nanog mailing list archives

RE: Outgoing traffic problem on Citrix Netscaler Load Balancer

From: "Anil KARADAG" <akaradag () NETAS com tr>
Date: Tue, 1 Apr 2014 08:38:18 +0000

My aim is forwarding all sip packages from netscaler snip:client port number to backend server ip: backend server port. 
I tried the following scenarios;


-          "use source ip" is enabled, "use proxy port" is set no

o   Result:  we see client port as source port but no SNIP for source ip-address

-          In additional above configured also RNAT

o   Result: we see SNIP ip address as source ip address but source port again become random.

Checked the citrix support link for rnat, but our sip packages include 'via header' option with SNIP: client port 
number;

Via: SIP/2.0/UDP <netscaler 
SNIP:5060;received=192.168.184.13;branch=z9hZ4bb1ce74d0f-a161-43af-8f08-2d98cf702742_0efcfc5e_71732184846337
From: Alex White-Robinson [mailto:alexwr () gmail com]
Sent: Tuesday, April 01, 2014 11:00 AM
To: Anil KARADAG
Cc: Pui Edylie; Paul Bertain; nanog () nanog org
Subject: Re: Outgoing traffic problem on Citrix Netscaler Load Balancer

Have you configured RNAT yet? Might tidy up your SIP problem. Do you need the servers to see the client's source port, 
or is your issue that SIP response traffic is not on the port the client expects?

Give the guide to setting up RNAT here a try - 
http://support.citrix.com/proddocs/topic/netscaler-traffic-management-10-1-map/ns-lb-commonprotocols-sip-con.html
tl;dr though -

set rnat <server subnet> <netmask>
set lb sipParameters -rnatSrcPort 5060 -rnatDstPort 5060 -retryDur 1000 -addRportVip ENABLED -sip503RateThreshold 1000



On Tue, Apr 1, 2014 at 7:33 PM, Anil KARADAG <akaradag () netas com tr<mailto:akaradag () netas com tr>> wrote:
Hi again,



I continue to work on fixing the problem, but no success so far. Is there any way to use client port number without 
enabling "use source ip"??



-----Original Message-----
From: Anil KARADAG [mailto:akaradag () NETAS com tr<mailto:akaradag () NETAS com tr>]
Sent: Monday, March 31, 2014 3:51 PM
To: Pui Edylie; Paul Bertain
Cc: nanog () nanog org<mailto:nanog () nanog org>
Subject: RE: Outgoing traffic problem on Citrix Netscaler Load Balancer



Hi,SIP source ports destination ports
SIP source ports destination ports


Thanks for solution but I cannot use it, because backend servers must know netscaler snip ip for clients. So I need 
fixed proxy port to communication with backend servers.



-----Original Message-----

From: Pui Edylie [mailto:email () edylie net<mailto:email () edylie net>]

Sent: Monday, March 31, 2014 3:23 PM

To: Anil KARADAG; Paul Bertain

Cc: nanog () nanog org<mailto:nanog () nanog org>

Subject: Re: Outgoing traffic problem on Citrix Netscaler Load Balancer



Hi Anil,



Take a look at

http://support.citrix.com/proddocs/topic/ns-system-10-1-map/ns-nw-ipaddrssng-enabling-use-src-ip-mode-tsk.html

- use the client's port.



We prefer F5 LTM much better than Netscaler :)



Cheers,

Edy



On 3/31/2014 8:17 PM, Anil KARADAG wrote:

Hi Paul,

Thanks for reply, it works :). But I have another problem; source port is altered by the virtual service. However, we 
need the source port to be the same on the destination servers. Is there a way to  ensure this?

Thanks

-----Original Message-----

From: Paul Bertain [mailto:paul () bertain net<mailto:paul () bertain net>]

Sent: Tuesday, March 25, 2014 10:47 PM

To: Anil KARADAG

Cc: nanog () nanog org<mailto:nanog () nanog org>

Subject: Re: Outgoing traffic problem on Citrix Netscaler Load Balancer

Hi Anil,

Have you setup MBF?  I've seen that as an issue before. If you don't have a default route set, than MBF might help 
you send the response out the interface on which it was received.

