Applies To:

Show Versions Show Versions

Manual Chapter: Customizing Application Optimization
Manual Chapter
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

WAN optimization on the BIG-IP® system requires an optimized application virtual server on the initiating side of the WAN, and an iSession listener (iSession-terminating virtual server) on the receiving side of the WAN to complete the connection. For some types of application traffic, such as CIFS and FTP, the system also requires an application-specific virtual server on the receiving side. After the iSession listener terminates the connection, the system directs the traffic to this virtual server. Since you can create more than one application virtual server on the receiving side, you can apply different profiles to selected application traffic with different destinations.
The BIG-IP system with the WAN Optimization Module automatically configures optimization for the applications you select on the Quick Start screen (refer to the BIG-IP® WAN Optimization Module: Quick Setup or the online help). For each application you select, the system creates a virtual server and associates with it an iSession profile and other relevant WAN optimization profiles.
You can customize the system-supplied application optimization virtual servers and manually create new ones to specify where and how you want the WAN Optimization Module to optimize specified application traffic.
Note: Make sure you configure optimized application virtual servers so that VLAN traffic is restricted to the VLAN where the connections are initiated (for example, the LAN side or internal VLAN). You need to configure the iSession-terminating virtual server so that VLAN traffic is restricted to the VLAN that is connected to the WAN link.
The optimized applications you set up require several profiles that are included with the system. If you use the Quick Start screen to create the optimized applications, the system automatically associates the following profiles with the virtual servers it creates, as appropriate.
isession
This profile is required for WAN Optimization to prepare traffic for optimization or to complete the iSession connection on the remote endpoint. Any virtual server that optimizes or receives optimized traffic needs to have an iSession profile, either the default provided with the system or one that you create. iSession profiles need to be on the WAN side of the system (that is, on the server side of the initiating system and the client side of the receiving system).
wom-tcp-lan-optimized
This profile tunes the TCP stack to work well over the LAN. It is required for WAN Optimization on the client side of the virtual server. For more information about TCP tuning, depending on the BIG-IP platform, see Appendix A, TCP Profile Tuning.
wom-tcp-wan-optimized
This profile tunes the TCP stack to work well over the WAN. It is required for WAN Optimization on the server side of the virtual server. For more information about TCP tuning, depending on the BIG-IP platform, see Appendix A, TCP Profile Tuning.
wom-default-clientssl
This profile is a pre-defined SSL profile that allows the system on the remote side of the WAN to receive unencrypted traffic as well as encrypted traffic. It decrypts the encrypted traffic coming from the iSession connection.
wom-default-serverssl
This profile is a pre-defined server SSL profile that the system uses to ensure that traffic passes through the system even when remote endpoints are not present and the WAN Optimization Module is not optimizing traffic.
serverssl
This profile is a built-in SSL profile that the system uses for the outbound connection on the initiating WAN Optimization Module. Use this profile only if you want to encrypt the traffic going into the iSession connection.
Note: You can use the pre-configured value, serverssl. to get the WAN Optimization Module up and running, but you need to customize this profile for your production environment. For information about customizing SSL profiles, refer to the Configuration Guide for BIG-IP® Local Traffic Manager.
cifs
This profile is a built-in profile specifically tailored to optimize CIFS traffic. This profile is specified on both the cifs_optimize_client and cifs_optimize_server virtual servers.
ftp
This profile is a built-in profile specifically tailored to optimize FTP traffic. This profile is specified on both the ftp_optimize_client and ftp_optimize_server virtual servers.
mapi
This profile is a built-in profile specifically tailored to optimize MAPI traffic. This profile is specified on the mapi_optimize_client virtual server.
A custom optimized application is a virtual server to which you assign profiles to optimize traffic for specified application traffic. For example, you may want to create custom optimized application if your network configuration does not use the standard ports for applications.
For most applications, you create a single optimized application virtual server in the outbound direction. The iSession-terminating virtual server isession-virtual at the other end of the iSession connection completes the connection. Some applications, such as CIFS and FTP, require an optimized application virtual server for incoming traffic, as well. This virtual server provides further processing of the traffic after the iSession connection has been terminated.
1.
On the Main tab of the navigation pane, expand WAN Optimization, point to Optimized Applications, and click Create Outbound.
The Outbound Application Configuration screen opens.
2.
In the Name box, type a descriptive name for the virtual server.
3.
For Port, type the service port for the application traffic you are optimizing, or select an application from the list.
When you select from the list, the value in the box changes to reflect the associated default port.
If you select CIFS, FTP, or MAPI, the screen displays an additional setting so you can select an application profile to handle this traffic.
4.
For Application Profile, select the application profile to associate with this virtual server. The list displays only those profiles that pertain to the application you specified in the Port setting.
5.
For Enabled LAN VLANs, specify the VLANs on which the virtual server receives incoming traffic. Use the Move button (<<) to move the VLANs from the Available list to the Selected list.
6.
For iSession Profile, select from the list of iSession profiles, some of which have been created with optimal settings for specific applications.
For WAN optimization to occur, you must specify an iSession profile (not None).
Note: The default profile isession does not include application data encryption. To specify the use of an SSL profile on the outbound connection, select isession-encrypt or a customized iSession profile that includes application data encryption.
7.
Depending on how many custom optimized application virtual servers you want to create, perform the appropriate action:
 
