Full Text Searchable PDF User Manual

Deployment Guide
AX Series with
Oracle Application Server

Table of Contents
Deployment Guide for Oracle Application Server
DEPLOYMENT GUIDE
AX Series with Oracle Applica
ti
on Server
Introduc
ti
on
............................................................................................................... 1
Prerequisites & Assump
ti
ons .......................................................................................1
Con
fi
guring AX for Oracle Applica
ti
on Server
................................ 2
Con
fi
guring Oracle Web Server on AX
.................................................. 3
Con
fi
guring HTTP Health Monitor ................................................................................3
Auto-Port Transla
ti
on ...................................................................................................4
Real Server Con
fi
gura
ti
on ............................................................................................5
Service Group Con
fi
gura
ti
on ........................................................................................7
Con
fi
guring Templates for Oracle Web Server
............................... 8
HTTP Template Con
fi
gura
ti
on ......................................................................................8
TCP Proxy Template Con
fi
gura
ti
on ...............................................................................9
SSL Cer
ti
fi
cate Con
fi
gura
ti
on .....................................................................................10
Con
fi
guring Client Template .......................................................................................11
Client SSL Template Con
fi
gura
ti
on ................................................................11
Con
fi
guring HTTPS Virtual Server ..............................................................................12
Summary and Conclusion
............................................................................. 14

Performance by Design
1
Deployment Guide for Oracle Application Server
Introduc
ti
on
This deployment guide contains con
fi
guration procedures for AX Series server load balancers to support
Oracle Application Server.
Oracle Application Server is an integrated, standards-based software platform consisting of Oracle HTTP
Server and OC4J (OracleAS Containers for J2EE), which deploys J2EE-based applications. Oracle
Application Server Enterprise Edition is an application platform suite (APS) that offers a comprehensive
solution for developing, integrating, and deploying all of your enterprise’s applications, portals, and Web
sites. Enterprise Edition combines robust business integration, leading J2EE performance, capabilities
for enterprise portal, real-time business activity monitoring, business intelligence, identity management,
and wireless deployment.
For more information on Oracle Application Server Products visit:
http://www.oracle.com/appserver/enterprise_edition.html
The AX Series with its Advanced Core Operating System (ACOS) has been designed speci
fi
cally for ap-
plications such as Oracle Application Server providing better robustness in failover situations, intelligent
load sharing and of
fl
oading security processing.
This guide used the AX Series 2.0.1 in routed mode and Oracle Application Server 11g.
Prerequisites & Assump
ti
ons
A10’s AX platform should be running software version 2.0 or later.
•
It is assumed that users have some basic con
fi
guration familiarity with both AX and Oracle Ap-
•
plication Server products.
The Oracle Application Server products used in this deployment guide are Oracle Web Server,
•
Identity Manager and Single Sign-on. As the applications are accessed by users through the
Oracle Web Server, the deployment con
fi
guration below is for the Oracle Web Server.
The AX can be con
fi
gured in one armed mode or routed mode.
•

Performance by Design
2
Deployment Guide for Oracle Application Server
Con
fi
guring AX for Oracle Applica
ti
on Server
Figure 2.1 Logical deployment topology
Figure 2.1 Logical deployment topology
Internet
Oracle Clients
AX Advanced Traffic Manager
Oracle Web Server Oracle Single Sign On Oracle Identity Manager
Database Servers

Performance by Design
3
Deployment Guide for Oracle Application Server
Con
fi
guring Oracle Web Server on AX
Connect the AX devices to the network that consists of Oracle servers and con
fi
gure the network routing
entries if the servers are in a different subnet, and follow the con
fi
guration steps below.
Con
fi
gure HTTP Health Monitor
•
Con
fi
gure Real Server
•
Con
fi
gure Service Group
•
Con
fi
gure Template
•
Con
fi
gure Virtual Server
•
Con
fi
guring HTTP Health Monitor
To con
fi
gure HTTP Health Monitor for Oracle Web Server:
Select
1.
Confi g
Mode > Service > Health Monitor
Click
2.
Add
to con
fi
gure new HTTP Health Monitor
On the
3.
Health Monitor
tab, enter a name for the monitor in the
Name
fi
eld. In this example,
the name “
Oracle-HTTP-HM
” is used
In the
4.
Method
section, select
HTTP
from the
Type
drop-down list
Con
fi
gure optional
fi
elds as required for your deployment. In this example, the default Health
5.
Monitor settings are used
Click
6.
OK
to
fi
nish con
fi
guration of the Health Monitor. The Health Monitor appears in the health
monitor table

