A10 Networks AX Series Quick reference guide

Deployment Guide
AX Series with
Oracle Application Server

T
able of Contents
Deployment Guide for Oracle Application Server
DEPLOYMENT GUIDE
AX Series with Oracle Applicaon Server
Introducon............................................................................................................... 1
Prerequisites & Assumpons .......................................................................................1
Configuring AX for Oracle Applicaon Server ................................ 2
Configuring Oracle Web Server on AX.................................................. 3
Configuring HTTP Health Monitor................................................................................3
Auto-Port Translaon...................................................................................................4
Real Server Configuraon ............................................................................................5
Service Group Configuraon........................................................................................7
Configuring Templates for Oracle Web Server............................... 8
HTTP Template Configuraon......................................................................................8
TCP Proxy Template Configuraon...............................................................................9
SSL Cerficate Configuraon .....................................................................................10
Configuring Client Template.......................................................................................11
Client SSL Template Configuraon ................................................................11
Configuring HTTPS Virtual Server ..............................................................................12
Summary and Conclusion ............................................................................. 14

Performance by Design
1
Deployment Guide for Oracle Application Server
Introducon
This deployment guide contains configuration procedures for AX Series server load balancers to support
Oracle Application Server.
Oracle Application Server is an integrated, standards-based software platform consisting of Oracle HTTP
Server and OC4J (OracleAS Containers for J2EE), which deploys J2EE-based applications. Oracle
Application Server Enterprise Edition is an application platform suite (APS) that offers a comprehensive
solution for developing, integrating, and deploying all of your enterprise’s applications, portals, and Web
sites. Enterprise Edition combines robust business integration, leading J2EE performance, capabilities
for enterprise portal, real-time business activity monitoring, business intelligence, identity management,
and wireless deployment.
For more information on Oracle Application Server Products visit:
http://www.oracle.com/appserver/enterprise_edition.html
The AX Series with its Advanced Core Operating System (ACOS) has been designed specifically for ap-
plications such as Oracle Application Server providing better robustness in failover situations, intelligent
load sharing and offloading security processing.
This guide used the AX Series 2.0.1 in routed mode and Oracle Application Server 11g.
Prerequisites & Assumpons
A10’s AX platform should be running software version 2.0 or later.•
It is assumed that users have some basic configuration familiarity with both AX and Oracle Ap-•
plication Server products.
The Oracle Application Server products used in this deployment guide are Oracle Web Server,•
Identity Manager and Single Sign-on. As the applications are accessed by users through the
Oracle Web Server, the deployment configuration below is for the Oracle Web Server.
The AX can be configured in one armed mode or routed mode.•

Performance by Design
2
Deployment Guide for Oracle Application Server
Configuring AX for Oracle Applicaon Server
Figure 2.1 Logical deployment topology
Figure 2.1 Logical deployment topology
Internet
Oracle Clients
AX Advanced Trac Manager
Oracle Web Server Oracle Single Sign On Oracle Identity Manager
Database Servers

Performance by Design
3
Deployment Guide for Oracle Application Server
Configuring Oracle Web Server on AX
Connect the AX devices to the network that consists of Oracle servers and configure the network routing
entries if the servers are in a different subnet, and follow the configuration steps below.
Configure HTTP Health Monitor•
Configure Real Server•
Configure Service Group•
Configure Template•
Configure Virtual Server•
Configuring HTTP Health Monitor
To configure HTTP Health Monitor for Oracle Web Server:
Select1. Config Mode > Service > Health Monitor
Click2. Add to configure new HTTP Health Monitor
On the3. Health Monitor tab, enter a name for the monitor in the Name field. In this example,
the name “Oracle-HTTP-HM” is used
In the4. Method section, select HTTP from the Type drop-down list
Configure optional fields as required for your deployment. In this example, the default Health5.
Monitor settings are used
Click6. OK to finish configuration of the Health Monitor. The Health Monitor appears in the health
monitor table

Performance by Design
4
Deployment Guide for Oracle Application Server
Figure 2.2 Health Monitor Configuration
Figure 2.2 Health Monitor Configuration
Auto-Port Translaon
The AX device allows you to use different port numbers for a real server port and its corresponding
virtual server port. The AX auto-port translation feature can automatically translate the port numbers
internally. In this example our VIP address 192.168.215.63:443 is bound with real server (192.168.216.60)
port 7777, the default port for Oracle HTTP Server. The AX device translates the VIP address into the
real server IP address, and translates the virtual service port number into the real service port number, to
interact with the real server on the client’s behalf.
Note: For standard port numbers (port numbers 0-1023), no additional configuration is required for auto-
port translation. For example, if the VIP service port number is 80 and the real port number is 542, no
additional configuration is required.

