Array Network - Webui

ArrayOS APV 8.
4
WebUI Handbook
Copyright Statement
Copyright Statement
Copyright©2014 Array Networks, Inc., 1371 McCarthy Blvd, Milpitas, California 95035, USA.
All rights reserved.
This document is protected by copyright and distributed under licenses restricting its use, copying,
distribution, and compilation. No part of this document may be reproduced in any form by any
means without prior written authorization of Array Networks, Inc. Documentation is provided “as
is” without warranty of any kind, either express or implied, including any kind of implied or
express warranty of non-infringement or the implied warranties of merchantability or fitness for a
particular purpose.
Array Networks, Inc., reserves the right to change any products described herein at any time, and
without notice. Array Networks, Inc. assumes no responsibility or liability arising from the use of
products described herein, except as expressly agreed to in writing by Array Networks, Inc. The
use and purchase of this product does not convey a license to any patent copyright, or trademark
rights, or any other intellectual property rights of Array Networks, Inc.
Warning: Modifications made to the Array Networks unit, unless expressly approved by
Array Networks, Inc., could void the user’s authority to operate the equipment.
Declaration of Conformity
We, Array Networks, Inc., 1371 McCarthy Blvd, Milpitas, CA 95035, 1-866-992-7729; declare
under our sole responsibility that the product(s) Array Networks, Inc., Array Appliance complies
with Part 15 of FCC Rules. Operation is subject to the following two conditions: (1) this device
may not cause harmful interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
Warning: This is a Class A digital device, pursuant to Part 15 of the FCC rules. These limits
are designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment generates, uses, and
can radiate radio frequency energy, and if not installed and used in accordance with the
instruction manual, may cause harmful interference to radio communications. In a
residential area, operation of this equipment is likely to cause harmful interference in which
case the user may be required to take adequate measures or product. In a domestic
environment this product may cause radio interference in which case the user may be
required to take adequate measures.
2014 Array Networks, Inc.

All Rights Reserved. I
About Array Networks
About Array Networks

Array Networks is a global leader in networking solutions for connecting users and applications
while ensuring performance, availability and security. Using Array, companies can provide access
for any user, anywhere, on any device to applications, desktops and services running in either the
cloud or the enterprise data center. From Web sites to e-commerce to enterprise applications to
cloud services, Array solutions deliver a premium end-user experience and demonstrable security
while ensuring that revenue and productivity gains always outweigh CAPEX and OPEX.
Engineered for the modern data center, Array Networks application, desktop and cloud service
delivery solutions support the scalability, price-performance, software agility and leading-edge
feature innovation essential for successfully transforming today's challenges in mobile and cloud
computing into opportunities for mobilizing and accelerating business.
Contacting Array Networks

Please use the following information to contact us at Array Networks:
 Website:
http://www.arraynetworks.com/
 Telephone:
1-866-MY-ARRAY
877-992-7729 (Support)
408-240-8700
408-240-8753 (Fax)
Telephone access to Array Networks, Inc. is available Monday through Friday, 9 A.M. to 5 P.M.
PST.
 E-mail:
info@arraynetworks.com
 Address:
1371 McCarthy Boulevard
Milpitas, California 95035, USA

All Rights Reserved. II
Revision History
Revision History
Date Description
April 26, 2013 GA release.
June 27, 2013 Added revision history.

All Rights Reserved. III
Table of Contents
Table of Contents
Copyright Statement ......................................................................................................................... I
Declaration of Conformity ................................................................................................................ I
About Array Networks ..................................................................................................................... II
Contacting Array Networks ............................................................................................................. II
Revision History ............................................................................................................................. III
Table of Contents ............................................................................................................................IV
Chapter 1 Initial System Setup & Configuration .............................................................................. 1
1.1 Overview ............................................................................................................................. 1
1.2 Enabling the WebUI through CLI ....................................................................................... 1
1.3 Accessing the WebUI.......................................................................................................... 2
1.4 Registering the Array Networks Product ............................................................................ 2
1.5 Logging In to the WebUI .................................................................................................... 2
1.6 Initial System Setup ............................................................................................................ 3
1.6.1 Setting the Host Name ............................................................................................. 4
1.6.2 Setting the Date and Time ........................................................................................ 4
1.6.3 Setting the NTP ........................................................................................................ 4
1.7 Basic Network Configurations ............................................................................................ 5
1.7.1 Configuring the Network Interface .......................................................................... 5
1.7.2 Configuring Routes .................................................................................................. 5
Chapter 2 Advanced Network Configuration ................................................................................... 6
2.1 Configuring NAT ................................................................................................................ 6
2.2 Configuring IP Region ........................................................................................................ 7
2.2.1 Importing an IP Region Table File ........................................................................... 7
2.3 Configuring the IP Pool ...................................................................................................... 7
2.4 Configuring Port Forwarding .............................................................................................. 7
2.4.1 Configuring TCP Port Forwarding ........................................................................... 7
Chapter 3 Link Aggregation ............................................................................................................. 9
3.1 Adding a Bond Interface ..................................................................................................... 9

All Rights Reserved. IV
Table of Contents
3.2 Adding an Interface to the Bond Interface .......................................................................... 9
Chapter 4 Clustering ....................................................................................................................... 11
4.1 Clustering SLB VIPs in Active-Standby Mode ................................................................ 11
4.1.1 Configuring SLB .................................................................................................... 11
4.1.2 Configuring the Virtual Cluster ID ........................................................................ 11
4.1.3 Configuring Virtual Cluster Preemption ................................................................ 12
4.1.4 Defining the VIP of the Cluster.............................................................................. 12
4.1.5 Defining the priority............................................................................................... 12
4.1.6 Enabling the Cluster ............................................................................................... 13
Chapter 5 High Availability (HA)................................................................................................... 14
5.1 Configuring Unit1 ............................................................................................................. 14
5.1.1 Configuring SLB .................................................................................................... 14
5.1.2 Configuring IP Pools for SLB Services ................................................................. 14
5.1.3 Configuring HA Units and Links ........................................................................... 15
5.1.4 Configuring the Floating IP Group ........................................................................ 15
5.1.5 Configuring the Unit Priority in the Floating IP Group ......................................... 16
5.1.6 Configuring Preempt Mode.................................................................................... 16
5.1.7 Enabling the Group ................................................................................................ 17
5.1.8 (Optional) Configuring Health Check Conditions ................................................. 17
5.1.9 (Optional) Configuring the Failover Decision Rule ............................................... 17
5.1.10 (Optional) Enabling SSF ...................................................................................... 17
5.1.11 (Optional) Configuring the Synchronization Mode ............................................. 17
5.1.12 (Optional) Enabling the HA Log .......................................................................... 17
5.1.13 Enabling HA and Writing the Configurations into Memory ................................ 17
5.2 Configuring Unit2 ............................................................................................................. 18
5.2.1 Enabling FFO Link ................................................................................................ 18
5.2.2 Configuring the Synchronization Mode ................................................................. 18
5.2.3 (Optional) Enabling SSF ........................................................................................ 18
5.2.4 Enabling HA .......................................................................................................... 18

All Rights Reserved. V
Table of Contents
Chapter 6 Server Load Balancing (SLB) ........................................................................................ 19
6.1 Adding a Real Service....................................................................................................... 19
6.2 Adding a Group and Defining Its Method ........................................................................ 19
6.3 Adding a Real Service to the Group.................................................................................. 20
6.4 Adding a Virtual Service................................................................................................... 20
6.5 Associating the Virtual Service With a Group and Defining a Policy .............................. 20
Chapter 7 Reverse Proxy Cache...................................................................................................... 22
7.1 Basic Cache Settings ......................................................................................................... 22
7.2 Enabling the Cache Function on a Virtual Service ........................................................... 22
7.3 Configuring Cache Filter................................................................................................... 22
7.4 Enabling Cache Filter ........................................................................................................ 23
Chapter 8 HTTP Content Rewrite ................................................................................................... 24
8.1 Configuring SLB ............................................................................................................... 24
8.2 Enabling HTTP Content Rewrite Globally ....................................................................... 24
8.3 Enabling HTTP Content Rewrite on a Virtual Service ..................................................... 25
8.4 Configuring the HTTP Content Rewrite Rule................................................................... 25
8.5 Configuring the File Type to Be Rewritten ....................................................................... 26
8.6 Configuring the Status Code ............................................................................................. 26
Chapter 9 DNS Cache ..................................................................................................................... 27
9.1 Configuring SLB ............................................................................................................... 27
9.2 Enabling DNS Cache ........................................................................................................ 27
9.3 (Optional) Adding a Static DNS Cache Entry .................................................................. 27
Chapter 10 HTTP Compression ...................................................................................................... 29
10.1 Enabling HTTP Compression Globally .......................................................................... 29
10.2 Enabling HTTP Compression on a Virtual Service ........................................................ 29
10.3 Configuring Advanced HTTP Compression ................................................................... 29
10.4 Configuring URL-Exclude HTTP Compression Rule .................................................... 30
Chapter 11 Secure Sockets Layer (SSL) ......................................................................................... 32
11.1 Creating an SSL Virtual Host ......................................................................................... 32