Performance by Design
4
Deployment Guide for Oracle Application Server
Figure 2.2 Health Monitor Confi guration
Figure 2.2 Health Monitor Confi guration
Auto-Port Transla
ti
on
The AX device allows you to use different port numbers for a real server port and its corresponding
virtual server port. The AX auto-port translation feature can automatically translate the port numbers
internally. In this example our VIP address 192.168.215.63:443 is bound with real server (192.168.216.60)
port 7777, the default port for Oracle HTTP Server. The AX device translates the VIP address into the
real server IP address, and translates the virtual service port number into the real service port number, to
interact with the real server on the client’s behalf.
Note
:
For standard port numbers (port numbers 0-1023), no additional confi guration is required for auto-
port translation. For example, if the VIP service port number is 80 and the real port number is 542, no
additional confi guration is required.

Performance by Design
5
Deployment Guide for Oracle Application Server
To con
fi
gure Auto-Translate Port:
Select
1.
Confi g Mode > Service > SLB
On the menu bar, select
2.
Global > Auto
Translation
Click on one of the range names. The
3.
Auto Translation
screen appears
Note: If a range has already been confi gured for use by non-standard port numbers, do not reconfi gure this
range. Instead, select an un-confi gured range.
Edit the port numbers in the
4.
Start
Port
and
End
Port
fi
elds, based on the guidelines described
above
Click
5.
OK
Figure 2.3 Auto-Port Translation Confi gurations
Figure 2.3 Auto-Port Translation Confi gurations
Real Server Con
fi
gura
ti
on
In this step we con
fi
gure the Real Oracle Application Server and we con
fi
gure a HTTP Health Monitor on
the service port.
To
con
fi
gure a Real Server:
Select
1.
Confi g Mode > Service > SLB
Select
2.
Server
on the menu bar
Click
3.
Add
. The
General
tab appears
In the
4.
Name
fi
eld, enter a name for the server. In this example, the name is “
Oracle
”
In the
5.
IP Address
fi
eld, enter the IP address of the server. In this example we type
“192.168.216.60”
In the
6.
Health Monitor
drop-down list, leave the default health monitor for layer 3, which is ping

Performance by Design
6
Deployment Guide for Oracle Application Server
to the server’s IP address
In the
7.
Port
fi
eld, enter the number of the service port on the real server. In this example, the
port number is “
7777
”
In the
8.
Health Monitor (HM)
drop-down list for the port, select the previously con
fi
gured
“
Oracle-HTTP-HM
” Health Monitor
Click
9.
Add
to add the port to the
Port
list for the server
Click
10.
OK
. The real server appears in the server table
Repeat this procedure for each of the real Oracle Application servers
11.
Figure 2.4 Real Server Confi guration
Figure 2.4 Real Server Confi guration

Performance by Design
7
Deployment Guide for Oracle Application Server
Service Group Con
fi
gura
ti
on
A Service Group contains a set of real servers from which the AX device can select to service client
requests. A service group allows you to virtually support multiple servers as one logical server.
To con
fi
gure a service group:
Select
1.
Confi g Mode > Service > SLB
Select
2.
Service
Group
on the menu bar
Click
3.
Add
. The
Service Group
tab appears
In
4.
Name
fi
eld, enter name of Service Group. In this example, the name is “
Oracle-HTTP
”
In the
5.
Algorithm
drop-down list, select the preferred load-balancing method. You can control
the load on each server by selecting the appropriate type of load balancing methods. For this
con
fi
guration,
Round
Robin
is used
On the
6.
Server
drop down, select a con
fi
gured real server from the drop-down list
In the
7.
Port
fi
eld, enter the port
“7777”
Click
8.
Add
. Repeat steps 6-8 for each real server
Click
9.
OK
. The new group appears in the Service Group table
Figure 2.5 Service Group Confi guration
Figure 2.5 Service Group Confi guration