Performance by Design
5
Deployment Guide for Oracle Application Server
To configure Auto-Translate Port:
Select1. Config Mode > Service > SLB
On the menu bar, select2. Global > Auto Translation
Click on one of the range names. The3. Auto Translation screen appears
Note: If a range has already been configured for use by non-standard port numbers, do not reconfigure this
range. Instead, select an un-configured range.
Edit the port numbers in the4. Start Port and End Port fields, based on the guidelines described
above
Click5. OK
Figure 2.3 Auto-Port Translation Configurations
Figure 2.3 Auto-Port Translation Configurations
Real Server Configuraon
In this step we configure the Real Oracle Application Server and we configure a HTTP Health Monitor on
the service port.
To configure a Real Server:
Select1. Config Mode > Service > SLB
Select2. Server on the menu bar
Click3. Add. The General tab appears
In the4. Name field, enter a name for the server. In this example, the name is “Oracle”
In the5. IP Address field, enter the IP address of the server. In this example we type
“192.168.216.60”
In the6. Health Monitor drop-down list, leave the default health monitor for layer 3, which is ping

Performance by Design
6
Deployment Guide for Oracle Application Server
to the server’s IP address
In the7. Port field, enter the number of the service port on the real server. In this example, the
port number is “7777”
In the8. Health Monitor (HM) drop-down list for the port, select the previously configured
“Oracle-HTTP-HM” Health Monitor
Click9. Add to add the port to the Port list for the server
Click10. OK. The real server appears in the server table
Repeat this procedure for each of the real Oracle Application servers11.
Figure 2.4 Real Server Configuration
Figure 2.4 Real Server Configuration

Performance by Design
7
Deployment Guide for Oracle Application Server
Service Group Configuraon
A Service Group contains a set of real servers from which the AX device can select to service client
requests. A service group allows you to virtually support multiple servers as one logical server.
To configure a service group:
Select1. Config Mode > Service > SLB
Select2. Service Group on the menu bar
Click3. Add. The Service Group tab appears
In4. Name field, enter name of Service Group. In this example, the name is “Oracle-HTTP”
In the5. Algorithm drop-down list, select the preferred load-balancing method. You can control
the load on each server by selecting the appropriate type of load balancing methods. For this
configuration, Round Robin is used
On the6. Server drop down, select a configured real server from the drop-down list
In the7. Port field, enter the port “7777”
Click8. Add. Repeat steps 6-8 for each real server
Click9. OK. The new group appears in the Service Group table
Figure 2.5 Service Group Configuration
Figure 2.5 Service Group Configuration

Performance by Design
8
Deployment Guide for Oracle Application Server
Configuring Templates for Oracle Web Server
Templates are sets of configuration parameters that apply to specific service types or to servers and ser-
vice ports. Even though in some cases default templates can be used, it is recommended that you create
templates specifically allowing you to change the templates in the future without impacting the default
templates, which others may be sharing also. For this deployment, the following types of templates are
used:
HTTP Template•
TCP-Proxy Template•
Client SSL Template•
HTTP Template Configuraon
Select1. Config Mode > Service > Template
Select2. Application > HTTP from the drop down menu bar. The Template >> HTTP >> List
screen appears
Click3. Add. The Template >> HTTP >> Create screen appears
Enter a name for the template in the4. Name field. In our example we type “Oracle-HTTP-Temp”
Select or enter values for the template options you want to use. In this example, the default5.
values are used for the remaining options
Click6. OK to finish configuration and the template now appears in the HTTP template list
Figure 2.6 HTTP Template Configuration
Figure 2.6 HTTP Template Configuration

Performance by Design
9
Deployment Guide for Oracle Application Server
TCP Proxy Template Configuraon
TCP-proxy templates control TCP stack settings such as the idle timeout for TCP connections. We will
use this template on a virtual server port.
To configure a TCP-Proxy template:
Select1. Config Mode > Service > Template
Click2. TCP Proxy on the top menu bar
Click3. Add to configure new template
In the4. Name field, enter a name for new template. In this example we type “Oracle-TCPProxy”
In the5. Idle Timeout field, the default value is “600” seconds but we are using “1200”. The other
default settings are used in this example
Click6. OK
Figure 2.7 TCP Proxy Template
Figure 2.7 TCP Proxy Template

Performance by Design
10
Deployment Guide for Oracle Application Server
SSL Cerficate Configuraon
In this section we will configure SSL Certificate for Client SSL Template. You can also import a certificate
from a remote location.
To configure SSL Certificate:
Select1. Config Mode > Service > SSL Management
Click2. Create. The SSL Management >> Certificate >> Create screen appears
In the3. File Name field, type the name for the SSL certificate. In this example, the name is
“Oracle-Client-SSL”
On the4. Certificate section there is an Issuer drop-down list, use the default option of Self
from drop-down list
In the5. Common Name field, enter a name for the certificate. In this example we type “Oracle”
Fill in any additional required data and in the6. Key section select the Key Size from drop down
list. The default is 1024 bits
Click7. OK
Figure 2.8 SSL Certificate
Figure 2.8 SSL Certificate

