Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions
• What's New in this Release?

1 Introduction

• Overview
• Features of Oracle Traffic Director
• Administration Interfaces
  • Command Line Interface-WebLogic Scripting Tool
    • Usage Modes
  • Graphical User Interface-Fusion Middleware Control
• Oracle Traffic Director Terminology
• Overview of Administration Tasks

2 Typical Deployment Topology

3 Setting up an Administration Domain

• Types of Administration Domain
• Creating a Managed Domain
  • Creating a Managed Domain Using Restricted JRF Template
  • Creating a Domain using Full JRF Template
    • Creating a Repository using Repository Creation Utility in Graphical Mode
    • Creating a Repository in Silent Mode
  • Logging to the Administration Console
  • Creating the Load Balancer for a Managed Domain
• Creating a Standalone Domain
  • Creating a Standalone Domain using the Configuration Wizard
  • Creating a Standalone Domain Using Offline WLST Commands
  • Creating the Load Balancer for a Standalone Domain
• Verifying the Load-Balancing Behavior of the Oracle Traffic Director Instance

4 Configuring Oracle Traffic Director for High Availability

• Overview
  • Failover configuration modes
    • Failover in Active-Passive Mode
    • Failover in Active-Active Mode
• Preparing your System for High Availability
• Configuring High Availability

5 Managing Configurations

• Creating an Oracle Traffic Director Configuration
  • Creating a Configuration Using Fusion Middleware Control
  • Creating a Configuration Using WLST
• Viewing a List of Configurations
  • Viewing a List of Configurations Using Fusion Middleware Control
  • Viewing a List of Configurations Using WLST
• Activating Configuration Changes
  • Activate Configuration Changes Using Fusion Middleware Control
  • Activate Configuration Changes Using WLST
• Modifying an Oracle Traffic Director Configuration
  • Modifying a Configuration Using Fusion Middleware Control
  • Modifying a Configuration Using WLST
• Copying an Oracle Traffic Director Configuration
  • Copying a Configuration Using Fusion Middleware Control
  • Copying a Configuration Using WLST
• Deleting an Oracle Traffic Director Configuration
  • Deleting a Configuration Using Fusion Middleware Control
  • Deleting a Configuration Using WLST

6 Managing Instances

• Creating Oracle Traffic Director Instances
  • Creating Oracle Traffic Director Instances Using Fusion Middleware Control
  • Creating Oracle Traffic Director Instance Using WLST
• Viewing a List of Oracle Traffic Director Instances
  • Viewing a List of Oracle Traffic Director Instances Using Fusion Middleware Control
  • Viewing a List of Oracle Traffic Director Instances Using WLST
• Starting, Stopping, and Restarting Oracle Traffic Director Instances
  • Starting, Stopping, and Restarting Oracle Traffic Director Instances Using Fusion Middleware Control
  • Starting, Stopping, and Restarting Oracle Traffic Director Instances Using WLST
• Updating Oracle Traffic Director Instances Without Restarting
  • Reconfiguring an Oracle Traffic Director Instance Using Fusion Middleware Control
  • Reconfiguring Oracle Traffic Director Instances Using WLST
• Deleting Oracle Traffic Director Instances
  • Deleting Oracle Traffic Director Instances Using Fusion Middleware Control
  • Deleting Oracle Traffic Director Instances Using WLST
• Controlling Oracle Traffic Director Instances Through Scheduled Events
  • Managing Events Using Fusion Middleware Control
  • Managing Events Using WLST

