimization 1 Syntax: show gslb sit e The optimized dist hcheck paramet er in the show gslb site output indicates if V IP list process optimiz ation is enabl ed on ServerIr on ADX. Configuration example On controller Ser verIron ADX, configure the follo wing commands. ServerI[...]

ServerIron ADX Global Server Load Balancing Guide 165 53-1002437-01 Displaying GSLB information 1 Guidelines and recommendations for using this feature W e recommend that you observe the f ollowi ng guidelines when using this feature: • The GSLB contr oller and Ser verIr on ADX Side fu nctionality (remo te or local) should no t be configured on t[...]

166 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 T o display inf ormation for all the configured sites, ent er the follo wing command at any lev el of the CLI. ServerIronADX(config)# show gslb site  SITE: sunnyvale  ServerIronADX: slb-1 209.157.22.209:  state: CONNECTION ESTABLISHED Current [...]

ServerIron ADX Global Server Load Balancing Guide 167 53-1002437-01 Displaying GSLB information 1 T o display inf ormatio n about the GSLB site call ed “sunnyv ale” and the Ser verIr on ADXs pro viding SLB within those sit es, enter the f ollowing command. ServerIronADX(config)# show gslb site sunnyvale  ServerIronADX: slb-1 209.157.22.209: [...]

168 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 Displaying real server infor mation rshow 209. 15 7 .22.209 server real Generally , remote ServerIr on ADXs in a GSLB conf iguratio n are themselves configured with real servers and vir tual ser vers. The real ser vers ar e the actual file ser vers f o[...]

ServerIron ADX Global Server Load Balancing Guide 169 53-1002437-01 Displaying GSLB information 1 The GSLB protocol allows y ou to quer y the site ServerIron ADXs for configuration information as well as the session and CPU inf ormation used by the GSLB policy . Y ou can view detailed configuration information and statistics for the si te ServerIr [...]

170 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 Displaying DNS zone and hosts T o display inf ormation about the DNS zones and ho st names that y ou hav e configured the GSLB ServerIron ADX t o globally load balance, use either of the f ollowing methods. NOTE There are two examples of this comma nd [...]

ServerIron ADX Global Server Load Balancing Guide 171 53-1002437-01 Displaying GSLB information 1 TA B L E 11 GSLB zone and host application information This field... Displays... ZONE The zone name. Th e name that appears here is th e name you specified when you co nfigured the zone inf ormation. NO TE: This field appears only if you do not specify[...]

172 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 Displaying detailed DNS information Y ou can display all the information display ed by the show gslb dns zone command, plus information about the sit e and the Ser verIr on ADX on which a VIP is configured, by ent ering the sho w gslb dns detail comman[...]

ServerIron ADX Global Server Load Balancing Guide 173 53-1002437-01 Displaying GSLB information 1 In this ex ample, Ser verIr on ADX slb-1 is the ac tive Ser verIron ADX f or VIPs 209. 15 7 .22. 100 and 1 09. 15 7 .22. 10 1 and Ser verIr on ADX slb-2 is the default activ e Ser verIr on ADX for VIPs 209. 15 7 .22. 103 and 209. 15 7 .22. 104. Althoug[...]

174 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 Displaying metric infor mation Y ou can show the f ollow ing informat ion: • The metrics that were used t o select a given sit e as the best site. • For each of the GSLB metrics that ha ve been used t o select the site, the number of times that met[...]

ServerIron ADX Global Server Load Balancing Guide 175 53-1002437-01 Displaying GSLB information 1 Displaying the default GSLB policy T o display the d efault GSLB poli cy , enter the f ollowing command. ServerIronADX(config)# show gslb default  Default metric order: ENABLE  Metric processing order:  1-Server health check  2-Remote Serve[...]

176 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 DNS ov erride Indicates whether DNS o verride is enabled. DNS ov erride replaces the addresses in a DNS reply with the “best” address fr om a list of addresses you configure. This fi eld can hav e one of the f ollowing val ues: • DISABLE : The Se[...]

