Go to main content
1/25
Contents
List of Tables
Title and Copyright Information
Preface
Audience
Documentation Accessibility
Related Documents
Conventions
Part I Getting Started
1
Getting Started with Oracle Traffic Director
What's New in this Release?
Features of Oracle Traffic Director
Typical Network Topology
Oracle Traffic Director Terminology
Oracle Traffic Director Deployment Scenarios
Administration Framework of Oracle Traffic Director
Overview of the Administration Framework
Administration Server
Administration Node
Administration Interfaces
Configuration Store
Instance Configuration Files
Overview of Administration Tasks
Setting Up a Simple Load Balancer Using Oracle Traffic Director
Example Topology
Creating the Load Balancer for the Example Topology
Verifying the Load-Balancing Behavior of the Oracle Traffic Director Instance
2
Managing the Administration Server
Starting the Administration Server
Accessing the Administration Interfaces
Accessing the Command-Line Interface
Accessing the Administration Console
Stopping and Restarting the Administration Server
Viewing Administration Server Settings
Changing Administration Server Settings
3
Managing Administration Nodes
Viewing a List of Administration Nodes
Starting an Administration Node
Changing the Properties of an Administration Node
Stopping and Restarting an Administration Node
Part II Basic Administration
4
Managing Configurations
Creating a Configuration
Viewing a List of Configurations
Deploying a Configuration
Modifying a Configuration
Synchronizing Configurations Between the Administration Server and Nodes
Copying a Configuration
Deleting a Configuration
Viewing a List of Configuration Backups
Restoring a Configuration from a Backup
5
Managing Instances
Creating Oracle Traffic Director Instances
Viewing a List of Oracle Traffic Director Instances
Starting, Stopping, and Restarting Oracle Traffic Director Instances
Updating Oracle Traffic Director Instances Without Restarting
Deleting Oracle Traffic Director Instances
Controlling Oracle Traffic Director Instances Through Scheduled Events
6
Managing Origin-Server Pools
Creating an Origin-Server Pool
Viewing a List of Origin-Server Pools
Modifying an Origin-Server Pool
Deleting an Origin-Server Pool
Configuring an Oracle WebLogic Server Cluster as an Origin-Server Pool
How Dynamic Discovery Works
Enabling Dynamic Discovery
Configuring Health-Check Settings for Origin-Server Pools
7
Managing Origin Servers
Adding an Origin Server to a Pool
Viewing a List of Origin Servers
Modifying an Origin Server
Removing an Origin Server from a Pool
8
Managing Virtual Servers
Creating a Virtual Server
Viewing a List of Virtual Servers
Modifying a Virtual Server
Configuring Routes
Copying a Virtual Server
Deleting a Virtual Server
9
Managing TCP Proxies
Creating a TCP Proxy
Viewing a List of TCP Proxies
Modifying a TCP Proxy
Deleting a TCP Proxy
10
Managing Listeners
Creating a Listener
Viewing a List of Listeners
Modifying a Listener
Deleting a Listener
Part III Advanced Administration
11
Managing Security
Securing Access to the Administration Server
Changing the Administrator User Name and Password
Configuring LDAP Authentication for the Administration Server
Enabling the Pin for the Administration Server's PKCS#11 Token
Renewing Administration Server Certificates
Configuring SSL/TLS Between Oracle Traffic Director and Clients
Overview of the SSL/TLS Configuration Process
Configuring SSL/TLS for a Listener
Associating Certificates with Virtual Servers
Configuring SSL/TLS Ciphers for a Listener
Certificate-Selection Logic
About Strict SNI Host Matching
SSL/TLS Concepts
Configuring SSL/TLS Between Oracle Traffic Director and Origin Servers
About One-Way and Two-Way SSL/TLS
Configuring One-Way SSL/TLS Between Oracle Traffic Director and Origin Servers
Configuring Two-Way SSL/TLS Between Oracle Traffic Director and Origin Servers
Managing Certificates
Creating a Self-Signed Certificate
Obtaining a CA-Signed Certificate
Installing a Certificate
Viewing a List of Certificates
Renewing a Server Certificate
Deleting a Certificate
Configuring Oracle Traffic Director to Trust Certificates
Managing PKCS#11 Tokens
Managing Certificate Revocation Lists
Installing and Deleting CRLs Manually
Installing CRLs Automatically
Managing Web Application Firewalls
Overview of Web Application Firewalls
Configuring Web Application Firewalls
Enabling and Installing Web Application Firewall Rule Sets
Listing the Rule Set Files
Removing Rule Set Files
Supported Web Application Firewall Directives, Variables, Operators, Actions, Functions, Persistent Storages and Phases
Configuring Client Authentication
Preventing Denial-of-Service Attacks
Request Limiting Parameters
Configuring Request Limits for a Virtual Server
12
Managing Logs
About the Oracle Traffic Director Logs
Access Log
Server Log
Viewing Logs
Configuring Log Preferences
About Log Rotation
Rotating Logs Manually
Configuring Oracle Traffic Director to Rotate Logs Automatically
13
Monitoring Oracle Traffic Director Instances
Methods for Monitoring Oracle Traffic Director Instances
Configuring Statistics-Collection Settings
Configuring URI Access to Statistics Reports
Viewing Statistics Using the CLI
