IIS 7.0 - Application Request Routing (ARR)

ARR and smooth streaming

juan@ — Thu, 19 Nov 2009 22:08:17 GMT

Hi there, I had configured a small ARR implementation with the following configuration: 1 ARR and 2 webservers doing round robin balancing.

Everything worked well (check it at http://190.210.77.135/wordpress) but when I tried to use ARR in order to load balancing and caching a smooth streaming video the ARR server is sending a 404 error (page not found) when trying to access to the smooth streaming services url

ARR webpage: http://190.210.77.135/smooth-streaming/videos/programa%2010/ddd2009_prog10.ism/Manifest

website1 http://190.210.77.136/smooth-streaming/videos/programa%2010/ddd2009_prog10.ism/Manifest

website2 http://190.210.77.137/smooth-streaming/videos/programa%2010/ddd2009_prog10.ism/Manifest

Somebody could help me on that?

best

Juan

Intercepting ARR client affinity cookie

Mark S. Rasmussen — Wed, 18 Nov 2009 13:20:49 GMT

Hi,

We've got a Flash file upload feature in our application, using swfupload. There's a bug in the Flash player that causes it to always send the IE cookies, no matter the current browser - http://swfupload.org/forum/generaldiscussion/383.

This has caused us issues in the past since our session / forms authentication cookies were suddenly gone / errant if the user used Chrome/Firefox. I've previously fixed this issue by sending the cookie contents in the QueryString and then setting the cookie values in Application_BeginRequest so they have their correct values before ASP.NET wires up the session and authentcation.

I've run into a new variant of this bug, since we're now load balancing our app across three content servers using ARR. The previous fix still works, but the issue also affects the ARR client affinity cookie. Basically the user will be assigned to SERVER1 while browing in Firefox, but when the upload is made the client affinity cookie from IE will be sent, or a new will be assigned if the user has no client affinity cookie in IE. As a result, the user will receive the upload formula from SERVER1 but SERVER1-3 may receive the post - and that server has no knowledge of the user session.

I'm thinking of sending the ARR cookie value in the querystring as well. Then I'd implement an HttpModule that read the querystring value and set the cookie value in Application_BeginRequest. By installing this HttpModule on the IIS ARR load balancer and ordering it about the RequestRouting module, my theory is I can manipulate the cookie before ARR reads it. I've done some testing without luck, but I've not exhaustively tested it yet.

Any suggestions / comments on how to manipulate the ARR client affinity cookie before ARR reads it and redirects the request?

Thanks,
Mark S. Rasmussen

Unable To Read Perfmon Counter Application Request Routing Server from .NET

Shiva.Renganathan — Wed, 11 Nov 2009 11:10:36 GMT

Hi,

I have installed the ARR 2 RTW and try to Invoke the "

Application Request Routing Server" performance Counter from .NET.. i Getting Error as Category Not Exists..

PerformanceCounter Request = new PerformanceCounter("Application Request Routing Server", "Farm1\\10.237.214.249", "Current Requests",machineName);

I was running the above code in Windows 2008...

PerformanceCounterCategory.GetCategories();

is Not Listing Application Request Routing Server Category...

ARR Helper Utility

JAltrichter — Wed, 18 Nov 2009 21:54:21 GMT

We have been using Anil Ruia's ARR Helper utility for a few months with no problems.
(http://blogs.iis.net/anilr/archive/2009/03/03/client-ip-not-logged-on-content-server-when-using-arr.aspx) It solved some annoying issues with response content confusion between HTTP and HTTPS due to SSL offload at the ARR.

My only complaint is that the address of the ARR that forwarded the message to the content node is lost.

Do you have any recomended guidance for preserving the ARR IP address on the content node IIS logs, such as an X-Forwarded-From? Alternately is their some easy way to determine the ARR server from the ARR_LOG_ID?

