Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Mar 24, 2015

LTM and Jboss resources

Hi,

 

I checked most of posts about F5 - Jboss setups. Still not sure what is best practice here, or more precise when Apache/Jboss setup can be safely replaced with F5/Jboss setup. I will appreciate pointing me to some F5 of external articles about it.

 

I am looking for info when Apache/Jboss can be easily replaced by F5/Jboss, how to set persistence and how to monitor such configuration.

 

According to what I found it should be easy to rule out Apache if it's working just as proxy/LB for Jboss (so both static and dynamic content is in fact by Jboss - I think most common with mod_jk) but maybe not so much when Apache is serving static content and Jboss dynamic (possible with mod_proxy).

 

Piotr

 

2 Replies

  • Did you get any answer to your question? I am also interested on best practise for F5 with Jboss applications...

     

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus

    I have hundreds of JBoss apps fronted by F5s without Apache. The only real benefit, IMO, that apache provides in a JBoss deployment is better request logging and is really the only reason my organization utilizes it at all in front of JBoss (when we do, we just use mod proxy, not mod jk. I see no value in mod_jk at all). Apps that do a good job of logging themselves don't really need that though.

     

    So the answer is yes, perfectly doable, it just really depends on how much you rely on those request logs from an operational standpoint. You can provide the same logging via the F5, but to have the available options that Apache provides there, you'd need to do it in an iRule and you'd probably want to send those logs off to splunk or something via HSL.

     

    As for monitoring, my preference is for the application to provide some sort of status page that will monitor the health of the application itself behind the scenes. That way the monitor from the F5 is just getting a "good/not good" response from the status. This is true with or without an apache. Apache itself doesn't really have the robust level or variety of monitoring that a true load balancer, like an F5, has.

     

    Regarding persistence, I just use cookie insert by default for web apps that require persistence, but for webservices persistence shouldn't be required at all.

     

    The thing that an F5 gives you over an apache (even with apache) is the ability to more easily remediate issues. Specifically like applying an App Firewall, web acceleration, analytics, etc.

     

    You can do some or most of that with apache as well, but changes to apache require a restart/reload (depending on what you are doing). Change to an F5 proxy happen on the next new connection.