Document Outline

• Contents
• Preface
  • Document conventions
    • Text formatting
    • Command syntax conventions
    • Notes, cautions, and warnings
  • Brocade resources
  • Contacting Brocade Technical Support
  • Document feedback
• Features
  • Brocade Virtual ADX Supported Features
    • Load Balancing
    • Content Switching
    • OpenScript
    • SSL offload for optimization of encrypted traffic
    • Advanced networking with support for static and dynamic routing
    • High availability for active and standby deployments
    • Rate Limiting
    • Support for Brocade Virtual ADX as a GSLB site for increased availability across datacenters
    • Extended hypervisor support for heterogeneous environments
  • Feature summary
• Server Load Balancing
  • Overview
    • How SLB works
    • Load-balancing predictor
    • Sticky connections
    • Application port groups
    • Concurrent connections
    • Remote Servers
    • Direct Server Return
  • Configuring basic SLB
    • Configuration guidelines
    • Defining the real servers and real application ports
    • Defining a virtual server (VIP)
    • Binding virtual and real servers
  • Changing the Load-Balancing Predictor Method
    • Configuring a weighted predictor
    • Configuring dynamic weighted predictor
    • Configuring the smooth factor
  • Real server ports
    • Disabling or re-enabling application ports
    • Globally disabling application ports
    • Disabling SLB to a server when an application goes down
    • Slow-start mechanism
    • Enabling or disabling the keepalive health check
    • Configuring a real port as TCP-only or UDP-only
    • Configuring a stateless port
  • Source NAT
    • Enabling source NAT globally
    • Enabling source NAT on a real server
    • Configuring a shared source IP address for NAT
    • Client subnet based source NAT
    • Enabling port allocation per real server for source NAT IP
  • Remote server
  • Sticky and concurrent connections
    • Configuring sticky ports
    • Configuring stickiness based on client’s subnet
    • Setting the sticky age
    • Increasing the sticky-age per VIP longer than 60 minutes
    • Sticky connection return from backup server to primary
    • Group sticky: Layer 4 SLB to server group
    • Enabling a concurrent port
  • Application port grouping
    • Tracking primary ports
    • Track port group function
    • TCP/UDP application groups configuration example
  • Primary and backup servers
    • Designating a real server as a backup
    • Enabling a VIP to use the primary and backup servers
    • Configuration example
    • Designating a real server port as a backup
    • Per server based real server backup
  • Configuring Direct Server Return
    • Configuring L2 Direct Server Return
    • Configuring L3 Direct Server Return
  • Displaying server information
  • Port ranges
    • Defining a port range
    • Using a port range under a real server definition
    • Using a port range under a virtual server definition
    • Binding a port range for virtual ports to a real server
    • Defining port profile for port range
    • Displaying a list of port ranges
  • Multiple port binding
    • Direct binding of multiple ports
    • Port aliases
  • Real server groups
    • Defining a real server group
    • Associating a real server with a real server group
    • Binding a real server group to a virtual server
    • Showing real server groups
  • Disabling or deleting VIPs and real ports
    • Disabling VIPs
    • Disabling a real server
    • Disabling or re-enabling an application port
    • Globally disabling real and virtual ports
    • Deleting a VIP
    • Enabling force-delete
    • Real server shutdown
    • Port holddown timer
  • Hash-based SLB with server persistence
    • Persistent hash table
    • Clear vs reassign mechanisms
    • Enabling persistent hashing
    • Enabling the clear-on-change mechanism
    • Enabling the reassign-on-change mechanism
    • Configuring the reassign threshold and duration
    • Reassignment sequence and example
    • Keeping the persistent hash table unchanged
    • Real server failure
    • Displaying persistent hash table entry and statistics
    • Clearing the hit count for the persistent hash table
    • Clearing the persistent hash table
    • Reassigning a persistent hash table entry
    • Displaying hash bucket changes
  • SLB spoofing configuration and support
  • Policy-based SLB
  • Miscellaneous options
    • Changing a real server’s IP address
    • Adding a description
    • Configuring a local or remote real server
    • Configuring a TCP MSS value at the global level
    • Configuring a TCP MSS value for a virtual server
    • Configuring a TCP MSS value at the virtual server port level
    • Configuring a TCP MSS value at the TCP profile level
    • Support for TCP Window Scale option in TCP header