Paul

On Mar 24, 2014, at 11:46 PM, Anil KARADAG <akaradag () NETAS com tr<mailto:akaradag () NETAS com 
tr><mailto:akaradag () NETAS com tr<mailto:akaradag () NETAS com tr>>> wrote:

Hi,

I setup a netscaler load balancer for sip traffic on Amazon EC2. Clients packets are arrived to the backend servers 
over to the load balancer but any responses cannot be arrived to clients. I see the responses on the load balancer.

I think there is a config problem for that but I don't know and did not find any solution for that. How can I fix 
the outbound traffic issue.

thanks

Bu e-posta mesaj? ve ekleri g?nderildi?i ki?i ya da kuruma ?zeldir ve gizlidir. Ayr?ca hukuken de gizli olabilir. 
Hi?bir ?ekilde ???nc? ki?ilere a??klanamaz ve yay?nlanamaz. E?er mesaj?n g?nderildi?i al?c? de?ilseniz bu elektronik 
postan?n i?eri?ini a??klaman?z, kopyalaman?z, y?nlendirmeniz ve kullanman?z kesinlikle yasakt?r ve bu elektronik 
postay? ve eklerini derhal silmeniz gerekmektedir. NETA? TELEKOM?N?KASYON A.?. bu mesaj?n i?erdi?i bilgilerin 
do?rulu?u veya eksiksiz oldu?u konusunda herhangi bir garanti vermemektedir. Bu nedenle bu bilgilerin ne ?ekilde 
olursa olsun i?eri?inden, iletilmesinden, al?nmas?ndan, saklanmas?ndan ve kullan?lmas?ndan sorumlu de?ildir. Bu 
mesajdaki g?r??ler g?nderen ki?iye ait olup, NETA? TELEKOM?N?KASYON A.?.'nin g?r??lerini yans?tmayabilir.

-------------------------------------------------------

This e-mail and its attachments are private and confidential and intended for the exclusive use of the individual or 
entity to whom it is addressed. It may also be legally confidential. Any disclosure, distribution or other 
dissemination of this message to any third party is strictly prohibited. If you are not the intended recipient you 
are hereby notified that any dissemination, forwarding, copying or use of any of the information is strictly 
prohibited, and the e-mail should immediately be deleted. NETA? TELEKOM?N?KASYON A.?. makes no warranty as to the 
accuracy or completeness of any information contained in this message and hereby excludes any liability of any kind 
for the information contained therein or for the transmission, reception, storage or use of such information in any 
way whatsoever. The opinions expressed in this message are those of the sender and may not necessarily reflect the 
opinions of NETA? TELEKOM?N?KASYON A.?.

Bu e-posta mesajı ve ekleri gönderildiği kişi ya da kuruma özeldir ve gizlidir. Ayrıca hukuken de gizli olabilir. 
Hiçbir şekilde üçüncü kişilere açıklanamaz ve yayınlanamaz. Eğer mesajın gönderildiği alıcı değilseniz bu elektronik 
postanın içeriğini açıklamanız, kopyalamanız, yönlendirmeniz ve kullanmanız kesinlikle yasaktır ve bu elektronik 
postayı ve eklerini derhal silmeniz gerekmektedir. NETAŞ TELEKOMÜNİKASYON A.Ş. bu mesajın içerdiği bilgilerin 
doğruluğu veya eksiksiz olduğu konusunda herhangi bir garanti vermemektedir. Bu nedenle bu bilgilerin ne şekilde 
olursa olsun içeriğinden, iletilmesinden, alınmasından, saklanmasından ve kullanılmasından sorumlu değildir. Bu 
mesajdaki görüşler gönderen kişiye ait olup, NETAŞ TELEKOMÜNİKASYON A.Ş.'nin görüşlerini yansıtmayabilir.