Thanks in advance,

Jim

ARR v2 Proxy Timeout Server vs. Server Farm

JAltrichter — Wed, 18 Nov 2009 22:13:45 GMT

I am curious as to a difference in the default Time-out settings for Server based proxy (120 seconds) vs. Server Farm based proxy (30 seconds). I know the value can be changed, I am just curious if there is reason for this difference?

Thanks for any replies,

Jim

Windows Integrated Authentication Through ARR

deshazer — Mon, 16 Nov 2009 20:59:26 GMT

I have a basic load balancing scenario using ARR with two server farms defined. The ARR host, its default virtual web site and the server farm members (separate hardware) are all setup with Windows Integrated Authentication enabled and anonymous disabled. Each element works independently but when a route a request through ARR to the server farm, it appears I lose my identity and receive a 401 from the downstream hosts. The ARR host computer object has been set to allow trusted delegation and the HTTP service class SPN set on it as well.

Anyone sucessfully setup ARR with Windows Integrated Authentication ?

proper ARR setup needed

ch3nyong — Mon, 16 Nov 2009 10:28:53 GMT

Hi all,

To start with, this is the setup that I have

- two servers (WEB01 and APP01, both running on Win Server 2008

- IIS 7 and ARR 2 are installed on WEB01

- IIS 7 is installed on APP01

- two server farms setup on WEB01 (stage.abc.com, prod.abc.com)

- two websites setup on APP01 (stage.abc.com, prod.abc.com)

Everything was fine when I test with a simple info.html that returns respective website indicator

However, I am having problem when I start to set up stage.abc.com, where it returns me 502 error message

Digging into the tacing log files, i found the following:

<EventData>
<Data Name="ContextId">{00000000-0000-0000-3BD5-0180010000F6}</Data>
<Data Name="OldUrl">/favicon.ico</Data>
<Data Name="NewUrl">http://prod.abc.com/favicon.ico</Data>
</EventData>

Note that in this case i'm requesting stage.abc.com, and the internal requests are changed to prod.abc.com (which was not setup yet)

I believe there's something that I missed out (pertaining HTTP request headers? I dono, sorry for not having sufficient knowledge in IIS and servers!)

Can anyone guide me here? Thanks!!

Response.Redirect Issues

philsidari — Fri, 13 Nov 2009 22:36:20 GMT

We have been successfully using ARR in our dev and test environments for some time and have had great success. There is one key difference in our production environment that is causing some issues.

We have several instances of the app running in vdirs on the same web servers. In dev and test environments the ARR URL has the same path as the vdir name on the web servers but in prod they are different.

Test Env:

=======================

ARR URL:

http://proxy/App-Inst1/

http://proxy/App-Inst2/

Web URL:

http://websvr/App-Inst1/

http://websvr/App-Inst2/

Prod Env:

=======================

ARR URL:

http://proxy.us/App/

http://proxy.euro/App/

Web URL:

http://websvr/App-US/

http://websvr/App-EURO/

So some of the requests pass through ARR correctly with our rules, but when we do a Response.Redirect to a relative path using any of the following techniques it add the VDIR name to the requested path and ARR then maps this request incorrectly:

Response.Redirect("../Menu.aspx")

Response.Redirect("~/Menu.aspx")

Resonse.Redirect(this.ResolveUrl("~/Menu.aspx"))

Resonse.Redirect(this.ResolveUrl("../Menu.aspx"))

So, what is the best practice for handling this issue. Note that I need the website code to work when accessed both directly and via ARR.

Thanks.

- Phil

Server Affinity

DubOhio — Thu, 12 Nov 2009 14:05:58 GMT

Ok after a long battle with getting ARR up and running I finally have it in production.

I have 2 servers in my server farm. Server1 and Server2

it seem as though my websits arent binding to the right server. is there a way to force www.server1.com to server1, and www.server2.com to server2? Sometimes all the sites will work and sometime www.server1.com will point to server2. How can I force it to the same server.

All i'm trying to do is host multiple web servers behind 1 IP address. Why is this so hard?