    • Binding a TCP profile to a virtual port and response rewrite policy
    • Limiting the maximum number of TCP SYN requests
    • Configuring the maximum connection rate for a real server
    • Configuring the maximum connection rate for a virtual server
    • Disabling port translation
    • Traffic distribution among BPs
    • Including the server client port in hash calculations
    • Sending ICMP Port Unreachable or Destination Unreachable messages
    • Sending a TCP RST to a client that requests unavailable applications
    • Sending a TCP RST when TCP session entry ages out
    • Disabling TCP RST message when a real server goes down during an open session
    • No TCP RST response to non-SYN first packet of a TCP flow
    • Decrement counters in deletion queue
    • Optimized fast-path SLB processing
    • Configuring TCP fast aging
    • Server opt-enable-route recalculation
    • Enabling use of the client MAC address
    • Enabling transparent VIP
    • Enabling SYN ACK threshold
    • Replacing the source MAC address of the packet
    • Cloning real servers
    • Configuring a host range
    • Unbinding all application ports from virtual servers
    • Identifying VIP port as TCP only or UDP only
    • Enabling fast aging for UDP sessions
    • Enabling normal UDP aging for DNS and RADIUS
    • Setting TCP and UDP ages for VIPs
    • Configuring session aging behavior
    • Configuring DNS CPU-based throttling
    • Configuring UDP DNS count connection
    • Dedicated next hop per VIP for reverse SLB traffic
    • VIP route health injection
    • VIP RHI with dangling subnets
    • VIP RHI and high availability topologies
  • Application-specific SLB considerations
    • RTSP server load balancing
    • Deletion of UDP data session along with TCP control session for RTSP
    • TFTP load balancing
  • Show and debug commands
  • Displaying the BP distribution
• Stateless Server Load Balancing
  • Overview
  • Stateless TCP and UDP ports
    • How the Brocade Virtual ADX selects a real server for a stateless port
    • Configuring the stateless hash table size
    • Configuring a stateless application port
    • Fragmentation support in the stateless mode
• Health Checks
  • Health checks overview
  • Layer 3 health checks
    • Disabling Layer 3 health checks
    • Modifying the ping interval and ping retries
    • Setting the Periodic ARP Interval
  • Layer 4 health checks
    • Performing Layer 4 UDP keepalive health checks for the DNS port
  • Layer 7 health checks
    • Application ports
    • DNS
    • FTP
    • HTTP (status code)
    • HTTP (content verification)
    • Scripted (content verification for unknown ports)
    • IMAP4
    • LDAP
    • MMS
    • NNTP
    • PNM
    • POP3
    • RADIUS
    • RTSP
    • SMTP
    • SSL (complete)
    • SSL (simple)
    • Telnet
    • Port-specific settings for Layer 7 health checks
    • Layer 7 health check for an unknown port
  • Server and application port states
    • Server states
    • Application port states
  • Port profiles and attributes
    • Configuring a port profile
    • Configuring port profile attributes
  • Port policy
    • Port policies
    • Configuring a port policy
    • Binding the policy
    • Configuring a keepalive interval under a port policy
    • Health check policy for VIP port
  • Element health checks
    • Introduction
    • Configuring element-action expressions
    • Attaching a health-check policy to an application port on a server
    • Displaying health-check policies and their status
    • Displaying health-check policy statistics
    • Clearing health-check policy statistics
  • Health check with content match
    • Content match for HTTP
    • Content match for non-HTTP ports
    • Binary scripted health check
  • Boolean health checks
    • Boolean health-check policies
    • Health-check policy
    • Configuring boolean health check
  • Miscellaneous health check settings
    • Basing an alias port’s health on the health of its master port
    • Basing a port’s health on the health of another port
    • Reassign threshold
    • Globally disabling all health-check policies
    • Health checking for real servers in other subnets
    • Best path to a remote server
    • Handling traffic initiated from remote server
    • Health check of multiple websites on the same real server
    • Minimum healthy real servers under VIP port
    • Server port bring-up enhancement
    • Slow-start mechanism
    • FIN close for server health check
    • Health-check state
    • Enhanced server bringup
    • Track-Port support under real server for health checks
  • Sample show commands
    • Syslog for health status change
    • Session table parameters
    • Configuring TCP age
    • Configuring UDP age
    • Setting the clock scale
    • Syslog for session table entries