Click Repeat to save this custom optimized application virtual server and add another.
 
Click Finished when you are done adding custom optimized application virtual servers.
For most applications, you create a single virtual server in the outbound direction. The iSession listener, isession-virtual, at the other end of the iSession connection completes the connection. Some applications, such as CIFS and FTP, require an optimized application virtual server for incoming traffic, as well. This virtual server provides further processing of the traffic after the iSession listener terminates the iSession connection.
1.
On the Main tab of the navigation pane, expand WAN Optimization, point to Optimized Applications, and click Create Inbound.
The Inbound Application Configuration screen opens.
2.
For the Destination setting, specify the IP address of the virtual server you are creating to receive specified application traffic from the WAN:
 
Type: Click Host or Network, depending on the type of optimized application virtual server you are creating.
 
Host: Specifies that the IP address you type represents a single host address.
 
Network: Specifies that the IP address you type is a network address, which the system uses in combination with Mask to represent a range of IP addresses.
 
Address: Type the IP address of the virtual server.
 
Mask: If you are adding a network address, type the mask that represents the range. You must type the full netmask.
3.
In the Name box, type a descriptive name for the virtual server.
4.
For Port, type the service port for the application traffic you are optimizing, or select an application from the list.
When you select from the list, the value in the box changes to reflect the associated default port.
If you select CIFS, FTP, or MAPI, the screen displays an additional setting so you can select an application profile to handle this traffic.
5.
For Application Profile, select the application profile to associate with this virtual server. The list displays only those profiles that pertain to the application you specified in the Port setting.
6.
Specify the VLANs on which the virtual server receives incoming WAN traffic destined for the LAN. Use the Move button (<<) to move the VLANs from the Available list to the Selected list.
7.
Depending on how many custom optimized application virtual servers you want to create, perform the appropriate action:
 
Click Repeat to save this custom optimized application virtual server and add another.
 
Click Finished when you are done adding custom optimized application virtual servers.
To optimize traffic that is not SSL encrypted, you can configure the optimized application virtual server with its default values. Figure 6.1 shows a pair of systems configured for non-SSL application traffic. The iSession profile applies optimization techniques to the traffic on the iSession connection. The client SSL profile on the terminating side must have the Non-SSL Connections setting enabled, such as the pre-defined wom-default-clientssl profile.
To handle SSL encrypted traffic all the way from the request initiator (client) to the receiver (server), you need to include the following settings when you configure the virtual servers:
 
To re-encrypt the iSession traffic on the other side of the WAN, add a third virtual server with the appropriate server SSL profile.
Figure 6.2 shows the additional profiles you need to add to the virtual servers to decrypt incoming traffic from the WAN, encrypt it through the iSession connection, de-encrypt it at the receiving side, and then re-encrypt it to send it to its destination.
No matter how you create optimized applications, they appear on the Optimized Applications List screen, where you can view them, modify them, and delete them.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Optimized Applications.
The Optimized Applications List screen opens, displaying all the optimized application virtual servers that have been created, both automatically and manually.
2.
To delete an optimized application, check the Select box to the left of the virtual server name, and then click Delete.
a)
In the Name column, click the name of the virtual server.
The properties screen for that virtual server opens.
c)
Click Update.
The WAN Optimization Module can perform symmetric adaptive compression on traffic that travels between the local and remote endpoint, which reduces the size of data that is being transferred over the WAN. If you configured your system on the Quick Start screen using the default values, as described in the BIG-IP® WAN Optimization Module: Quick Setup, your system is set up for symmetric adaptive compression.
 