All Rights Reserved. VI
Table of Contents
11.2 Applying for a Certificate for the SSL Virtual Host ....................................................... 32
11.3 Importing a Key and Certificate for the SSL Virtual Host.............................................. 34
11.3.1 Importing a Key for the SSL Virtual Host ........................................................... 34
11.3.2 Importing a Certificate for the SSL Virtual Host ................................................. 34
11.4 Enabling the SSL Virtual host......................................................................................... 34
11.5 Creating an SSL Real Host ............................................................................................. 34
11.6 Enabling the SSL Real Host............................................................................................ 35
Chapter 12 Quality of Service (QoS) .............................................................................................. 36
12.1 Specifying the QoS Interface .......................................................................................... 36
12.2 Creating a QoS Queue..................................................................................................... 37
12.3 Defining a QoS Rule ....................................................................................................... 37
12.4 Enabling QoS .................................................................................................................. 38
Chapter 13 Link Load Balancing (LLB) ......................................................................................... 39
13.1 Configuring Interface IP Address ................................................................................... 39
13.2 Configuring MNET ......................................................................................................... 39
13.3 Configuring LLB Links................................................................................................... 40
13.3.1 Adding LLB Links Bound to ISP1 and ISP2 ....................................................... 40
13.3.2 Configuring Additional LLB Health Check ......................................................... 40
13.3.3 Enabling LLB Health Check ................................................................................ 41
13.3.4 Configuring the Load Balancing Method............................................................. 41
13.3.5 Configuring Bandwidth Priority........................................................................... 41
13.4 Configuring Eroutes ........................................................................................................ 41
13.5 Configuring NAT ............................................................................................................ 42
13.6 Enabling IPflow and RTS ............................................................................................... 42
Chapter 14 Global Server Load Balancing (GSLB)........................................................................ 43
14.1 General Configurations on APV1 and APV2 ................................................................. 43
14.1.1 Adding CDN Sites................................................................................................ 43
14.1.2 Adding DPS Detectors ......................................................................................... 44
14.1.3 Other General Settings ......................................................................................... 44

All Rights Reserved. VII
Table of Contents
14.2 Configurations on the SDNS DPS Master (APV1) ......................................................... 44
14.2.1 Configuring APV1 as the SDNS DPS Master...................................................... 44
14.2.2 Adding DPS Members ......................................................................................... 45
14.2.3 Configuring the DPS Dynamic Proximity Method .............................................. 45
14.3 Configurations on the SDNS DPS Slave (APV2) ........................................................... 45
14.3.1 Configuring the DPS Dynamic Proximity Method .............................................. 45
14.4 Enabling DPS Detectors.................................................................................................. 45
Chapter 15 Access Control ............................................................................................................. 47
15.1 Adding an Access Control List (ACL) Rule ................................................................... 47
15.2 Configuring an Access Group ......................................................................................... 47
15.3 Enabling WebWall .......................................................................................................... 48
Chapter 16 Advanced IPv6 Configuration ...................................................................................... 49
16.1 Configuring the IP Pool .................................................................................................. 49
16.2 Configuring SLB ............................................................................................................. 49
16.3 Configuring DNS64 ........................................................................................................ 49
16.4 Configuring NAT64 ........................................................................................................ 50
Chapter 17 ePolicy .......................................................................................................................... 51
17.1 Importing Setting Scripts ................................................................................................ 51
17.2 Importing Runtime Scripts .............................................................................................. 51
17.3 Associating the Virtual Service with the Setting Script .................................................. 52
17.4 Associating the Virtual Service with the Runtime Script................................................ 52
Chapter 18 Logging ........................................................................................................................ 53
18.1 General Configurations ................................................................................................... 53
18.2 Configuring Syslog Servers ............................................................................................ 53
18.2.1 Adding a Syslog Server ........................................................................................ 53
18.2.2 Configuring Log Filter ......................................................................................... 53
Chapter 19 Administrative Tools .................................................................................................... 55
19.1 Viewing the Flight Deck ................................................................................................. 55
19.2 Configuring External Authentication .............................................................................. 55

All Rights Reserved. VIII
Table of Contents
19.3 Importing the System License ......................................................................................... 55
19.4 Updating the System ....................................................................................................... 55
19.5 Configuring parameters for the ping command .............................................................. 56
19.6 Shutting Down or Rebooting the System ........................................................................ 56
Appendix I Abbreviations ............................................................................................................... 57

All Rights Reserved. IX
Chapter 1 Initial System Setup & Configuration
1.1 Overview
The APV Web User Interface (WebUI) is designed to maximize the functionality and performance
of the APV appliance by allowing administrators to configure and control key functions of the
APV appliance.
This chapter describes basic WebUI operations, including how to enable and access the WebUI,
register the product, log in to the WebUI, and perform initial configurations for the APV
appliance.
1.2 Enabling the WebUI through CLI

To connect to the APV appliance through CLI, make sure that the terminal software is configured
as follows:
Setting Value
Emulation VT 100
Baud 9600
Number of Bits 8
Parity No
Stop Bits 1
Flow Control No
In the CLI interface, you will be first prompted for the user name and password (default to array
and admin). After you log in successfully, the “AN>” prompt will be displayed. Enter the
“enable” command to go to the Enable mode, and the “AN#” prompt will be displayed. Continue
to enter the “configure terminal” command to go to the Config mode, and the “AN(config)#”
prompt will be displayed.
Then, execute the following commands to complete necessary network settings and enable the
WebUI function:
Command Description
ip address Sets the IP address and netmask of the system
{system_ifname|mnet_ifname|vlan_ifname interface, MNET interface, VLAN interface or bond
|bond_ifname} <ip_address> <netmask> interface.
webui ip <ip_address> Sets the WebUI IP address.
ip route default <gateway_ip> Sets the default gateway IP address.
webui {on|off} Enables or disables the WebUI function.
Example:
AN>enable
AN#config terminal

All Rights Reserved. 1
AN(config)#ip address outside 10.3.70.100 255.255.255.0

AN(config)#webui ip 10.3.70.100
AN(config)#ip route default 10.10.0.1
AN(config)#webui on
1.3 Accessing the WebUI

Before accessing the WebUI, make sure that you have enabled the WebUI through CLI as
described in Section 1.2 “Enabling the WebUI through CLI”.
To access the WebUI, enter the address in the format of “https://WebUI IP address:port number”
in the address bar of the browser, for example, https://10.10.0.2:8888. Then, press Enter.
In the pop-up dialog box, enter the user name and password, which are array and admin by default.
Click the OK button. Next, Array Networks will invite you to register your Array product.
The APV appliance WebUI supports the following browsers:
IE (Recommended)
Firefox
Chrome
1.4 Registering the Array Networks Product

At the first time you login to the Array product, you will be prompted to register your product.
It is recommended that you register your product immediately. To do so, click the Register Now
button in the pop-up message box. A short questionnaire will be displayed. Fill in the
questionnaire and click the Register button to complete registration.
If you click the Register Later or Never Register button, you will skip the registration step and
go to the login step, which is described in the following section. You can register your product in
the future by selecting Home > Basic Information and clicking the Register Now action link in
the System Information area.
1.5 Logging In to the WebUI

After the registration step, the APV appliance will prompt you for an Enable level password. Enter
the password properly (null by default), and click the Login button. Then, the home page of the
WebUI will become available, as shown in the figure below.

Figure 1-1 Home Page of the WebUI
The WebUI consists of three parts: top bar, side bar, and configuration window.
The top bar displays information such as user name and APV appliance host name, and several
commonly used action links. The side bar is on the left of the WebUI and displays the user access
mode and features organized into groups. The configuration window displays the detailed
configuration options, results, and statistics of a specific feature.
Note:
 The Chinese characters are unsupported on the WebUI.
 Only one user can be in Config mode at the same time. If the user shuts down the
browser or changes the system time, the user may be unable to enter the Config mode
before the Config mode session exceeds the timeout value. If the user needs to enter the
Config mode by force, select Admin Tools > System Management > Access Control
and click Reset in the Config Mode Settings area.
1.6 Initial System Setup

This section describes how to initialize the APV appliance, including setting the host name, date
and time, and NTP.

1.6.1 Setting the Host Name

In Config mode, select System Configuration > General Settings > Host Settings. Enter the
host name in the Host Name text box. Click the Save Changes button. The new host name takes
effect immediately.
Note: To save the configurations you have made into system memory, click the Save
Config action link in the top bar, which is available only when you are in Config mode.
1.6.2 Setting the Date and Time

In Config mode, select System Configuration > General Settings > Date/Time. Specify the date,
time, and time zone. Click the Save Changes button. The new setting takes effect immediately.
By default, Greenwich Mean Time (GMT) is adopted. To use another time zone, clear the GMT
check box and set the time zone from the Continent, Country, and Timezone drop-down lists.
1.6.3 Setting the NTP

By default, the Network Time Protocol (NTP) is disabled. After the NTP is enabled, the APV
appliance automatically synchronizes time with the specified NTP server every 15 minutes.
To add an NTP server, select System Configuration > General Settings > NTP in Config mode
and click the Add action link, as shown in the figure below.
Figure 1-2 NTP Settings
On the page that is displayed, enter the IP address of the NTP server and select the NTP server
version from the drop-down list. Click the Save action link. The added NTP server will be
displayed in the NTP Servers table.
Select the Enable NTP check box. Click the Save Changes button. A system warning will be
displayed. Read the warning carefully and perform operations accordingly.