• Layer 7 Content Switching
  • Overview
  • Layer 7 content switching
    • Enabling CSW
    • Specifying scan depth
    • Enabling CSW load balance
    • CSW rules
    • CSW policies
    • Explanation of offsets
  • Sample configurations
    • CSW topology
    • Request delete configuration
  • Layer 7 content switching on HTTP response
    • Response header rewrite
    • Configuring HTTP header response rewrite
  • Using multiple cookies under virtual server port
    • Configuring multiple unique cookie insertion with cookie path
    • Specifications
  • Server passive cookie persistence
    • Configuring server passive cookie persistence
    • Example
  • Server and server port persistence with CSW nested rules
    • Configuring server and server port persistence with CSW nested rules
    • Configuring persist on the nested rule
    • Configuring persist on the real port
  • Displaying CSW information
    • Displaying the statistics for all HTTP content rewrites
    • Displaying Layer 7 switching statistics
  • Usage guidelines
    • Support for large GET requests
  • Miscellaneous Layer 7 switching configurations
    • Cleaning up all hash buckets
    • Layer 7 content buffering options
    • HTTP 1.1 support
    • Layer 7 CSW pseudo stack client-side retransmission handling
    • Layer 7 CSW pseudo stack server-side TCP packet out-of-sequence handling
  • Setting up SSL session ID switching
    • Configuration Example
  • Command reference
    • rewrite request-delete
    • rewrite request-insert
    • rewrite request-replace
• Hot Standby High Availability
  • Overview
    • Hot Standby HA protocol operations
  • Hot Standby HA configuration modes
    • Non-Promiscuous mode with default non-shared MAC option
    • Promiscuous mode with shared MAC option
  • Hot Standby HA Configuration Considerations
  • Configuring standard Hot Standby HA
  • Additional configuration variations
    • VIP and servers in different subnets
    • Source-NAT in Hot Standby
  • Configuring additional HA parameters
    • Configuring a backup group ID
    • Setting the backup timer
    • Enabling backup preference
    • Configuring failover based on active VIP count
    • Configuring failover based on the number of active virtual ports
    • Delayed failover
    • Configuring a Brocade Virtual ADX to remain in standby state
  • Configuring the forwarding of synchronizing messages
  • Configuring synchronization with HA
  • Hot-standby HA with routing protocols
    • Tie state of virtual link and HA physical link using health checks
• SIP Server Load Balancing
  • SIP overview
    • SIP packet flow
    • SIP client registration
    • SIP terminology
    • SIP message headers
  • SIP SLB and call persistence
    • SIP and call persistence specifications
    • Sample deployment topologies
    • SIP server health monitoring
  • Configuring SIP SLB
    • SIP SLB over UDP (Stateless SLB mode)
    • SIP SLB over UDP (stateful SLB mode)
    • Debug commands
  • SIP SLB command reference
    • Real server configuration mode
    • Virtual server configuration mode
    • Sample configuration
• IPv6 Support for Server Load Balancing
  • Overview
  • Defining IPv6 real servers
  • Defining IPv6 virtual servers
  • Defining port characteristics using port profile
  • Defining IP routes
  • VLAN and tagging definitions
  • Miscellaneous
  • Saving the configuration
  • IPv6 configuration example
• Server-specific Loopback Configurations
  • Overview
  • Solaris
  • Linux
  • Windows NT
    • Manual installation
    • Unattended installation
    • Deleting the unwanted routes
• SLB Show and Debug Commands
  • Using show source-ipsource ip [real-server ip | all]
  • Using the show session all command
  • Using the source-ip-debug command
  • Using the debug filter command
    • Using the packet capture utility
    • "debug filter" example
    • Saving captured packets
    • Helpful tips
  • Displaying global Layer 4 Brocade Virtual ADX configuration
  • Displaying real server information and statistics
    • Using the show server real command
    • Using the show server real detail command
    • Displaying real server keepalive statistics
    • Displaying real server connections per second statistics
  • Displaying virtual server information and statistics
  • Displaying a list of failed servers
  • Displaying a list of failed ports
  • Displaying port-binding information
    • Using the “show server bind” command
    • Using the “show server session” command
  • Displaying packet traffic statistics
  • Displaying configuration information
    • Showing aggregate health of tracked ports
    • Auto repeat of show command output
    • Clearing all session table entries
    • Clearing the connections counter
• Acknowledgements
  • OpenSSL license
  • Cryptographic software
  • Original SSLeay License