ServerIron ADX Global Server Load Balancing Guide 177 53-1002437-01 Displaying GSLB information 1 Displaying the user-configured GSLB policy T o display the user -configured GSLB po licy , enter the f ollowing command. ServerIronADX(config)# show gslb policy  Default metric order: ENABLE  Metric processing order:  1-Server health check [...]

178 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 For a description of the inf ormation shown by this command, ref er to “Displa ying the default GSLB policy” on page 17 5 . Displaying RTT information The GSLB ServerIr on ADX maintains a cache of RTT inf ormatio n received fr om the site Ser verIr[...]

ServerIron ADX Global Server Load Balancing Guide 179 53-1002437-01 Displaying GSLB information 1 This example sho ws the RTT prefix cache entr y th at contains site IP address 1 92. 1678.2. 1. The prefix source line indicat es that the prefix ca che entr y that matches the site address w as added statically. Notice that a prefix cache entr y can h[...]

180 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 Displaying GSLB resources For GSLB parame ters, you can displa y the number of currently configured it ems and the maximum number of items y ou can configure on the ServerIr on ADX. T o display this inf ormation, us e the following CLI method. T o disp[...]

ServerIron ADX Global Server Load Balancing Guide 181 53-1002437-01 Displaying GSLB information 1 Displaying dynamic server information When you configure GSLB, the Ser verIron ADX creat e s dynamic real ser ver configurations based on the IP addresses the GSLB ServerIr on ADX receives in response t o DNS queries sent to the real DNS ser ver . Thes[...]

182 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 T o display dynamic ser ver information, enter th e commands sho wn in the follo wing examples. The por tions of the output that are shown in bold type are those of interest. Displaying dynamic real server information T o display the re al ser vers tha[...]

ServerIron ADX Global Server Load Balancing Guide 183 53-1002437-01 Displaying GSLB information 1 Syntax: show server dynamic vir tual Displaying the port bindings T o display the port bindings the ServerIron ADX cr eates for the dynamically created real servers and vir tual ser vers, enter the f ollowing command. This exam ple shows that the Serve[...]

184 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB information 1 The show ser ver dynamic sessions command pro vides a simple wa y to list the real servers. The output is based on the output for the sho w ser ver sessi ons command. Howe ver , in the case of dynamically created servers, there are no mean ingful sessi[...]

ServerIron ADX Global Server Load Balancing Guide 185 53-1002437-01 Displaying GSLB information 1 ServerIronADX# show gslb cache all affinity  prefix length = 24, prefix = 28.1.1.0, region = N-AM  prefix source = affinity,  affinity = site: local, ServerIronADX: 1.1.1.102 Syntax: show gslb cache all affinity T o display th e statically gen[...]

186 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 SNMP traps and syslog messages 1 ServerIronADX# show gslb cache 1.1.0.0 smaller-than 24  prefix length = 20, prefix = 1.1.0.0, region = ASIA  prefix source = geographic (user-configured), rtt-update,   site = local, ServerIronADX = (1.1.1.102), rtt = 7 (x100 usec) Synta[...]

ServerIron ADX Global Server Load Balancing Guide 187 53-1002437-01 SNMP traps and syslog messages 1 A given do main name can be associat ed with multip le health check TC P or UDP por t s. In that case, the GSLB ServerIr on ADX considers an IP address t o be active only if all its associat ed TCP and UDP por ts pass their health checks. State tran[...]

188 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB error handling for unsupported DNS requests 1 • The final two GSLB messages in this e xample (the ones nearest the top of the log) indic ate that the site ServerIr on ADXs responded to the La yer 3 health chec k (IP ping). Disabling and re-enabling traps All traps, including[...]

ServerIron ADX Global Server Load Balancing Guide 189 53-1002437-01 GSLB error handling fo r unsupported DNS requests 1 This process w orks in topologies where the GSLB Ser verIr on ADX front-ends a DNS server . How eve r , not all GSLB topologies require a DNS server . Fo r example, when the GSLB S er v erIron ADX is configur ed as a DNS cache pro[...]

190 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB error handling for unsupported DNS requests 1 Error handling response format The GSLB error handling response f ormat complies with RFC 2308, NOD A T A type 3 response. By default, the return cod e (rcode) is noerror . The RFC 2308 format is as f ollows. NO DATA RESPONSE: TYPE[...]