1.7 Basic Network Configurations

This section describes how to complete basic network configurations so that the APV appliance
can properly connect to the network.
1.7.1 Configuring the Network Interface

In Config mode, select System Configuration > Basic Networking > Interface > Port. In the
Interface Settings area, select the interface to be configured from the Port ID drop-down list.
Specify other required parameters properly. Click the Save Changes button.
1.7.2 Configuring Routes

In Config mode, select System Configuration > Basic Networking > Routing. Here, you can
select the sub-tabs for different routing configurations.
For APV4600, you can select System Configuration > Basic Networking > Switch to configure
the switch web link of the APV appliance.
Basic network configurations also include other items such as ARP, DNS, and name resolution
host. For more configuration examples, refer to the APV User Guide.

Chapter 2 Advanced Network Configuration

Advanced network configuration includes NAT, IP region, IP pool, and port forwarding. The
following sections describe the detailed configuration procedures.
2.1 Configuring NAT

The APV appliance supports static NAT, port-level NAT, IP pool-based dynamic NAT, and
destination IP based NAT. Because the configurations of these types of NAT are similar, the
following takes port-level NAT as an example to describe the procedure:
In Config mode, select System Configuration > NAT. Click the Add NAT Port action link in
the NAT Port Configuration area. The page for configuring port-level NAT becomes available,
as shown in the figure below.
Figure 2-1 Port-Level NAT Configuration
Specify the parameters properly.
Note:
 To configure port-level NAT, do not select the Destination Based NAT check box.
 In port-level NAT, parameter Network IP is the source IP address, that is, the IP
address of the real server. In addition, the value of parameter Netmask/Prefix
Length should be that of the source IP address.
 The default gateway value is 0.0.0.0, which is valid only when the virtual IP address
and the route gateway are in the same network segment. If not, the gateway value
must be configured as the route gateway.
Click the Save action link. The added NAT entry will be displayed in the NAT Port
Configuration table.

2.2 Configuring IP Region

This section takes how to import an IP region table file into the APV appliance as an example to
describe the configuration procedure of IP region.
2.2.1 Importing an IP Region Table File

You can import an IP region table file into the APV appliance from local, by FTP, or by HTTP.
In Config mode, select System Configuration > Advanced Networking > IP Region. In the IP
Region Table area, select the import mode and specify the required parameters. Click the Import
action link. The imported IP region table will be displayed in the adjacent table, as shown in the
figure below.
Figure 2-2 IP Region Table Import
2.3 Configuring the IP Pool

This section describes how to add an IP pool on the APV appliance.
In Config mode, select System Configuration > Advanced Networking > IP Pool. In the Add
IP Pool area, specify the Pool Name, Start IP, and End IP parameters and click the Add action
link. The added IP pool will be displayed in the IP Pools List table.
2.4 Configuring Port Forwarding

The APV appliance supports both TCP and UDP port forwarding. This section takes how to
configure TCP port forwarding as an example to describe the configuration procedure.
2.4.1 Configuring TCP Port Forwarding

In Config mode, select System Configuration > NAT > Port Forwarding > TCP/UDP. Click
the Add TCP Entry action link in the TCP Port Forwarding area. The page for adding a TCP
port forwarding entry becomes available, as shown in the figure below.

Figure 2-3 Adding a TCP Port Forwarding Entry
Specify the parameters as required and click the Save action link. The added entry will be
displayed in the table of the TCP Port Forwarding area.
Then, select System Configuration > NAT > Port Forwarding > Mode to configure the port
forwarding mode. The default mode is transparent, in which the APV appliance uses the IP
address of the client as the source IP address for port forwarding. The APV appliance also
supports the non-transparent mode, in which the APV appliance uses its own management IP
address as the source IP address for port forwarding.
Advanced network configuration items may be required by a specific feature such as Server Load
Balancing (SLB). Therefore, you need to configure the items according to the actual networking
environment. For more configuration examples, refer to the APV User Guide.

Chapter 3 Link Aggregation

The combination of physical links into a single logical link is referred to as link aggregation. This
chapter describes how to configure link aggregation by adding a bond interface on the APV
appliance.
3.1 Adding a Bond Interface

In Config mode, select System Configuration > Basic Networking > Interface > Link
Aggregation. The page for configuring bond interfaces will be displayed, as shown in the figure
below.
Figure 3-1 Adding a Bond Interface
In the Interface Settings area, select a bond ID from the Bond ID drop-down list, specify the
Name and MTU parameters, and configure either the Static IP Address (v4) + Static Netmask
or Static IP Address (v6) + Prefix Length parameters. Click the Save Changes button to save
the configurations.
3.2 Adding an Interface to the Bond Interface

After a bond interface is created successfully, you can continue to add system interfaces to the
bond interface. Still on the page as shown in Figure 3-1 Adding a Bond Interface, select a bond
interface from the Bond ID drop-down list and click the Add Bond action link. The page for
adding an interface to the bond interface will be displayed, as shown in the figure below.
Figure 3-2 Adding an Interface to a Bond Interface
Select an interface from the Interface Name drop-down link and specify the interface type. Click
the Save action link. The added interface will be displayed in the table of the Interface Settings
area. Continue this step to add more interfaces to the bond interface as required.


Chapter 4 Clustering
Two kinds of clusters are available on the APV appliance: the cluster of inside interfaces and the
cluster of virtual IP addresses (VIPs) of Server Load Balancing (SLB). Each kind can work in
either Active-Standby or Active-Active mode. Regardless of the working mode, the configuration
procedures of clusters are similar. Therefore, the following takes how to cluster SLB VIPs in
Active-Standby mode as an example to describe the configuration procedure.
4.1 Clustering SLB VIPs in Active-Standby Mode

The configuration example in this section is based on the following network environment:
 Two APVs (APV1 and APV2) work in Active-Standby mode to form a cluster.
 APV1 has a higher priority than APV2 and therefore is the master that uses the VIP to
process traffic.
 APV2 is the backup that listens to advertisements from the master and will become the
master if APV1 stops sending advertisements.
To cluster SLB VIPs in Active-Standby mode, do as follows:
Note:
 The configuration must be performed in the order of the following sections.
 All following sections should be executed on both APV1 and APV2.
 Unless otherwise specified, parameters should be set to identical values on APV1 and
APV2.
4.1.1 Configuring SLB

The prerequisite for clustering SLB VIPs is that you have already completed SLB configurations.
For SLB configuration procedures, refer to Chapter 6 “Server Load Balancing (SLB)”.
4.1.2 Configuring the Virtual Cluster ID

In Config mode, select System Configuration > High Availability > Clustering > Virtual
Clusters. In the Virtual Cluster List area, click the Add Virtual Cluster action link. The page
for configuring the virtual cluster ID will be displayed, as shown in the figure below.

Figure 4-1 Virtual Cluster ID Configuration
Specify the Virtual Cluster ID (VCID) and Interface Name parameters. Click the Save action
link. The added cluster will be displayed in the Virtual Cluster List table.
4.1.3 Configuring Virtual Cluster Preemption

In Config mode, double click the cluster entry in the Virtual Cluster List table. The page for
general cluster configuration will be displayed, as shown in the figure below.
Figure 4-2 Virtual Cluster General Settings
Specify the parameters properly in the Virtual Cluster General Settings area.
On APV1, select the Enable Preemption check box so that APV1, the initial master, will preempt
the VIP when it returns to working state.
On APV2, clear the Enable Preemption check box.
For other parameters, the configurations must be consistent on APV1 and APV2. After the
configuration is complete, click the Save Changes button.
4.1.4 Defining the VIP of the Cluster

In Config mode, select the Virtual IP (VIP) sub-tab on the page as shown in Figure 4-2 Virtual
Cluster General Settings. The page for configuring the cluster VIP will be displayed.
In the Virtual Cluster VIP Configuration area, click the Add VIP Entry action link. The page
for adding a VIP will be displayed. Specify the Virtual IP (VIP) parameter and click the Save
action link. The added VIP will be displayed in the table of the Virtual Cluster VIP
Configuration area.
4.1.5 Defining the priority

In Config mode, select the Priority sub-tab on the page as shown in Figure 4-2 Virtual Cluster
General Settings. Set the priority of APV1 to a value higher than that of APV2, which makes
APV1 the master of the cluster.

4.1.6 Enabling the Cluster

By default, the APV appliance automatically enables a newly added cluster. To confirm whether a
cluster is enabled or not, select System Configuration > High Availability > Clustering >
Virtual Clusters in Config mode, double click the cluster entry in the Virtual Cluster List table,
and make sure that the Enable This Virtual Cluster check box is selected.
This completes the configuration of clustering SLB VIPs in Active-Standby mode. For more
clustering configuration examples, refer to the APV User Guide.

