Deployment Guide July-2014 rev. a. Deploying Array Networks APV Series Application Delivery Controllers with Oracle WebLogic 12c

Transcription

1 Deployment Guide July-2014 rev. a Deploying Array Networks APV Series Application Delivery Controllers with Oracle WebLogic 12c

2 Table of Contents 1 Introduction Array Networks APV Appliance Basic APV Configuration for WebLogic APV Application Delivery Controller Benefits APV Configuration Summary Configuring APV Load Balancer for WebLogic Configuration Steps Create Real Service Create WebLogic Service Group Create WebLogic Virtual Service Validate Service Configuring APV Advanced Features for WebLogic SSL Offloading Create SSL Virtual Hosts Create "HTTPS" Virtual Service Import the Cert/Key or Create a Self-Signed CA HTTP Rewrite / Redirect HTTP Compression Conclusion

3 1 Introduction This document is written with the assumption that you are familiar with Oracle WebLogic products. For more information on planning and deploying the WebLogic 12c, Please reference the appropriate documentation at: Array Networks APV Appliance The APV appliance must be running version ArrayOS 8.x or later. For more information on deploying the APV appliance please refer to the ArrayOS Web UI Guide which is included in the product CD or may be accessed through the product Web User Interface. We assume that the APV appliance is already installed in the network with management IP, interface IP, VLANs and default gateway configured. Learn about your WebLogic deployment in your network and note down VLAN information and IP address. You will need them for configuring virtual sites and load balancing policies on the APV appliance. 1.2 Basic APV Configuration for WebLogic Figure 1: Basic APV Configuration for WebLogic 1.3 APV Application Delivery Controller Benefits The Array Networks APV Series application delivery controllers provide all required application delivery functions for optimizing application delivery for WebLogic environments, such as Layer 4 server load balancing, high availability, SSL acceleration and offloading, DDoS protection, and TCP connection multiplexing, caching and compression all in a single, easy-to-manage appliance. Availability & Scalability The APV s server load balancing ensures % uptime for WebLogic Server deployments. Customers can scale their WebLogic environment to meet capacity and performance needs with APV server load balancers. 2

4 Site Resilience The APV s global server load balancing directs traffic away from failed data centers and intelligently distributes services between sites based on proximity, language, capacity, load and response times for maximum performance and availability. ISP Link Availability The APV s link load balancing with advanced link failover and bandwidth management optimizes the availability, security, cost and performance of WebLogic deployments across multiple WAN connections. TCP Connection Multiplexing The APV appliance multiplexes several client TCP connections into fewer WebLogic TCP connections for increased throughput and performance. The APV appliance also reuses existing server connections. Content Cache The APV appliance serves frequently requested content from cache for increased performance and helps scale the capacity of the WebLogic Server environment. HTTP Compression The APV appliance compresses and delivers WebLogic traffic over LAN and WAN networks. Network and Server Protection The APV appliance protects the WebLogic Server from malicious network and server attacks such as DDoS attacks, SYN floods, TCP port scans, UDP floods and UDP port scans, etc. 1.4 APV Configuration Summary Application/ Service WebLogic Server Virtual Service Real Service Health Check Protocol Port Protocol Port TCP 80 TCP 7001 TCP 3

5 2 Configuring APV Load Balancer for WebLogic 2.1 Configuration Steps Create Real Service Real Services are 2 WLWS servers. Add each WLWS server with its name, IP/port and protocol information as a Real Service using the following steps: 1. Select the action link Add Real Service Entry. The configuration window will present a new screen for SLB REAL SERVICES CONFIGURATION. 2. The Add Real Service Entry screen is for you to configure real servers. In our example, we entered WLWS01 as the Real Service Name. Select tcp as the Real Service type and enter IP addresses and port Select the TCP health check type for the default real service health check. Follow the same steps as above: add "WLWS02 server as real services. Technical Notes: Enable this Service: Check Box to enable or disable the Real Service. If disabled, APV will not dispatch new traffic to the Real Service. Connection Limit:

6 Set the maximum connections to the real service. This setting helps with application stability without overloading the server or application. Increase the number if the server is capable of handling greater loads Create WebLogic Service Group Confirm that you are in config mode and select Groups from the sidebar [a]. The configuration window will display two tabs [b] Groups and Groups Setting. 1. Input the group name g_wlws [a]. Select the Persistent IP group method by selecting from the pull down menu [b]. Select the Round Robin group method by selecting from the pull down menu [c]. After making configurations on those parameter fields, click on the action link Add [d]. The newly created g_wlws will be displayed in the sort ready table below [e]. Choose g_wlws in the table and double click on it or click on the action link Edit [f]. A new configuration page will be displayed. 5

