TESTING & INTEGRATION GROUP SOLUTION GUIDE

Transcription

1 TESTING & INTEGRATION GROUP SOLUTION GUIDE Alteon Application Switch (AAS) optimizing the delivery of Oracle Weblogic 12c Contents INTRODUCTION... 2 RADWARE ALTEON... 3 RADWARE ALTEON AND ORACLE WEBLOGIC 12C ARCHITECTURE... 5 IMPORTANT IMPLEMENTATION NOTES... 6 CONFIGURATION... 7 ALTEON ACTIVE CONFIGURATION... 7 APPENDIX ALTEON ACTIVE CONFIGURATION SCRIPT ALTEON BACKUP CONFIGURATION SCRIPT TECHNICAL SOLUTION GUIDE DATE: Wednesday, June 27, 2012 Version: 1.0 Author Elad Kurzweil

2 Introduction Radware Application Delivery Solutions for WebLogic Application Server Radware's application delivery (ADC) solutions provide WebLogic Application Server customer with stateful application traffic classification and distribution to effectively ensure optimal business operation through eliminating service downtime and increase performance. In addition, Radware's ADC solutions provide load and client proximity information which enhances the scalability and availability of BEA applications over WAN, MAN or LAN infrastructures. 2

3 Oracle Weblogic 12c Overview Oracle WebLogic Server 12c is the industry's best application server for building and deploying enterprise Java EE applications with support for new features for lowering cost of operations, improving performance, enhancing scalability and supporting the Oracle Applications portfolio. WebLogic Server Java EE applications are based on standardized, modular components; WebLogic Server provides a complete set of services for those modules and handles many details of application behavior automatically, without requiring programming. Radware Alteon Alteon Application Switch Series 4-5 provide breakthrough performance, advanced application acceleration capabilities and on demand scalability needed to effectively meet contemporary network and business needs. Specifically designed for the majority of enterprises and carriers that operate in dynamic, ever-changing environments and face diverse requirements, the Alteon Application Switch provides the extendable throughput they need from 0 to 20Gbps for unparalleled scalability, business availability and performance. Breakthrough Performance Delivering best Quality of Experience Powered by state-of-the-art, custom-designed hardware platforms, the Alteon Series 4-5 ensure the best user experience and fastest response time for your mission-critical applications, resulting in effective, continuous business operation. The Alteon 4008 & 4416 provide up to 4Gbps of scalable throughput capacity while delivering breakthrough performance including 215K Layer 4 and 135K Layer 7 Transactions per Second (TPS). The Alteon 5412, targeting large data centers and carrier environments packed with four 10GE ports, supports up to 20Gbps of throughput capacity, 2.5 Million DNS queries per second, 535K Layer 4 and 300K Layer 7 Transactions per Second. The beating heart of Alteon Series 4-5 is the Virtual Matrix Architecture (VMA), a one-of-a-kind technology that unleashes the power of Alteon s next-generation proprietary platforms. VMA is a fast, robust, and flexible architecture that leverages the entire system s capacity while providing the parallel performance of distributed processing. Integrated Application Acceleration Capabilities Alteon Application Switch Series 4-5 deliver a wide set of application acceleration capabilities including SSL offloading, web compression, caching, HTTP multiplexing and TCP optimization. These capabilities are designed to offload servers, address server performance issues, enhance response-time for best QoE and mitigate security risks. By offloading processor intensive operations from servers, Alteon frees the servers CPUs to handle additional requests, eliminating the need to buy additional hardware in order to support application processing requirements and reducing CAPEX and OPEX. 3

4 The Alteon Application Switch is validated and certified by leading application vendors such as Microsoft, Oracle, SAP, IBM and others. When operating Alteon Application Switch Series 4-5 with Microsoft SharePoint for example, the response time of SharePoint servers is accelerated by 350% and the servers CPU load is reduced by 40%. Similar benefits are achieved with other popular applications. Application acceleration capabilities have greater importance in virtual data centers where applications suffer from increased latency caused by virtualization infrastructure. Alteon reduces applications latency and improves QoE of virtual applications. Intelligently Embedding Radware s On Demand Infrastructure Approach By embracing Radware s Pay-as-you-Grow approach, you only pay for the exact capacity currently required and prevent over-spending on the initial solution. Throughput capacity, acceleration capabilities and application-aware services can be added on demand to meet new business requirements with no forklift upgrade of the device and without even restarting it. The Pay-as-you-Grow approach bles you to overcome capacity planning challenges and reduces the risk associated with data center growth for best investment protection. Thanks to platform standardization and simplicity, there are two platforms to cover all of your application needs resulting in fewer spare parts, and less training and operations, to dramatically reduce OPEX. 4

5 Radware Alteon and Oracle Weblogic 12c Architecture Tested Network Drawing 5

6 Important Implementation Notes 1. Oracle Weblogic requires session timeout for 12 hours; Make sure that aging time on the Alteon is set to 720 minutes. 2. To sync configuration after configure the active Alteon please run the command /oper/slb/sync to copy the configuration (L2 and L3 network configuration need to be configured one the Alteon standby device before applying the sync command) 3. HTTP VIP is used for redirect traffic to HTTPS 4. Persistency is used by Alteon passive cookie mechanism according to JSESSIONID. 5. Make sure to configure a Virtual Host on the WebLogic servers that will use the Alteon VIP host name and IP address. 6. The Weblogic setup is using one leg configuration and it requires a few specific modification on the Alteon like, a. Configure VRRP to work with Active/Standby mode b. Different PIP IP s will be configured on Active and backup Alteons Software and Hardware The following is a list of hardware and software tested to verify the interoperability of the presented solution: Redhat 5.7 Enterprise servers x64 Radware s Alteon ODS2 v (2 units) Oracle Weblogic v.12.c 6

