Webservices behind LoadBalancer

Does anybody have experiences whether the webservices are working fine behind a loadbalancer. I know, the LiveLink application it self does work very fine behind a loadbalancer as it is a completely stateless web application but does this apply also for the webservices?

Any experiences? Thoughts? Ideas?

Thanks,

Marko

Find more posts tagged with

Comments

sgrasley

Hi, Marko.

The only potential challenge I'm aware of is the validation of the IP address stored within the authentication token. In the case of web services, the address in the token is that of the application server handling the requests. Because this token is passed in as part of the request from the client, a mismatch might occur if the request is handled by a different application server than the one that handled the authentication request.

The IP address validation is configurable within Livelink, so it could be configured to circumvent this issue. Also, the load balancer should be able to be provide a client with affinity to a particular server so that requests are handled by the same server.

Scott

Marko_Genzel

Hi Scott,

Thanks for your reply.

Are you referring to the “CookieEncryption Key” in the Server Security Settings (?func=admin.securityvars).We had to set this on all of our servers already to the same value otherwisethe authentication for regular LiveLink frontend users behind the load balancerwon’t work properly as the hostname is the cookie encryption key bydefault.

Best Regards,

Marko

From: eLink Entry:Enterprise Web Services 9.7.1 Forum[mailto:otdnenterprisewebservices971forum@elinkkc.opentext.com]
Sent: Thursday, May 07, 2009 9:17AM
To: eLink Recipient
Subject: Webservices behindLoadBalancer

Webservices behind LoadBalancer

Posted by sgrasley (Grasley, Scott) On 2009/05/07 10:13

Hi, Marko.

Scott

[To post a comment, use the normal reply function]
Topic:	Webservices behind LoadBalancer
Forum:	Enterprise Web Services 9.7.1 Forum
Livelink Server:	knowledge-wlweb01

sgrasley

Hi, Marko.

Actually I'm referring to the Client IP Address setting under Cookie Authentication Information (under ?func=admin.securityvars, like you said). You may have to compare only part of the IP address. Although that may not be required if the requests from a given machine have affinity for a given application server.

thanks,

Scott