Radware Alteon User Manual

Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
Document ID: RDWR-ALOS-V2900_AG1302 377
Persistence for Filter Redirection
The persistence feature ensures that all connections from a specific client session reach the same
real server. Alteon provides the following options for persistence when using filter redirection:
• Layer 3/4 persistence—The hash is based on Layer 3/4 session parameters. You can choose
from a number of options for the hash input (also called tunable hash): source IP address,
destination IP address, both source and destination IP addresses, or source IP address and
source port.
• HTTP Layer 7 persistence—The hash is based on any HTTP header value.
• Persistence binding per filter—The /cfg/slb/filt <filter number>/adv/redir/pbind
command enables persistent binding for redirection. It is applicable when using redirect filters
for SLB instead of virtual services. When enabled, persistence is maintained across multiple
sessions from the same client (same source IP).
Persistence-based SLB enables the network administrator to configure the network to redirect
requests from a client to the same real server that initially handled the request. For example,
when a server has data associated with a specific user that is not dynamically shared with other
servers at the site.
Persistence binding per filter is similar to client IP-based persistence for virtual services, where
the cip, dip, rport, and dport values force sessions with values that match the filter to be
redirected to the same server in the group.
Notes
• When either Layer 3/4 or Layer 7 persistence is required, the group metric must be set to hash
or minmiss.
• HTTP Layer 7 persistence, when configured, overwrites the Layer 3/4 persistence setting.
• Persistence binding per filter cannot be enabled with Layer 7 content lookup (/cfg/slb/filt
<filter number>/adv/layer7/l7lkup) because pbind server selection uses Layer 3 and 4
criteria, while the l7lkup command can use Layer 7 SLB strings attached to the server.
• If Firewall Load Balancing (FWLB) is enabled, the FWLB filter which hashes on the source and
destination IP addresses overrides the tunable hash filter. For more information, see Firewall
Load Balancing, page 657.
To configure Layer 3/4 persistence (tunable hash) for filter redirection
1. Configure hashing based on source IP address:
Hashing on the 24-bit source IP address ensures that client requests access the same cache.
>> # /cfg/slb/filt 10/ena
(Enable the filter)
>> Filter 10 # action redir
(Specify the redirection action)
>> Filter 10 # proto tcp
(Specify the protocol)
>> Filter 10 # group 1
(Specify the group of real servers)
>> Filter 10 # rport 3128
(Specify the redirection port)
>> Filter 10 # vlan any
(Specify the VLAN)
>> Filter 10 # adv
(Select the Advanced Filter menu)
>> TCP advanced menu # thash sip
(Select source IP address for hashing)

Radware Alteon Specifications

General

Model	Alteon
Manufacturer	Radware
Layer	Layer 4-7
Type	Application Delivery Controller (ADC)
Features	Load balancing, SSL offloading, application acceleration, DDoS protection
Form Factor	Virtual Appliance