Performance by Design
8
Deployment Guide for Oracle Application Server
Con
fi
guring Templates for Oracle Web Server
Templates are sets of con
fi
guration parameters that apply to speci
fi
c service types or to servers and ser-
vice ports. Even though in some cases default templates can be used, it is recommended that you create
templates speci
fi
cally allowing you to change the templates in the future without impacting the default
templates, which others may be sharing also. For this deployment, the following types of templates are
used:
HTTP Template
•
TCP-Proxy Template
•
Client SSL Template
•
HTTP Template Con
fi
gura
ti
on
Select
1.
Confi g Mode > Service > Template
Select
2.
Application > HTTP
from the drop down menu bar. The
Template >> HTTP >> List
screen appears
Click
3.
Add
. The
Template >> HTTP >> Create
screen appears
Enter a name for the template in the
4.
Name
fi
eld. In our example we type “
Oracle-HTTP-Temp
”
Select or enter values for the template options you want to use. In this example, the default
5.
values are used for the remaining options
Click
6.
OK
to
fi
nish con
fi
guration and the template now appears in the HTTP template list
Figure 2.6 HTTP Template Confi guration
Figure 2.6 HTTP Template Confi guration

Performance by Design
9
Deployment Guide for Oracle Application Server
TCP Proxy Template Con
fi
gura
ti
on
TCP-proxy templates control TCP stack settings such as the idle timeout for TCP connections. We will
use this template on a virtual server port.
To con
fi
gure a TCP-Proxy template:
Select
1.
Confi g Mode > Service > Template
Click
2.
TCP Proxy
on the top menu bar
Click
3.
Add
to con
fi
gure new template
In the
4.
Name
fi
eld, enter a name for new template. In this example we type
“Oracle-TCPProxy”
In the
5.
Idle
Timeout
fi
eld, the default value is
“600”
seconds but we are using
“1200”
. The other
default settings are used in this example
Click
6.
OK
Figure 2.7 TCP Proxy Template
Figure 2.7 TCP Proxy Template

Performance by Design
10
Deployment Guide for Oracle Application Server
SSL Cer
ti
fi
cate Con
fi
gura
ti
on
In this section we will con
fi
gure SSL Certi
fi
cate for Client SSL Template. You can also import a certi
fi
cate
from a remote location.
To con
fi
gure SSL Certi
fi
cate:
Select
1.
Confi g Mode > Service > SSL Management
Click
2.
Create
. The
SSL Management >> Certifi cate >> Create
screen appears
In the
3.
File
Name
fi
eld, type the name for the SSL certi
fi
cate. In this example, the name is
“Oracle-Client-SSL
”
On the
4.
Certifi cate
section there is an
Issuer
drop-down list, use the default option of
Self
from drop-down list
In the
5.
Common Name
fi
eld, enter a name for the certi
fi
cate. In this example we type
“Oracle”
Fill in any additional required data and in the
6.
Key
section select the
Key
Size
from drop down
list. The default is
1024
bits
Click
7.
OK
Figure 2.8 SSL Certifi cate
Figure 2.8 SSL Certifi cate

Performance by Design
11
Deployment Guide for Oracle Application Server
Con
fi
guring Client Template
In this section we con
fi
gure the Client SSL Template using the previously con
fi
gured SSL certi
fi
cate. As
we are using a client side HTTPS and server side HTTP con
fi
guration in this Deployment Guide, we will
con
fi
gure these templates on the virtual server.
Client SSL Template Con
fi
gura
ti
on
Client SSL Template Con
fi
gura
ti
on
To con
fi
gure Client SSL Template:
Select
1.
Confi g Mode > Service > Template
Select
2.
SSL > Client SSL
from the top menu bar and drop down
Click
3.
Add
. The
Template >> Client SSL >> Create
screen appears
In the
4.
Name
fi
eld, enter
“Oracle-Client”
name for SSL Client Template
In the
5.
Certifi cate
Name
drop-down list, select the
“Oracle-Client-SSL
” certi
fi
cate con
fi
gured
above
In the
6.
Key
Name
fi
eld, select the key con
fi
gured above. In this example key is
“Oracle-Client-
SSL”
In the
7.
Cache
Size
fi
eld, default value is
“0”
but we are using
“10”
in this example
Click
8.
OK
. The new template appears in the Client SSL template list
Figure 2.9 Client SSL Template
Figure 2.9 Client SSL Template