ServerIron ADX Global Server Load Balancing Guide 191 53-1002437-01 GSLB error handling fo r unsupported DNS requests 1 refused = query refused serv fail = ser ver failure NOTE Do not change the error cod e unless you are absolute ly cer tain of the ef fect of the co nfiguratio n. For exam ple, if you configure nx domain as the return code, the GSL[...]

192 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 GSLB error handling for unsupported DNS requests 1[...]

ServerIron ADX Global Server Load Balancing Guide 193 53-1002437-01 Chapter 2 Global Server Load Balancing for IPv6 Global server load balancing for IPv6 overview Global Server Load Balancing (GSLB) enables a Se r verIr on ADX to add int elligence to authoritativ e Domain Name System (ADNS) servers by serving as a proxy t o these servers and pro vi[...]

194 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Global server load balancing for IPv6 ove rview 2 GSLB for IPv6 feature support In the initial release of GSLB for IPv6, a subset of modes, GSLB policy metrics, and other f e atures and modules are suppor ted. Modes In the current impl ementati on, GSLB Se r verIron AD X per forms [...]

ServerIron ADX Global Server Load Balancing Guide 195 53-1002437-01 Global server load balancing for IPv6 overview 2 • If the client does not adv er tise EDNS0 header with a buf f er larger than 5 12 bytes, eight IPv6 addresses per host are supported in the response. • If the client adv er tises EDNS0 header with a buf fer smaller than 5 12 b y[...]

196 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Basic GSLB for IPv6 configuration 2 The GSLB contr oller makes decisions based on th e GSLB po licy. In the example abo ve, both th e IPv6 VIPs were healthy , so client was directed to the IPv6 VIP that was geographically closer based on the configured policy . If the VIP at the ge[...]

ServerIron ADX Global Server Load Balancing Guide 197 53-1002437-01 Basic GSLB for IPv6 configuration 2 Configuring the GSLB controller The GSLB ServerIron ADX suppor ts global ser ver load balancing in DNS cache pr oxy with DNS ov erride mode. In this mode, the GSLB controller re sponds d irectly to DNS queries with the “best” address, fr om a[...]

198 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Basic GSLB for IPv6 configuration 2 Enabling DNS override DNS ov erride enables you t o configure the GSLB ServerIron ADX to "ov erride" the DNS reply f or a domain and specify the IP addresse s for the domains co nfigured on it. DNS ov erride (when configured in conjunct[...]

ServerIron ADX Global Server Load Balancing Guide 199 53-1002437-01 Basic GSLB for IPv6 configuration 2 • FTP : the well-known name f or por t 2 1. (Ports 20 and 2 1 both are FTP por ts but on the ServerIron ADX, the name “FT P” corresponds to por t 2 1.) • TFTP : the well-known name for por t 69 • HTTP : the well-known name f or por t 80[...]

200 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Basic GSLB for IPv6 configuration 2 The ip-list <ipv6- address> variable sp ecifIes the proxy IPv6 address(es ). Y o u can specify as many pro xy IP addresses as you need. If you specify mu ltiple addresses, separat e each address with a space. Here is an example: host-info w[...]

ServerIron ADX Global Server Load Balancing Guide 201 53-1002437-01 Basic GSLB for IPv6 configuration 2 Site ServerIron ADX configuration Enabling the GSLB protocol The GSLB prot ocol is disabled by default on si t e Ser verIr on ADX switches. Y ou must enable the GSLB prot ocol on each site Ser verIr on ADX swit ch and configure the IP addresses o[...]

202 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Basic GSLB for IPv6 configuration 2 DNS ov erride allows the ServerIr on ADX to replac e the IP address in the DNS reply with the IP addresses you configure for the DNS cache pr oxy . These addresses are de fined in the IP list. Bef ore specifying the IP list, you must define th e [...]

ServerIron ADX Global Server Load Balancing Guide 203 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 If you ha ve enabled the GSLB pr otocol on the sit e ServerIron ADXs, the GSLB Ser verIr on ADX begins communicating with the site Ser verIron ADXs using the GSLB pr otoc ol as soon as you add the sit e definitions t o the GSLB ServerIron ADX[...]

