SSL from end to end with insertion of Cookie for config sticky help

Good day to all,

Received a new request from my customer to provide the SSL (front-end and Back-End) endpoints on the ACE module.

Here is the list of requirements:

(1) stop of SSL customer to the AS - key size 2048

(2) introduction to the real servers - key size 1024 SSL

(3) Insert cookie for sticky - provided by ACE

(4) predictor - Leasconn

(5) mode - bridge

I searched the Forum and other sites, and I would like to get clarification on a few things that I understand the problem;

Thank you in advance for taking the time to read and give me your comments/suggestions:

(1) my client has provided the certificate for their application, I need to import about ACE. question about it, do I need a certificate for each VIP I configure on the ACE for termination for all future requirements?

(2) do I need to install a certificate on the ACE to (initialize) the real servers? If so, first generate the key and follow up the instructions to ask CSR?

(3) to create the Insert for the sticky cookie, is the following commands all that I need to apply:

ACE-Insert cookie http-post-it web-sticky

browser-expiration of cookie insert

Timeout 5

Serverfarm my_server_farm

(4) if I lab, a lab environment, can the certificate be exported first and then imported to the ACE of the Production, or each environment should have its own certificate?

An example configuration that someone could share would be also greatly apprecaited.

Thank you

-Raman

Hello Raman,

In fact, there is a small typo. Correct your understanding about the probe. The port of the probe must be 443 as you pointed out or one probe https http and no probe, if port 80 is used.

In addition, it is not mandatory to have two serverfarm in the case of end to end ssl (if that's what you ask after referring to the example). In short:

SSL---> customer termination---> ace---> RSERVERS.

Communication between the client and ACE is encrypted. Rservers ACE is clear. So here you have rservers to listen on port 80 or 8081 etc. Survey should be on port 80.

Initiation of SSL---> in this case communication between ACE and rservers is encrypted. Therefore the probe should be port 443.

End to end SSL---> in this case that you must book for listening on 443 and front end as backend is encrypted. Survey should be on 443.

Also, troubleshooting ssl commands would be:

show stats client crypto

show crypto server stats

I hope this helps.

Kind regards

Kanwal

Tags: Cisco DataCenter

Similar Questions

  • How to type vertical text from the bottom up with the right orientation for a graph?

    How to type vertical text from the bottom up with the right orientation for a graph?

    Hello! Below, I'll demonstrate how to have vertical text in two different ways.

    Example 1:

    1. below, I have a graph and want to label the vertical axis.

    Select the text tool, and then the Vertical text tool.

    2 with the vertical Type tool, I tap on my vertical label.

    3 with the move tool, then I can orient the text in a position desired, as shown in the examples below.

    If this isn't the desired orientation of the vertical type you would like. I have the example 2 below.

    Example 2:

    1. After typing my text vertically with the Vertical Type tool (in example 1), I want to move to a horizontal position. I can go up to the options panel and select the icon "show/hide text orientation", surrounded by below. It will pass the text back and forth between vertical and horizontal.

    2 after the passage of the text to be horizontal, I want to change the orientation of the text, so it is aligned with my vertical axis.  Go in Edit > transform > Rotate as shown below.

    3 you want to can Rotate the text as indicated below.

    4 text is not in the right position we want, so we have to move the text, as illustrated below. Press enter/return to perform the complete transformation.

    5. the text is shown below.

    Other links:

    Please post back with any questions,

    Janelle


  • How to remove files that end with the period (.)

    I have a file that ends with a period (.). The latter, after trying to remove it, he says that his source was not found. Well, then I looked and he says its because of the dowry, but I couldn't find answers on how to fix this. Is there a way?

    I run Windows XP 32-bit.
    I'm surprised Unlocker didn't work. See if that helps.
    http://blog.dotsmart.NET/2008/06/12/solved-cannot-read-from-the-source-file-or-disk/
     
     
  • Most of my programs ends with .encre how can I fix this problem?

    After a problem to get some pictures to record from memory card, most of my programs ends with .encre and will not work. I am running windows 7 Home premium.

    1 I need to ask you to clarify this point.  I guess you look at the files using Windows explore via the road C:\Users\YourUserName\Desktop etc. not through libraries like that maybe confused.

    2 you say that shortcuts to programs are now "excel.lnk" but have been "excel" just before?  Or even 'excel.ink', which is what you typed.

    3 or you say "excel.exe" itself is now 'excel.lnk' / 'excel.ink '?

    4 the second would be amazing as it would mean that each program name had been corrupted.

    5 shortcuts, have indeed, the .lnk extension itself would not be a problem - you can always show or hide these extensions [we can talk about this later that it is secondary].  So, is it LNK or INK?