Performance by Design
12
Deployment Guide for Oracle Application Server
Con
fi
guring HTTPS Virtual Server
In this step we con
fi
gure a Virtual Server. We are using a secure connection so we need to select the
HTTPS type for the Virtual Server and also need to bind all previously con
fi
gured templates on the Vir-
tual Server port 443 (HTTPS).
To con
fi
gure a Virtual Server:
Select
1.
Confi g Mode > Service > SLB
Select
2.
Virtual Server
on the menu bar
Click
3.
Add
. The
General
tab appears
In the
4.
Name
fi
eld, enter a name for the Virtual Server. In this example, the
Name
is “
Oracle-
VS
”
In the
5.
IP Address
fi
eld, enter the IP address that clients will request. In this example we use
“192.168.215.63”
Figure 2.10 Virtual Server Confi guration
Figure 2.10 Virtual Server Confi guration
On the
6.
Port
section, click
Add
. The
Virtual Server
Port
tab appears
In the
7.
Type
drop-down list, select
HTTPS
type for Virtual Server
In the
8.
Port
fi
eld, leave “
443
” as the default port number for the
HTTPS
type
In the
9.
Service
Group
drop-down list, select the service group
“Oracle-HTTP”
from list
Figure 2.11 Virtual Server Confi guration (Continuation)
Figure 2.11 Virtual Server Confi guration (Continuation)

Performance by Design
13
Deployment Guide for Oracle Application Server
The default
10.
Virtual Server Port Template
is used for the service port, so leave
default
se-
lected
In the
11.
HTTP Template
drop-down list, select
“Oracle-HTTP-Temp”
template con
fi
gured above
In the
12.
Client-SSL Template
drop-down list, select the
“Oracle-Client”
template con
fi
gured
above
In the
13.
TCP-Proxy Template
fi
eld, select the “
Oracle-TCPProxy
” template con
fi
gured above
Figure 2.12 Virtual Server Confi guration (Continuation)
Figure 2.12 Virtual Server Confi guration (Continuation)
Click
14.
OK
. The port appears in the Port list of the
Port
section
Figure 2.13 Virtual Server Confi guration (Continuation)
Figure 2.13 Virtual Server Confi guration (Continuation)
Click
15.
OK
. The Virtual Server appears in the Virtual Server table
Click
16.
Save
to save the con
fi
guration changes to the startup-con
fi
g

Performance by Design
14
Deployment Guide for Oracle Application Server
Summary and Conclusion
The con
fi
guration steps described above show how to set up the AX device for Oracle Application
Server. The key advantages for using AX Series in the deployment for Oracle are:
Transparent application load sharing
•
Multiple Oracle Application Web Servers can be pooled together without any changes to how users
◦
access the applications.
Availability
•
Obtain higher availability when Web Servers fail so that there is no direct impact to how users access
◦
the applications.
Performance for users accessing Oracle applications using Web browser
•
Achieve higher connection throughput and faster end user responsiveness by of
fl
oading security
◦
processing to the AX device.
The AX Series Advanced Traf
fi
c Manager provides signi
fi
cant bene
fi
ts for all users of the Oracle Applica-
tion Server. For more information about AX Series products, refer to:
http://a10networks.com/products/axseries.php
http://a10networks.com/resources/solutionsheets.php
http://a10networks.com/resources/casestudies.php

© 2009 A10 Networks, Inc. All rights reserved
About A10 Networks
A10 Networks was founded in 2004 with a mission to provide innovative networking and security
solutions. A10 Networks makes high-performance products that help organizations accelerate,
optimize and secure their applications. A10 Networks is headquartered in Silicon Valley with of
fi
ces
in the United States, Europe, Japan, China, Korea and Taiwan. For more information, visit
www.a10networks.com
.
Performance by Design
To learn more about the AX
Series Advanced Traf
fi
c Manager
and how to improve applica-
tion performance up to 8 times
faster while enhancing reliability
and security, visit A10 Networks’
website at:
www.a10networks.com
Or call and talk to an
A10 sales representative:
Corporate Headquarters
A10 Networks, Inc.
2309 Bering Drive
San Jose, CA 95131
Tel: +1 408 325-8668
Fax: +1 408 325-8666
North America Sales:
+1 888 A10-6363
+1 408 325-8616
Europe, Middle East &
Africa Sales:
+31 70 799-9143
Asia Pacifi c Sales:
China, Beijing Offi ce:
+86 10 8515-0698
China, Shanghai Offi ce:
+86 21 6137-7850
Japan Sales:
+81-3-3291-0091
Korea Offi ce:
+82-2-6007-2150
+82-2-6007-2151
Taiwan Offi ce:
+886-2-2657-3198