-
A10 Thunder URL match statistics
Hello, is there a way to have the match statistics for a URL? I will like to have the number of time a site is visited. I have this in real time and I have the logs, but going through the logs each time is too long and the real time information doesn't help. Any clue? Thanks in advance!
-
JSESSIONID - Persistance Issue
Hello, I have the following JSESSIONID aflex ready and applied to manage the JSESSIONID which is provided by the 2 servers. AFLEX SCRIPT:when HTTP_REQUEST {# Check if JSESSIONID existsif { [HTTP::cookie exists "JSESSIONID"] } {# JSESSIONID found in the request# we capture the first 32 charactersset jsess_id [HTTP::cookie…
-
VRF
Is it possible to configure vrfs in A10 thunders? If so, could you please provide example
-
ADFS Source IP and Query String
Is there a way to ensure you can keep this information in the header for ADFS HTTP requests? It seems to be stripped out of the connection requests I was told via a TCP template for proxy header? Specifically the Query String, user agent, and ports information Request Details: Date And Time: 2018-05-10 08:27:17 Client IP:…
-
Vthunder ethernet port down
Hi, I hope you can help me with this issuse. I am configuring a vthunder 4.1.1 on VMware 5.5. The OVF deploy was successfull but the ethernet ports are in a down state (only the eth ports, the mgmt port works whitout problems). At the VMware layer, the network adapters are "connected at power on", its driver is VMXNET3 for…
-
Cacti Template for ADC
Hi! Any link to download the template for Cacti? Thanks!
-
How to preserve the original source client IP using X-Forwarded-For or aFlex?
Hi, I have done doing the aFlex or X-forwarded-for configurations for A10, but still the SNAT IP of ax1030 seen in the Bluecoat Proxy User IP list. Is configurations also needed on bluecoat to preserve the original source IP? Btw, here's my configuration on my A10 SLB !Current configuration: 6155 bytes !Configuration last…
-
A10 configuration Guide
Hello, I'm new working with ADC and logically also with A10 Network products. I'm having a hard work trying to understand what is configured and how it works. I just get four of them, no one here knows how it's work or what is configured... I have some documentation but it's not helpfull, and I have a lot of question. So,…
-
Deleting a Partition
Hello All, I am having an issue deleting a partition. When attempting to delete the partition from the CLI, I get the below message. I have cleared all of the sessions per the message but I am still unable to delete the partition. Also, when attempting to delete the Partition from the GUI, I get a "Failed to delete…
-
JSESSIONID Persistence
Hi all. We have experiencing issues with the VIP with cookie persistence. Actual config: port 80 http no def-selection-if-pref-failed template http aaurl_switch template persist cookie Template_PERSIST_Cookie slb template persist cookie Template_PERSIST_Cookie expire 0 match-type service-group The JBOSS admins comment that…
-
reverse proxy skype for business AX1030
Hi, I'm hoping someone can direct me to a guide or blog that can help me setup a reverse proxy instance for our on-prem Skype for Business setup. I found an older guide for the AX series, but it's for lync running on windows server 2008. I recently upgraded to Skype4Bus 2015 & it's running on windows server 2012 STD…
-
SSL offloading with SharePoint 2016 farm
We have been testing a new farm and the A-10 Thunder Series load balancer and while it seems to be working for the most part we do have problems with some pages not drawing: they don't complete the load. I have noticed browser session in debug shows SEC7111: HTTPS security is compromised by http://... We have no Alternate…
-
MIB Access for monitoring software
Hello, I'm a member of the Prometheus[0] monitoring project. We provide support for monitoring a wide variety of systems. In order to support monitoring of devices that support SNMP, we have to create a config file to translate SNMP OIDs into Prometheus metrics. We have a tool that automatically generates these configs…
-
GSLB between two different HW/SW Models
Hello all, Is it possible to run GSLb between two different HW? and two different ACOS ?