7 Managing Origin-Server Pools

• Creating an Origin-Server Pool
  • Creating an Origin-Server Pool Using Fusion Middleware Control
  • Creating an Origin-Server Pool Using WLST
• Viewing a List of Origin-Server Pools
  • Viewing a List of Origin-Server Pools Using Fusion Middleware Control
  • Viewing a List of Origin-Server Pools Using WLST
• Modifying an Origin-Server Pool
  • Changing the Properties of an Origin-Server Pool Using Fusion Middleware Control
  • Changing the Properties of an Origin-Server Pool Using WLST
• Deleting an Origin-Server Pool
  • Deleting an Origin-Server Pool Using Fusion Middleware Control
  • Deleting an Origin-Server Pool Using WLST
• Configuring an Oracle WebLogic Server Cluster as an Origin-Server Pool
  • How Dynamic Discovery Works
  • Enabling Dynamic Discovery
• Configuring a Custom Maintenance Page
• Configuring Health-Check Settings for Origin-Server Pools
  • Configuring Health-Check Settings for Origin Servers Using the Fusion Middleware Control
  • Configuring Health-Check Settings for Origin Servers Using WLST
  • Using an External Health-Check Executable to Check the Health of a Server
    • Configuring Health-Check Settings to Use an External Executable
    • Parameters to the External Health Check Executable
    • Logging

8 Managing Origin Servers

• Adding an Origin Server to a Pool
  • Adding an Origin Server to a Pool Using Fusion Middleware Control
  • Adding an Origin Server to a Pool Using WLST
• Viewing a List of Origin Servers
  • Viewing a List of Origin Servers Using Fusion Middleware Control
  • Viewing a List of Origin Servers Using WLST
• Modifying an Origin Server
  • Modifying an Origin Server Using Fusion Middleware Control
  • Changing the Properties of an Origin Server Using WLST
• Managing Ephemeral Ports
• Removing an Origin Server from a Pool
  • Removing an Origin Server from a Pool Using Fusion Middleware Control
  • Removing an Origin Server from a Pool Using WLST

9 Managing Virtual Servers

• Creating Virtual Servers
  • Creating a Virtual Server Using Fusion Middleware Control
  • Creating a Virtual Server Using WLST
• Viewing a List of Virtual Servers
  • Viewing a List of Virtual Servers Using Fusion Middleware Control
  • Viewing a List of Virtual Servers Using WLST
• Modifying Virtual Server Settings
  • Modifying a Virtual Server Using Fusion Middleware Control
  • Modifying a Virtual Server Using WLST
• Configuring Routes for a Virtual Server
  • Configuring Routes Using Fusion Middleware Control
  • Configuring Routes Using WLST
• Copying a Virtual Server
  • Copying a Virtual Server Using Fusion Middleware Control
  • Copying a Virtual Server Using WLST
• Deleting a Virtual Server
  • Deleting a Virtual Server Using Fusion Middleware Control
  • Deleting a Virtual Server Using WLST
• Caching in Oracle Traffic Director
  • Reviewing Cache Settings and Metrics for an Instance
  • Tunable Caching Parameters
  • Configuring Caching Parameters
• Content Serving
  • Content Serving Using Fusion Middleware Control
  • Configuring Content Serving Using WLST

10 Managing TCP Proxies

• Creating a TCP Proxy
  • Creating a TCP Proxy Using Fusion Middleware Control
  • Creating a TCP Proxy Using WLST
• Viewing a List of TCP Proxies
  • Viewing a List of TCP Proxies Using Fusion Middleware Control
  • Viewing a List of TCP Proxies Using WLST
• Modifying a TCP Proxy
  • Modifying a TCP Proxy Using Fusion Middleware Control
  • Modifying a TCP Proxy Using WLST
• Deleting a TCP Proxy
  • Deleting a TCP Proxy Using Fusion Middleware Control
  • Deleting a TCP Proxy Using WLST

11 Managing Listeners

• Creating a Listener
  • Creating a Listener Using Fusion Middleware Control
  • Creating a Listener Using WLST
• Viewing a List of Listeners
  • Viewing a List of Listeners Using Fusion Middleware Control
  • Viewing a List of Listeners Using WLST
• Modifying a Listener
  • Modifying a Listener Using Fusion Middleware Control
  • Modifying a Listener Using WLST
• Deleting a Listener
  • Deleting a Listener Using Fusion Middleware Control
  • Deleting a Listener Using WLST
• Configuring Status Listener
  • Configuring Status Listener using Fusion Middleware Control
  • Configuring Status Listener Using WLST