7 2. You can modify the group method and relevant configurations in the area [a]. Depending on which method is selected, certain parameter fields will change, appear, or disappear. 3. Under the GROUP MEMBERS section, click on the add action link [b] and the assigned real services WLWS01 and WLWS02 will appear in the display window [c]. 4. Also on this page, there is a display window showing the current running statistics of the particular group [d] Create WebLogic Virtual Service The next step is to create a WebLogic Virtual Service for the external WebLogic client to access. On the APV appliance, a Virtual Service is defined by a Virtual IP/Port and the protocol. External client WebLogic requests will be terminated on it and the APV appliance will load balance the requests to different OWA Real Services. 6

8 Confirm that you are in the Config mode and have selected the feature link Virtual Services from the sidebar [a]. The configuration ADD VIRTUAL SERVICE window will display four tabs [b]. The Virtual Services page is displayed by default. 1. Enter v_wlws [a] for the Virtual Service Name. Use the check box to enable the virtual service [b]. Select the virtual service type tcp from the selector [c]. Set the virtual service IP and port 443 [d]. Use the check box to enable ARP [e]. Set the maximum number of open connections per virtual service [f]. Depending on which type of virtual service is specified, certain parameter fields will appear, change or disappear. Click on the desired action link [g] to add a virtual service. Once a virtual service has been added, it will be displayed within the table. Select a virtual service in the table [h] and double click on it or click on the action link Edit [i]. A new configuration window will present a new series of tabs for completing the virtual services configuration. 7

9 2. Select the pre-created v_wlws [e] and set it to be the default policy [f]. Click Add to save this Virtual Service-SLB Group association [g]. The v_wlws will be shown in the ASSOCIATE GROUPS list [h] Validate Service Validate that the basic configuration is functioning correctly: 1. Navigate to config mode > Real Services. 2. Verify that the Real Service Status icons are green. 3. Launch the Web browser and navigate to the VIP address 8

10 4. Input the required Username and Password to login. 9

11 3 Configuring APV Advanced Features for WebLogic 3.1 SSL Offloading To configure SSL offloading, please follow these steps. 1. Create the SSL Virtual Hosts. 2. Create a Virtual Service of type HTTPS and Associate to the real service group 3. Import SSL certificates signed by a certificate authority or create a self-signed certificate on the APV Create SSL Virtual Hosts To create the SSL Virtual Hosts, navigate to SSL -> Virtual Hosts, input the Virtual Host Name and select the SLB Virtual Service Create "HTTPS" Virtual Service 10

12 3.1.3 Import the Cert/Key or Create a Self-Signed CA There are two options when configuring the certificate: 1. Generate a Self-Signed CA from the APV. Navigate to SSL -> Virtual Hosts -> and double click the newly created SSL Virtual Hosts. Click on Virtual Host CSR/Cert/Key -> CSR/Key to generate a Self-Signed CA. 2. Import an SSL Certificate and Key Navigate to SSL -> Virtual Hosts -> and double click the newly created SSL Virtual Hosts. Click on Virtual Host CSR/Cert/Key ->Import Cert/Key, import the Cert/Key either from file or manual import. 3.2 HTTP Rewrite / Redirect The client may type rather than to access the secured WebLogic service. To make this more user friendly, the APV appliance can be configured to auto redirect http requests to https. To configure the HTTP redirection: 1. Add a new Virtual service re_wlws for HTTP and virtual service port

13 2. Select the virtual service re_wlws to edit. Check the box for Redirect ALL HTTP Requests to HTTPS 3.3 HTTP Compression Navigate to Compression -> Compression Setting to enable the HTTP compression. 12

14 4. Conclusion This concludes the Array Networks APV deployment guide for Oracle WebLogic Server. Array Networks APV Series application delivery controllers provide Layer 4 server load balancing, high availability, SSL acceleration and offloading, DDoS protection, and TCP connection multiplexing, caching and compression to improve the performance, scalability, availability and security for WebLogic server deployments. 13

15 About Array Networks Array Networks is a global leader in application delivery networking with over 5000 worldwide customer deployments. Powered by award-winning SpeedCore software, Array application delivery, WAN optimization and secure access solutions are recognized by leading enterprise, service provider and public sector organizations for unmatched performance and total value of ownership. Array is headquartered in Silicon Valley, is backed by over 300 employees worldwide and is a profitable company with strong investors, management and revenue growth. Poised to capitalize on explosive growth in the areas of mobile and cloud computing, analysts and thought leaders including Deloitte, IDC and Frost & Sullivan have recognized Array Networks for its technical innovation, operational excellence and market opportunity. Corporate Headquarters info@arraynetworks.com MY-ARRAY EMEA rschmit@arraynetworks.com China support@arraynetworks.com.cn France and North Africa infosfrance@arraynetworks.com India isales@arraynetworks.com Japan sales-japan@ arraynetworks.com To purchase Array Networks Solutions, please contact your Array Networks representative at MY-ARRAY ( ) or authorized reseller July-2014 rev. a 2014 Array Networks, Inc. All rights reserved. Array Networks, the Array Networks logo and ArrayOS are all trademarks of Array Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Array Networks assumes no responsibility for any inaccuracies in this document. Array Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. 14