7 Configuration Alteon Active Configuration Network Configuration /c/port 1 pvid 501 /c/l2/vlan 1 learn def 2 /c/l2/vlan 501 name "501" learn def 1 /c/l2/stg 1/clear /c/l2/stg 1/add /c/l3/ addr vlan 501 Sync Configuration /c/slb/sync/passphrs 8b3d3e838a281e01e2f6b6a2788baec2a81363ad8a1f93bdcb8731fa3345fa5a /c/slb/sync certs e state e update 1 /c/slb/sync/peer 1 addr Real Servers Configuration /c/slb/real 1 rip name "Weblogic.1" /c/slb/real 2 rip name "Weblogic.2" Server Groups Configuration /c/slb/group 1 7

8 metric roundrobin add 1 add 2 name "weblogic.group" Alteon process directions /c/slb/port 1 client server proxy Virtual Servers and Services Configuration /c/slb/virt 1 vip vname "Weblogic.VIP" /c/slb/virt 1/service 443 https group 1 rport 7001 dbind forceproxy /c/slb/virt 1/service 443 https/http comppol 1 /c/slb/virt 1/service 443 https/ssl srvrcert cert 1 sslpol 1 /c/slb/virt 1/service 80 http action redirect group 1 rport 0 redirect " dbind /c/slb/virt 1/service 443 https/pbind cookie passive "JSESSIONID" 1 30 disable /c/slb/virt 1/service 443 https/http/rcount 1 /c/sys/access/https/cert WebManagementCert /c/sys/access/https/https e VRRP Configuration /c/l3/vrrp/on /c/l3/vrrp/hotstan bled /c/l3/vrrp/vr 31 vrid 31 addr /c/l3/vrrp/vr 32 vrid 32 8

9 addr /c/l3/vrrp/vr 33 vrid 33 addr /c/l3/vrrp/group vrid 1 PIP Configuration /c/slb/pip/type vlan /c/slb/pip/type port /c/slb/pip/add Compression Configuration /c/slb/accel/compress on /c/slb/accel/compress/comppol 1 name "compression.pol" minsize 1024 SSL Configuration /c/slb/ssl/certs/key 1 /c/slb/ssl/certs/import key "1" text -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,80C6DE016CC773E6 6Xg7ccpR1h6a5kXr0aUxE35ZUCUx5brC8FKj8LzeX6P3XFs4U1DY+wceH6UskJjz K+WYssE+n+1lEE6lkXB469RTMx8Kg0P8mVO5jmAmx4WxgAqhJfg14eTxkkH2FfFh AWlJaHq3rUqnl1ZPymYOimb+nWmJUISmUxJDlEFPYutJXjar0Ny6lZv6epwq9WFK iwa2rh9exwjlfeh27wdptdxgbnw3le8zaw1rhjjzozdh64octc0wmmbj0tx6elzx A5OaQMhk7IVo2bPNk/ZfIC216DJDwbwaf9pvvKSYQRmZKOCjM5cp8D0TB2oL0erc /IwdBbaz7Tg1uyTubH0n0hFNqXl+TiwmlLyObSFI+Xi1q8y02Y+JTALZHd6ehVPi HkixDxEePzpm6BG/InBBzPinfXQ8s0WAyliqKRU3vLsrUeHjSAylxNn5T+BtFh76 /VepjNeY5O2MkwbPCw6H0mJZGJ7cRjQ9F8W+x2+uIx5YUGPJkydRTNlBRu1gVsw1 YFQCddELN/VlUZDZaO6iJIM2+usgeE5VBz74t3u06pO2d55s+usLE1ufMmfZE+ZL PaESjVtTdgLYBMMfFE77rrtMbY9H2Esv0Q4wGZE149e4WxTZd8JSq6WSe9/E4Xg4 +/Sj/A58hIJEd/qeSIV5KLogSlOUDkp5euTruwGsmwO+miIvMVa3f29SKpn2GWWs ztjlhvgdgiiejnsa/yh0th0u7giunv8zteoa/5nmbkkt/7/eks2ycsprbdz9d901 oypc3jzdssgvy2y5al1qkvxwz3c+n5dr6ekclrzthi0= -----END RSA PRIVATE KEY----- /c/slb/ssl/certs/key WebManagementCert /c/slb/ssl/certs/import key "WebManagementCert" text 9

