Coyote Point Systems E350GX, Installation And Administration Manual

Page: 89 / 344

Modifying Global Parameters
Equalizer Installation and Administration Guide 89
passive FTP translation
If your servers are on a network the outside world cannot reach,
consider enabling Equalizer’s passive FTP translation option. This option
causes the Equalizer to rewrite outgoing FTP PASV control messages
from the servers so they contain the IP address of the virtual cluster
rather than that of the server.
ICMP drop redirects Tells Equalizer to drop (i.e., ignore) incoming ICMP redirect messages.
ignore case
Applies to L7 clusters and is the global setting to ignore case in match
expressions. You can override this value per cluster and per match rule.
See Chapter 8, “Using Match Rules”.
no outbound RST
Applies to L4 clusters only and causes Equalizer to disable forwarding of
untranslated TCP RST (reset) packets. You may want to enable this flag
if other network devices (e.g., firewalls, routers, etc.) are logging
unexpected source IP messages for the real IPs of servers behind
Equalizer (and not the cluster IP). When Equalizer manages a cluster
connection, it keeps a record of the connection so it can translate the
source IP in a server response before forwarding it. If a client connected
to a server IP directly, or if the server sends a RST after Equalizer has
already removed the connection record, the RST packet will not be
translated by Equalizer. Enabling this option tells Equalizer to drop any
RST packets from servers that do not currently have a Layer 4
connection record that matches the RST packet; with this option
disabled (the default) Equalizer will forward all RST packets.
allow extended chars
By default, support for extended characters (8-bit ASCII and multibyte
UTF characters) in URIs is disabled. Equalizer returns a
400 Bad
Request error when a request URI contains 8-bit or multibyte
characters. To enable support for 8-bit and multibyte characters in URIs,
turn on the
allow extended chars flag.
Caution – There are potential risks to enabling this option, because it allows
Equalizer to pass requests that violate RFC2396; load-balanced servers may be
running software that is incapable of handling such requests. Therefore, ensure
that your server software is capable of handling URIs containing extended
characters and will not serve as a potential weak point in your network
before you
enable extended characters.
abort server
By default, when a client closes a connection, Equalizer waits for a
response from the server before closing the server connection. If this
flag is enabled, Equalizer will not wait for a response before closing the
connection to the server; instead it sends a TCP RST (reset) to the
server when the client closes the connection.
RST on server failure
Applies to Layer 4 clusters only and enables the sending of TCP RST
(reset) packets to clients on established connections when the server on
the other end of the connection goes down. The RST packet is sent
when Equalizer removes the connection or when another packet using
the same connection is received from the client, whichever happens
first. By default, this option is disabled and Equalizer does not send RST
packets to clients. Enabling this option is useful when load balancing an
application that requires a TCP RST to close a connection; for example,
Network File System (NFS).