Adaptive
This compression method chooses the best algorithm (Deflate, LZO, or Null) for the current traffic, and changes as traffic conditions change. The system selects only from the compression algorithms that are enabled. If it selects Deflate, it also selects an optimum Deflate Level.
 
Deflate
This is a high-quality compression algorithm that is typically slower than the LZO algorithm, unless the system platform supports hardware acceleration. If you enable Deflate and disable Adaptive, you can also select the Deflate Level.
 
LZO
This is a fast, medium-quality compression algorithm with low latency. the Lempel_Ziv_Oberhumer (LZO) algorithm is best for interactive protocols (such as telnet) or high-bandwidth protocols that compress easily (such as those used for data replication).
 
Null
This option specifies that no compression occurs between the two systems. You must use Null for connections if you do not want to allow compression. You can also use it for traffic that cannot be compressed, such as streaming media (already compressed), or encrypted protocols (such as HTTPS), but may still benefit from symmetric data deduplication.
Symmetric adaptive compression requires that the systems on both sides of the iSession connection have virtual servers with an associated iSession profile that has at least one enabled compression method that is the same for both systems.
Important: At least one compression method needs to be the same on both systems (even if it is Null, meaning no compression), otherwise, the two systems cannot establish a tunnel connection.
Tip: In a lab test environment, such as a proof of concept, F5 recommends using a WAN emulator to model a real network scenario. If you are setting up a test deployment without a WAN emulator, and you connect two BIG-IP with WOM devices back-to-back with no latency, disable Adaptive compression and enable another compression algorithm, except Null, on both systems. Otherwise, symmetric adaptive compression will select Null, (correctly detecting that the network is not a bottleneck), which could result in performance degradation.
You can adjust the compression method (also called codec) on the iSession profile. To apply different compression settings to selected types of application traffic, you can create separate iSession profiles that have different compression settings, and then associate them with different optimized application virtual servers. For information about creating a custom iSession profile, see Customizing the iSession profile.
1.
On the Main tab of the navigation pane, expand WAN Optimization, and click Optimized Applications.
2.
In the iSession Profile column, click the profile for the optimized application you want to modify.
The properties screen opens for the selected iSession profile.
Note: If you want no compression, set Null to Enabled, and disable all other options.
4.
If you disable the Adaptive option and enable the Deflate option, you can also select a level of compression for Deflate Level.
The valid range is from 1 to 9. A higher value causes the CPU to spend more time looking for matches, which may result in better compression. The default level is 1.
5.
Click the Update button to save your changes.
6.
Log on to the WAN Optimization Module on the other side of the WAN to make sure that the iSession-terminating virtual uses an iSession profile that has the same compression options enabled.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Optimized Applications.
2.
In the iSession Profile column, click the profile for the optimized application for which you want to disable symmetric compression.
The iSession profile properties screen opens.
3.
 
Set Adaptive to Disabled
 
Set Deflate to Disabled
 
Set LZO to Disabled
 
Set Null to Enabled
4.
Click the Update button to save your changes.
5.
Log on to the WAN Optimization Modules on the other side of the WAN to make sure that the iSession-terminating virtual uses an iSession profile that has Null set to Enabled.
Common Internet File System (CIFS) is a remote file access protocol that forms the basis of Microsoft® Windows file sharing. Various CIFS implementations (for example, Samba) are also available on other operating systems such as Linux. CIFS is the protocol most often used for transferring files over the network. It is particularly useful when two offices located far apart frequently need to share and exchange files.
Important: By default, Microsoft®Windows clients do not require SMB signing, except when communicating with their domain controller. If SMB signing settings have been changed, you need to make sure SMB signing is optional on all servers and clients.
The WAN Optimization Module can optimize CIFS traffic, resulting in faster performance in situations such as the following:
 
Transfer of files that use CIFS protocol: Optimization makes it faster to download and upload files.
 
Opening Microsoft applications: Optimization makes it faster to open files over the network.
 