10 -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,5C5D0E9FA984F783 BD1syX/eoHWoL9Xb9t/F2w3Y7R30trgIMUXDB8e2BuwPgnM20EZ5tXmMqUS6hi1Z 6H79f3wjo6rK86A6rgg3GIUwt6fqzZi5PPBCkCF38IPskZnZG8iaAxzN++iG0gu7 oscqfidcc+sqowquuk0yofsxlr/5omgoktdr1sexbptjcew6p6tc71hrkjn1opba til/kifhhkayelhuq0uisd7olgio8f55+4u7fkwyimwhvto6bvyq0wyintqky64j ANG7/oo4jFNDqbPkivVQC5jKKPvxGEZkoOJQ6u5Toue5rhEhvGNpMUHkVaptI92S G9Hlhqqa6b3rIyonWoflP7h0vo6v2N3DxQFajkjO+7A7dBo4KDkobgJ4tp8vEhmC S72MJQwg0eqTGbZXszDSwiXzQW2l0qloj4fonCypkM7lwovnD035i4hx5vt3Iu0Q Zs0RDFmiTPn2D//Gdgw35aE49HJ5Vv3M+A0wnQir3F77aBK4EQIxfEv3IaAzYJ7s 7fBWp1fpk1HUdxaah4CwCPrfw5BXoc6cwwTv7iRsIgygUOqfmET6TEwbD/DPHa/O RbFvKXYEZA4WoqZA+TFXlPWtZ8uJMEOUmadOYp0V6POzFb+Z7J3AAHkbW+mFFX3K MwuNuRzt/pdkh6ur5adI6OULBU9R/sm/cUvQHqFvCNKDujgdx74gZQ+a4uLb75Ow Wz5djf0DJGBuFi93gIWMgtSZthfffgWpp002if+j9itUgZOqogCLYVELD50XKvGY bb67n7blzflolvus5vcun5jtxzmx9ebw6qo+a3xwuta= -----END RSA PRIVATE KEY----- /c/slb/ssl/certs/request 1 /c/slb/ssl/certs/import request "1" text -----BEGIN CERTIFICATE REQUEST----- MIIBbTCB1wIBADAuMR8wHQYDVQQDExZ3ZWJsb2dpYy5yYWR3YXJldm0uY29tMQsw CQYDVQQGEwJJTDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuXGD/Db9cGaJ Ac7jIYxjB121gXVxkP3XdvtLiLazUjbWH93taPvLnpJDcwIKVgx/55XvEx36tWea r2lmqrziudm2mejv5e+sxcmlbq8t+xmbxu7otwbmyti5qybb1ncnjhxivyhztca+ ymaoos7pmc3ojrauo0zht3et4purag0caweaaaaama0gcsqgsib3dqebbquaa4gb ALOrasm4sHWGa8l4xN61J2THCBuI5VvzNmxNIIVEvEAFxEJFOTfyYogLc3Qe58SO 6TOcgskqtPZ6Zt4fX++sc5yegy3q8cnM8NU9eZTAZdPKwUdOU6xI8cROO2MVTzoi yodvdmhhypstydcyrzm6y3jq2ydaqnkvssws7mfs5pf END CERTIFICATE REQUEST----- /c/slb/ssl/certs/request WebManagementCert /c/slb/ssl/certs/import request "WebManagementCert" text -----BEGIN CERTIFICATE REQUEST----- MIIBazCB1QIBADAsMSowKAYDVQQDFCFEZWZhdWx0X0dlbmVyYXRlZF9BbHRlb25f QkJJX0NlcnQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALhpjZER5U5Q5zfv 8uZ1dappwnUO7BD7CmK/PXZQ+O15Romu/3EHmLTW7BvlXSTCxvZHe1zGX6Rr72IE 3C3gAVcii3U+vl0AM3YIPs4JYKCH/+TYLocV+E/lmxz5dnkI+xr1SczQSk64E2nP wm7yrnkbkzxoldi1tyzf0lu4mu4zagmbaaggadanbgkqhkig9w0baqqfaaobgqc2 OnlVmvCADYIWEJehVRvztZ5ojS/6cfgKEikWMDGTOJcfQsTa0k0SgdgRBNNIekTx ZUgqQpc2KVfSbV5SF0EnAqNhaXT0CIgFvxqfJFvz/cTYFxu5RZx/XaGMSAQX9s/M gbajngfkmplw1k4jf+zp3nf65gav3ymmtzyg9omnuw== -----END CERTIFICATE REQUEST----- /c/slb/ssl/certs/srvrcert 1 name "weblogic.radwarevm.com" /c/slb/ssl/certs/import srvrcert "1" text -----BEGIN CERTIFICATE----- MIICuDCCAiGgAwIBAgIET+b9LDANBgkqhkiG9w0BAQUFADAuMR8wHQYDVQQDExZ3 ZWJsb2dpYy5yYWR3YXJldm0uY29tMQswCQYDVQQGEwJJTDAeFw0xMjA2MjQxMzMx NTJaFw0xMzA2MjQxMzMxNTJaMC4xHzAdBgNVBAMTFndlYmxvZ2ljLnJhZHdhcmV2 bs5jb20xczajbgnvbaytaklmmigfma0gcsqgsib3dqebaquaa4gnadcbiqkbgqc5 cyp8nv1wzokbzumhjgmhxbwbdxgq/dd2+0uitrnsntyf3e1o+8uekknzagpwdh/n le8thfq1z5qvysxbhmi50zayqlxkt5jckytury37gzte7s5nygzi2lldjshwckeo FeK9gfO0Jr7KZo6izukxzegmsC47TOFPcRPim5EAbQIDAQABo4HiMIHfMA8GA1Ud 10

11 EwEB/wQFMAMBAf8wEQYJYIZIAYb4QgEBBAQDAgJEMDIGCWCGSAGG+EIBDQQlFiNB bhrlb24vtm9ydgvsiedlbmvyyxrlzcbdzxj0awzpy2f0ztadbgnvhq4efgquv4tn EdqjHTLWPS+K4Q+uayzwsggwWQYDVR0jBFIwUIAUV4TNEdqjHTLWPS+K4Q+uayzw sgihmqqwmc4xhzadbgnvbamtfndlymxvz2ljlnjhzhdhcmv2bs5jb20xczajbgnv BAYTAklMggRP5v0sMAsGA1UdDwQEAwIC5DANBgkqhkiG9w0BAQUFAAOBgQBvCGfu 4usIeVwEoKMTFhFVdjwRXBXr6mWO1iG59pqi/797p8ZVbu0wi+LltQSQR/s1IscR MOWNno5hy3bWkBwT6c52iiyECjqqlDpmcybYlxDmlQcebAaVxfY5l5VHmguIShM7 r4tepwcujsi8rhfr6qrduwcfc4ck6aa7pekxrg== -----END CERTIFICATE----- /c/slb/ssl/certs/srvrcert WebManagementCert /c/slb/ssl/certs/import srvrcert "WebManagementCert" text -----BEGIN CERTIFICATE----- MIICsjCCAhugAwIBAgIET+b9KzANBgkqhkiG9w0BAQQFADAsMSowKAYDVQQDFCFE ZWZhdWx0X0dlbmVyYXRlZF9BbHRlb25fQkJJX0NlcnQwHhcNMTIwNjI0MTE0MjM1 WhcNMTMwNjI0MTE0MjM1WjAsMSowKAYDVQQDFCFEZWZhdWx0X0dlbmVyYXRlZF9B bhrlb25fqkjjx0nlcnqwgz8wdqyjkozihvcnaqebbqadgy0amigjaogbalhpjzer 5U5Q5zfv8uZ1dappwnUO7BD7CmK/PXZQ+O15Romu/3EHmLTW7BvlXSTCxvZHe1zG X6Rr72IE3C3gAVcii3U+vl0AM3YIPs4JYKCH/+TYLocV+E/lmxz5dnkI+xr1SczQ Sk64E2nPwM7yRNkbKZXOLdI1TYZf0lU4MU4ZAgMBAAGjgeAwgd0wDwYDVR0TAQH/ BAUwAwEB/zARBglghkgBhvhCAQEEBAMCAkQwMgYJYIZIAYb4QgENBCUWI0FsdGVv bi9ob3j0zwwgr2vuzxjhdgvkienlcnrpzmljyxrlmb0ga1uddgqwbbqqt46gmft1 xio2isgbtogat4whpdbxbgnvhsmeudbogbqqt46gmft1xio2isgbtogat4whpkew pc4wldeqmcgga1ueaxqhrgvmyxvsdf9hzw5lcmf0zwrfqwx0zw9ux0jcsv9dzxj0 ggrp5v0rmasga1uddwqeawic5danbgkqhkig9w0baqqfaaobgqbehe+marfaa6vo MqrNPM+mBnTRYc2J1qOtTamyj4JYcEtCj7qwjfyMH5eJxsU1fw2Uqo6e9uWbLKFU d+krmn9vzodmnhawpjk4joenoftpatcumssu8lwudluwjvkehzw11oi+8tmhnb4j HHS0cp0g1ZkstUNIdPrDv16nm8LBhg== -----END CERTIFICATE----- /c/slb/sync/passphrs 8b3d3e838a281e01e2f6b6a2788baec2a81363ad8a1f93bdcb8731fa3345fa5a /c/slb/ssl on /c/slb/ssl/sslpol 1 name "SSL.pol" 11