    6. what happens when you try to run a program from its link on the start menu?  What answer do you have the system?  This applies to Internet explorer, Windows desktop explorer, WordPad, if you?

  • Tablespace name starting with o1_mf and ending with cb58lw2z_.dbf?

    Hi all

    I can't figgure where in the database creation process how all tablespaces being named for example, beginning with o1_mf and ending with cb58lw2z_.dbf:

    DB_1 > select name from v$ datafile;

    NAME
    --------------------------------------------------------------------------------
    /U01/shared_data/oradata/DB/datafile/o1_mf_system_cb58lw2z_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_undotbs3_cb58q00g_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_sysaux_cb58krqh_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_undotbs1_cb58nbnn_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_undotbs2_cb58pznk_.dbf
    .
    .
    .
    /U01/shared_data/oradata/DB/datafile/o1_mf_index_cb58pznk_.dbf

    Not that it's a big problem, I would like to know how this happens.  Example of how I create a tablespace:

    CREATE bigfile TABLESPACE 'INDEX' LOGGING datafile SIZE 100 M AUTOEXTEND ON NEXT 250 M MAXSIZE UNLIMITED EXTENT MANAGEMENT LOCAL SEGMENT SPACE MANAGEMENT AUTO;

    DB_1 > select * from v version $;

    BANNER                                                                               CON_ID
    -------------------------------------------------------------------------------- ----------
    Database Oracle 12 c Enterprise Edition Release 12.1.0.2.0 - 64 bit Production 0
    PL/SQL Release 12.1.0.2.0 - Production 0
    CORE 12.1.0.2.0 Production 0
    AMT for Linux: Version 12.1.0.2.0 - Production 0
    NLSRTL Version 12.1.0.2.0 - Production 0

    Thank you!

    2932017 wrote:

    Hi all

    I can't figgure where in the database creation process how all tablespaces being named for example, beginning with o1_mf and ending with cb58lw2z_.dbf:

    DB_1 > select name from v$ datafile;

    NAME
    --------------------------------------------------------------------------------
    /U01/shared_data/oradata/DB/datafile/o1_mf_system_cb58lw2z_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_undotbs3_cb58q00g_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_sysaux_cb58krqh_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_undotbs1_cb58nbnn_.dbf
    /U01/shared_data/oradata/DB/datafile/o1_mf_undotbs2_cb58pznk_.dbf
    .
    .
    .
    /U01/shared_data/oradata/DB/datafile/o1_mf_index_cb58pznk_.dbf

    Not that it's a big problem, I would like to know how this happens.  Example of how I create a tablespace:

    CREATE bigfile TABLESPACE 'INDEX' LOGGING datafile SIZE 100 M AUTOEXTEND ON NEXT 250 M MAXSIZE UNLIMITED EXTENT MANAGEMENT LOCAL SEGMENT SPACE MANAGEMENT AUTO;

    DB_1 > select * from v version $;

    BANNER                                                                               CON_ID
    -------------------------------------------------------------------------------- ----------
    Database Oracle 12 c Enterprise Edition Release 12.1.0.2.0 - 64 bit Production 0
    PL/SQL Release 12.1.0.2.0 - Production 0
    CORE 12.1.0.2.0 Production 0
    AMT for Linux: Version 12.1.0.2.0 - Production 0
    NLSRTL Version 12.1.0.2.0 - Production 0

    Thank you!

    https://www.Google.com/webhp?hl=en&tab=WW#hl=en&q=Oracle+managed+files

  • Purge the concurrent request and/or Manager Data - take long & end with error completed

    Purge the concurrent request and/or Manager Data - take long & end with error completed.

    What ever the age values 30,70,1000

    ****

    Select count (*) in the FND_CONCURRENT_PROCESSES;

    COUNT (*)

    -----

    32149

    ****

    Select count (*) from the FND_CONCURRENT_REQUESTS;

    COUNT (*)

    -----

    585499

    ****

    Request of min | Application of Max date | Date

    -------------------- --------------------

    SEPT. 13.-10 10 OCTOBER 13

    My problem is now solved

    the cause of the problem was:

    After the clone for the new Production Server FND_CONCURRENT_PROCESSES & FND_CONCURRENT_REQUESTS table 'old' lines were still talking to the node that is no longer available in the new production to LOGFILE_NAME and OUTFILE_NAME columns.

    And after the removal of these lines, executes the request was very quick and works as it should work now.

    Thanks for all the help I get here and with the SR team too

  • A script for the e-mail notifications to all detectors of vCenter device 54 default works as expected, however it ends with an error.

