-
JSESSIONID - Persistance Issue
Hello, I have the following JSESSIONID aflex ready and applied to manage the JSESSIONID which is provided by the 2 servers. AFLEX SCRIPT:when HTTP_REQUEST {# Check if JSESSIONID existsif { [HTTP::cookie exists "JSESSIONID"] } {# JSESSIONID found in the request# we capture the first 32 charactersset jsess_id [HTTP::cookie…
-
VRF
Is it possible to configure vrfs in A10 thunders? If so, could you please provide example
-
ADFS Source IP and Query String
Is there a way to ensure you can keep this information in the header for ADFS HTTP requests? It seems to be stripped out of the connection requests I was told via a TCP template for proxy header? Specifically the Query String, user agent, and ports information Request Details: Date And Time: 2018-05-10 08:27:17 Client IP:…
-
Vthunder ethernet port down
Hi, I hope you can help me with this issuse. I am configuring a vthunder 4.1.1 on VMware 5.5. The OVF deploy was successfull but the ethernet ports are in a down state (only the eth ports, the mgmt port works whitout problems). At the VMware layer, the network adapters are "connected at power on", its driver is VMXNET3 for…
-
CGNAT remove a NAT pool problem
I got a trouble with removal a NAT pool in CGNAT appliance, No cgnv6 nat pool PX1_19707024 112.197.70.0 112.197.70.255 netmask /24 vrid 1 max-users-per-ip 64 NAT pool is currently in use. Please clear All sessions before removing the NAT pool. I cleared all sessions but it did not work. show cgnv6 nat pool PX1_19707024, I…
-
Cacti Template for ADC
Hi! Any link to download the template for Cacti? Thanks!
-
slb.aflex.upload not working
Tried various ways with trying to call the api endpoint direct as well as Axios but I cannot update an Aflex rule programatically. I always get a JSON error ({"code": 1174, "msg": "Invalid JSON document."}}), c:/temp/1.file below is a basic iRule for which I've tried to save also in various encodings, ASCII, UTF-8 etc:…
-
How to preserve the original source client IP using X-Forwarded-For or aFlex?
Hi, I have done doing the aFlex or X-forwarded-for configurations for A10, but still the SNAT IP of ax1030 seen in the Bluecoat Proxy User IP list. Is configurations also needed on bluecoat to preserve the original source IP? Btw, here's my configuration on my A10 SLB !Current configuration: 6155 bytes !Configuration last…
-
Maintaining client Source ip using Source nat
Hi, Please bare with me i am new in aflex and need to know if it is possible to maintain the source ip address of the client in Proxy SG bluecoat using sourcenat. Any feedback is highly appreciated. Thanks!
-
A10 configuration Guide
Hello, I'm new working with ADC and logically also with A10 Network products. I'm having a hard work trying to understand what is configured and how it works. I just get four of them, no one here knows how it's work or what is configured... I have some documentation but it's not helpfull, and I have a lot of question. So,…
-
Browser reply "<hostname> didn't not send any data"
When user try to browse the url, it replied "hostname didn't not send any data" Anybody faced this before? User ---> A10 ---> 3 Physical servers
-
Deleting a Partition
Hello All, I am having an issue deleting a partition. When attempting to delete the partition from the CLI, I get the below message. I have cleared all of the sessions per the message but I am still unable to delete the partition. Also, when attempting to delete the Partition from the GUI, I get a "Failed to delete…
-
JSESSIONID Persistence
Hi all. We have experiencing issues with the VIP with cookie persistence. Actual config: port 80 http no def-selection-if-pref-failed template http aaurl_switch template persist cookie Template_PERSIST_Cookie slb template persist cookie Template_PERSIST_Cookie expire 0 match-type service-group The JBOSS admins comment that…
-
reverse proxy skype for business AX1030
Hi, I'm hoping someone can direct me to a guide or blog that can help me setup a reverse proxy instance for our on-prem Skype for Business setup. I found an older guide for the AX series, but it's for lync running on windows server 2008. I recently upgraded to Skype4Bus 2015 & it's running on windows server 2012 STD…
-
Centralized web server log on AX
Posted by ddesmidt A customer just asked me today an interesting question: Instead of looking at the web logs individually on each server, why not using the AX to create the web logs and send these to an external centralized syslog server. Note: They used the w3c format, but actually as you know aFleX is pretty flexible…
-
SSL offloading with SharePoint 2016 farm
We have been testing a new farm and the A-10 Thunder Series load balancer and while it seems to be working for the most part we do have problems with some pages not drawing: they don't complete the load. I have noticed browser session in debug shows SEC7111: HTTPS security is compromised by http://... We have no Alternate…
-
MIB Access for monitoring software
Hello, I'm a member of the Prometheus[0] monitoring project. We provide support for monitoring a wide variety of systems. In order to support monitoring of devices that support SNMP, we have to create a config file to translate SNMP OIDs into Prometheus metrics. We have a tool that automatically generates these configs…
-
GSLB between two different HW/SW Models
Hello all, Is it possible to run GSLb between two different HW? and two different ACOS ?