12 Alteon Backup Configuration Network Configuration /c/port 1 pvid 209 /c/l2/vlan 1 learn def 2 /c/l2/vlan 209 name "209" learn def 1 /c/l2/stg 1/clear /c/l2/stg 1/add /c/sys/sshd/ /c/sys/sshd/on /c/l3/ addr vlan 209 Sync Configuration /c/slb/sync/passphrs 895cedd48808cd00e2b7b4957aab7dc33b1583bac26464c8122b32b4f4a351be /c/slb/sync certs e state e update 1 /c/slb/sync/peer 1 addr PIP Configuration /c/slb/pip/type vlan /c/slb/pip/type port /c/slb/pip/add

13 VRRP Configuration /c/l3/vrrp/on /c/l3/vrrp/hotstan bled /c/l3/vrrp/vr 31 vrid 31 addr /c/l3/vrrp/vr 32 vrid 32 addr /c/l3/vrrp/vr 33 vrid 33 addr /c/l3/vrrp/group vrid 1 13

14 Appendix 1 Alteon active configuration script /c/sys/mmgmt tftp mgmt /c/sys idle /c/sys/access http tnet /c/port 1 pvid 501 /c/l2/vlan 1 learn def 2 /c/l2/vlan 501 name "501" learn def 1 /c/l2/stg 1/clear /c/l2/stg 1/add /c/sys/sshd/ /c/sys/sshd/on /c/l3/ addr vlan 501 /c/l3/vrrp/on /c/l3/vrrp/hotstan bled /c/l3/vrrp/vr 31 vrid 31 addr /c/l3/vrrp/vr 32 vrid 32 addr /c/l3/vrrp/vr 33 vrid 33 addr /c/l3/vrrp/group 14

15 vrid 1 /c/slb/accel/compress on /c/slb/accel/compress/comppol 1 name "compression.pol" minsize 1024 /c/slb/ssl/certs/key 1 /c/slb/ssl/certs/import key "1" text -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,80C6DE016CC773E6 6Xg7ccpR1h6a5kXr0aUxE35ZUCUx5brC8FKj8LzeX6P3XFs4U1DY+wceH6UskJjz K+WYssE+n+1lEE6lkXB469RTMx8Kg0P8mVO5jmAmx4WxgAqhJfg14eTxkkH2FfFh AWlJaHq3rUqnl1ZPymYOimb+nWmJUISmUxJDlEFPYutJXjar0Ny6lZv6epwq9WFK iwa2rh9exwjlfeh27wdptdxgbnw3le8zaw1rhjjzozdh64octc0wmmbj0tx6elzx A5OaQMhk7IVo2bPNk/ZfIC216DJDwbwaf9pvvKSYQRmZKOCjM5cp8D0TB2oL0erc /IwdBbaz7Tg1uyTubH0n0hFNqXl+TiwmlLyObSFI+Xi1q8y02Y+JTALZHd6ehVPi HkixDxEePzpm6BG/InBBzPinfXQ8s0WAyliqKRU3vLsrUeHjSAylxNn5T+BtFh76 /VepjNeY5O2MkwbPCw6H0mJZGJ7cRjQ9F8W+x2+uIx5YUGPJkydRTNlBRu1gVsw1 YFQCddELN/VlUZDZaO6iJIM2+usgeE5VBz74t3u06pO2d55s+usLE1ufMmfZE+ZL PaESjVtTdgLYBMMfFE77rrtMbY9H2Esv0Q4wGZE149e4WxTZd8JSq6WSe9/E4Xg4 +/Sj/A58hIJEd/qeSIV5KLogSlOUDkp5euTruwGsmwO+miIvMVa3f29SKpn2GWWs ztjlhvgdgiiejnsa/yh0th0u7giunv8zteoa/5nmbkkt/7/eks2ycsprbdz9d901 oypc3jzdssgvy2y5al1qkvxwz3c+n5dr6ekclrzthi0= -----END RSA PRIVATE KEY----- /c/slb/ssl/certs/key WebManagementCert /c/slb/ssl/certs/import key "WebManagementCert" text -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,5C5D0E9FA984F783 BD1syX/eoHWoL9Xb9t/F2w3Y7R30trgIMUXDB8e2BuwPgnM20EZ5tXmMqUS6hi1Z 6H79f3wjo6rK86A6rgg3GIUwt6fqzZi5PPBCkCF38IPskZnZG8iaAxzN++iG0gu7 oscqfidcc+sqowquuk0yofsxlr/5omgoktdr1sexbptjcew6p6tc71hrkjn1opba til/kifhhkayelhuq0uisd7olgio8f55+4u7fkwyimwhvto6bvyq0wyintqky64j ANG7/oo4jFNDqbPkivVQC5jKKPvxGEZkoOJQ6u5Toue5rhEhvGNpMUHkVaptI92S G9Hlhqqa6b3rIyonWoflP7h0vo6v2N3DxQFajkjO+7A7dBo4KDkobgJ4tp8vEhmC S72MJQwg0eqTGbZXszDSwiXzQW2l0qloj4fonCypkM7lwovnD035i4hx5vt3Iu0Q Zs0RDFmiTPn2D//Gdgw35aE49HJ5Vv3M+A0wnQir3F77aBK4EQIxfEv3IaAzYJ7s 7fBWp1fpk1HUdxaah4CwCPrfw5BXoc6cwwTv7iRsIgygUOqfmET6TEwbD/DPHa/O RbFvKXYEZA4WoqZA+TFXlPWtZ8uJMEOUmadOYp0V6POzFb+Z7J3AAHkbW+mFFX3K MwuNuRzt/pdkh6ur5adI6OULBU9R/sm/cUvQHqFvCNKDujgdx74gZQ+a4uLb75Ow Wz5djf0DJGBuFi93gIWMgtSZthfffgWpp002if+j9itUgZOqogCLYVELD50XKvGY bb67n7blzflolvus5vcun5jtxzmx9ebw6qo+a3xwuta= -----END RSA PRIVATE KEY----- /c/slb/ssl/certs/request 1 /c/slb/ssl/certs/import request "1" text -----BEGIN CERTIFICATE REQUEST----- MIIBbTCB1wIBADAuMR8wHQYDVQQDExZ3ZWJsb2dpYy5yYWR3YXJldm0uY29tMQsw 15

16 CQYDVQQGEwJJTDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuXGD/Db9cGaJ Ac7jIYxjB121gXVxkP3XdvtLiLazUjbWH93taPvLnpJDcwIKVgx/55XvEx36tWea r2lmqrziudm2mejv5e+sxcmlbq8t+xmbxu7otwbmyti5qybb1ncnjhxivyhztca+ ymaoos7pmc3ojrauo0zht3et4purag0caweaaaaama0gcsqgsib3dqebbquaa4gb ALOrasm4sHWGa8l4xN61J2THCBuI5VvzNmxNIIVEvEAFxEJFOTfyYogLc3Qe58SO 6TOcgskqtPZ6Zt4fX++sc5yegy3q8cnM8NU9eZTAZdPKwUdOU6xI8cROO2MVTzoi yodvdmhhypstydcyrzm6y3jq2ydaqnkvssws7mfs5pf END CERTIFICATE REQUEST----- /c/slb/ssl/certs/request WebManagementCert /c/slb/ssl/certs/import request "WebManagementCert" text -----BEGIN CERTIFICATE REQUEST----- MIIBazCB1QIBADAsMSowKAYDVQQDFCFEZWZhdWx0X0dlbmVyYXRlZF9BbHRlb25f QkJJX0NlcnQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALhpjZER5U5Q5zfv 8uZ1dappwnUO7BD7CmK/PXZQ+O15Romu/3EHmLTW7BvlXSTCxvZHe1zGX6Rr72IE 3C3gAVcii3U+vl0AM3YIPs4JYKCH/+TYLocV+E/lmxz5dnkI+xr1SczQSk64E2nP wm7yrnkbkzxoldi1tyzf0lu4mu4zagmbaaggadanbgkqhkig9w0baqqfaaobgqc2 OnlVmvCADYIWEJehVRvztZ5ojS/6cfgKEikWMDGTOJcfQsTa0k0SgdgRBNNIekTx ZUgqQpc2KVfSbV5SF0EnAqNhaXT0CIgFvxqfJFvz/cTYFxu5RZx/XaGMSAQX9s/M gbajngfkmplw1k4jf+zp3nf65gav3ymmtzyg9omnuw== -----END CERTIFICATE REQUEST----- /c/slb/ssl/certs/srvrcert 1 name "weblogic.radwarevm.com" /c/slb/ssl/certs/import srvrcert "1" text -----BEGIN CERTIFICATE----- MIICuDCCAiGgAwIBAgIET+b9LDANBgkqhkiG9w0BAQUFADAuMR8wHQYDVQQDExZ3 ZWJsb2dpYy5yYWR3YXJldm0uY29tMQswCQYDVQQGEwJJTDAeFw0xMjA2MjQxMzMx NTJaFw0xMzA2MjQxMzMxNTJaMC4xHzAdBgNVBAMTFndlYmxvZ2ljLnJhZHdhcmV2 bs5jb20xczajbgnvbaytaklmmigfma0gcsqgsib3dqebaquaa4gnadcbiqkbgqc5 cyp8nv1wzokbzumhjgmhxbwbdxgq/dd2+0uitrnsntyf3e1o+8uekknzagpwdh/n le8thfq1z5qvysxbhmi50zayqlxkt5jckytury37gzte7s5nygzi2lldjshwckeo FeK9gfO0Jr7KZo6izukxzegmsC47TOFPcRPim5EAbQIDAQABo4HiMIHfMA8GA1Ud EwEB/wQFMAMBAf8wEQYJYIZIAYb4QgEBBAQDAgJEMDIGCWCGSAGG+EIBDQQlFiNB bhrlb24vtm9ydgvsiedlbmvyyxrlzcbdzxj0awzpy2f0ztadbgnvhq4efgquv4tn EdqjHTLWPS+K4Q+uayzwsggwWQYDVR0jBFIwUIAUV4TNEdqjHTLWPS+K4Q+uayzw sgihmqqwmc4xhzadbgnvbamtfndlymxvz2ljlnjhzhdhcmv2bs5jb20xczajbgnv BAYTAklMggRP5v0sMAsGA1UdDwQEAwIC5DANBgkqhkiG9w0BAQUFAAOBgQBvCGfu 4usIeVwEoKMTFhFVdjwRXBXr6mWO1iG59pqi/797p8ZVbu0wi+LltQSQR/s1IscR MOWNno5hy3bWkBwT6c52iiyECjqqlDpmcybYlxDmlQcebAaVxfY5l5VHmguIShM7 r4tepwcujsi8rhfr6qrduwcfc4ck6aa7pekxrg== -----END CERTIFICATE----- /c/slb/ssl/certs/srvrcert WebManagementCert /c/slb/ssl/certs/import srvrcert "WebManagementCert" text -----BEGIN CERTIFICATE----- MIICsjCCAhugAwIBAgIET+b9KzANBgkqhkiG9w0BAQQFADAsMSowKAYDVQQDFCFE ZWZhdWx0X0dlbmVyYXRlZF9BbHRlb25fQkJJX0NlcnQwHhcNMTIwNjI0MTE0MjM1 WhcNMTMwNjI0MTE0MjM1WjAsMSowKAYDVQQDFCFEZWZhdWx0X0dlbmVyYXRlZF9B bhrlb25fqkjjx0nlcnqwgz8wdqyjkozihvcnaqebbqadgy0amigjaogbalhpjzer 5U5Q5zfv8uZ1dappwnUO7BD7CmK/PXZQ+O15Romu/3EHmLTW7BvlXSTCxvZHe1zG X6Rr72IE3C3gAVcii3U+vl0AM3YIPs4JYKCH/+TYLocV+E/lmxz5dnkI+xr1SczQ Sk64E2nPwM7yRNkbKZXOLdI1TYZf0lU4MU4ZAgMBAAGjgeAwgd0wDwYDVR0TAQH/ BAUwAwEB/zARBglghkgBhvhCAQEEBAMCAkQwMgYJYIZIAYb4QgENBCUWI0FsdGVv bi9ob3j0zwwgr2vuzxjhdgvkienlcnrpzmljyxrlmb0ga1uddgqwbbqqt46gmft1 xio2isgbtogat4whpdbxbgnvhsmeudbogbqqt46gmft1xio2isgbtogat4whpkew 16