204 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 Configuring GSLB policy metrics for IPv6 The GSLB ServerIron ADX suppor ts global ser ver lo ad balancing of IPv6 addresses in cache pr oxy with DNS ov erride mode. In this mode, The GS LB Se r verIr on ADX evaluat es each IP address in the I[...]

ServerIron ADX Global Server Load Balancing Guide 205 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 Wei g h te d s i te m et r i c Disabled. When the weig hted IP metric is enabled, the weig hted site me tric is disabled. The w eighted sit e metric is an alternati ve to the w eighted IP metric. They are mutually e xclusive. When enabled, th[...]

206 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 All of these metrics ha ve def ault values but you ca n change the values if needed. In addition, you can disable in dividual met rics or reo rder them. Ref e r to “Changing the GSLB po licy metrics” on page 34 . GSLB ServerIron ADX does [...]

ServerIron ADX Global Server Load Balancing Guide 207 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 NOTE Brocade recommends that you alwa ys use the health check as the first metric. Other wise, it is possible that the GSL B policy will not select a “best” choice, and thus send the DNS reply unchanged. For e xample, if the first metric [...]

208 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 There are no paramet ers for the least response se lection or r ound robin selection metrics. These metrics are tie-break ers. Only one of them is en abled at a time and the one that is enabled is alwa ys the last metric in the policy . Reset[...]

ServerIron ADX Global Server Load Balancing Guide 209 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 When you configure a Ser verIro n ADX for GSLB, it learns a series of IP addresses fr om its configured DNS real servers. Then it per forms La yer 3, Lay er 4, and if possible, Layer 7 health checks against those IP addresses. The GSLB Server[...]

210 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IPv6 2 For e xample, y ou could add the zone gslb.com, a dd the host www within the gslb.com zone, and assign a weig ht of 50 to the IP address 200 1:DB8::56 b y entering commands such as the following: SLB-ServerIronADX(config-gslb-policy)# weighted[...]

ServerIron ADX Global Server Load Balancing Guide 211 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 The command results in an “IP-address not f oun d f or host-name” error if the IPv6 address specified for the ip-weight parameter w as not used as an argument when you defined the IP list. For inf ormation about specifying IP lists, see ?[...]

212 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 By default, the w eighted sit e metric is disabled. When enabled, it is place d second in the GSLB algorithm, af ter the server (host) health metric . Y ou can change the metric or der and enable or disable other metrics, although we do not r[...]

ServerIron ADX Global Server Load Balancing Guide 213 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 ftp . gs lb .c om  VIP 200 1:DB8::2 belongs to New Y ork with a w eight of 30  VIP 200 1:DB8::3 belongs to London with a weight of 20 Suppose that t en DNS requests are made to www.gslb.com . By viewing the selection counters (using the[...]

214 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 The default va lue for the threshold is 90%. Thus a sit e Ser verIr on ADX is el igible to be the best site only if its session utilizati on is below 90%. Ref er to “Displa ying DNS zone and host s” on page 23 7 for comm ands to displa y [...]

ServerIron ADX Global Server Load Balancing Guide 215 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 Use the show gslb dns detail command to vie w the active bindings f or each IP address. Ref er to “Displaying D NS zone and hosts” on page 23 7 fo r s a m p l e o u t p u t . Configuring weighted active bindings Weight ed active bindings [...]

216 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 ServerIronADX# configure terminal  ServerIronADX(config)# gslb dns zone company.com  ServerIronADX(config-gslb-dns-company.com)# host-info www http  ServerIronADX(config-gslb-dns-company.com)# host-info www ssl  ServerIronADX(conf[...]

ServerIron ADX Global Server Load Balancing Guide 217 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 Configuring a geographic prefix Using the geo-prefix command, you can c onfigure the geographic location of an IP address prefix, or ov erride an existing geographic region f or an IP address prefix by c onfiguring a new one. Y ou can assign [...]

218 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 If GSLB default location is not specified and if the requesting client prefix is fr om an unknown geography , then the GSLB controller assigns "nor th-america" as its geography . Howev er , if the default location is specified, the [...]