Chapter 5 High Availability (HA)

This chapter describes a basic configuration example of High Availability (HA). In this example,
the APV appliances are deployed in the Active/Standby scenario, where:
 The HA domain contains two HA units, and the same floating IP group is enabled on both
units.
 The floating IP group contains the VIPs of two virtual services.
 Unit1 provides the service and unit2 serves as the backup of unit1.
 The FFO link is be used for fast failover.
The following sections describe the detailed configuration procedure.
Note:
The configuration must be performed in the order of the following sections.
5.1 Configuring Unit1
5.1.1 Configuring SLB

The prerequisite for configuring HA is that you have already completed SLB configurations. For
SLB configuration procedures, refer to Chapter 6 “Server Load Balancing (SLB)”.
5.1.2 Configuring IP Pools for SLB Services

You need to add and set IP pools for SLB services. For how to add an IP pool, refer to Section 2.3
“Configuring the IP Pool”. Do as follows to set IP pools for SLB services:
In Config mode, select Server Load Balance > Groups > Groups IP Pool. In the IP Pools List
area, specify the Group Name and All IP Pools parameters and click the Add action link, as
shown in the figure below.

Figure 5-1 Setting IP Pools for SLB Services
5.1.3 Configuring HA Units and Links

In Config mode, select System Configuration > High Availability > HA > General Config.
In the Unit area, click the Add action link.
On the page that is displayed, specify the Unit Name, IP Address, and UDP Port parameters and
click the Save action link, as shown in the figure below.
Figure 5-2 Adding an HA Unit
The added units will be displayed in the Unit area. You need to add both unit1 and unit2 on unit1.
In the HA Reliable Link area, click the on radio button to enable the HA network link, including
the primary link and the secondary link(s) and click the Save Changes button, as shown in the
figure below.
Figure 5-3 Enabling the HA Network Link
In the HA Reliable FFO area, click the on radio button to enable the HA FFO link and click the
Save Changes button, as shown in the figure below.
Figure 5-4 Enabling HA FFO Link
5.1.4 Configuring the Floating IP Group

In Config mode, select System Configuration > High Availability > HA > Groups. In the Add
Group area, specify the Group ID parameter and click the Add action link, as shown in the
figure below.

Figure 5-5 Adding a Floating IP Group
The added group will be displayed in the table of the Groups List area. Double-click the group. In
the Group Floating IP area, click the Add action link. On the page that is displayed, specify the
IP and Port parameters and click the Save action link, as shown in the figure below.
Figure 5-6 Adding an Floating IP
5.1.5 Configuring the Unit Priority in the Floating IP Group

In Config mode, select System Configuration > High Availability > HA > Groups. In the
Groups List area, double-click the group.
In the Group Priority area, click the Add action link. The page for configuring unit priority will
be displayed, as shown in the figure below.
Figure 5-7 Configuring the Unit Priority
Specify the Unit Name and Priority parameters and click the Save action link. You need to
configure the priority of both unit1 and unit2 on unit1. The priority of unit1 should be higher than
that of unit2.
5.1.6 Configuring Preempt Mode

In the Groups Edit area, click the on radio button for the parameter Preempt and click the Save
action link, as shown in the figure below.

Figure 5-8 Configuring the Group Preempt Mode
5.1.7 Enabling the Group

In the Groups Edit area, click the Enable radio button for the parameter Enable Mode and click
the Save action link, as shown in Figure 5-8 Configuring the Group Preempt Mode.
5.1.8 (Optional) Configuring Health Check Conditions

In Config mode, select System Configuration > High Availability > HA > HC Condition.
Configure the health check conditions as required.
5.1.9 (Optional) Configuring the Failover Decision Rule

In Config mode, select System Configuration > High Availability > HA > Decision. Configure
the failover decision rules as required.
5.1.10 (Optional) Enabling SSF

In Config mode, select System Configuration > High Availability > HA > SSF. Configure the
SSF function as required.
5.1.11 (Optional) Configuring the Synchronization Mode

In Config mode, select System Configuration > High Availability > HA > Synchronization.
Configure the synchronization mode as required.
5.1.12 (Optional) Enabling the HA Log

In Config mode, select System Configuration > High Availability > HA > General Config. In
the HA Log Settings area, configure the parameters as required.
5.1.13 Enabling HA and Writing the Configurations into
Memory
the HA General Settings area, select the Enable check box and click the Save Changes button.

To save the configurations you have made into system memory, click the Save Config action link
in the top bar.
5.2 Configuring Unit2
5.2.1 Enabling FFO Link

the HA Reliable FFO area, click the on radio button to enable the HA FFO link and click the
Figure 5-9 Enabling HA FFO Link
5.2.2 Configuring the Synchronization Mode

In Config mode, select System Configuration > High Availability > HA > Synchronization.
click the on radio button to enable HA Synconfig Bootup and click the Save Changes button.
5.2.3 (Optional) Enabling SSF

In Config mode, select System Configuration > High Availability > HA > SSF. Configure the
SSF function as required.
5.2.4 Enabling HA
the HA General Settings area, select the Enable check box and click the Save Changes button.

Chapter 6 Server Load Balancing (SLB)

Server Load Balancing (SLB) allows you to distribute load and traffic to specific groups of
servers or to a specific server. The following sections describe the basic operations for
configuring SLB.
Note:
6.1 Adding a Real Service

A real service is an application server hosting varied applications or services. It processes the
requests from the client side.
In Config mode, select Server Load Balance > Real Services > Real Services. Click the Add
Real Service Entry action link. Specify parameters in the Add Real Service Entry area and
click the Save action link, as shown in the figure below.
Figure 6-1 Adding a Real Service
The added real service will be displayed in the SLB Real Services Configuration table.
6.2 Adding a Group and Defining Its Method

In Config mode, select Server Load Balance > Groups > Groups. Specify parameters in the
Add Group area and click the Add action link, as shown in the figure below.
Figure 6-2 Adding a Group

The added group will be displayed in the Groups List table.
6.3 Adding a Real Service to the Group

In Config mode, select Server Load Balance > Groups > Groups. In the Groups List table,
double-click the group. More configurations about the group will become available. In the
Group Members area, click the Add action link. Specify the parameters and click the Save
action link, as shown in the figure below.
Figure 6-3 Adding a Real Service to the Group
6.4 Adding a Virtual Service

A virtual service is commonly represented with a VIP/port pair and can be accessed by the
external clients to get their target network resources.
In Config mode, select Server Load Balance > Virtual Services > Virtual Services. Specify
parameters in the Add Virtual Service area and click the Add action link, as shown in the figure
below.
Figure 6-4 Adding a Virtual Service
The added virtual service will be displayed in the Virtual Service List table.
6.5 Associating the Virtual Service With a Group and

Defining a Policy
In Config mode, select Server Load Balance > Virtual Services > Virtual Services. In the
Virtual Service List table, double-click the virtual service. More configurations about the virtual
service will become available. In the Associate Groups area, select a group from the Eligible

Groups drop-down list, select a policy from the Eligible Policies drop-down list, specify other
parameters properly, and click the Add action link, as shown in the figure below.
Figure 6-5 Associating a Virtual Service with a Group
The binding relationship will be displayed in the table of the Associate Groups area.
To check the configuration you have made, select Server Load Balance > Monitoring >
Summary. You can click the Open All action link to check the detailed configuration.
Note: Some parameters in the above steps may vary with the real service type, virtual
service type, health check type, group method, or policy type. For detailed parameter
descriptions, refer to the APV CLI Handbook.
This completes the basic configuration of SLB. For more configuration examples, refer to the
APV User Guide.

Chapter 7 Reverse Proxy Cache

This chapter describes a basic configuration example of Reverse Proxy Cache (hereinafter referred
to as the cache function). In this example, the cache function is enabled on the virtual service
“virtual_MOSS”. The APV appliance caches all “.jpg” objects from the host “www.xyz.com”, and
the cache expiration time is 200,000 seconds. The following sections describe the detailed
configuration procedure.
Note:
7.1 Basic Cache Settings

In Config mode, select Proxy > Caching Proxy > Cache Settings > Cache Settings. In the
Cache Settings area, specify the Maximum Cachable Object Size (KB) and Expiration Time
(Seconds) parameters as required, select the Enable Cache check box, and click the Save
Changes button, as shown in the figure below.
Figure 7-1 Configuring Basic Cache Settings
7.2 Enabling the Cache Function on a Virtual Service

In Config mode, select Proxy > Caching Proxy > Cache Settings > Cache Settings. In the
Virtual Service Cache Settings area, select the virtual service on which the cache function is to
be enabled, and click the Enable action link, as shown in the figure below.
Figure 7-2 Enabling the Cache Function
7.3 Configuring Cache Filter

In Config mode, select Proxy > Caching Proxy > Cache Settings > Cache Filter. In the Cache
Filter Rule area, specify the Host Name, Regular Expression, TTL, Cache, and URL Query

parameters, and click the Add action link. The added filter rule will be displayed in the table of
the Cache Filter Rule area, as shown in the figure below.
Figure 7-3 Configuring Cache Filter
Note:
 Parameter TTL indicates the cache expiration time, in seconds.
 For descriptions of the parameters Host Name, Regular Expression, TTL, Cache
and URL Query, refer to the command “cache filter rule” in the APV CLI
Handbook.
7.4 Enabling Cache Filter

In the Cache Filter Setting area, select the Cache Filter Setting check box to enable box to
enable the cache filter function, and click the Save Changes button, as shown in the figure below.
Figure 7-4 Enabling Cache Filter
This completes the configuration of Reverse Proxy Cache. For more configuration examples, refer
to the APV User Guide.

