Symantec IGA

 View Only
  • 1.  Load Balancer Module for JBOSS

    Posted Apr 05, 2016 03:48 PM

    Team,

     

    Documentation tends to get stale without feedback. 

    I am curious about the supporting components that are used for front end of many J2EE solutions.  Particularly, Load Balancing features.

     

     

    Question 1: Which load balancing modules are you using for your current solutions to JBOSS from Apache?  Do you plan on upgrading to mod_cluster or other?

     

    Three (3) choices:

    1)    mod_jk (use pre-built add-on binaries or source;  pre-2005 code; typically downloaded as an add-on package)

    2)    mod_proxy (available to be built-into Apache now; requires Apache 2.2.3 or higher)  [Includes mod_proxy_http, mod_proxy_ajp, mod_proxy_balancer, etc.]

    a.    :./configure --prefix=$APACHE_HOME --enable-ssl --enable-mods-shared='proxy ssl deflate expires headers'

    b.     May use with mod_headers  to create "stickyness" via a header; instead of a cookie.

    3)    mod_cluster   (pre-built add-on binaries; requires Apache 2.2.8 or higher; post-2008 code)

    a.    Unlike mod_jk, mod_cluster does not require AJP. httpd connections to application server nodes can use HTTP, HTTPS, or AJP.

    b.    Jboss has logger for mod_cluster for full monitoring.   org.jboss.modcluster

    c.    bi-directional communication:   transmit server-side load balance factors and lifecycle events back to httpd

     

     

    References:

    http://mod-cluster.jboss.org/

    http://tomcat.apache.org/connectors-doc/

    http://httpd.apache.org/docs/2.2//mod/mod_proxy.html

     

     

     

    Question 2: Have you migrated or move from Jakarta to AAR for MS-IIS to JBOSS?

    HTTP Load Balancing using Application Request Routing : The Official Microsoft IIS Site

     

     

     

    Cheers,

     

    A.



  • 2.  Re: Load Balancer Module for JBOSS

    Broadcom Employee
    Posted Apr 11, 2016 11:46 AM

    Bill_Patton Valdo

     

    Hi Bill and Valdo,

    Do you have any information regarding the current LB modules for Jboss and Apache?  Does IDM development have any ETA on when they might be upgrading the mod_cluster or others?

     

    Thank you.

     

    ~Scott Owens



  • 3.  Re: Load Balancer Module for JBOSS
    Best Answer

    Posted Apr 11, 2016 01:30 PM

    Example with mod_jk

    Install the Proxy Plug-In for JBoss - CA Identity Manager - 12.6.6 - CA Technologies Documentation

     

     

    Example with mod_proxy.

     

    Architecture:

    httpd.conf  maintained as is with limited changes

    - jboss_proxy.conf  [ proxy modules for load balancing to Jboss ]

    - ssl_certs.conf  [ SSL functionality pulled into separate configuration file. reference Apache included file httpd-ssl.conf ]

    -performance.conf  [ performance tweaks with header, deflate, compress, etc.  ]

     

    Within jboss_proxy.conf  [ As test, deployed JBOSS twice on same host with offset ports to avoid collisions with two (2) hostnames]

     

    **** configuration file below ****

     

    ###################################

    # JBOSS PROXY REDIRECT & LOAD BALANCE CONFIGURATION

    ###################################

    User smuser

    Group smuser

    ###################################

    # Left as reference to items that should exist in httpd.conf

    # Defined by  # ./configure --prefix=/opt/CA/httpd --enable-ssl --enable-mods-shared='proxy ssl deflate expires headers' --enable-so

    ###################################

    #LoadModule proxy_module modules/mod_proxy.so

    #LoadModule proxy_balancer_module modules/mod_proxy_balancer.so

    #LoadModule proxy_http_module modules/mod_proxy_http.so

    ### Need mod_proxy_connect for SSL

    #LoadModule proxy_connect_module modules/mod_proxy_connect.so

     

    <Proxy balancer://iam_cluster>

          Order deny,allow

          Allow from all

          BalancerMember http://idm01.domain.dom:8080/iam route=node1

          BalancerMember http://idm02.domain.dom:8180/iam route=node2

        </Proxy>

     

    <Proxy balancer://castyles_cluster>

          Order deny,allow

          Allow from all

          BalancerMember http://idm01.domain.dom:8080/castylesr5.1.1 route=node1

          BalancerMember http://idm02.domain.dom:8180/castylesr5.1.1 route=node2

        </Proxy>

     

    # Define the "URI" that will redirect to the correct "cluster"

    ProxyPass /iam balancer://iam_cluster lbmethod=byrequests stickysession=JSESSIONID|jsessionid

    ProxyPassReverse /iam  balancer://iam_cluster

     

    ProxyPass /castylesr5.1.1 balancer://castyles_cluster lbmethod=byrequests stickysession=JSESSIONID|jsessionid

    ProxyPassReverse /castylesr5.1.1 balancer://castyles_cluster

     

    # Enable Monitor Tool - Built into mod_proxy_balancer - Use ONLY on Admin Location - Disabled for Production Env.

    <Location /balancer-manager>

            SetHandler balancer-manager

            Order deny,allow

            Allow from all

    </Location>

    ProxyPass /balancer-manager !

    ProxyPass / balancer://iam_cluster/ stickysession=JSESSIONID|jsessionid nofailover=Off scolonpathdelim=On

     

    ###################################

    # Set debug level for logs to validate processes

    # Disable after initial deployment is successful

    LogLevel debug

    ###################################