17 pc4wldeqmcgga1ueaxqhrgvmyxvsdf9hzw5lcmf0zwrfqwx0zw9ux0jcsv9dzxj0 ggrp5v0rmasga1uddwqeawic5danbgkqhkig9w0baqqfaaobgqbehe+marfaa6vo MqrNPM+mBnTRYc2J1qOtTamyj4JYcEtCj7qwjfyMH5eJxsU1fw2Uqo6e9uWbLKFU d+krmn9vzodmnhawpjk4joenoftpatcumssu8lwudluwjvkehzw11oi+8tmhnb4j HHS0cp0g1ZkstUNIdPrDv16nm8LBhg== -----END CERTIFICATE----- /c/slb/sync/passphrs 8b3d3e838a281e01e2f6b6a2788baec2a81363ad8a1f93bdcb8731fa3345fa5a /c/slb/ssl on /c/slb/ssl/sslpol 1 name "SSL.pol" /c/slb on /c/slb/sync certs e state e update 1 /c/slb/sync/peer 1 addr /c/slb/real 1 rip name "Weblogic.1" /c/slb/real 2 rip name "Weblogic.2" /c/slb/group 1 metric roundrobin add 1 add 2 name "weblogic.group" /c/slb/pip/type vlan /c/slb/pip/type port /c/slb/pip/add /c/slb/port 1 client server proxy /c/slb/virt 1 vip vname "Weblogic.VIP" /c/slb/virt 1/service 443 https group 1 rport 7001 dbind forceproxy /c/slb/virt 1/service 443 https/http 17

18 comppol 1 /c/slb/virt 1/service 443 https/ssl srvrcert cert 1 sslpol 1 /c/slb/virt 1/service 80 http action redirect group 1 rport 0 redirect " dbind /c/slb/virt 1/service 443 https/pbind cookie passive "JSESSIONID" 1 30 disable /c/slb/virt 1/service 443 https/http/rcount 1 /c/sys/access/https/cert WebManagementCert /c/sys/access/https/https e / script end /**** DO NOT EDIT THIS LINE! Alteon backup configuration script /c/sys/mmgmt tftp mgmt /c/sys/access http tnet /c/port 1 pvid 501 /c/l2/vlan 1 learn def 2 /c/l2/vlan 501 name "501" learn def 1 /c/l2/stg 1/clear /c/l2/stg 1/add /c/sys/sshd/ /c/sys/sshd/on /c/l3/ addr vlan 501 /c/l3/vrrp/on /c/l3/vrrp/hotstan bled /c/l3/vrrp/vr 31 vrid 31 addr /c/l3/vrrp/vr 32 18