Chapter 8 HTTP Content Rewrite

This chapter describes a typical configuration example of HTTP Content Rewrite based on the
following network environment:
 A real server whose IP address is “10.3.129.1” is placed behind the APV appliance, and its
corresponding virtual service is “v1”, whose IP address is “172.16.85.74”.
 The end user can only access the IP address of the virtual service “vs1” because the real
server is hidden by the APV appliance.
To enable the access of the end user to Web resource “a.xml” on the real server by clicking a link
on the Web page, the APV appliance should rewrite URL address of the Web resource on the Web
page from “http://10.3.129.1/a.xml” into “http://172.16.85.74/a.xml”.
Note:
8.1 Configuring SLB

The prerequisite for configuring HTTP Content Rewrite is that you have already completed SLB
configurations to bind the real server and the virtual service. For SLB configuration procedures,
refer to Chapter 6 “Server Load Balancing (SLB)”.
8.2 Enabling HTTP Content Rewrite Globally

By default, the HTTP Content Rewrite function is enabled on each virtual service but globally
disabled. To make the HTTP Content Rewrite function effective on a virtual service, you need to
first enable the function globally.
In Config mode, select Proxy > Caching Proxy > Content Rewrite > General Setting. In the
Content Rewrite Setting area, select the Enable Content Rewrite check box and click the Save
Changes button, as shown in the figure below.
Figure 8-1 Enabling HTTP Content Rewrite Globally

8.3 Enabling HTTP Content Rewrite on a Virtual

Service
Virtual Service Content Rewrite Setting area, select the check box of the virtual service on
which HTTP Content Rewrite is to be enabled and click the Save Changes button, as shown in the
figure below.
Figure 8-2 Enabling HTTP Content Rewrite on a Virtual Service
8.4 Configuring the HTTP Content Rewrite Rule

In Config mode, select Proxy > Caching Proxy > Content Rewrite > Rewrite Rule. In the Rule
List area, click the Add action link. The page for adding an HTTP Content Rewrite rule will be
displayed. Specify the Type, From Pattern, To Pattern, and Flags parameters, as shown in the
figure below.
Figure 8-3 Configuring the Rewrite Rule
Note:
 If the Type parameter is specified as “ProxyHTMLURLMap”, the APV appliance

rewrites only the URLs inside the HTML tags.
 If the Type parameter is specified as “Substitute”, the APV appliance rewrites URLs
both inside and outside the HTML tags.
 For descriptions of the Type, From Pattern, To Pattern, and Flags parameters,
refer to the “http rewrite body rule” command in the APV CLI Handbook.

Click the Save action link. The added rewrite rule will be displayed in the table of the Rule List
area.
8.5 Configuring the File Type to Be Rewritten

MIME Type area, click the Add action link. The page for specifying the MIME type of files to be
rewritten will be displayed, as shown in the figure below.
Figure 8-4 Adding a MIME Type
Select “xml” from the MIME Type drop-down list and click the Save action link. The newly
added MIME type will be displayed in the table of the MIME Type area. Repeat this step to add
more MIME types.
8.6 Configuring the Status Code

Status Code area, click the Add action link. The page for specifying the status code will be
displayed, as shown in the figure below.
Figure 8-5 Adding a Status Code
Specify the Status code parameter and click the Save action link.
This completes the configuration of HTTP Content Rewrite. The end user should be able to access
the Web resource “a.xml” on the real server by clicking a link on the Web page because the APV
appliance will rewrite the URL address “http://10.3.129.1/a.xml” in the HTML tag of the response
into “http://172.16.85.74/a.xml” according to the HTTP Content Rewrite rule.
For more configuration examples, refer to the APV User Guide.

Chapter 9 DNS Cache
Chapter 9 DNS Cache

This chapter describes how to configure DNS Cache on the APV appliance.
Note:
9.1 Configuring SLB

The prerequisite for configuring DNS Cache is that you have already completed SLB
configurations. For SLB configuration procedures, refer to Chapter 6 “Server Load Balancing
(SLB)”.
9.2 Enabling DNS Cache

In Config mode, select Proxy > Caching Proxy > DNS Cache Settings. In the DNS Cache area,
specify the Min (Seconds) and Max (Seconds) parameters to configure the minimum and
maximum DNS Cache expiration time. Select the Enable DNS Cache check box and click the
Figure 9-1 Enabling DNS Cache
After preceding configurations, DNS Cache is enabled on the APV appliance. You can also add a
static DNS Cache entry to manually specify a host to be cached.
9.3 (Optional) Adding a Static DNS Cache Entry

In Config mode, select Proxy > Caching Proxy > DNS Cache Settings. In the DNS Cache
Static Entries area, specify the Host Name and Host IP parameters. Click the Add action link.
The added host entry will be displayed in the table of the DNS Cache Static Entries area, as

Chapter 9 DNS Cache
Figure 9-2 Adding a DNS Cache Host
This completes the configuration of DNS Cache. For more configuration examples, refer to the
APV User Guide.

Chapter 10 HTTP Compression

This chapter describes how to configure HTTP Compression on the APV appliance.
Note:
10.1 Enabling HTTP Compression Globally

In Config mode, select Proxy > Compression > Compression Setting. In the HTTP
Compression Setting area, select the Enable Compression check box. Click the Save Changes
button, as shown in the figure below:
Figure 10-1 Enabling HTTP Compression Globally
10.2 Enabling HTTP Compression on a Virtual Service

In Config mode, select Proxy > Compression > Compression Setting. In the HTTP
Compression Setting area, select the virtual service from the HTTP/HTTPS Virtual Service(s)
drop-down list and click the Enable VS Compression action link. The virtual service on which
HTTP Compression is enabled will be displayed in the Compression is Enabled for the
Following HTTP/HTTPS Virtual Services table, as shown in the figure blow.
Figure 10-2 Enabling HTTP Compression on a Virtual Service
10.3 Configuring Advanced HTTP Compression

With HTTP Compression enabled, the APV appliance compresses the following MIME types for
all browsers by default:

 Text (text/plain)
 HTML (text/HTML)
 XML (text/XML)
To enable the compression of other MIME types, do as follows:
In Config mode, select Proxy > Compression > Compression Type. In the Compression
MIME Types area, specify the User Agent and MIME Types parameters as required. Click the
Add MIME Type action link. The added user agent and MIME type pair will be displayed in the
Supported Compression MIME Types table, as shown in the figure below.
Figure 10-3 Configuring Advanced HTTP Compression
10.4 Configuring URL-Exclude HTTP Compression

Rule
In Config mode, select Proxy > Compression > Compression Setting. In the Compression
URL Exclude area, specify the Wildcard Expression and HTTP/HTTPS Virtual Service(s)
parameters as required. Click the Add action link. The added virtual service and wildcard
expression pair will be displayed in the URL Exclude List table, as shown in the figure below.
Figure 10-4 Configuring URL-Exclude HTTP Compression Rule
A URL-exclude HTTP Compression rule determines the scenario where HTTP Compression is
not applied. For example, when the “v1“ and “ghi.txt$” pair is configured, as shown in the above

figure, and the URL of a client request to the virtual service “v1” ends with the string “ghi.txt”,
the textual contents in the response will not be compressed even if HTTP Compression is enabled.
This completes the configuration of HTTP Compression. For more configuration examples, refer
to the APV User Guide.

Chapter 11 Secure Sockets Layer (SSL)

This chapter describes how to configure basic SSL acceleration on the APV appliance.
Note:
11.1 Creating an SSL Virtual Host

The prerequisite for creating an SSL virtual host is that you have already created an SLB virtual
service. For how to create an SLB virtual service, refer to Chapter 6 “Server Load Balancing
(SLB)”.
An SSL virtual host is associated with an SLB virtual service and acts as an SSL server in the
communication between the browser and the APV appliance. To create an SSL virtual host, do as
follows:
In Config mode, select Proxy > SSL > Virtual Hosts. In the SSL Virtual Hosts area, click the
Add action link, and the page for adding an SSL virtual host will be displayed, as shown in the
figure below.
Figure 11-1 Creating an SSL Virtual Host
Specify the parameters as required and click the Save action link. The added SSL virtual host will
be displayed in the table of the SSL Virtual Hosts area.
11.2 Applying for a Certificate for the SSL Virtual Host

If you do not possess a certificate and key pair, do as follows to generate a CSR for the SSL
virtual host to apply for a certificate from a Certificate Authority (CA).
In Config mode, select Proxy > SSL > Virtual Hosts. In the SSL Virtual Hosts area,
double-click the SSL virtual host, and the page for generating a CSR for the SSL virtual host will
be displayed, as shown in the figure below.

Figure 11-2 Generating a New CSR/Key
Note: You must select “Yes” for the Private Key Exportable parameter and configure a
password to export the private key.
Specify other parameters properly and click the Apply action link. The APV will create a CSR
and display the private key for the SSL virtual host, as shown in the figure below.
Figure 11-3 Generated CSR
This CSR uses the public key of the public-private key pair generated when the CSR is created.
You need to send the entire text in the Existing CSR area to a CA for signing. The CA needs
these lines to expedite your request for a certificate.