-------------------------------------------------------

This e-mail and its attachments are private and confidential and intended for the exclusive use of the individual or 
entity to whom it is addressed. It may also be legally confidential. Any disclosure, distribution or other 
dissemination of this message to any third party is strictly prohibited. If you are not the intended recipient you 
are hereby notified that any dissemination, forwarding, copying or use of any of the information is strictly 
prohibited, and the e-mail should immediately be deleted. NETAŞ TELEKOMÜNİKASYON A.Ş. makes no warranty as to the 
accuracy or completeness of any information contained in this message and hereby excludes any liability of any kind 
for the information contained therein or for the transmission, reception, storage or use of such information in any 
way whatsoever. The opinions expressed in this message are those of the sender and may not necessarily reflect the 
opinions of NETAŞ TELEKOMÜNİKASYON A.Ş.

-------------------------------------------------------

This e-mail and its attachments are private and confidential and intended for the exclusive use of the individual or
entity to whom it is addressed. It may also be legally confidential. Any disclosure, distribution or other
dissemination of this message to any third party is strictly prohibited. If you are not the intended recipient you are
hereby notified that any dissemination, forwarding, copying or use of any of the information is strictly prohibited,
and the e-mail should immediately be deleted. NETAŞ TELEKOMÜNİKASYON A.Ş. makes no warranty as to the accuracy or
completeness of any information contained in this message and hereby excludes any liability of any kind for the
information contained therein or for the transmission, reception, storage or use of such information in any way
whatsoever. The opinions expressed in this message are those of the sender and may not necessarily reflect the opinions
of NETAŞ TELEKOMÜNİKASYON A.Ş.

Bu e-posta mesajı ve ekleri gönderildiği kişi ya da kuruma özeldir ve gizlidir. Ayrıca hukuken de gizli olabilir.
Hiçbir şekilde üçüncü kişilere açıklanamaz ve yayınlanamaz. Eğer mesajın gönderildiği alıcı değilseniz bu elektronik
postanın içeriğini açıklamanız, kopyalamanız, yönlendirmeniz ve kullanmanız kesinlikle yasaktır ve bu elektronik
postayı ve eklerini derhal silmeniz gerekmektedir. NETAŞ TELEKOMÜNİKASYON A.Ş. bu mesajın içerdiği bilgilerin doğruluğu
veya eksiksiz olduğu konusunda herhangi bir garanti vermemektedir. Bu nedenle bu bilgilerin ne şekilde olursa olsun
içeriğinden, iletilmesinden, alınmasından, saklanmasından ve kullanılmasından sorumlu değildir. Bu mesajdaki görüşler
gönderen kişiye ait olup, NETAŞ TELEKOMÜNİKASYON A.Ş.'nin görüşlerini yansıtmayabilir.
-------------------------------------------------------
This e-mail and its attachments are private and confidential and intended for the exclusive use of the individual or
entity to whom it is addressed. It may also be legally confidential. Any disclosure, distribution or other
dissemination of this message to any third party is strictly prohibited. If you are not the intended recipient you are
hereby notified that any dissemination, forwarding, copying or use of any of the information is strictly prohibited,
and the e-mail should immediately be deleted. NETAŞ TELEKOMÜNİKASYON A.Ş. makes no warranty as to the accuracy or
completeness of any information contained in this message and hereby excludes any liability of any kind for the
information contained therein or for the transmission, reception, storage or use of such information in any way
whatsoever. The opinions expressed in this message are those of the sender and may not necessarily reflect the opinions
of NETAŞ TELEKOMÜNİKASYON A.Ş.

Current thread:

RE: Outgoing traffic problem on Citrix Netscaler Load Balancer Anil KARADAG (Mar 31)
- Re: Outgoing traffic problem on Citrix Netscaler Load Balancer Alex White-Robinson (Apr 01)
  - RE: Outgoing traffic problem on Citrix Netscaler Load Balancer Anil KARADAG (Apr 01)
    - Re: Outgoing traffic problem on Citrix Netscaler Load Balancer Paul Bertain (Apr 01)
    - RE: Outgoing traffic problem on Citrix Netscaler Load Balancer Anil KARADAG (Apr 01)