Performance by Design
11
Deployment Guide for Oracle Application Server
Configuring Client Template
In this section we configure the Client SSL Template using the previously configured SSL certificate. As
we are using a client side HTTPS and server side HTTP configuration in this Deployment Guide, we will
configure these templates on the virtual server.
Client SSL Template Configuraon
Client SSL Template Configuraon
To configure Client SSL Template:
Select1. Config Mode > Service > Template
Select2. SSL > Client SSL from the top menu bar and drop down
Click3. Add. The Template >> Client SSL >> Create screen appears
In the4. Name field, enter “Oracle-Client” name for SSL Client Template
In the5. Certificate Name drop-down list, select the “Oracle-Client-SSL” certificate configured
above
In the6. Key Name field, select the key configured above. In this example key is “Oracle-Client-
SSL”
In the7. Cache Size field, default value is “0” but we are using “10” in this example
Click8. OK. The new template appears in the Client SSL template list
Figure 2.9 Client SSL Template
Figure 2.9 Client SSL Template

Performance by Design
12
Deployment Guide for Oracle Application Server
Configuring HTTPS Virtual Server
In this step we configure a Virtual Server. We are using a secure connection so we need to select the
HTTPS type for the Virtual Server and also need to bind all previously configured templates on the Vir-
tual Server port 443 (HTTPS).
To configure a Virtual Server:
Select1. Config Mode > Service > SLB
Select2. Virtual Server on the menu bar
Click3. Add. The General tab appears
In the4. Name field, enter a name for the Virtual Server. In this example, the Name is “Oracle-
VS”
In the5. IP Address field, enter the IP address that clients will request. In this example we use
“192.168.215.63”
Figure 2.10 Virtual Server Configuration
Figure 2.10 Virtual Server Configuration
On the6. Port section, click Add. The Virtual Server Port tab appears
In the7. Type drop-down list, select HTTPS type for Virtual Server
In the8. Port field, leave “443” as the default port number for the HTTPS type
In the9. Service Group drop-down list, select the service group “Oracle-HTTP” from list
Figure 2.11 Virtual Server Configuration (Continuation)
Figure 2.11 Virtual Server Configuration (Continuation)

Performance by Design
13
Deployment Guide for Oracle Application Server
The default10. Virtual Server Port Template is used for the service port, so leave default se-
lected
In the11. HTTP Template drop-down list, select “Oracle-HTTP-Temp” template configured above
In the12. Client-SSL Template drop-down list, select the “Oracle-Client” template configured
above
In the13. TCP-Proxy Template field, select the “Oracle-TCPProxy” template configured above
Figure 2.12 Virtual Server Configuration (Continuation)
Figure 2.12 Virtual Server Configuration (Continuation)
Click14. OK. The port appears in the Port list of the Port section
Figure 2.13 Virtual Server Configuration (Continuation)
Figure 2.13 Virtual Server Configuration (Continuation)
Click15. OK. The Virtual Server appears in the Virtual Server table
Click16. Save to save the configuration changes to the startup-config

Performance by Design
14
Deployment Guide for Oracle Application Server
Summary and Conclusion
The configuration steps described above show how to set up the AX device for Oracle Application
Server. The key advantages for using AX Series in the deployment for Oracle are:
Transparent application load sharing•
Multiple Oracle Application Web Servers can be pooled together without any changes to how users◦
access the applications.
Availability
•
Obtain higher availability when Web Servers fail so that there is no direct impact to how users access◦
the applications.
Performance for users accessing Oracle applications using Web browser
•
Achieve higher connection throughput and faster end user responsiveness by offloading security◦
processing to the AX device.
The AX Series Advanced Traffic Manager provides significant benefits for all users of the Oracle Applica-
tion Server. For more information about AX Series products, refer to:
http://a10networks.com/products/axseries.php
http://a10networks.com/resources/solutionsheets.php
http://a10networks.com/resources/casestudies.php

© 2009 A10 Networks, Inc. All rights reserved
About A10 Networks
A10 Networks was founded in 2004 with a mission to provide innovative networking and security
solutions. A10 Networks makes high-performance products that help organizations accelerate,
optimize and secure their applications. A10 Networks is headquartered in Silicon Valley with offices
in the United States, Europe, Japan, China, Korea and Taiwan. For more information, visit
www.a10networks.com.
Performance by Design
To learn more about the AX
Series Advanced Traffic Manager
and how to improve applica-
tion performance up to 8 times
faster while enhancing reliability
and security, visit A10 Networks’
website at:
www.a10networks.com
Or call and talk to an
A10 sales representative:
Corporate Headquarters
A10 Networks, Inc.
2309 Bering Drive
San Jose, CA 95131
Tel: [phone]
Fax: [phone]
North America Sales:
+1 888 A10-6363
[phone]
Europe, Middle East &
Africa Sales:
[phone]
Asia Pacific Sales:
China, Beijing Office:
[phone]
China, Shanghai Office:
[phone]
Japan Sales:
[phone]
Korea Office:
[phone]
[phone]
Taiwan Office:
[phone]