11.3 Importing a Key and Certificate for the SSL Virtual

Host
You must first import the key and then the certificate with only one exception: when you import
an SSL certificate and key pair from an iPlanet server, import the certificate first.
11.3.1 Importing a Key for the SSL Virtual Host

double-click the SSL virtual host. On the displayed page, select Virtual Host CSR/Cert/Key >
CSR/Key. Make a copy of the entire text of the SSL Exportable Key area.
Select Virtual Host CSR/Cert/Key > Import Cert/Key. In the SSL Key area, select Manual
Input and paste the copy into the SSL Key text box and specify the Key Passphase parameter.
Click the Import action link to import the key.
11.3.2 Importing a Certificate for the SSL Virtual Host

double-click the SSL virtual host. On the displayed page, select Virtual Host CSR/Cert/Key >
Import Cert/Key. In the SSL Certificate area, choose to import the certificate from local, by
FTP, or by manual input and click the Import action link to import the certificate.
After a certificate is successfully imported, the certificate status will be displayed as Inactive in
the table of the SSL Certificate area. To enable the certificate, click the Activate action link, as
Figure 11-4 Certificate Status
11.4 Enabling the SSL Virtual host

double-click the SSL virtual host. On the displayed page, select Virtual Host Settings > Basic
Settings. In the SSL Basic Settings area, select the Enable SSL check box and click the Save
Changes button.
11.5 Creating an SSL Real Host

The prerequisite for creating an SSL real host is that you have already created an SLB real service.
For how to create an SLB real service, refer to Chapter 6 “Server Load Balancing (SLB)”.

An SSL real host is associated with an SLB real service and acts as an SSL client in the
communication between the APV appliance and the backend server. To create an SSL real host,
do as follows:
In Config mode, select Proxy > SSL > Real Hosts. In the SSL Real Hosts area, click the Add
action link, and the page for adding an SSL real host will be displayed, as shown in the figure
below.
Figure 11-5 Creating an SSL Real Host
Specify the parameters as required and click the Save action link. The added SSL real host will be
displayed in the table of the SSL Real Hosts area.
11.6 Enabling the SSL Real Host

In Config mode, select Proxy > SSL > Real Hosts. In the SSL Real Hosts area, double-click the
SSL real host. On the displayed page, select Real Host Settings > Basic Settings. In the SSL
Basic Settings area, select the Enable SSL check box and click the Save Changes button.
This completes the basic configuration of SSL acceleration. For more configuration examples,
refer to the APV User Guide.

Chapter 12 Quality of Service (QoS)

This chapter describes how to configure QoS on the APV appliance.
Note:
12.1 Specifying the QoS Interface

In Config mode, select QoS Configuration > QoS > QoS Entries. Click the Add QoS Entry
action link. The page for adding a QoS entry will be displayed, as shown in the figure below.
Figure 12-1 Adding a QoS Entry
Select “interface” from the QoS Entry Type drop-down list. The page for specifying the QoS
interface will be displayed, as shown in the figure below.
Figure 12-2 Specifying the QoS Interface
Specify the required parameters properly. Click the Save action link. The QoS Configuration >
QoS > QoS Entries page will be displayed to illustrate QoS configurations in a tree structure, as
Figure 12-3 QoS Configurations

12.2 Creating a QoS Queue

On the page as shown in Figure 12-1 Adding a QoS Entry, select “root queue” from the QoS
Entry Type drop-down list. The page for creating a QoS root queue will be displayed, as shown
in the figure below.
Figure 12-4 Creating a QoS Queue
Specify the parameters properly. Click the Save action link. The QoS Configuration > QoS >
QoS Entries page will be displayed to illustrate QoS configurations in a tree structure, as shown
in Figure 12-3 QoS Configurations.
Note:
You can repeat this step to add a sub-queue to the root queue as required.
12.3 Defining a QoS Rule

On the page as shown in Figure 12-1 Adding a QoS Entry, select “L4 filter” from the QoS Entry
Type drop-down list. The page for defining a QoS rule will be displayed, as shown in the figure
below.
Figure 12-5 Defining a QoS Rule

Specify the required parameters properly. Click the Save action link. The QoS Configuration >
QoS > QoS Entries page will be displayed to illustrate QoS configurations in a tree structure, as
shown in Figure 12-3 QoS Configurations.
12.4 Enabling QoS

QoS is disabled by default. To enable QoS on an interface, do as follows:
In Config mode, select QoS Configuration > QoS > Interfaces. The interfaces on which QoS is
configured will be displayed in the QoS Interface Operation table, as shown in the figure below.
Figure 12-6 Enabling QoS
To enable QoS in the specific direction on an interface, select the corresponding Enabled check
box and click the Save Changes button. You can check the QoS enabling status on the QoS
Configuration > QoS > QoS Entries page.
This completes the configuration of QoS. For more configuration examples, refer to the APV User
Guide.

Chapter 13 Link Load Balancing (LLB)

This chapter takes how to configure LLB on an APV appliance balancing outbound traffic
between two ISPs as an example to describe LLB configurations on the APV.
The configuration example in this chapter is based on the following network environment:
 An APV appliance is placed between two Internet Service Providers (ISPs) and the internal
network.
 The APV appliance balances load bound to the Internet between ISPs (ISP1 and ISP2).
 Eroutes are configured to transmit traffic along dedicated links to specific gateways.
 Gateway link bandwidths can be controlled.
13.1 Configuring Interface IP Address

The APV appliance is connected to ISPs (ISP1 and ISP2) through port1 and to the internal
network through port2.
You need to assign an IP address on the same network segment with ISP1 to port1, and an IP
address on the same network segment with the internal network to port2. For the detailed
procedure, refer to Section 1.7.1 “Configuring the Network Interface”.
13.2 Configuring MNET

You also need to assign an IP address on the same network segment with ISP2 to port1. The
detailed procedure is as follows:
In Config mode, select System Configuration > Basic Networking > Interface > Port. In the
MNET Configuration area, click the Add MNET action link. The page for configuring MNET
will be displayed, as shown in the figure below.
Figure 13-1 Configuring MNET

Set the Static IP Address parameter to an IP address on the same network segment with ISP2 and
specify other parameters properly. Click the Save action link. The added MNET entry will be
displayed in the table of the MNET Configuration area.
13.3 Configuring LLB Links
13.3.1 Adding LLB Links Bound to ISP1 and ISP2

In Config mode, select Advanced Load Balance > Link load Balance > Outbound Settings. In
the LLB Link Route area, click the Add action link. The page for adding an LLB link will be
Figure 13-2 Adding an LLB Link
Specify the parameters properly to configure an LLB link bound to ISP1 and click the Save &
Add Another action link to add an LLB link bound to ISP2.
Note:
 To configure an LLB link to ISP1/ISP2, set the source IP address to the one using
which the APV appliance is connected to ISP1/ISP2 through port1, and set the
gateway IP address to the gateway of ISP1/ISP2.
 The Bandwidth Threshold parameter indicates the maximum bandwidth allowed for
the gateway specified by the Gateway IP parameter. This threshold takes effect if the
priority of the corresponding Eroute, which is configured in Section 13.4
“Configuring Eroutes”, is lower than the bandwidth priority configured in Section
13.3.5 “Configuring Bandwidth Priority”.
13.3.2 Configuring Additional LLB Health Check

In Config mode, select Advanced Load Balance > Link load Balance > Outbound Settings. In
the LLB Link Route area, double click the link. In the Link Health Checker area on the
displayed page, click the Add action link. Specify the parameters to configure additional LLB
health check.

13.3.3 Enabling LLB Health Check

In Config mode, select Advanced Load Balance > Link Load Balance > Outbound Settings. In
the LLB Link Global Settings area, select the Enable Link Heath Check check box. Click the
Save Changes button.
13.3.4 Configuring the Load Balancing Method

the LLB Link Global Settings area, select the load balancing method from the Method
drop-down list. Click the Save Changes button.
13.3.5 Configuring Bandwidth Priority

the LLB Link Global Settings area, specify the Bandwidth Priority parameter. Click the Save
Changes button.
13.4 Configuring Eroutes

In Config mode, select System Configuration > Basic Networking > Routing >
RTS/IPflow/Eroutes. In the Eroutes area, click the Add action link. The page for adding an
Eroute will be displayed, as shown in the figure below.
Figure 13-3 Adding an Eroute
Specify the parameters properly to add Eroutes to specify links for traffic from the internal
network to the Internet through ISP1 or ISP2.
In addition, you must add an Eroute to transmit traffic that does not match any other Eroute. For
this Eroute, its source IP address, source netmask/prefix length, source port, destination IP address,
destination netmask/prefix length, and destination port are all 0s. In addition, its protocol should
be “any” and gateway should be the gateway of either ISP1 or ISP2.