Custom ARR LB algorithm logic for Querystring rule

jessev — Fri, 06 Nov 2009 23:48:12 GMT

Hello; I have a website which has two request types per view:

1) Is an aspx page with a querystring.

2) Is a "file" which has a filename of the querystring from (1) base-64 encoded. This "file" is rewritten to page.aspx?query=<filename> by the LB machines.

A client will request (1), then (2). The problem is that both (1) and (2) need to be routed to the same application server.

The reasons for this setup are necessary, but difficult to explain, sorry. Given these requirements, we tried using IP-based affinity (our client doesn't respect cookie affinity). This worked until we were behind a CDN. Now the client IP is hidden, there are no client-based request headers, and so all requests are hitting the same server.

Ideally, I'd like to be able to hash both (1) and (2) to the same randomly chosen application server. This seems like it would require some base64 logic in the Querystring rule, but maybe not.

Any thoughts? Thanks!

Shared Hosting - Help

DubOhio — Tue, 10 Nov 2009 19:34:34 GMT

I have one IIS7 server that faces the web. I host 6 physical servers internally with multiple sites on each server. All I want to do is create a server farm add all my servers so that externally when one of my domains is requested it will go to the right server.It seems that I have followed all the direction I can, and I still don’t get it to work. Whenever I do a health test it fails, and says “Fail – unable to connect to the server. The HTTP status code is 0 and error code is 8007000D.” That will show in the “Verify URL Test” on every server in the farm. Someone has to have a video of setting this up and it working somewhere.

Any help would be greatly appreciated! I’m at the end of my rope.

ARR v2 RC App Pool Max Worker Process Count

JAltrichter — Sun, 01 Nov 2009 14:03:52 GMT

I have followed the installation guidance for ARR v2 RC (below) but wondered if there is a scale out scenario under which ARR benifits from having a Maximum Worker Processes > 1?

Jim

http://learn.iis.net/page.aspx/574/install-application-request-routing-version-2/

Remove and Add Content Server through APPCMD

Shiva.Renganathan — Fri, 30 Oct 2009 04:37:56 GMT

I tried adding new server's to the WebFarm by modifying the Applicationhost.Config file it works.

But is it possible to remove the server gracefully from the webfarm through APPCMD.

Script serverfarms

jofanon — Mon, 09 Nov 2009 17:58:11 GMT

Is it possible to script taking servers offline in a serverfarm?

IIS7 not action ServerSupportFunction

minho kim — Mon, 09 Nov 2009 17:04:06 GMT

IIS7, Windows server 2008 64bit, ISAPI filter(VC 2005)

hello. help me. i've got problem.

I want to run my ISAPI filter on IIS7, but now disable.

problem is following

example..

When connect to http://www.test.com, ServerSupportFunction is not action

But, connect to http://www.test.com/index.htm, ServerSupportFunction is action

'NotificationType' use it : SF_NOTIFY_PREPROC_HEADERS

when Reqeust Header arrived i think, at SF_NOTIFY_PREPROC_HEADERS first processing!

but, connect to ROOT of WebServer(http://www.test.com)

SF_NOTIFY_PREPROC_HEADERS event is not first processing.

( I'm not use SF_NOTIFY_READ_RAW_DATA)

sample code is,,

switch (NotificationType)

case SF_NOTIFY_PREPROC_HEADERS :
  {

string url("http://www.google.com");

   string headers("Location: ");
   headers += url.c_str();
   headers += "\r\n";

   headers += "Connection: close\r\n";
   headers += "Content-type: text/html\r\n";

   if(!pfc->ServerSupportFunction(pfc, SF_REQ_SEND_RESPONSE_HEADER, "302 test ridirection", (unsigned long)(headers.c_str()), 0))
   {
    logger->error("redirect() Redirection Failed");
   }

   logger->debug("test2222");
   return SF_STATUS_REQ_NEXT_NOTIFICATION;
   break;

}

why is not first event with SF_NOTIFY_PREPROC_HEADERS??

why IIS7 Server is hook(redirection default page) earlier than SF_NOTIFY_PREPROC_HEADERS??