-
Way to accelerate an internet application using A10 ADC
Hi All, Im looking for a way to optimize an application that's on internet by having a local ADC to "intercept" the traffics from client , probably through client amending their host FQDN file pointing to A10 ADC instead of directly hitting www.example.com. Is that possible ? Attached with high level concept. Highly likely…
-
Load Balance Link with Health Monitor Compound method
I want to create health monitor compound (and,or,not)for checking MPLS link for all site 1 if site2-link1 has down all site use link2 only. I create health-monitor with(sub site1-link1 sub site2-link1 sub site3-link1 and and and) and it work. 2 if site2 down two link site1 and site3 use 2 link same normal. 3 if site2 down…
-
Configuring load balancing down to app. pool level
Hello, BACKGROUND: Our organization is using the A10 Thunder 3030S to load balance two Windows VM Servers (on the same VM host) that are hosting an IIS Web App. The load balancer is using a round robin algorithm with sticky sessions enabled (Source IP Persistence) between the client and server. ISSUE: Using the round robin…
-
Service IP health status for remote GSLB slave
Hi - This is probably a stupid question, but I have a configuration of master > slave for our GSLB configuration. We do both GSLB and SLB on each device (different datacenters) as most people do. We do not do any health monitoring at the GSLB level specifically. We want to rely on the up/down status of the VIP itself. Here…
-
Link Load Balance A10 Thunder
Hi Everyone! I would like to know, what is the best form to make load balance on my A10 if i have 3 ISP links. Example LOCAL NET ---> Inside -- A10 --Outside ----3 ISP links i understand that is with a Wildcard VS, but i would like be sure of that. Please if you can help me.
-
GSLB Always returns all DNS records in service
Hi - Old F5 customer here making the switch over to A10 and I am finding either GSLB does not behave as I am accustomed to or I don't know what I am doing. Probably the latter. I have set up GSLB using sub zone delegation whereby we have a delegated subzone that forwards requests to my A10 devices. For example: CNAME…
-
GSLB Service Port
What is the significance of the GSLB service port? I have set up my service IP ports to match my SLB configuration. I understand that service IP ports are in place because they can be used for health checking. However, at the service level, it seems the port is kind of redundant and I have simply set up port 53 to match…
-
HTTP Template Redirect Rewrite
Hi all, I'm trying to do Rewrite with an HTTP template but I can't understand how it works. I configured correctly the template to balance on the service group inside the app swithcing part but I also want to redirect as shown below: When client request www.example.com I want rewrite to example.com/pwm So my rule on the…
-
doubt about snat log
Hi Everyone, Actually i have a doubt about what that's exactly means the following entry on my ACOS system: Dec 07 2017 14:26:28 Warning [ACOS] Obtaining Address/Port from NAT Pool Nat-137 failed due to Honor Misses Dec 07 2017 14:24:01 Warning [ACOS] Obtaining Address/Port from NAT Pool Nat-Uss-2 failed due to Honor…
-
axapi wildcard
Hi all, I've begun to use the axapi. Here's the question: First, I got the authentification token. Then I'm seeking the virtual servers inforation. curl -k GET https://1...7/axapi/v3/slb/virtual-server -H "Content-Type:application/json" -H "Authorization: A10 3a7ff8596db0249f25761b09548437" I'm after the oper status of…
-
HTTP not work properly
Hello, we use A10 Thunder for SSL Inspection as Explicit Proxy. If the users use Internet Explorer or FireFox and they are browse http content which normaly gets redirect to https like http://www.google.de the site doest not load and the browser shows a proxy timeout error. If the user browse URLs which only exists at http…
-
Can Thunder SSLi bypass inspection by OU ?
Can Thunder SSLi bypass or not inspection by OU ?
-
AX 1030 ADC - vBlade thread stopped
Got few warnings popup, what does these means? Significant? Warning [VCS] vBlade thread stopped Warning [VCS] vBlade thread: peer gone, reconnect (0) Warning [VCS] something wrong with the connection, try to reconnect Warning [VCS] vMaster(device 2) is gone:lack of heartbeats Warning [VCS] vBlade daemon SIGALRM is not…
-
Load balance LDAP servers
I'm trying to setup a simple VIP to load balance LDAP queries to a few internal ldap servers, however I can't create the servers because they already exist as AAM Authentication Servers. What's the best way to configure this? I require A10 to use Authentication servers for login portals for some VIPs, however I do also…
-
SLB Acl issues
I have an acl allowing access to SLB only from a specific hosts however i see that other IP's can also access the SLB. can you please check and let me know if there is anything else required from config perspective for locking down the access. access-list 10 permit host 1.1.1.1 access-list 10 permit host 2.2.2.2…
-
NHLD: Application options dedicated for specific link
Hi Team: Setup:Next Hop Load Distributor Just want to ask, Is it possible to dedicate a specific application to use a specific ISP link? For ex. Skype traffic, all of the traffic from a skype client will only use ISP 1 link. Is this possible? if yes, how can we implement this. Looking forward to hearing from you soon.…