ServerIron ADX Global Server Load Balancing Guide 219 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 • Session capacity thresh old : Specifies ho w close to th e maximum session capacity the site Ser verIr on ADX (remot e Ser verIron ADX) can be and still be e ligible as the best site f or the client. This mechanism provides a wa y to shif[...]

220 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 Y ou can modify the follo wing FlashBack parameters: • Application tolerance • TC P t o l e r a n c e The GSLB ServerIr on ADX uses a tolerance v alue when comparing the FlashBack speeds of different sites. The tolerance v alue specifies [...]

ServerIron ADX Global Server Load Balancing Guide 221 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 • Y ou can bias a GSLB Ser verIr on ADX that is also configured as a site ServerIr on ADX (fo r locally configured VIPs) to always fa vor itself as the be st site. In this case, assign an administrative pref erence of 255 to the sit e for t[...]

222 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 Use the round robin selection metric instead of th e least response selectio n metric when you want to pre vent the GSLB ServerIr on ADX from fa voring ne w or recently recov ered sites over pre viously configured active sites. The leas t res[...]

ServerIron ADX Global Server Load Balancing Guide 223 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 NOTE Hash-based persist ence is a better choice f or GSLB configurations that utilize two GSLB controllers (that are not in an HA configurat ion) for the same d omain and where site persistenc e is needed for a single client that is direct ed[...]

224 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 No special CLI command s need to be issued on the sit e ServerIron ADX. Specifying sticky se ssion prefix lengths T o create sticky f or a specific group (subnet) of cl ients, configure a different prefix length f or that group . Once configu[...]

ServerIron ADX Global Server Load Balancing Guide 225 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 High availability considerations for IPv6 sticky persistence Sticky GSLB enables the GSLB contr oller to return the same IP address if a client sends multiple DNS requests within a configurable period of time. Controllers, when config ured in[...]

226 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 T o create site persistence f or a specif ic group (s ubnet) of clients, configure a dif ferent hash-based persistence prefix length f or that group. Once conf igured, the GSLB contro ller will ensure that DNS clients within the same subnet w[...]

ServerIron ADX Global Server Load Balancing Guide 227 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 ServerIronADX(config)# gslb policy ServerIronADX(config-gslb-policy)# hash-persist weighted T o enable weight ed hash-based GSLB persistence for a host-le vel policy , enter commands on the GSLB controller , such as the following: ServerIronA[...]

228 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 • <weight> is a value from 0 t o 100. The default v alu e is 1. A weight of 0 implies that the client IP will not be allocat ed any hash buck ets. A weight of 0 can be used to designat e a domain IP as backup. NOTE The aggregate of th[...]

ServerIron ADX Global Server Load Balancing Guide 229 53-1002437-01 Advanced GSLB conf iguration for IPv6 2 If u se r co n f ig u re s th i s c o mm a n d, h e o r sh e wi l l h ave to ma n ua l ly r eh a sh a t a l a ter c o nven ie n t t i me . This command can be used when user does not want to break the pe rsistence f or the existing IP address[...]

230 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Advanced GSLB configuration for IP v6 2 A site must pass all applicable Layer 4 and La yer 7 health checks t o av oid being removed. NOTE If all the sites fail their health checks, resulting in all the sites being rejected by the GSLB ServerIron ADX, the ServerIr on ADX sends the D[...]

ServerIron ADX Global Server Load Balancing Guide 231 53-1002437-01 Displaying GSLB for IPv6 configurations 2 • If the host has an IPv6 IP list configured, the Ser verIr on ADX applies GSLB policy t o the addresses on the list and responds with AAAA recor ds. • If the host has an IPv4 IP list configured, the Ser verIr on ADX applies GSLB policy[...]

232 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB for IPv6 configurations 2 Direct response = 0 Query type ANY = 0 Query type A = 56 Query type AAAA = 87 The command returns inf ormation ab out the number of requests fo r three quer y types: queries f or IPv4 addresses (A record s), queries for IP v6 addr esses (AA[...]