Microsoft Application Request Routing Version 2 for IIS7.0 on Vista/Windows 2008 and IIS7.5 on Windows7/Windows 2008 R2 has been released.

don.raman — Mon, 09 Nov 2009 16:35:29 GMT

This is the official release for ARR Version 2 for IIS7 and it is now fully supported by Microsoft Support.

Overview:

Microsoft Application Request Routing (ARR) for IIS 7.0 is a proxy-based routing module that forwards HTTP requests to application servers based on HTTP headers, server variables, and load balance algorithms.

ARR Version 2 is an incremental release that includes all of the features from Version 1, and adds support for disk-based cache. More specifically, ARR Version 2 can be used to:

Enhance ARR Version 1 scenarios with disk cache.
Use ARR as a cache proxy as a cache node in a CDN/ECN environment.

Use ARR as an edge/child cache node.
Use ARR as a parent cache node.

Download ARRv2 RTW from:
• Microsoft Application Request Routing Version 2 RTW for IIS7.0 on Vista/Windows 2008 and IIS7.5 on Windows7/Windows 2008 R2 (x86) here.
• Microsoft Application Request Routing Version 2 RTW for IIS7.0 on Vista/Windows 2008 and IIS7.5 on Windows7/Windows 2008 R2 (x64) here.What’s new in RTW:

RSCA runtime statistics as performance counters. Users of Application Request Routing will now be able to monitor runtime statistics using performance counters.
Allow option to cache query string. A new option has been added to query string support which will do the caching keeping query string in mind.
Ability to run scavenger as a standalone tool.
Improved documentation at Microsoft Technet site.

Documentation:

Support:

The support is now provided by Microsoft Support.
The existing ARR forum will continue to exist and the product team will continue to moderate the forum.

Reverse Proxy

cina73 — Sun, 25 Oct 2009 12:57:24 GMT

Hi!

I followed the guide to set up reverse proxy. In ARR settings I checked "Use URL Rewrite to inspect..." checkbox and when I press apply IIS complains of the "Reverse proxy:" field cannot be left blank. If I enter the name of the proxied server everything works fine. If I enter something other nothing works.

I cannot found a subtale documentation of this field. What is this exactly for and what kind of data can it accept (semicolon separated host names, ip range, etc)?

What is the difference between the "Url rewrite..." accessible within ARR "Server Proxy settings... " and the URL rewrite of the Site itself. Where should I define my Regexp strings?

Thank you.

Cina

Can requests appear to come from the original client?

Jinkinz — Mon, 02 Feb 2009 22:14:25 GMT

In the proxy settings of a server farm there is the option to preserve the client IP in a custom header. My question is can requests appear to come from the original client? The reason I would like this functionality is because we have log parsers that have already been set up to run reports on each server and IP address but the IP addresses for all the requests are the ARR server's IP address, not the client's. In the CTP1 version of the feature, this was possible. See the following screenshot: http://images.ddti.net/capture.jpg.

ARR v2 RC - NETSH HTTP shows extra cache entries for WebResource.axd

JAltrichter — Fri, 30 Oct 2009 14:41:51 GMT

In examining the HTTP kernel cache on my ARR machines, I have been spotting extra entries for URI's that I would not expect to be cached. Further, the Cache Entry TTL for these cache entries is very large (> 31500000).

Let me provide some background. Due to issues w/ 3rd party controls when we first tested ARR we engineered our application to segregate cacheable content from data. So we have one farm that purely caches content (with a 99% cache hit rate) and a second that serves dynamic data without caching.

I am seeing HTTP cache entries for resources on the non-cached server farm such as "WebResource.axd" with these unusual long TTL's. I am concened that a users might inadvertently received cached data from a different user's session. However we are not seeing that happen in any of testing. Can you explain what is going on with these cache entries?