13.5 Configuring NAT

To translate an internal network IP address into an IP address on the same network segment with
ISP1 or ISP2, you need to configure NAT for both ISP1 and ISP2. For the detailed procedure,
refer to Section 2.1 “Configuring NAT”.
13.6 Enabling IPflow and RTS

In Config mode, select System Configuration > Basic Networking > Routing >
RTS/IPflow/Eroutes. In the RTS Settings and IPflow Settings areas, specify the parameters
properly. Click the Save Changes button.
This completes the LLB configuration on an APV appliance balancing outbound traffic between
two ISPs. For more configuration examples, refer to the APV User Guide.

Chapter 14 Global Server Load Balancing (GSLB)
Chapter 14 Global Server Load Balancing

(GSLB)
Global Server Load Balancing (GSLB) is also known as Smart DNS (SDNS). This chapter takes
how to configure SDNS Dynamic Proximity System (DPS) on the APV appliance as an example
to describe GSLB configurations on the APV.
The configuration example in this chapter is based on the following network environment:
 Two APVs and two DPS detectors are deployed on the network to form an SDNS DPS.
 APV1 works as the master and APV2 works as the slave.
 Two Content Distribution Network (CDN) sites are available, each of which uses an APV
appliance or other qualified server as its DPS detector.
14.1 General Configurations on APV1 and APV2
Note:
 Configurations in this section should be performed on both APV1 and APV2.
 For every parameter mentioned in this section, its values on APV1 and APV2 must
be identical.
14.1.1 Adding CDN Sites

In Config mode, select Advance Load Balance > Global Load Balance > Topology > Site. In
the SDNS Site Settings area, click the Add Site Entry action link. The page for adding a CDN
site will be displayed, as shown in the figure below.
Figure 14-1 Adding a CDN Site
Specify the parameters properly to add CDN site1. Click the Save & Add Another action link to
add CDN site2.

14.1.2 Adding DPS Detectors

In Config mode, select Advance Load Balance > Global Load Balance > DPS > SDNS DPS
Settings. In the SDNS DPS Detectors area, click the Add action link. The page for adding a DPS
detector will be displayed, as shown in the figure below.
Figure 14-2 Adding a DPS Detector
Specify the parameters properly to add DPS detector1. Click the Save & Add Another action link
to add DPS detector2.
14.1.3 Other General Settings
14.1.3.1 Enabling SDNS
In Config mode, select Advance Load Balance > Global Load Balance > General Settings. In
the General Settings area, select the SDNS Status check box and specify the SDNS Report
Interval, and SDNS Heart Beat Interval parameters. Click the Save Changes button.
14.1.3.2 Enabling SDNS DPS
Settings. In the SDNS DPS Settings area, specify the Query Interval, Send Interval, and
History Scale parameters, and select the SDNS DPS check box. Click the Save Changes button.
14.2 Configurations on the SDNS DPS Master (APV1)
14.2.1 Configuring APV1 as the SDNS DPS Master
14.2.1.1 Configuring SDNS Statistics
In Config mode, select Advance Load Balance > Global Load Balance > General Settings. In
the General Settings area, select the SDNS Statistics and SDNS Local Statistics check boxes.
Click the Save Changes button.

14.2.1.2 Enabling the SDNS DPS Mater
Settings. In the SDNS DPS Settings area, select the SDNS DPS Master check box. Click the
Save Changes button.
14.2.2 Adding DPS Members

Settings. In the SDNS DPS Members area, set the Member IP Address parameter to the IP
address of APV1. Click the Add action link. The added member entry will be displayed in the
table of the SDNS DPS Members area, as shown in the figure below.
Figure 14-3 Adding a DPS Member
Repeat this step to add APV2 as a DPS member.
14.2.3 Configuring the DPS Dynamic Proximity Method

Settings. In the SDNS DPS Settings area, select a method from the Method drop-down list. Click
the Save Changes button.
14.3 Configurations on the SDNS DPS Slave (APV2)
14.3.1 Configuring the DPS Dynamic Proximity Method

Settings. In the SDNS DPS Settings area, select a method from the Method drop-down list. Click
the Save Changes button.
14.4 Enabling DPS Detectors

You need to perform required operations on the DPS detectors to enable them.
If the DPS detector is an APV appliance, do as follows:

In Config mode, select Advance Load Balance > Global Load Balance > DPS > Local
Detectors. In the Add an SDNS DPS Local Detector area, specify the parameters properly. Click
the Add action link.
This completes the SDNS DPS configuration on the APV appliance. For more configuration
examples, refer to the APV User Guide.

Chapter 15 Access Control

This section describes how to configure WebWall on the APV appliance.
15.1 Adding an Access Control List (ACL) Rule

In Config mode, select System Configuration > Access Control > WebWall. In the Access List
Configuration area, click the Add action link. The page for configuring an ACL rule will be
displayed, as shown in the following figure.
Figure 15-1 Adding an ACL Rule
Specify the parameters properly. Click the Save action link. The added ACL rule will be displayed
in the table of the Access List Configuration area.
Repeat this step to add more ACL rules according to the actual situation.
15.2 Configuring an Access Group

In Config mode, select System Configuration > Access Control > WebWall. In the Access
Group Configuration area, select an interface from the Interface drop-down list, specify the
Access List ID parameter and click the Add action link. The added access group will be displayed
in the table of the Access Group Configuration area, as shown in the figure below.
Figure 15-2 Adding an Access Group
For the configurations shown in the preceding figure, ACL rules whose ID is 100 are all applied
on port1 and rules whose ID is 200 are all applied on port2.

15.3 Enabling WebWall

In Config mode, select System Configuration > Access Control > WebWall. In the WebWall
Status area, select the corresponding check box to enable WebWall for an interface, that is, to
apply ACL rules on the interface. Click the Save Changes button.
This completes the basic WebWall configuration on the APV appliance. For more configuration

Chapter 16 Advanced IPv6 Configuration

IPv6 addressed are widely supported by features of the APV appliance. This chapter takes how to
configure DNS64 and NAT64 as an example to describe IPv6 support on the APV appliance.
Note:
16.1 Configuring the IP Pool

Select System Configuration > Advanced Networking > IP Pool. In the Add IP Pool area,
specify the required parameters and click the Add action link to save the configuration.
16.2 Configuring SLB

In Config mode, select Server Load Balance > Real Services > Real Services. In the SLB Real
Services Configuration area, click the Add Real Service Entry action link. In the Add Real
Service Entry area of displayed page, specify the required parameters and click Save to save the
configuration.
In Config mode, select Server Load Balance > Groups > Groups. In the Add Group area,
specify the required parameters and click the Add action link. In Groups List, double-click the
newly added group. In the Group Members area of the displayed page, click the Add action link.
In the Add Group Member area of the displayed page, specify the required parameters and click
Save to save the configuration.
In Config mode, select Server Load Balance > Virtual Services > Virtual Services. In the Add
Virtual Service area, specify the required parameters and click the Add action link. In Virtual
Service List, double-click the newly added virtual service. In the Associate Groups area of the
displayed page, associate the virtual service with the “default” or “backup” policy and click the
Add action link.
16.3 Configuring DNS64

In Config mode, select System Configuration > NAT > V4/V6 NAT. In the DNS64
Configuration area, specify the required parameters and click the Set action link to save the
configuration.
Figure 16-1 Configuring DNS64

16.4 Configuring NAT64

In the NAT64 Configuration area, specify the required parameters and click the Set action link to
save the configuration.
Figure 16-2 Configuring NAT64
This completes the DNS64 and NAT64 configurations on the APV appliance. For more
configuration examples, refer to the APV User Guide.

Chapter 17 ePolicy
Chapter 17 ePolicy
This chapter describes a basic configuration example of ePolicy. The following sections describe
the detailed configuration procedure.
Note:
17.1 Importing Setting Scripts

The prerequisite for configuring ePolicy is that you have already created an SLB virtual service.
For how to create an SLB virtual service, refer to Chapter 6 “Server Load Balancing (SLB)”.
In Config mode, select Server Load Balance > Virtual Services > Virtual Services. In the
Virtual Service List table, double-click the virtual service. More configurations about the virtual
service will become available. Select the ePolicy Scripts tab, and the page for configuring ePolicy
will be displayed, as shown in the figure below.
Figure 17-1 Configuring ePolicy
In the Import ePolicy Setting Scripts area, choose to import the setting script from local file, by
HTTP, or by FTP, specify the Local File Path/HTTP URL/FTP URL and Setting Scripts Name
parameters, and click the Import action link to import the setting script.
17.2 Importing Runtime Scripts

On the page as shown in Figure 17-1 Configuring ePolicy, in the Import ePolicy Runtime
Scripts area, choose to import the runtime script from local file, by HTTP, or by FTP, specify the

Chapter 17 ePolicy
Local File Path/HTTP URL/FTP URL and Setting Scripts Name parameters, and click the
Import action link to import the runtime script.
17.3 Associating the Virtual Service with the Setting

Script
On the page as shown in Figure 17-1 Configuring ePolicy, in the VS Associated with Setting
Scripts area, select the setting script in the All Setting Scripts area and click the button to
associate the setting script with the virtual service.
17.4 Associating the Virtual Service with the Runtime

Script
On the page as shown in Figure 17-1 Configuring ePolicy, in the VS Associated with Runtime
Scripts area, select the runtime script in the All Runtime Scripts area and click the button to
associate the runtime script with the virtual service.