ServerIron ADX Global Server Load Balancing Guide 233 53-1002437-01 Displaying GSLB for IPv6 configurations 2 DNS active-only Indicates whether the GSLB ServerIron ADX remo ves IP addresses fr om the DNS response i f those add resses fail a health check . This field can h av e o ne of the fol l o wi n g va l u e s: • DISABLE : The Ser verIr on AD[...]

234 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB for IPv6 configurations 2 Displaying the user-configured GSLB policy Use the show gslb policy command to view user -defined GSLB poli cy se ttings f or the Ser verIr on ADX including the def ault processing or der of the GSLB policy algorithm and the status of many [...]

ServerIron ADX Global Server Load Balancing Guide 235 53-1002437-01 Displaying GSLB for IPv6 configurations 2 In the following example, the o rder has been c han ged, two of the metrics hav e been disabled, and the administrative pre fer ence has been enabled. For a description of the inf ormation shown by this command, ref er to “Displa ying the[...]

236 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB for IPv6 configurations 2 T o view the results of traffic distribution af ter co nfiguring weighted site metrics, ent er the following command: ServerIronADX(config)# show gslb traffic site  SITE: local Weight: 50  * a.b.c  DNS Requests: 36  ServerIronAD[...]

ServerIron ADX Global Server Load Balancing Guide 237 53-1002437-01 Displaying GSLB for IPv6 configurations 2 • Local (weight: 50; Ser verIron ADX: 200 1:db8::1; VIPs: 200 1:db8::180 (HTTP) , 200 1:db8::18 1 (HTTP), 200 1:db8::12 1 (FTP) • TWO (weight: 50; ServerIr on ADX: 200 1:db8::2; VIPs: 200 1:db8::182 (HTTP), 200 1:db8::122 (FTP)) • THR[...]

238 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB for IPv6 configurations 2 Output differs depending on the ServerIr on ADX de vice used and the sof tware release installed on the ServerIron ADX. TA B L E 2 3 GSLB zone and host application informat ion This field... Displays... ZONE The zone name. Th e name that ap[...]

ServerIron ADX Global Server Load Balancing Guide 239 53-1002437-01 Displaying GSLB for IPv6 configurations 2 Use the sho w gslb dns command to vie w information about the distribution of traffic af ter the configuratio n of weighted IP metrics. State The stat e of the server . The ServerIron ADX de termines the stat e based on the results of the L[...]

240 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB for IPv6 configurations 2 The command can be used with or without the < zone-name > variable, which speci fies a si ngle zone. If this variable is om itt ed, all zones are displa yed. ServerIronADX(config)# show gslb dns zone brocade.com ZONE: brocade.com HOST[...]

ServerIron ADX Global Server Load Balancing Guide 241 53-1002437-01 Displaying GSLB for IPv6 configurations 2 Syntax: clear gslb dns zone-name [ <name> ] Rep l ac e <zone -name> with the zone for whic h you want t o clear the DNS selection counte rs. T o clear the count er s globally (f or all zones), do no t enter a <zone-name> .[...]

242 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB for IPv6 configurations 2 For descriptions of the other inf o rmation displa yed by the sho w gslb dns detail command, refer t o “Displaying D NS zone and hosts” on page 23 7 . Displaying site information Use the sho w gslb site command t o display the f ollowin[...]

ServerIron ADX Global Server Load Balancing Guide 243 53-1002437-01 Displaying GSLB for IPv6 configurations 2 T o display inf ormation for all configured sites, en t er the follo wing command at any le vel of the CLI: ServerIronADX(config)# show gslb site  SITE: sunnyvale  ServerIronADX: slb-1 209.157.22.209:  state: CONNECTION ESTABLISHED[...]

244 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Displaying GSLB for IPv6 configurations 2 TA B L E 2 5 Global SLB sit e informatio n This field... Displays... Ser verIron ADX name and IP addre ss F or ea ch Ser verIron ADX, the fir st item of informatio n listed is the name and management IP address. This is the inf ormation you[...]

ServerIron ADX Global Server Load Balancing Guide 245 53-1002437-01 Displaying GSLB for IPv6 configurations 2 Syntax: show gslb sit e [ <site-name > ] The <sit e-name> parameter specifies a site name. Show commands for advanced features Displaying the hash table A hash table is maintained f or a domain for wh ich hash-based persist ence[...]