Saving files: Optimization makes it faster to save files over the network.
Optimizing CIFS traffic requires an optimized application virtual server on the initiating side of the WAN, an iSession listener on the receiving side of the WAN, and an optimized application virtual server on the receiving side to handle CIFS traffic after the connection has been terminated.
The easiest way to set up CIFS optimization is from the Quick Start screen. This procedure assumes that you have already configured the local endpoint, VLANs, authentication and encryption, and application security. For those step-by-step instructions, refer to the guide BIG-IP® WAN Optimization Module: Quick Setup. To create a custom virtual server for CIFS optimization, see Creating custom optimized applications.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Quick Start.
2.
In the Create Optimized Applications area, check the box to select Microsoft Office and Windows File Sharing (CIFS).
3.
Click the Apply button.
The system creates a virtual server on the initiating side of the WAN called cifs_optimize_client for outbound CIFS traffic and a virtual server called cifs_optimize_server for inbound CIFS traffic.
4.
If you are using a one-arm deployment, we recommend that you also modify the cifs_optimize_client virtual server (to ensure the proper functioning of dynamic discovery), by completing these steps:
a)
In the navigation pane, click Optimized Applications.
b)
On the Optimized Applications List screen, click cifs_optimize_client to open the properties screen for that virtual server.
c)
For the SNAT Pool setting, select Auto Map to ensure that dynamic discovery functions properly.
d)
Click the Update button.
5.
If you are using a one-arm deployment, configure the virtual server for the inbound CIFS traffic as described in Creating custom optimized applications for inbound traffic, specifying for the Destination setting the IP address of the CIFS server network.
7.
Repeat steps 1-3 on the remote WAN Optimization Module (and also repeat steps 4 and 5 if you are using a one-arm deployment).
The system-supplied CIFS profile, which is associated with the virtual servers named cifs_optimize_client and cifs_optimize_server, has been configured to optimize CIFS traffic through the iSession connection.
You can customize a profile to fit a particular situation. We recommend that rather than modifying the default profile, you create a new CIFS profile using the default CIFS profile as the parent.
To modify the CIFS profile, refer to Table 6.1 (following) for the CIFS profile settings and their descriptions, and the procedure that follows the table.
Specifies whether the system speeds up CIFS file uploads to the server by fulfilling write requests through the WAN Optimization Module closer to the request initiator.
Specifies whether the system speeds up CIFS file downloads by prefetching the file data on the WAN Optimization Module that is closer to the request initiator.
Specifies whether the system performs read-ahead operations based on parsing the Microsoft CDF file and understanding its structure.
Specifies whether the system speeds up file close operations by fulfilling them through the WAN Optimization Module that is closer to the request initiator.
Specifies whether the system speeds up file metadata change requests by fulfilling the requests through the WAN Optimization Module that is closer to the request initiator.
1.
On the Main tab of the navigation pane, expand Local Traffic, point to Profiles, point to Services, and click CIFS.
2.
Click the Create button on the right.
3.
In the Name box, type a unique name for your profile.
5.
Click the Finished button.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Optimized Applications.
2.
3.
In the WAN Optimization area at the bottom of the screen, select the new profile from the CIFS Profile list.
4.
Click the Update button.
When both WAN Optimization Modules are configured, the systems can begin to optimize CIFS traffic. You can use the dashboard to see how much bandwidth gain is being saved (using compression and deduplication) and how much latency is reduced as a result of optimizing CIFS traffic.
The Bandwidth Gain window of the dashboard shows the amount of improved throughput as a result of compression and deduplication for CIFS data transfers. The Current Ratio gauge shows the ratio of increased bandwidth gain by comparing the raw data to the optimized data. The graph shows both the raw CIFS data and the optimized CIFS data in bits per second.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Dashboard.
The WAN Optimization screen of the dashboard opens in a separate browser.
 
From WAN:CIFS
Shows the gain in bandwidth for CIFS traffic coming in from the WAN.
 