    Hello

    We test the automatic configuration of alerts by email of all the alarms of 54 by default since version 5.0 of the device of vCenter.

    Since this is something that we intend to do on all the installations/upgrades, it can be a time-consuming task having to manually set each alarm set on each vCenter so I indicated to an article in the blog of VMpros which appears to address a similar task and who suggests using PowerCLI script to take care of this:

    http://blog.vmpros.nl/2011/07/04/VMware-change-alarm-actions-with-PowerCLI/

    I fixed the script from its original version because it shouldn't change certain actions of alarm to send alarm notifications at a different e-mail once a week. Instead, we will propose a one-time activity.

    After configuring vCenter server connection information and change the e-mail addresses, I have successfully tested the custom script to add notifications by e-mail to a test alarm (named "Test alarm") to a simple action, that I had created earlier (turn on/off a virtual computer in our laboratory). The added script notifications by e-mail to our alarm test as expected without error.

    Before you change the script to add e-mail notifications to all 54 defect detectors as needed, I decided to test the custom script against one of the predefined alarms (named 'Host the status of material power'). While the script added notifications by e-mail to the alarm 'Material receiving power status' as expected, he finished with errors.

    I just want to make sure that our custom script contains no script errors before using it on all the installations/upgrades (any suggestion or criticism is welcome).

    I pasted the error resulting from the prompt of Windows PowerShell commands below.

    Thank you and best regards,

    Massimiliano

    ==================================================

    PowerCLI D:\ >.\Change_Alarm_Datacenter.ps1

    Action Type Trigger

    -----------     -------

    SendEmail...

    SendEmail...

    SendEmail...

    New-AlarmActionTrigger: 21/05/2012-16:35:11 new-AlarmActionTrigger A

    specified parameter was incorrect.

    D:\Change_Alarm_Datacenter.ps1:37 car: 82

    + Get-AlarmDefinition-name '$actAlarm1 ' | Get-AlarmAction | New-AlarmActionTri

    walking landing < < < < - StartStatus 'green' - EndStatus "yellow."

    + CategoryInfo: NotSpecified: (:)) [-AlarmActionTrigger] new, Inva)

    lidArgument

    + FullyQualifiedErrorId: Client20_AlarmServiceImpl_NewAlarmActionTrigger_

    ViError, VMware.VimAutomation.ViCore.Cmdlets.Commands.Alarm.NewAlarmActionT

    rigger

    UID: /VIServer=administrator@vcenter5:443/Alarm=Alarm-alarm-17/SendEma

    ilAction = 1508771755/AlarmTriggeringActionTransitionSpec =-83030421

    6.

    StartStatus: Green

    EndStatus: yellow

    Repeat: false

    AlarmAction: SendEmail

    UID: /VIServer=administrator@vcenter5:443/Alarm=Alarm-alarm-17/SendEma

    ilAction =-1903891658/AlarmTriggeringActionTransitionSpec =-8303042

    16.

    StartStatus: Green

    EndStatus: yellow

    Repeat: false

    AlarmAction: SendEmail

    UID: /VIServer=administrator@vcenter5:443/Alarm=Alarm-alarm-17/SendEma

    ilAction =-1765994019/AlarmTriggeringActionTransitionSpec =-8303042

    16.

    StartStatus: Green

    EndStatus: yellow

    Repeat: false

    AlarmAction: SendEmail

    ==================================================

    Okay, I think I found the problem.

    You set 3 actions on this alarm (3 x Email).

    This means that it

    Get-AlarmDefinition -Name "$actAlarm1" | Get-AlarmAction
    

    Returns 3 objects (one for each action).

    Unfortunately, the New-AlarmActionTrigger cmdlet wants 1 as input Action, not a table object.

    The solution is to select the Action of explictely for which you want to change the trigger.

    Something like that

    Get-AlarmDefinition -Name "$actAlarm1" | Get-AlarmAction | Select -Index 0 | New-AlarmActionTrigger -StartStatus "Green" -EndStatus "Yellow" Get-AlarmDefinition -Name "$actAlarm1" | Get-AlarmAction | Select -Index 1 | New-AlarmActionTrigger -StartStatus "Red" -EndStatus "Yellow" Get-AlarmDefinition -Name "$actAlarm1" | Get-AlarmAction | Select -Index 2 | New-AlarmActionTrigger -StartStatus "Yellow" -EndStatus "Green"
    

    Beware, the script does not remove the old triggers, so you will end up having several triggers for actions.

    First use the remove-AlarmActionTrigger to remove any existing triggers.

  • GREP to mark all words of caps and words ending with †

    How can I use GREP to get the words in capital letters in a different color (red below) in a document and the capitalized words that end with † another color (orange below). See example below.

