Cookie based session persistence with F5 BIG-IP load balancer?

Discussion in 'Parallels Remote Application Server' started by LeonW2, Oct 4, 2019.

  1. LeonW2

    LeonW2 Bit Poster

    Messages:
    2
    Hi,

    Having encountered an issue where the local client is not detected when when a VDI pool is launched from the Gateway:

    "%appdata%\2XClient\ClientLog.txt" is appended "Failed to get 2XA file from IIS Server"

    Support have said 2xa data is used for launching apps with native (non-HTML5) clients and that the issue is caused by the browser communicating with one gateway while the client's request for 2xa was forwarded to another. At their advice we have reconfigured our F5 BIG-IP load balancer to use cookie-based session persistence as per this article: https://kb.parallels.com/en/124412

    However now that I have with a test virtual server, the client launches but the connection times out with "the specified RAS connection could not be found"

    "%appdata%\2XClient\ClientLog.txt" is appended:
    Has anyone has any experience configuring an F5 BIG-IP to work with Parallels RAS that might be able to suggest why it's not working?

    Thanks,

    Leon.
     
  2. LeonW2

    LeonW2 Bit Poster

    Messages:
    2
    I think we've resolved it. There were 2 issues. 1. We were terminating the certificate on the F5 which malforms the initial HTTP POST, which ends up being significantly different to it being terminated on a gateway. This was breaking client detection. 2. After this we were still seeing "Status: 403 /native/get2xa/[session id]" in the HTML5GW.log. The problem was again on the f5 in that we needed to apply "source-addr-match_across_services" session persistence. Alternatively we could have load-balanced in an active-passive arrangement but this would have been a last resort.
     

Share This Page