Viewing stats-xml and perfdump Reports Through a Browser
Monitoring Using SNMP
Configuring Oracle Traffic Director Instances for SNMP Support
Configuring the SNMP Subagent
Starting and Stopping the SNMP Subagent
Viewing Statistics Using snmpwalk
Sample XML (stats-xml) Report
Sample Plain-Text (perfdump) Report
14
Tuning Oracle Traffic Director for Performance
General Tuning Guidelines
Tuning the File Descriptor Limit
Tuning the Thread Pool and Connection Queue
About Threads and Connections
Reviewing Thread Pool Metrics for an Instance
Reviewing Connection Queue Metrics for an Instance
Tuning the Thread Pool and Connection Queue Settings
Tuning HTTP Listener Settings
Tuning Keep-Alive Settings
About Keep-Alive Connections
Reviewing Keep-Alive Connection Settings and Metrics
Tuning Keep-Alive Settings
Tuning HTTP Request and Response Limits
Tuning Caching Settings
Caching in Oracle Traffic Director
Reviewing Caching Settings and Metrics for an Instance
Tunable Caching Parameters
Configuring Caching Parameters
Tuning DNS Caching Settings
Viewing DNS Cache Settings and Metrics
Configuring DNS Cache Settings
Tuning SSL/TLS-Related Settings
SSL/TLS Session Caching
Ciphers and Certificate Keys
Configuring Access-Log Buffer Settings
Enabling and Configuring Content Compression
Common Performance Problems
Low-Memory Situations
Too Few Threads
Large Memory Footprint
Log File Modes
Using nostat
Tuning Connections to Origin Servers
Solaris-specific Tuning
Files Open in a Single Process (File Descriptor Limits)
Failure to Connect to HTTP Server
Tuning TCP Buffering
Reduce File System Maintenance
Long Service Times on Busy Volumes or Disks
Short-Term System Monitoring
Long-Term System Monitoring
Tuning for Performance Benchmarking
15
Diagnosing and Troubleshooting Problems
Roadmap for Troubleshooting Oracle Traffic Director
Solutions to Common Errors
Startup failure: could not bind to port
Unable to start server with HTTP listener port 80
Unable to restart SSL/TLS-enabled server after changing the PKCS#11 token pin
Unable to start the SNMP subagent
Unable to communicate with the administration server: connection refused
Oracle Traffic Director consumes excessive memory at startup
Operating system error: Too many open files in system
Unable to stop instance after changing the temporary directory
Unable to restart the administration server
Oracle Traffic Director does not maintain session stickiness
Frequently Asked Questions
How do I reset the password for the administration server user?
What is a "configuration"?
How do I access the administration console?
Why do I see a certificate warning when I access the administration console for the first time?
Can I manually edit configuration files?
In the administration console, what is the difference between saving a configuration and deploying it?
Why is the "Deployment Pending" message displayed in the administration console?
Why is the "Instance Configuration Deployed" message is displayed in the administration console?
Why does the administration console session end abruptly?
How do I access the CLI?
Why does "tadm --user=admin --host=myhost subcommand" take me into a command shell instead of executing the specified subcommand?
Why is a certificate warning message displayed when I tried to access the CLI for the first time?
How do I find out the short names for the options of a CLI command?
Can I configure the CLI to not prompt for a password every time I access it?
Why am I unable to select TCP as the health-check protocol when dynamic discovery is enabled?
After I changed the origin servers in a pool to Oracle WebLogic Servers, they are not discovered automatically, though dynamic discovery is enabled. Why?
How do I view the request and response headers sent and received by Oracle Traffic Director?
How do I enable SSL/TLS for an Oracle Traffic Director instance?
How do I find out which SSL/TLS cipher suites are supported and enabled?
How do I view a list of installed certificates?
How do I issue test requests to an SSL/TLS-enabled Oracle Traffic Director instance?
How do I analyze SSL/TLS connections?
How do I run the administration server on a privileged port (<1024) as a non-root user?
How do I view details of SSL/TLS communication between Oracle Traffic Director instances and Oracle WebLogic Server origin servers?
Why are certain SSL/TLS-enabled origin servers marked offline after health checks, even though the servers are up?
Does Oracle Traffic Director rewrite the source IP address of clients before forwarding requests to the origin servers?
Why does Oracle Traffic Director return a 405 status code?
Contacting Oracle for Support
A
Metrics Tracked by Oracle Traffic Director
Instance Metrics
Process Metrics
Thread Pool Metrics
Connection Queue Metrics
Compression and Decompression Metrics
Virtual Server Metrics
CPU Metrics
Origin Server Metrics
Proxy Cache Metrics
DNS Cache Metrics
B
Web Application Firewall Examples and Use Cases
Basics of Rules
Rules Against Major Attacks
Brute Force Attacks
SQL Injection
XSS Attacks
C
Securing Oracle Traffic Director Deployment
Securing Oracle Traffic Director
Scripting on this page enhances content navigation, but does not change the content in any way.