To WAN:CIFS
Shows the gain in bandwidth for CIFS traffic going out to the WAN.
This is where you view the percentage of read requests and write requests that were faster because of CIFS optimization techniques.
The FTP (File Transfer Protocol) protocol governs the transfer and exchange of files between computers over a network. The WAN Optimization Module can optimize FTP traffic across the WAN.
Optimizing FTP traffic requires an optimized application virtual server on the initiating side of the WAN, an iSession listener on the receiving side of the WAN, and an optimized application virtual server on the receiving side to handle FTP traffic after the connection has been terminated.
The easiest way to set up FTP optimization is from the Quick Start screen. This procedure begins after you have configured the local endpoint, VLANs, authentication and encryption, and application security. For those step-by-step instructions, refer to the guide BIG-IP® WAN Optimization Module: Quick Setup. To create a custom virtual server for FTP optimization, see Creating custom optimized applications.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Quick Start.
3.
Click the Apply button.
The system creates a virtual server on the initiating side of the WAN called ftp_optimize_client for outbound FTP traffic and a virtual server called ftp_optimize_server for inbound FTP traffic.
4.
If you are using a one-arm deployment, we recommend that you also modify the ftp_optimize_client virtual server (to ensure the proper functioning of dynamic discovery), by completing these steps:
a)
In the navigation pane, click Optimized Applications.
b)
On the Optimized Applications List screen, click ftp_optimize_client to open the properties screen for that virtual server.
c)
For the SNAT Pool setting, select Auto Map to ensure that dynamic discovery functions properly.
d)
Click the Update button.
5.
If you are using a one-arm deployment, configure the virtual server for the inbound FTP traffic as described in Creating custom optimized applications for inbound traffic, specifying for the Destination setting the IP address of the FTP server network.
7.
Repeat steps 1-3 on the remote WAN Optimization Module (and also repeat steps 4 and 5 if you are using a one-arm deployment).
The system-supplied FTP profile, which is associated with the virtual servers named ftp_optimize_client and ftp_optimize_server, has been configured to optimize FTP traffic through the iSession connection.
You can customize a profile to fit a particular situation. We recommend that rather than modifying the default profile, you create a new FTP profile using the default FTP profile as the parent.
1.
On the Main tab of the navigation pane, expand Local Traffic, point to Profiles, point to Services, and click FTP.
2.
Click the Create button on the right.
3.
In the Name box, type a unique name for your profile.
4.
To change either of the following settings, click the box in the Custom column on the right side of the screen.
 
Translate Extended
When enabled (checked), ensures compatibility between IP version 4 and IP version 6 clients and servers when using the FTP protocol. The default value is Enabled. For more details about this setting, refer to the Configuration Guide for BIG-IP® Local Traffic Manager.
 
Data Port
Specifies an alternate port that the FTP service runs on. The default value is 20.
5.
Click the Finished button.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Optimized Applications.
2.
4.
Click the Update button.
MAPI (Messaging Application Program Interface) is the email protocol that Microsoft® Exchange Server and Outlook® clients use to exchange messages. It enables applications to send and receive email (with document attachments) and calendar appointments. Because companies transfer so much information through email, optimizing MAPI traffic can lead to an increase in application performance and user productivity.
The WAN Optimization Module can optimize MAPI traffic to reduce the amount of bandwidth required to transfer the data across the WAN for any application that uses MAPI. You can configure MAPI to optimize traffic on any WAN Optimization Module, but it is most important on the client side, the side that initiates the requests to the Exchange Server.
Disabling encryption for clients (on the Microsoft Exchange settings, Security tab, clear the Encrypt data between Microsoft Office Outlook and Microsoft Exchange check box) because encrypted traffic cannot be optimized.
Creating virtual servers for all Exchange Servers by configuring the WAN Optimization Module to automatically discover them, or by creating them manually using Local Traffic Manager.
Creating a MAPI optimized application, which is a virtual server that identifies the MAPI traffic and has associated profiles that determine how to optimize the traffic. The WAN Optimization Module can create a MAPI optimized application automatically, or you can create the virtual server manually using Local Traffic Manager. The MAPI optimized application virtual server listens on port 135, the port on which the Endpoint Mapper typically operates. (The Endpoint Mapper service maps services to their currently assigned ports.)
The receiving (server) side WAN Optimization Module must have an iSession-terminating virtual server that completes the connection with the initiating side.
Optimizing MAPI traffic requires an optimized application virtual server on the initiating side of the WAN and an iSession listener on the receiving side of the WAN.
The easiest way to set up MAPI optimization is from the Quick Start screen. For those step-by-step instructions, refer to the guide BIG-IP® WAN Optimization Module: Quick Setup. To create a custom virtual server for MAPI optimization, see Creating custom optimized applications.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Quick Start.
3.
Click the Apply button.
On the initiating side of the WAN, the system creates a virtual server called mapi_optimize_client for outbound MAPI traffic, with which it associates appropriate application and optimization profiles.
After you create the mapi_optimize_client virtual server, you also need to create a virtual server for each Exchange server, either automatically (see Enabling automatic discovery of Exchange Servers, following) or manually (see Manually creating virtual servers for Exchange Servers).
The system-supplied MAPI profile, which is associated with the virtual server named mapi_optimize_client, has been configured to optimize MAPI traffic through the iSession connection.
You can customize a profile to fit a particular situation, for example, to enable automatic discovery of Exchange Servers. We recommend that you create a new MAPI profile using the default MAPI profile as the parent, rather than modifying the default profile.
1.
On the Main tab of the navigation pane, expand Local Traffic, point to Profiles, point to Services, and click MAPI.
2.
Click the Create button on the right.
3.
In the Name box, type a unique name for your profile.
4.
To change either or both of the following settings, click the box in the Custom column on the right side of the screen, and select from the list.
 