12 Managing Security

• SSL/TLS Concepts
  • About SSL
  • About Ciphers
    • Cipher Suites Supported by Oracle Traffic Director
  • About Keys
  • About Certificates
    • RSA and ECC Certificates
• Managing Certificates
  • Obtaining a Certificate
  • Generating a Keypair
    • Before You Begin
    • Generating a Keypair Using Fusion Middleware Control
    • Generating a Keypair using WLST
  • Generating a Certificate Signing Request (CSR)
    • Generating a CSR Using Fusion Middleware Control
    • Generating a CSR Using WLST
  • Importing a Certificate
    • Importing a CA Signed Certificate
    • Importing an Existing Certificate
    • Importing a Trusted Certificate
  • Viewing a List of Certificates
  • Deleting a Certificate
    • Deleting a Certificate using Fusion Middleware Control
    • Deleting a Certificate Using WLST
• Configuring SSL/TLS on Oracle Traffic Director
  • Configuring SSL/TLS Between Oracle Traffic Director and Clients
    • Configuring SSL on a HTTP/TCP Listener
    • Configuring SSL On a Virtual Server
  • Configuring SSL/TLS Between Oracle Traffic Director and Origin Servers
    • About One-Way and Two-Way SSL/TLS
    • Configuring One-Way SSL/TLS Between Oracle Traffic Director and Origin Servers
    • Configuring Two-Way SSL/TLS
    • Configuring Ciphers On an Origin Server Pool
  • Configure SSL Termination At a Hardware Load Balancer front-ending Oracle Traffic Director
  • Configure WebLogic to receive SSL information from Web Tier / Traffic Director
  • Configure SSL Pass through on Oracle Traffic Director
• Managing Certificate Revocation Lists
  • Installing and Deleting CRLs Manually
    • Installing CRLs Manually Using Fusion Middleware Control
    • Installing and Deleting CRLs Manually Using WLST
  • Update CRLs Automatically
    • Configuring Oracle Traffic Director to Install CRLs Automatically Using Fusion Middleware Control
    • Configuring Oracle Traffic Director to Install CRLs Automatically Using WLST

13 Managing Logs

• About the Oracle Traffic Director Logs
  • Access Log
  • Server Log
• Viewing Logs
  • Viewing Logs Using Fusion Middleware Control
  • Viewing Logs Using WLST
• Configuring Log Preferences
  • Configuring Log Preferences Using Fusion Middleware Control
  • Configuring Log Preferences Using WLST
• About Log Rotation
• Rotating Logs Manually
  • Rotating Logs Manually Using Fusion Middleware Control
  • Rotating Logs Manually Using WLST
• Configuring Oracle Traffic Director to Rotate Logs Automatically
  • Creating Log-Rotation Events Using Fusion Middleware Control
  • Creating Log-Rotation Events Using WLST

14 Managing Event Notifications

• Origin server status change event
  • Subscribing to origin server status event using Fusion Middleware Control
  • Subscribing to origin server status change event Using WLST
  • Notification format
    • JSON Schema
    • Example
  • Error handling
• Request limit exceeded event
  • Subscribing to Request Limit Exceeded Event Using WLST
  • Notification format
  • JSON schema
  • Example

15 Managing Failover Groups

• Creating Failover Groups
  • Creating Failover Groups Using Fusion Middleware Control
  • Creating Failover Groups Using WLST
• Managing Failover Groups

16 Monitoring Oracle Traffic Director Instances

• Methods for Monitoring Oracle Traffic Director Instances
• Configuring Statistics-Collection Settings
• Configuring URI Access to Statistics Reports
• Viewing Statistics Using WLST
• Viewing stats-xml and perfdump Reports Through a Browser
• Monitoring Using SNMP
  • Configuring Oracle Traffic Director Instances for SNMP Support
  • Configuring the SNMP Subagent
  • SNMP v3 User configuration
  • Starting and Stopping the SNMP Subagent
  • Viewing Statistics Using snmpwalk
• Monitoring Using DMS
• Sample XML (stats-xml) Report
• Sample Plain-Text (perfdump) Report

