I have some doubts about the A10 GSLB configuration,

huzhiqi

Good day,dear all.

We encountered some difficulties in configuring GSLB.Some configurations are as follows:

gslb zone sgss.com.cn 

 policy policy-test 

 service 80 www 

  policy policy-test 

  dns-a-record www-ctc static admin-ip 100 

  dns-a-record www-ctcv6 static admin-ip 100 

  dns-a-record www-cuc static admin-ip 100 

 service 80 sso 

  policy policy-test 

  dns-a-record sso-ctu static admin-ip 100

As you can see,we have bound "www" and "sso" to "sgss.com.cn", and they all use service 80.

 The problem is that A10 can parse "www.sgss.com.cn", but it can't parse "sso.sgss.com.cn".But after we change the "sso" service to 81, we can resolve the domain name normally.

Here is my questions:

1.Is the SSO domain name inaccessible because it uses the same service port as www?

2.I don't quite understand the function of the command like "service 80 www",what does it mean?

Thanks！🙂

mmartinez@a10networks.com

Hello @huzhiqi ,

The status of these services is related to the status of GSLB Service-IP ports you should have defined in the configuration like this:

gslb service-ip VIP1_DC1 192.168.11.51 

 port 80 tcp 

!

Then the status of these GSLB Service-IP ports is related to the health monitors attached to them or to the SLB Virtual Server Port from the same configuration like this:

slb virtual-server VIP1_DC1 192.168.11.51 

 port 80 http 

  source-nat auto 

  service-group SG1_DC1 

!

So basically, for another port to be usable as Service in your GSLB Zone you need to define it as GSLB Service-IP port first.

Best Regards !