At the Server Farm level, my cache setting on the non-cached server farm are as follows:

Memory cache duration = 0
Enable Disk Cache = Off
Enable Request Consolidation = Off
Query String Support = No Caching

Thanks for any replies

Jim

Problem with ARR when the content server's return 302

Shiva.Renganathan — Fri, 23 Oct 2009 12:10:24 GMT

I am using the ARR Extension. I am currently facing a big issue.... could you be able to help..

My problem is i am are having a windows server 2008 machine with ARR2 installed and i am trying to expose some of the applications running in different servers under one roof using rewrite rules..

say my windows 2008 machine is running a website like www.repository.com

and i want to expose all the applications as www.repository.com/test/projects/*

where * is my application name running across different servers

i have created a server farm for each applications and written a rule each one of them in my Projects virtual directory.

Everything seems to be working fine... Except one small issue

Consider my Application name as sample1

And i am requesting it as www.repository.com/test/projects/sample1

I am getting the 302 response as sample1/

this response is getting routed as www.repository.com/test/sample1/

instead of www.repository.com/test/projects/sample1/

and returning 404 error...

but if i give www.repository.com/test/projects/sample1/ it is working..

Am i missing somthing... Please Help..

ARR v2 RC Monitoring and Management Form Failed Request Stats

JAltrichter — Thu, 15 Oct 2009 03:07:28 GMT

I would like to clarify the data for the Failed Requests stat on the Monitoring and Management for Server Farms. This stat is not currently documented on TechNet (http://technet.microsoft.com/en-us/library/dd443506(WS.10).aspx)

I am assuming a failed request that is one that is passed to a node in the farm that does not return back to the ARR. I am further guessing the primary reasons would be: node dies, network fails, the operator fails to gracefully take a node offline, etc.

Jim

Problems getting loadbalancing working with ARR

kriks — Thu, 15 Oct 2009 07:12:54 GMT

Hi,

My first attempt to create a server farm hasnt went so well.

Goal is to get a loadbalanced site with arr in two contentservers.

First quick overview of my deployment

ARR server (no sites, plain IIS7 + ARR) hosting 1 farm with name http://site.com

IIS1 server (1 site, works - under binding http://site1.com, also has a binding http://site.com)

IIS2 server (1 site, works - under binding http://site2.com, also has a binding http://site.com)

URL rewrite rule is default one, created with the server farm

address http://site.com is forwarded to ARR-s IP.

No traffic is reaching the content servers, http://site.com shows "page cannot be displayed".

when i do a health check on farm, the url http://site.com/test.htm gets "Pass" status from both contentservers, but in monitoring and managment tab, both contentservers are in "unknown" state.

What im doing wrong?

Thanks,

Kriks

how to check IIS7 Throughput

newkgb — Mon, 19 Oct 2009 08:07:44 GMT

i know , check it in Apache's mod_status and lighttpd's mod_status .

how to check IIS7 Throughput ? please tell me

Set Farm Status Programmatically

nik220 — Fri, 16 Oct 2009 21:47:00 GMT

Hello,

Is there any way to Set a server farm's status programmatically using PowerShell? It is fairly easy to Get a farm's Status, but I cannot seem to find the Method name to Set a farm online or offline. An Example snipet would be nice.

Thank You

ARR redirecting https://site1/site2/* -> https://site2/* or http://site2/*

DrSpook — Fri, 31 Jul 2009 14:18:21 GMT

I have a requiremet to redirect https://site1/site2/* to either http or https://site2/* (where site2 contains sensitive info it's https, otherwise http).

when redirecting to http://site2/* I get prompted "do you wish to see only secure content?". replying Yes then much of the content is not displayed site2 pages.

when redirecting to https://site2/* I get "502 - Web server received an invalid response while acting as a gateway or proxy server."

Why am i doing all this? I want to redirect requests for some of our internal websites via our MOSS2k7 intranet site so that I only need to publish the intranet site out through ISA Server. Internal and external users need to be able to click on a "meeting diary" type link on the intranet & be directed transparently to http://meetingdiary/* etc.

if there's a better way to achive this then please let me know before i pull more hair out...

Cheers,
DrS