17 Tuning Oracle Traffic Director for Performance

• General Tuning Guidelines
• Tuning the File Descriptor Limit
• Tuning the Thread Pool and Connection Queue
  • About Threads and Connections
  • Reviewing Thread Pool Metrics for an Instance
  • Reviewing Connection Queue Metrics for an Instance
  • Tuning the Thread Pool and Connection Queue Settings
• Tuning HTTP Listener Settings
• Tuning Keep-Alive Settings
  • About Keep-Alive Connections
  • Reviewing Keep-Alive Connection Settings and Metrics
  • Tuning Keep-Alive Settings
• Tuning HTTP Request and Response Limits
• Tuning DNS Caching Settings
  • Viewing DNS Cache Settings and Metrics
  • Configuring DNS Cache Settings
• Tuning SSL/TLS-Related Settings
  • SSL/TLS Session Caching
    • Configuring SSL/TLS Session Cache Settings Using Fusion Middleware Control
    • Configuring SSL/TLS Session Caching Settings Using WLST
  • Ciphers and Certificate Keys
• Configuring Access-Log Buffer Settings
• Enabling and Configuring Content Compression
• Tuning Connections to Origin Servers
• Solaris-specific Tuning
  • Files Open in a Single Process (File Descriptor Limits)
  • Failure to Connect to HTTP Server
  • Tuning TCP Buffering
  • Reduce File System Maintenance
  • Long Service Times on Busy Volumes or Disks
  • Short-Term System Monitoring
  • Long-Term System Monitoring
  • Tuning for Performance Benchmarking

18 Diagnosing and Troubleshooting Problems

• Roadmap for Troubleshooting Oracle Traffic Director
  • Troubleshooting High Availability Configuration Issues
• Solutions to Common Errors
  • Startup failure: could not bind to port
  • Unable to start server with HTTP listener port 80
  • Oracle Traffic Director consumes excessive memory at startup
  • Operating system error: Too many open files in system
  • Unable to stop instance after changing the temporary directory
  • Unable to restart the administration server
  • Oracle Traffic Director does not maintain session stickiness
• Frequently Asked Questions
  • What is a "configuration"?
  • How do I access Fusion Middleware Control?
  • Why do I see a certificate warning when I access Fusion Middleware Control for the first time?
  • Can I manually edit configuration files?
  • In Fusion Middleware Control, what is the difference between saving a configuration and deploying it?
  • Why is the "Deployment Pending" message displayed in Fusion Middleware Control?
  • Why is the "Instance Configuration Deployed" message is displayed in Fusion Middleware Control?
  • Why does Fusion Middleware Control session end abruptly?
  • How do I access the WLST?
  • Why is a certificate warning message displayed when I tried to access the WLST for the first time?
  • How do I find out the short names for the options of a WLST command?
  • Why am I unable to select TCP as the health-check protocol when dynamic discovery is enabled?
  • After I changed the origin servers in a pool to Oracle WebLogic Servers, they are not discovered automatically, though dynamic discovery is enabled. Why?
  • How do I view the request and response headers sent and received by Oracle Traffic Director?
  • How do I enable SSL/TLS for an Oracle Traffic Director instance?
  • How do I find out which SSL/TLS cipher suites are supported and enabled?
  • How do I view a list of installed certificates?
  • How do I issue test requests to an SSL/TLS-enabled Oracle Traffic Director instance?
  • How do I analyze SSL/TLS connections?
  • How do I view details of SSL/TLS communication between Oracle Traffic Director instances and Oracle WebLogic Server origin servers?
  • Why are certain SSL/TLS-enabled origin servers marked offline after health checks, even though the servers are up?
  • Does Oracle Traffic Director rewrite the source IP address of clients before forwarding requests to the origin servers?
  • Why does Oracle Traffic Director return a 405 status code?
• Contacting Oracle for Support

A Metrics Tracked by Oracle Traffic Director

• Instance Metrics
• Process Metrics
• Connection Queue Metrics
• Thread Pool Metrics
• DNS Cache Metrics
• Keep-Alive Metrics
• Thread Metrics
• Compression and Decompression Metrics
• Virtual Server Metrics
• CPU Metrics
• Origin Server Metrics
• Failover Instance Metrics
• Cache Metrics
• DMS Metrics Tables

B Web Application Firewall Examples and Use Cases

• Basics of Rules
• Rules Against Major Attacks
  • Brute Force Attacks
  • SQL Injection
  • XSS Attacks