    The philosophy of travel SMART 3D includes more advanced brushes, magnets and scrapers to capture and carry large metal debris out of the well in the industry. Cleaning solutions include the modular tool of MULTIBACK† , including a loving section integrated to capture the ferrous debris and scrapers to remove the debris that is difficult to remove, as well as brushes to disturb the sheath and any additional fluid build-up on the inside of the envelope or coating. We also offer a variety of valves that stimulate circulation annular velocities. Another important element is the GOOD PATROLLER† filter and validation background tool that performs an action of cleaning when it is run in tandem with the MAGNOSTAR† magnet and anti-rotation case brushes and scrapers.

    It is always easier to contradict this offer!

    So:

    I inserted the last 2 codes with Non-menuisiers [I love]: I deal with them, the part of text correct! Also, here, "USA."

  • duplicated in database: ends with error: rman-06136 ora-01110

    OS: Linux REDHAT 5
    DB: 11.2.0.3

    Source DB backed up using rman full backup incremental level 1 twice and scp all backupsets to auxiliary hosts.

    I try to reproduce as follows:
    Run {}
    data duplicated in TST
    UNTIL TIME ' TO_DATE (NOVEMBER 12, 2012 ',' ' HH24:MI:SS JJ/MM/AAAA).
    location of backup "/ stage/TST.
    NOFILENAMECHECK;
    }

    Everything worked out to restore all the, and then he proceeded to recover with following error message:

    Oracle error:
    ORA-01547: WARNING: RECOVER succeeded but OPEN RESETLOGS would get below error
    ORA-01194: file 1 needs a recovery more match
    ORA-01110: data file 1: '+ DAT/tst/datafile/system.279.799358399 '.

    Then he kept to the end with the following errors;
    ORACLE auxiliary database error: ORA-19751: could not create the file change tracking
    ORA-19750: change the trace file: "+ DAT/prds/changetracking/ctf.906.799250971".
    ORA-17502: ksfdcre:4 cannot create the +DAT/prds/changetracking/ctf.906.799250971 file
    ORA-15046: ASM '+ DAT/prds/changetracking/ctf.906.799250971' file name is not unique creation as a file

    Ignore the error, retry command after only two copies ends

    content of Script memory:
    {
    ALTER clone database open resetlogs;
    }
    execution of Script memory

    RMAN-00571: ===========================================================
    RMAN-00569: = ERROR MESSAGE STACK FOLLOWS =.
    RMAN-00571: ===========================================================
    RMAN-03002: failure of Db in dual at 14/11/2012 22:26:18
    RMAN-05501: abandonment of duplicate target database
    RMAN-03015: an error has occurred in the script stored memory Script
    RMAN-06136: the auxiliary database ORACLE error: ORA-01194: file 1 needs a recovery more match
    ORA-01110: data file 1: '+ DAT/tst/datafile/system.279.799358399 '.

    RMAN >

    Should I proceed from here?

    Thank you.

    Yes

    Here is my document to support:

    During replication of the database, Rman error ora-1547, ora-1152, ora-1110 during recovery [274118.1 ID]

    Best regards

    mseberg

  • In the Finder, how can I search/list of the files in the folder of final characters in filenames, i.e. 'to end-with' alphabetical rather than by default "starting by" alphabetical?

    In the Finder, how can I search/list of the files in the folder of final characters in filenames, i.e. 'to end-with' alphabetical rather than by default "starting by" alphabetical?

    As far as I know, you can't.

  • How to open a program that ends with... .iXL?

    How to open a program that ends with... .iXL?

    You try to open a file with an extension of .ixl?

    This file extension seems to be associated with the Inmagic Inc. software.

    http://FILExt.com/file-extension/IXL

    http://www.Inmagic.com/dbText

    The file may be in XML format, in which case you can open it with Notepad.

    http://www.iSiloX.com/support/manual/IXL/IXL.htm

    http://www.iSilo.com/ may be what you are looking for.

    http://www.iSilo.com/download/iSiloW32.htm

  • What kind of file ends with .docx

    I received recent emails with the word document attachments ending with .docx when I try to open an error message appears that says: "this action is only valid for products that are currently installed" I am usiing XP and Microsoft Office 2003 is installed.

    Its an Office / Word document. This facility can open them

  • More effective than a virus - KB930494 MS update ends with true Msg that Windows cannot now work correctly

    More effective than a virus - KB930494 MS update ends with true Msg that Windows cannot now work correctly

    I started to reinstall Windows XP, after he has screwed up and I discovered that all the system snapshot
    I created backups worthless - MS removes automatically after 90 days...