246 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Troubleshooting GSLB for IPv6 configuration s 2 bucket 2: ipv6 2001:db8::150, hit count 0 bucket 3: ipv6 2001:db8::150, hit count 0 Syntax: show gslb ipv6 phash (act iv e-ip | allocation | t able) The optional active-ip | allocati on | table parameter specifies the information that[...]

ServerIron ADX Global Server Load Balancing Guide 247 53-1002437-01 Troubleshooting GSLB for IPv6 configurat ions 2 ********************************************* PAX Mem dynamic real virtual debug information: *********************************************** Num MP dyn VIP pax mem alloc: 255466 Num MP dyn VIP pax mem alloc del err: 0 Num MP dyn VIP [...]

248 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Troubleshooting GSLB for IPv6 configuration s 2 ********************************************* GSLB backend DNS debug information: *********************************************** g_gslb_dnssec_backend_not_found : 0 g_gslb_dns_backend_not_found : 42409 *******************************[...]

ServerIron ADX Global Server Load Balancing Guide 249 53-1002437-01 Troubleshooting GSLB for IPv6 configurat ions 2 1/1 #sh debug trace summary Count of log entries in the buffer: 2 1/1 #show debug trace DECIMAL 50 entries will be displayed from this starting index config Show the configured debug-trace settings summary Show the captured log entry [...]

250 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 Troubleshooting GSLB for IPv6 configuration s 2[...]

ServerIron ADX Global Server Load Balancing Guide 251 53-1002437-01 Appendix A Reference Materials RFC IPv4 IPv4 RFC 791 IPv6 IPv6 RFC 2460 DNS The GSLB ServerIron uses the Internet Assigned Nu mber s Authority’s (IANA ’s) IP address prefixes (IPv4 or IPv6) to generat e an init ial static datab ase of geographic prefixes. This database consists[...]

252 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 DNS A 1 45.248.0.0/1 4 EUROPE 1 45.252.0.0/15 EUROPE 1 45.254.0.0/16 EURO PE 1 49.202.0.0/15 EUROPE 1 49.204.0.0/16 EURO PE 1 49.206.0.0/15 EUROPE 1 49.208.0.0/12 EUROPE 1 49.224.0.0/12 EUR OPE 1 49.240.0.0/13 EUR OPE 1 49.248.0.0/1 4 EUROPE 15.0.0.0/8 NORT H AMERICA 150.254.0.0/1 [...]

ServerIron ADX Global Server Load Balancing Guide 253 53-1002437-01 DNS A 1 7 .0.0.0/8 NORTH A MERICA 171 . 1 6 . 0 . 0 / 1 2 EUROPE 1 7 1.32.0.0/15 EUROPE 18.0.0.0/8 NORTH AM ERICA 19.0.0.0/8 NORT H AMERICA 192. 1 06.1 96.0/23 EUROPE 192. 1 62.0.0/16 EURO PE 192. 1 64.0.0/14 EUROPE 192.7 1.0.0/16 EUR OPE 193.0.0.0/8 EUROPE 194.0.0.0/8 EUR OPE 195.[...]

254 ServerIron ADX Global Server Load Balancing Guide 53-1002437-01 DNS A IPv6 address assignment The initial implementation of GSLB for IPv6 ad dresse s suppor ts user configurable geographi c prefixes as a metric in GSLB policy settings for IPv6 addresses. The def ault client length on the ServerIron is 64. The f ollowing geographic prefix es are[...]

ServerIron ADX Global Server Load Balancing Guide 255 53-1002437-01 DNS A 200 1:0A00::/23 RIPE NCC 200 1:0C00::/23 APNIC 200 1:0E00::/23 APNIC 200 1:1200::/23 LACNIC 200 1:1400::/23 RIPE NCC 200 1:1600::/23 RIPE NCC 200 1:1800::/23 ARIN 200 1:1A00::/23 RIPE NCC 200 1:1C00::/23 RIPE NCC 200 1:2000::/23 RIPE NCC 200 1:3000::/23 RIPE NCC 200 1:3800::/[...]