19 vrid 32 addr /c/l3/vrrp/vr 33 vrid 33 addr /c/l3/vrrp/group vrid 1 /c/slb/accel/compress on /c/slb/accel/compress/comppol 1 name "compression.pol" minsize 1024 /c/slb/ssl/certs/key 1 /c/slb/ssl/certs/import key "1" text -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,7A36B7FED3CD3F3C xsvp9fhvd6vhh/7yvti2ew47ric16onp2/rarozpv1ckxv7nmh7nq292kchd7eib nab72mlski1tu4nknotst7cfhe7hq/qx/ozkysrp6qjhcwtzdq/ffaugei7b3dx9 S01ILzL6NX2opd1uKE73pfbrG8uZRUaonS+hPHZtkQ45T6RPW5y0fNLBHoQVaQ3D pbmj0awp7gnzdjmv1mpvpfhqntwy5gb9x/dmhjfniymz/d5s9jxtvdj35agffd1v aumcpr9rwyvonxf+esm84ar4+9r2mxizd/1+k6ymdgcc3f6nqlrkju3zq5d2c8wj 0F7s3ZjmQ8j1GlK8IwlANVxPtaMtf6bJrWR+SIGpb/MS9GhDShA8o/Tm9DVL72db qeuy/5vvbzvlet4rlef5vkmaiir+6vkukkm6f2uxewbi/evhngju9ec1j8ef2u68 QYNPuaQ/MXZ1JQ6ek3URk1IxG8qL8HghSDqqu8AM0CyFtrpFj3BbfZ5pgamo+7bu B1/UX4KAq3TTurIcuVYcIIAPxSL7rynknh2XpsPNgwnuA5XFfD9i6KlSRfO6wDTB digf7mdi2uc2bqh71pvangrbjggbkdgcil6jma/uldh0f+1qhmekxuxudg93ucpc zkghbtui1d/y27nfeo+urng3y7ockwtz74pg+o2fah3tih5aja13hn1pyuf62sov qpyw+zzhai0i55q/ikrla29cktikkfqmwvp8wuugezgbnmminonrd3lybf2do70w ax6w/ctrwavjp/bigfezyvkmkio2ujuwawrgtec7veu= -----END RSA PRIVATE KEY----- /c/slb/ssl/certs/key WebManagementCert /c/slb/ssl/certs/import key "WebManagementCert" text -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,26D89F649F45C1B1 EvOiioh4F/tXMRY6BQVfIlj0Sts6gy/eHhah+Osn+R0FZ2yOtcqf0q4oakAyJxvz joxbtzn6clxvbjjlpcmwehi5lpwmtb13pgpkpjanwnmgytov/slqluear1lpe9+n HFlE8dmFDVJCcDATMCX6SWoq/+ZiS+PmUvTQF7RMb39JYiCNixB9XHm6Ky4jzhn0 i2wmfvuziq1wzu62ij2tqnwusqxij89k9nii4uu2sy4yozjxperdkfckskvxio/m TzAI+UTOwLKGFScGheQOFurHtJsHzir9ItITbBoCwBInXg9KhLdXHspsW6mEfyu7 knoqr/endb78c33la6xgaeodvouvwghrath2puqitknycic27yvvjxu8ckc9m5dd 19

20 ldmi9ysceigzynl7iq/hifqyno+nxbi3k5kc+ba9c507ixzhnem601pqwxljd9mo ZII02lIu1KNtAtXMk1fQD1cik/v5ubJSF14HUQXMO74hhe/OZ7/qdPi1EEAPg5Nr BHSw24MulAXD5LnfzZSlut7eux/aUnY2wa0BOF98XDLgYxsekPuLpOerxXgrP/N8 c84mrhluariormulnjbg/n3g8avaj9ujw/qk0luysx9h9xxm2mio6wht8axqzzbz hrvhr6dsox/esoskcblokvik4dxftkqtiq5pj0/lltex6de4/95rxnintdh2p3mk qm+t5xxnr/iymomy28nyzytcwrgfwlywakcadu7ivwlx9497stvlsib06ir6qbqw 8/N9bOPi6n2iccpWrI1ICZ+SmjSbBPsnjEfzmjFEvVc= -----END RSA PRIVATE KEY----- /c/slb/ssl/certs/request 1 /c/slb/ssl/certs/import request "1" text -----BEGIN CERTIFICATE REQUEST----- MIIBbTCB1wIBADAuMR8wHQYDVQQDExZ3ZWJsb2dpYy5yYWR3YXJldm0uY29tMQsw CQYDVQQGEwJJTDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuXGD/Db9cGaJ Ac7jIYxjB121gXVxkP3XdvtLiLazUjbWH93taPvLnpJDcwIKVgx/55XvEx36tWea r2lmqrziudm2mejv5e+sxcmlbq8t+xmbxu7otwbmyti5qybb1ncnjhxivyhztca+ ymaoos7pmc3ojrauo0zht3et4purag0caweaaaaama0gcsqgsib3dqebbquaa4gb ALOrasm4sHWGa8l4xN61J2THCBuI5VvzNmxNIIVEvEAFxEJFOTfyYogLc3Qe58SO 6TOcgskqtPZ6Zt4fX++sc5yegy3q8cnM8NU9eZTAZdPKwUdOU6xI8cROO2MVTzoi yodvdmhhypstydcyrzm6y3jq2ydaqnkvssws7mfs5pf END CERTIFICATE REQUEST----- /c/slb/ssl/certs/request WebManagementCert /c/slb/ssl/certs/import request "WebManagementCert" text -----BEGIN CERTIFICATE REQUEST----- MIIBazCB1QIBADAsMSowKAYDVQQDFCFEZWZhdWx0X0dlbmVyYXRlZF9BbHRlb25f QkJJX0NlcnQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALhpjZER5U5Q5zfv 8uZ1dappwnUO7BD7CmK/PXZQ+O15Romu/3EHmLTW7BvlXSTCxvZHe1zGX6Rr72IE 3C3gAVcii3U+vl0AM3YIPs4JYKCH/+TYLocV+E/lmxz5dnkI+xr1SczQSk64E2nP wm7yrnkbkzxoldi1tyzf0lu4mu4zagmbaaggadanbgkqhkig9w0baqqfaaobgqc2 OnlVmvCADYIWEJehVRvztZ5ojS/6cfgKEikWMDGTOJcfQsTa0k0SgdgRBNNIekTx ZUgqQpc2KVfSbV5SF0EnAqNhaXT0CIgFvxqfJFvz/cTYFxu5RZx/XaGMSAQX9s/M gbajngfkmplw1k4jf+zp3nf65gav3ymmtzyg9omnuw== -----END CERTIFICATE REQUEST----- /c/slb/ssl/certs/srvrcert 1 name "weblogic.radwarevm.com" /c/slb/ssl/certs/import srvrcert "1" text -----BEGIN CERTIFICATE----- MIICuDCCAiGgAwIBAgIET+b9LDANBgkqhkiG9w0BAQUFADAuMR8wHQYDVQQDExZ3 ZWJsb2dpYy5yYWR3YXJldm0uY29tMQswCQYDVQQGEwJJTDAeFw0xMjA2MjQxMzMx NTJaFw0xMzA2MjQxMzMxNTJaMC4xHzAdBgNVBAMTFndlYmxvZ2ljLnJhZHdhcmV2 bs5jb20xczajbgnvbaytaklmmigfma0gcsqgsib3dqebaquaa4gnadcbiqkbgqc5 cyp8nv1wzokbzumhjgmhxbwbdxgq/dd2+0uitrnsntyf3e1o+8uekknzagpwdh/n le8thfq1z5qvysxbhmi50zayqlxkt5jckytury37gzte7s5nygzi2lldjshwckeo FeK9gfO0Jr7KZo6izukxzegmsC47TOFPcRPim5EAbQIDAQABo4HiMIHfMA8GA1Ud EwEB/wQFMAMBAf8wEQYJYIZIAYb4QgEBBAQDAgJEMDIGCWCGSAGG+EIBDQQlFiNB bhrlb24vtm9ydgvsiedlbmvyyxrlzcbdzxj0awzpy2f0ztadbgnvhq4efgquv4tn EdqjHTLWPS+K4Q+uayzwsggwWQYDVR0jBFIwUIAUV4TNEdqjHTLWPS+K4Q+uayzw sgihmqqwmc4xhzadbgnvbamtfndlymxvz2ljlnjhzhdhcmv2bs5jb20xczajbgnv BAYTAklMggRP5v0sMAsGA1UdDwQEAwIC5DANBgkqhkiG9w0BAQUFAAOBgQBvCGfu 4usIeVwEoKMTFhFVdjwRXBXr6mWO1iG59pqi/797p8ZVbu0wi+LltQSQR/s1IscR MOWNno5hy3bWkBwT6c52iiyECjqqlDpmcybYlxDmlQcebAaVxfY5l5VHmguIShM7 r4tepwcujsi8rhfr6qrduwcfc4ck6aa7pekxrg== -----END CERTIFICATE