Native Compression
Specifies whether the system uses Microsoft Exchange compression. The default value is Disabled, which allows the WAN Optimization Module to use symmetric adaptive compression for better results than if you enabled native compression.
 
Discover Exchange Servers
Specifies whether the system automatically discovers the Microsoft Exchange servers in the network and creates a virtual server for each one. The default value is Disabled, which means that you must manually create a virtual server for each Exchange Server. For details about this procedure, see Manually creating virtual servers for Exchange Servers.
5.
Click the Finished button.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Optimized Applications.
2.
In the Name column, click a MAPI optimized application to open the properties screen for that virtual server.
3.
In the WAN Optimization area at the bottom of the screen, select the new profile from the MAPI Profile list.
4.
Click the Update button.
For MAPI optimization, you need to have a virtual server for each Exchange Server so that the system can locate the MAPI traffic (by using the Exchange Server IP address) and can then optimize it. You can modify the MAPI application profile to automatically discover the Exchange Servers and create a virtual server for each one. Then, if the company adds new Exchange Servers to the network or the IP addresses of existing ones change, the WAN Optimization Module discovers the changes, and creates new MAPI virtual servers for the new and moved Exchange Servers.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Optimized Applications.
The Optimized Applications List screen opens, showing all the optimized application virtual servers that have been created.
2.
At the end of the mapi_optimize_client row, click the name of the Application Profile listed.
If mapi_optimize_client is not on the list, see Setting up optimization of MAPI traffic.
3.
For Discover Exchange Servers, select Enabled.
4.
Click Update to save the change.
If you do not want the WAN Optimization to automatically create virtual servers for Exchange Servers, you can specifically create the virtual servers using Local Traffic Manager. You can find details about creating virtual servers in the Configuration Guide for BIG-IP® Local Traffic Manager.
The following procedure describes the settings and profiles needed if you are going to manually configure virtual servers for Exchange Servers in order to optimize MAPI traffic. You create virtual servers for Exchange Servers on the initiating (client) side WAN Optimization Module.
Note: Skip this procedure if you changed the Discover Exchange Servers setting in the mapi profile to Enabled.
2.
On the Main tab of the navigation pane, expand Local Traffic and click Virtual Servers.
3.
Click the Create button.
The New Virtual Server screen opens.
4.
For the Configuration setting, select Advanced.
a)
In the Destination Address box, type the address of the Microsoft Exchange Server.
b)
For the Service Port, select * All Ports so the virtual server intercepts all traffic headed for the destination address.
c)
For the Protocol Profile (Client), select wom-tcp-lan-optimized.
d)
For the Protocol Profile (Server), select wom-tcp-wan-optimized.
e)
For the SSL Profile (Server), select wom-default-serverssl.
f)
If you specified a Host Address for the Destination, clear the Address Translation setting.
g)
For the iSession Profile, select isession or a customized iSession profile that descends from isession, and set the Context to server.
h)
For the MAPI profile, select mapi.
 
Click Repeat to save this virtual server and add more virtual servers for other Exchange Servers.
 
Click Finished if you are done adding virtual servers.
After you begin to optimize MAPI traffic, you can use the dashboard to see how much bandwidth is being saved as a result of optimizing MAPI traffic.
1.
On the Main tab of the navigation pane, expand WAN Optimization and click Dashboard.
The WAN Optimization screen of the dashboard opens in a separate browser window.
2.
In the Bandwidth Gain window, click the Filters button (funnel), and from the bandwidth gain Filters menu, choose MAPI.
 
From WAN:MAPI
Shows bandwidth gain for MAPI traffic coming from the WAN.
 
