Netscaler Service Group Protocol ANY

[Krister Oumldhammar]

I created a Service Group with Protocol ANY using the below tutorial, to have the possibility to just use one for multiple protocol/ports, but can't get it Green when I have Health Monitoring active, and I need that because I have multiple servers behind it, anyone with an idea how to get it to work?

 

https://support.citrix.com/article/CTX129192/how-to-configure-adc-virtual-server-to-accept-traffic-for-a-specific-protocol-and-port-range

[Jeff Riechers]

What monitors do you have tied to it?  Are there any firewall rules between the netscaler and back-end service preventing monitors from executing?

[Krister Oumldhammar]

Hi

 

First, there are no firewall between the Netscaler and the backend server, and it's a windows server with IIS installed. I have tested with both tcp and the http monitor and both gives me a red light. If I don't have any monitor and 'Health Monitoring' marked and then shutdown one of the servers the 'Service Group' goes to 'Partial Up', so that work.

[Jeff Riechers]

If you use the default, that will do a ping test.  Since you have multiple services on that back end, if it fails the ping test it would probably be down.  If you want to monitor on individual services then you would want to break it out into individual load balancers monitoring on each individual port.  That design is better if you have certain components that might be able to be brought down without downing the entire server.

[Rhonda Rowland1709152125]

Also, ANY doesn't support app specific monitor types like that: no HTTP, TCP or higher level monitors.

When you use service protocol any, you are telling the ADC nothing about the underlying protocol so you have no access to advanced features.

You can do a ping test and that is about it, because with ANY you are avoiding defining the traffic as either UDP or TCP based.

 

 

 

[Ken Z]

On 2/13/2023 at 2:27 PM, Rhonda Rowland1709152125 said:

Also, ANY doesn't support app specific monitor types like that: no HTTP, TCP or higher level monitors.

When you use service protocol any, you are telling the ADC nothing about the underlying protocol so you have no access to advanced features.

You can do a ping test and that is about it, because with ANY you are avoiding defining the traffic as either UDP or TCP based.

 

 

 

Yes, I had to do something similar last week. see https://docs.citrix.com/en-us/citrix-adc/current-release/load-balancing/load-balancing-configure-layer4.html