Chapter 18 Logging
Chapter 18 Logging
This section describes how to configure the basic Logging function on the APV appliance.
18.1 General Configurations

In Config mode, select Admin Tools > Graph > Logging > General. In the General Settings
area, select the Enable Logging check box and specify other parameters properly. Click the Save
Changes button.
Note: For the Level parameter, logs whose levels are lower than the specified level will
not be transmitted to the log server.
18.2 Configuring Syslog Servers
18.2.1 Adding a Syslog Server

In Config mode, select Admin Tools > Graph > Logging > Syslog Servers. In the Remote
Syslog Server Configuration area, click the Add Server Entry action link. The page for adding
a syslog server will be displayed, as shown in the figure below.
Figure 18-1 Adding a Syslog Server
Specify the parameters properly. Click the Save action link. The added syslog server will be
displayed in the table of the Remote Syslog Server Configuration area.
18.2.2 Configuring Log Filter

In Config mode, select Admin Tools > Graph > Logging > Syslog Servers. In the HTTP Log
Filter Configuration area, click the Add action link. The page for adding a log filter entry will be

Chapter 18 Logging
Figure 18-2 Adding a Log Filter Entry
Specify the parameters properly. Click the Save action link. The added log filter will be displayed
in the table of the HTTP Log Filter Configuration area.
Note:
The log filter cannot be configured on the syslog host whose ID is 0.
This completes the basic Logging configuration on the APV appliance. For more configuration

Chapter 19 Administrative Tools

This chapter describes how to configure administrative tools on the APV appliance.
19.1 Viewing the Flight Deck

The APV appliance provides a graphical interface that can be used to easily monitor system
statistics and get a comprehensive picture of the running status of the APV appliance. This
graphical interface is called the Flight Deck.
In Config mode, select Home > Flight Deck.
In the System Statistics area, the real-time system statistics about server health, request rate,
concurrent connections, cache hit ratio, and system usage are displayed.
In the Graph 1 and Graph 2 areas, two configurable graphs are provided for real-time monitoring
on the running statistics of the APV appliance.
To view statistics in the graphs, you must enable SNMP by selecting the SNMP Enable check
box at Home > Basic Information or by specifying the Enable SNMP parameter in the General
Settings area at Admin Tools > Graph > SNMP > General.
For security reason, it is strongly recommended to modify the default SNMP community string to
avoid system information interception. To modify the default SNMP community string, specify
the new Community String parameter in the General Settings area at Admin Tools > Graph >
SNMP > General.
19.2 Configuring External Authentication

In Config mode, select Admin Tools > System Management > Access Control. In the Admin
AAA Settings area, specify the parameters properly. Click the Save Changes button.
19.3 Importing the System License

In Config mode, select Admin Tools > System Management > License. In the License Import
area, specify the License Code parameter. Click the Import With Validation or Import Without
Validation action link as required.
19.4 Updating the System

In Config mode, select Admin Tools > System Management > Update. In the System Update
area, choose to update the system by using a local file or URL. Then, specify the Local Host File
Path or URL parameter and click the Apply Update action link

19.5 Configuring parameters for the ping command

In Config mode, select Admin Tools > Troubleshooting > Tools. In the PING area, specify the
IP or Host Name and Gateway parameters, and then click Ping button to send a network
connectivity echo request.
Note: “Gateway” is an optional parameter. When it is specified, the ping packets are sent
to the host through the LLB link determined by this parameter.
19.6 Shutting Down or Rebooting the System

In Config mode, select Admin Tools > System Management > Shutdown/Reboot. In the
System Control area, select the reboot or shutdown action as required.
For more configuration examples about administrative tools, refer to the APV User Guide.

Appendix I Abbreviations
Acronym Full Spelling
AAA Authentication, Authorization & Accounting
ACL Access Control List
CA Certificate Authority
CDN Content Distribution Network
CLI Command Line Interface
CPU Central Processing Unit
CRL Certificate Revocation List
CSR Certificate Signing Request
DNS Domain Name Service
DPS Dynamic Proximity System
FTP File Transfer Protocol
GMT Greenwich Mean Time
GSLB Global Server Load Balance (also known as SDNS)
HC Health Check
HTML HyperText Markup Language
HTTP HyperText Transfer Protocol
HTTPS HyperText Transfer Protocol over Secure Sockets Layer
ICMP Internet Control Message Protocol
IP Internet Protocol
ISP Internet Service Provider
LLB Link Load Balancing
Local DNS Local Domain Name Service
MIME Multipurpose Internet Mail Extensions
MNET Multi-Netting
MTU Maximum Transmission Unit
NAT Network Address Translation
QoS Quality of Service
SDNS Smart DNS (SDNS, also known as GSLB)
SLB Server Load Balancing
SSH Secure Shell Protocol
SSL Secure Sockets Layer
TCP Transmission Control Protocol
TCPS TCP with SSL
TELNET Terminal Emulation Protocol in a TCP/IP Environment
TTL Time to Live
UDP User Datagram Protocol
URL Uniform Resource Locator
VCID Virtual Cluster ID
VIP Virtual IP

Acronym Full Spelling

VLAN Virtual Local Area Network
WebUI Web User Interface


Array Network - Webui

Загружено:

Сведения о документе

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Array Network - Webui

Загружено:

Авторское право:

Доступные форматы

ArrayOS APV 8.

2014 Array Networks, Inc.

About Array Networks

Contacting Array Networks

1371 McCarthy Boulevard

Milpitas, California 95035, USA

2014 Array Networks, Inc.

2014 Array Networks, Inc.

Declaration of Conformity ................................................................................................................ I

About Array Networks ..................................................................................................................... II

Contacting Array Networks ............................................................................................................. II

Revision History ............................................................................................................................. III

Table of Contents ............................................................................................................................IV

Chapter 1 Initial System Setup & Configuration .............................................................................. 1

1.1 Overview ............................................................................................................................. 1

1.2 Enabling the WebUI through CLI ....................................................................................... 1

1.3 Accessing the WebUI.......................................................................................................... 2

1.4 Registering the Array Networks Product ............................................................................ 2

1.5 Logging In to the WebUI .................................................................................................... 2

1.6 Initial System Setup ............................................................................................................ 3

1.6.1 Setting the Host Name ............................................................................................. 4

1.6.2 Setting the Date and Time ........................................................................................ 4

1.6.3 Setting the NTP ........................................................................................................ 4

1.7 Basic Network Configurations ............................................................................................ 5

1.7.1 Configuring the Network Interface .......................................................................... 5

1.7.2 Configuring Routes .................................................................................................. 5

Chapter 2 Advanced Network Configuration ................................................................................... 6

2.1 Configuring NAT ................................................................................................................ 6

2.2 Configuring IP Region ........................................................................................................ 7

2.2.1 Importing an IP Region Table File ........................................................................... 7

2.3 Configuring the IP Pool ...................................................................................................... 7

2.4 Configuring Port Forwarding .............................................................................................. 7

2.4.1 Configuring TCP Port Forwarding ........................................................................... 7

Chapter 3 Link Aggregation ............................................................................................................. 9

3.1 Adding a Bond Interface ..................................................................................................... 9

2014 Array Networks, Inc.

3.2 Adding an Interface to the Bond Interface .......................................................................... 9

Chapter 4 Clustering ....................................................................................................................... 11

4.1 Clustering SLB VIPs in Active-Standby Mode ................................................................ 11

4.1.1 Configuring SLB .................................................................................................... 11

4.1.2 Configuring the Virtual Cluster ID ........................................................................ 11

4.1.3 Configuring Virtual Cluster Preemption ................................................................ 12

4.1.4 Defining the VIP of the Cluster.............................................................................. 12

4.1.5 Defining the priority............................................................................................... 12

4.1.6 Enabling the Cluster ............................................................................................... 13

Chapter 5 High Availability (HA)................................................................................................... 14

5.1 Configuring Unit1 ............................................................................................................. 14

5.1.1 Configuring SLB .................................................................................................... 14

5.1.2 Configuring IP Pools for SLB Services ................................................................. 14

5.1.3 Configuring HA Units and Links ........................................................................... 15

5.1.4 Configuring the Floating IP Group ........................................................................ 15

5.1.5 Configuring the Unit Priority in the Floating IP Group ......................................... 16

5.1.6 Configuring Preempt Mode.................................................................................... 16

5.1.7 Enabling the Group ................................................................................................ 17

5.1.8 (Optional) Configuring Health Check Conditions ................................................. 17

5.1.9 (Optional) Configuring the Failover Decision Rule ............................................... 17

5.1.10 (Optional) Enabling SSF ...................................................................................... 17

5.1.11 (Optional) Configuring the Synchronization Mode ............................................. 17

5.1.12 (Optional) Enabling the HA Log .......................................................................... 17

5.1.13 Enabling HA and Writing the Configurations into Memory ................................ 17

5.2 Configuring Unit2 ............................................................................................................. 18

5.2.1 Enabling FFO Link ................................................................................................ 18

5.2.2 Configuring the Synchronization Mode ................................................................. 18

5.2.3 (Optional) Enabling SSF ........................................................................................ 18