To WAN:MAPI
Shows the gain in bandwidth for MAPI traffic going out to the WAN.
To optimize HTTPS traffic, you need to perform some additional configuration on the initiating and receiving WAN Optimization Modules. The following points provide an overview of the procedure.
Initiating WAN Optimization Module
Configure the initiating WAN Optimization Module as described in Chapter 3, Configuring WAN Optimization. After you have finished the basic configuration, complete the following additional steps.
2.
Include https in the name of the optimized application virtual server (for example, https_optimize_client).
4.
Configure the SSL Profile (Client) to use the profile appropriate for decrypting SSL traffic.
Note: For more information about SSL application traffic, see Optimizing SSL applications.
6.
Configure the SSL Profile (Server) to use a profile appropriate for re-encypting SSL traffic.
Receiving WAN Optimization Module
Configure the receiving WAN Optimization Module as described in Chapter 3, Configuring WAN Optimization. After you have finished the basic configuration, complete the following additional steps.
1.
Create a virtual server to re-encrypt the HTTPS traffic on its way to the server (for details, see Configuring Virtual Servers, in the Configuration Guide for BIG-IP® Local Traffic Manager).
2.
On the re-encrypt virtual server, configure the SSL Profile (Server) setting to use the default serverssl profile (or one you created).
3.
On the Local Endpoint screen, include the IP address of the re-encrypt virtual server as an advertised route.
The iSession profile tells the system how you want to optimize traffic. Optimization requires an iSession profile at both ends of the iSession connection. When you configure optimized applications on the Quick Start screen, the system automatically associates an iSession profile with every virtual server it creates for the selected optimized applications. The system also associates the iSession profile isession with the iSession-terminating virtual server it creates for inbound traffic.
You must associate an iSession profile with any virtual server you create for an custom optimized application optimization for outbound traffic and any iSession listener you create for inbound traffic.
The WAN Optimization Module includes the parent iSession profile isession, which is appropriate for all application traffic, and some iSession profiles that have been pre-configured for specific applications. The name of each pre-configured iSession profile indicates the application for which it was configured, such as isession-cifs.
In certain circumstances, you may want to create a custom iSession profile to change the way the system handles optimization, for example, disabling deduplication. Instead of changing the parent isession profile, create a custom iSession profile, and give it a descriptive name.
1.
On the Main tab of the navigation pane, expand Local Traffic and click Profiles, then Services and then iSession.
The iSession Profiles screen opens.
2.
Click the Create button.
The New Profile screen opens.
3.
In the Name box, type a name for the iSession profile.
4.
For the Deduplication setting, leave the default of Enabled if you want to use this feature.
For deduplication to take place, the iSession listener that receives this traffic must have an iSession profile that also has this setting Enabled. For additional details, see Configuring symmetric data deduplication.
5.
In the Compression Settings area, in addition to the Deduplication setting, you must enable at least one of the compression options.
At least one option must match an option on the iSession profile associated with the iSession listener that receives this traffic on the other side of the WAN. For details and descriptions of the settings, see Configuring symmetric adaptive compression, or the online help.
6.
For the Reuse Connection setting, select either:
 
Enabled: Specifies that the system saves and reuses the tunnel between the local and remote endpoints for multiple connections. This is the default setting.
 
Disabled: Specifies that the system creates a new tunnel for each connection.
Note: In the case of an abnormal TCP connection reset, the iSession tunnel connection is terminated and reset. While transparent to the user, this action may appear in diagnostics.
7.
For the Port Transparency setting, select either:
 
Enabled: Specifies that the destination port of the traffic is preserved over the WAN. This is the default setting.
 
Disabled: Specifies that the destination port is not preserved. The system sends traffic to the tunnel port.
8.
For the Application Data Encryption setting, specify whether to traffic on the outbound connection is encrypted. The default value is Disabled. If you select Enabled, the system uses the SSL profiles specified on the local and remote endpoints of the iSession connection.
9.
For the Target Virtual setting, set it to none on the initiating WAN Optimization Module. On the receiving WAN Optimization Module, if you want the iSession listener isession-virtual (or other iSession listener) to target another virtual server before going to the destination server, select the option for the matching criteria that the system uses:
 
none: Specifies that the system should send the iSession traffic directly to the server.
 
host match no isession: Specifies that the system matches only host virtual servers with no iSession profile.
 
host match all: Specifies that the system selects the closest match from all the host virtual servers.
 
match all: Specifies that the system selects the closest match from all the virtual servers. This is the default setting.
 
Click Repeat to save this iSession profile and add another iSession profile.
 
Click Finished if you are done adding iSession profiles.
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)