21 /c/slb/ssl/certs/srvrcert WebManagementCert /c/slb/ssl/certs/import srvrcert "WebManagementCert" text -----BEGIN CERTIFICATE----- MIICsjCCAhugAwIBAgIET+b9KzANBgkqhkiG9w0BAQQFADAsMSowKAYDVQQDFCFE ZWZhdWx0X0dlbmVyYXRlZF9BbHRlb25fQkJJX0NlcnQwHhcNMTIwNjI0MTE0MjM1 WhcNMTMwNjI0MTE0MjM1WjAsMSowKAYDVQQDFCFEZWZhdWx0X0dlbmVyYXRlZF9B bhrlb25fqkjjx0nlcnqwgz8wdqyjkozihvcnaqebbqadgy0amigjaogbalhpjzer 5U5Q5zfv8uZ1dappwnUO7BD7CmK/PXZQ+O15Romu/3EHmLTW7BvlXSTCxvZHe1zG X6Rr72IE3C3gAVcii3U+vl0AM3YIPs4JYKCH/+TYLocV+E/lmxz5dnkI+xr1SczQ Sk64E2nPwM7yRNkbKZXOLdI1TYZf0lU4MU4ZAgMBAAGjgeAwgd0wDwYDVR0TAQH/ BAUwAwEB/zARBglghkgBhvhCAQEEBAMCAkQwMgYJYIZIAYb4QgENBCUWI0FsdGVv bi9ob3j0zwwgr2vuzxjhdgvkienlcnrpzmljyxrlmb0ga1uddgqwbbqqt46gmft1 xio2isgbtogat4whpdbxbgnvhsmeudbogbqqt46gmft1xio2isgbtogat4whpkew pc4wldeqmcgga1ueaxqhrgvmyxvsdf9hzw5lcmf0zwrfqwx0zw9ux0jcsv9dzxj0 ggrp5v0rmasga1uddwqeawic5danbgkqhkig9w0baqqfaaobgqbehe+marfaa6vo MqrNPM+mBnTRYc2J1qOtTamyj4JYcEtCj7qwjfyMH5eJxsU1fw2Uqo6e9uWbLKFU d+krmn9vzodmnhawpjk4joenoftpatcumssu8lwudluwjvkehzw11oi+8tmhnb4j HHS0cp0g1ZkstUNIdPrDv16nm8LBhg== -----END CERTIFICATE----- /c/slb/sync/passphrs 895cedd48808cd00e2b7b4957aab7dc33b1583bac26464c8122b32b4f4a351be /c/slb/gslb/dnssec keymaster dis /c/slb/ssl on /c/slb/ssl/sslpol 1 name "SSL.pol" /c/slb on /c/slb/sync certs e state e update 1 /c/slb/sync/peer 1 addr /c/slb/real 1 rip name "Weblogic.1" /c/slb/real 2 rip name "Weblogic.2" /c/slb/group 1 metric roundrobin add 1 add 2 name "weblogic.group" /c/slb/pip/type vlan /c/slb/pip/type port 21

22 /c/slb/pip/add /c/slb/port 1 client server proxy /c/slb/virt 1 vip vname "Weblogic.VIP" /c/slb/virt 1/service 443 https group 1 rport 7001 dbind forceproxy /c/slb/virt 1/service 443 https/http comppol 1 /c/slb/virt 1/service 443 https/ssl srvrcert cert 1 sslpol 1 /c/slb/virt 1/service 80 http action redirect group 1 rport 0 redirect " dbind /c/slb/virt 1/service 443 https/pbind cookie passive "JSESSIONID" 1 30 disable /c/slb/virt 1/service 443 https/http/rcount 1 /c/sys/access/https/cert WebManagementCert /c/sys/access/https/https e / script end /**** DO NOT EDIT THIS LINE! 22

23 Technical Support Radware offers technical support for all of its products through the Radware Certainty Support Program. Please refer to your Certainty Support contract, or the Radware Certainty Support Guide available at: For more information, please contact your Radware Sales representative or: U.S. and Americas: (866) International: +972(3)