-
Way to accelerate an internet application using A10 ADC
Hi All, Im looking for a way to optimize an application that's on internet by having a local ADC to "intercept" the traffics from client , probably through client amending their host FQDN file pointing to A10 ADC instead of directly hitting www.example.com. Is that possible ? Attached with high level concept. Highly likely…
-
Configure Auto-Translate Port
Hi ! i try to create a Range for Auto Port translation for Oracle Web App (port 7777). I dont see this option! :/ I have ACOS 2.7.2-P10(build: 86) - TH1030S " To configure Auto-Translate Port: 1. Select Confi g Mode > Service > SLB 2. On the menu bar, select Global > Auto Translation 3. Click on one of the range names. The…
-
Load Balance Link with Health Monitor Compound method
I want to create health monitor compound (and,or,not)for checking MPLS link for all site 1 if site2-link1 has down all site use link2 only. I create health-monitor with(sub site1-link1 sub site2-link1 sub site3-link1 and and and) and it work. 2 if site2 down two link site1 and site3 use 2 link same normal. 3 if site2 down…
-
URL access restriction
Hi all, I'm working on a vThunder 2.7.2-P10 that is publicing many URL form a single virtual IP. Now I need to deny access from some IPs only for some URLs (not for all). For example I have 3 sites: site1.example.com site2.example.com site3.example.com And some IPs let's say: 1.2.3.4 1.2.3.5 1.2.3.6 I need those IPs can…
-
Configuring load balancing down to app. pool level
Hello, BACKGROUND: Our organization is using the A10 Thunder 3030S to load balance two Windows VM Servers (on the same VM host) that are hosting an IIS Web App. The load balancer is using a round robin algorithm with sticky sessions enabled (Source IP Persistence) between the client and server. ISSUE: Using the round robin…
-
Service IP health status for remote GSLB slave
Hi - This is probably a stupid question, but I have a configuration of master > slave for our GSLB configuration. We do both GSLB and SLB on each device (different datacenters) as most people do. We do not do any health monitoring at the GSLB level specifically. We want to rely on the up/down status of the VIP itself. Here…
-
Ansible and A10 Networks
If you are operating an infrastructure with Ansible and are looking for A10 Networks modules, have a look at this Ansible Fork. It has not been scheduled to be included as it needs some airtime. You can try this out on ACOS 2.7.1 and higher as it needs aXAPI 2.1. When you find anything that is not working please let me…
-
Link Load Balance A10 Thunder
Hi Everyone! I would like to know, what is the best form to make load balance on my A10 if i have 3 ISP links. Example LOCAL NET ---> Inside -- A10 --Outside ----3 ISP links i understand that is with a Wildcard VS, but i would like be sure of that. Please if you can help me.
-
outbound nat based on IP
I'm trying to configure LLB for ISP links and having some trouble with the outbound NAT. Basically when it goes out ISP1 it should default to NAT pool ISP_C for most users, but when it comes from one range (using individual IP in my testing) it needs to use NAT pool ISP_CTHSE Under my 0.0.0.0 VIP this aflex works: when…
-
axdebug via axapi
Hi all, Does anybody know how to start/stop axdebug capture via axapi in ACOS 4.X? (Or if it's possible in the first place?) The reference manual only told me how to export capture files. I'm trying to automate whole our testing process and I'd like to know if I could do it all with axapi only (for now, I've managed to do…
-
VCS UNSYNC
Hi all. how can we force the synchronization. vcs reload not work Image attached. Thanks
-
GSLB Always returns all DNS records in service
Hi - Old F5 customer here making the switch over to A10 and I am finding either GSLB does not behave as I am accustomed to or I don't know what I am doing. Probably the latter. I have set up GSLB using sub zone delegation whereby we have a delegated subzone that forwards requests to my A10 devices. For example: CNAME…