    But when reinstalling Windows XP Pro MCE 2005 I managed to beat or dodge the many problems - like all the
    famous error when update .NET Framework 1.1 Service Pack 1 and many others
    Suddenly I met an error generated by Microsoft of NONRECOVERABLE type!

    While trying to install Windows, I agreed that Windows was full of bugs and security flaws and
    need a large number of fixpacks installed via Windows Update.
    Such a group of patches is called KB930494 and the full name is:

    .NET framework 1.0 Service Pack 3 SYSTEM. WEB. DLL and MSCOREE. DLL Security Update for Windows XP Media Center Edition and Windows XP Tablet PC Edition

    Windows Update gave a brief error msg that this update has failed and I have tried to run this update
    manually when it produces the following error message: (note he's telling the truth when it)
    claims that "Windows may not work correctly")

    ---
    KB930494 Setup error

    Error while updating your system.
    Windows XP has been partially updated and may not work properly.

    Ok
    ---

    So, this update of Microsoft killed my system - it sure that _ 'does not properly"more.
    Lots of things off, lots of BSOD...

    Og - of course I should have used the system restore and created a backup that I should come back...!
    I did well - but this bomb of viral type of Microsoft made sure it was not possible to create
    a valid system by restoring such a backup. Probably because half the file system matches the other.

    The worst part is - even if I try to reinstall Windows again, avoiding this Virus created by MS, how can I be sure that
    This will be the only disguised bomb nothing extraordinary provided by Windows Update as necessary security patches?

    So guys, what is the best utility backup/restore partition there?

    Rgds. E. Ben

    Use Partiton Lofic is a down load for free on the partition, you can also use Easeus Disk Copy. It is a free program with a friendly interface.

  • Since then, when I start the computer, it goes through a few stages starting and then ends with a black screen with a cursor flashing at the top.

    I left by mistake a USB in the port when I restarted my computer (Windows 7).

    Since then, when I start the computer, it goes through a few stages starting and then ends with a black screen with a cursor flashing at the top.

    If I press ESC during startup and access the start menu, something marked WED... is highlighted and I press on enter and it starts normally.

    How can I get Windows 7 to do a normal boot without having to access the Boot Menu each time?

    Thank you.

    Tried that, but it did not work.  Finally got and IT guy come and it took him 3 1/2 hours to repair.

    Need a bootable floppy which has then repairs itself.

    Lesson learned.  Have an available for each computer startup disk.

  • I am having trouble updating to Adobe Acrobat XI worm. 11.0.15 I receive saying Error 1311 source file is missing ending with Data1.cab

    I am having trouble updating to Adobe Acrobat XI worm. 11.0.15 I receive saying Error 1311 source file is missing ending with Data1.cab

    Hi lawrencew78647297,

    Please try the steps to follow and let us know:

    1. launch Acrobat, click on the Help menu > repair installation (be sure that everything is closed).

    -Restart the computer and then try to update again.

    -If the automatic update did not help again.

    2 download the patch to update manually and try to install it: Adobe - Acrobat: for Windows

    3 If the steps above did not help either

    Download the new installer. : Download Pro or Standard versions of Acrobat DC, XI or X

    XI of Acrobat using the uninstall cleanup tool: Download Adobe Reader and Acrobat tool - Adobe Labs

    Reinstall and try to update again.

    Kind regards

    Tariq Dar.

Maybe you are looking for

  • notifications are not correctly rejected when several downloads are started from priv├⌐s.

    When a download is started from a private tab notification is automatically rejected at the end.If several downloads are active, it won't.notification by the full download will show the status and the name of the current download, while the notificat

  • Length of password of Netflix on iOS

    By recommendation of Netflix, I put a password of 60 characters using a mix of upper-lower case letters, numbers and symbols. Two of my machines Windows using the browsers Chrome and Firefox has agreed this new password without any problem. However,

  • Tecra 8100 BIOS update

    I installed Windows XP on a different partition on my Tecra 8100. I downloaded the base BIOS Windows Update for XP, but it is ' t work the way says the tutorial.After you extract the files when I try to run then it gives following message- TOSHIBA co

  • WRT610N v1 - Wi - Fi and Wireless does not. Fried?

    Howdy... I think that my router is fried.  Unable to access this router wireless.  Wireless name appears on my PC (an office, 1 HP laptop HP) 2, but none connects.  Wired connection does not work also, but I can't connect to the internet if connected

  • Recovery and recovery Microsoft Office discs

    About a year and a half ago, I bought a DELL Inspirion R15 for my daughter and sent him to College with a 3 year extended warranty. In the last months, she has been having network problems and decided to go to his college IT department rather than ca