Search results matching tag 'Application Request Routing'

Windows Integrated Authentication Through ARR

deshazer — Mon, 16 Nov 2009 20:59:26 GMT

I have a basic load balancing scenario using ARR with two server farms defined. The ARR host, its default virtual web site and the server farm members (separate hardware) are all setup with Windows Integrated Authentication enabled and anonymous disabled. Each element works independently but when a route a request through ARR to the server farm, it appears I lose my identity and receive a 401 from the downstream hosts. The ARR host computer object has been set to allow trusted delegation and the HTTP service class SPN set on it as well.

Anyone sucessfully setup ARR with Windows Integrated Authentication ?

Re: AAR routing / cookie / query string values

serverintellect_BM — Sat, 26 Sep 2009 14:21:31 GMT

Hello Niclas!

I've been poking around and experimenting with the Application Request Routing release, and it looks like it can handle both of your requests without much hassle. The ARR can either handle URL Rewrite-based application routing rules (which includes support for checking and parsing cookies.) Alternatively, it can place a cookie on the client machine when the initial request is made to determine affinity, as well as determine hostnames. However, for the specific scenario you're describing, the URL Rewrite module functionality will likely provide the results you're looking for.

As for health checks, those can certainly do exactly what you're requesting. You can set a URL, test interval, timeout duration, acceptable status codes, and even a regex response match.

Reading on the ARR: http://learn.iis.net/page.aspx/486/http-load-balancing-using-application-request-routing/

Reading on URL Rewriting: http://learn.iis.net/page.aspx/460/using-url-rewrite-module/

Hope this helps out!

AAR routing / cookie / query string values

niro — Sat, 26 Sep 2009 11:17:04 GMT

Hi there, i have just "discovered" the AAR module and have some questions that im doubtful about.

I would like to migrate our current IIS 6 farm with NLB to the new IIS7 environment and are wondering if it is possible to achive the following. To note is that our servers are mainly servinig mobile phone content / WAP pages were we cannot trust that thet devices have cookie support or have it enabled.

1. I want to have Load balancing with server affinity.
I would like to have my server affinity set by either a cookie value or if not found, that the value for which server should handle the request can be found in the URL or / querystring. Is this possible, to write somekind of custom logic to find the server that should serve the request, e.g.

if(servername is found in cookie)
    send request to server in cookie value
else if(servername is in part of the URL)
    send request to server in part of the URL
else if(servername is found in the querystring)
    send request to server in the querystring
else
    send to server with least load at the moment.

2. I want to have Fail over if one of my server / application goes down.
If one of my servers in the cluster is down, or if the a web application is down that the server would fail over to a secondary server. Thus, it is not enough that IIS are testing if the server is up and running, i also need to have some kind of test that the web application is up and running, e.g. a ping to a well known page and test for HTTP status 200.

Best Regards
Niclas Rothman

ARR Monitoring and Management

unit2202 — Wed, 02 Sep 2009 18:01:15 GMT

I get the following error when I try to reset the runtime statistics on the monitoring and management interface in ARR in my server farm... "The operation could not be completed because the worker process has stopped." It is a 2 node server farm. It should also be noted that the availability and health status items both read as unknown, which is another issue. Any thoughts? Thanks, Tommy Henry

ARR + Forms Authentication

jortizv — Wed, 22 Jul 2009 15:05:27 GMT

Is there an easy way to configure Forms Authentication to be passed to the farm servers, the idea is to have the authentication happen at one server and another server will be access with those credentials, our application uses forms authentication, and when we hit another server directly on the farm by passes the form authentication, can anyone guide me on the most effective way to do this..

Any help would be appreciated.. thank you

Proxy Chain (IIS -> ISA)

IIS_UserHM — Wed, 22 Jul 2009 01:45:30 GMT

When chaining IIS7 to ISA2006 via the ARR2 Proxy Chain feature, is it possible to supply credentials along with the proxy server name and port?

Out proxy server requires anuthentication and anonymous will not suffice.

Thanks in advance.

Re: Load Balancing multiple sites

wonyoo — Fri, 17 Jul 2009 04:53:04 GMT

1) Yes, ARR can run anywhere where IIS7 is. Do you have IIS running on your DC? Are you planning on using this instance of IIS for anything other than running ARR? I ask because depending on what else you are planning on doing with it, the routing rules may need to be tweaked.

2) In your case, you will be using ARR in place of existing LB. So the site (or sites, if you plan on keeping all 7 VIPs) on ARR will be bound to the VIP.

Forward Proxying Requests to Internet for Caching purposes

IIS_UserHM — Fri, 17 Jul 2009 04:51:41 GMT

Hi there, Any chance a little assistance?

I have the OS, IIS and ARR v2 installed and have fumbled my way around without too much luck. I have followed the instructions for enabling the cache and am really interested in forward proxying client requests to an internet site.

The IIS proxy will need to pass the requests to another internal ISA 2006 server (AD credentials will be required).

User -> IIS (http://server/training)
IIS to forward proxy requests to ISA
ISA to send requests to Internet site http://www.abc.com
Responses need to populate IIS disk cache

Thanks in advance.

Hamish

Re: Load Balancing multiple sites

wonyoo — Wed, 15 Jul 2009 17:14:52 GMT

This was exactly why I wnated to understand more about your environment.

If you were to place ARR in front of your 2 content servers, you have a couple of options:

- You would just use one IP on ARR and bind 7 domain names to the same IP. Based on the host header, you can route them to different server farm (7 of them - one each).

- Alternatively, you can have the same 7 VIPs on ARR - and route them to 7 different server farms explicitly based on the site.

In both cases, you will need 7 server farms.

The most invasive change would be to use host name binding on your content servers (as opposed to using dedicated IPs) - but I am assuming that you have the business needs for assigning them dedicated IPs. As long as you are usding dedicated IPs, you will need to create 7 server farms and use the URL rewrite rule on ARR to route to the 7 server farms as appropriate.

Re: Load Balancing multiple sites

wonyoo — Wed, 15 Jul 2009 15:39:45 GMT

ARR deployment will always be in front of your content servers, regardless of whether you want to load balance across one or multiple sites. It is a proxy based solution. (I think you might be thinking of NLB - another Windows technology. NLB can be used to load balance sites as well and NLB does not require another box. They can be enabled right on the content servers themselves. That said, each solution (NLB or ARR) has its pros and cons.

Perhaps the following article would provide more info on how ARR can be setup: http://learn.iis.net/page.aspx/486/http-load-balancing-using-application-request-routing/