Solved

Multiple IIS 7.0 Sites using Windows 2008 Network Load Balancing

Posted on 2010-08-17
1
829 Views
Last Modified: 2013-11-29
I am trying to setup muliple sites in an IIS 7.0 environment that is using the Windows 2008 NLB. Here is the setup:
Server1 dedicated IP address: 172.16.1.71
Server2 dedicated IP address: 172.16.1.72
NLB shared address 1: 172.16.1.70
Port rules defined for ports 80 and 443 to cluster IP address 172.16.1.70
Secondary IP address added on server1 and server2 for the .70 address

Alone, this all works just fine. I can access the same site (http://172.16.1.70) even while restarting one of the systems (tested with both servers.)

Now, I want to add a new site in IIS 7.0 for a new load balanced IP address, 172.16.1.69.

Inside the Cluster Properties tab for the cluster (defined as 172.16.1.70 with two hosts) in the NLBMGR, I have added another IP address for 172.16.1.69. I added port rules that mirror those of the .70 address (so now there are four rules listed; all both Tcp and UDP, Mode Multiple, no priority, no load, and Single Affinity; one each for .69 port 80, .69 port 443, .70 port 80, and .70 port 443.)

I have verified that pinging either the .70 or .69 address does return a response even when either of the systems is restarted.

Problem is how to connect this new .69 address to a website in IIS 7.0. Right now, the default IIS splash screen is shown when I attach to http://172.16.1.70. No page is displayed for .69. I took a look in IIS 7.0 for the default site and it pretty much says All Unassigned over port 80 to the default site. Looking at the bindings on server1, the only IP address listed in the drop down is the dedicated IP address, 172.16.1.71.

This is different from my IIS 6.0 systems that are not load balanced. On those systems, if I have multiple IP addresses bound to the NIC, I can pick from those IP addresses when I setup a new site. In this case, I do not even see the one it does respond to, 172.16.1.70.

I am sure someone must have setup a few different sites on a NLB set of servers. Any ideas
0
Comment
Question by:JasonInDenver
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
JasonInDenver earned 0 total points
ID: 33456529
Update on this one....I solved it.

The load balancing was setup correctly and, as it turns out, so was my IIS setup. My firewall was not setup correctly.

For the site in IIS, I had to create a new site and manually enter the IP address I wanted to use (IIS 6.0 used a drop down so it was easy to see what was available, but not IIS 7.0)

Turns out that my issue was that I had not defined an object for this test IP address in my firewall and added it to the allowed groups. My system could ping the site because there was a rule that allows any traffic over any port to any system in the DMZ. I did not think about the fact that we have a proxy server deployed and http and https traffic will source from that IP address, not mine. So pings worked but http traffic was blocked at the firewall. As soon as I shut the proxy down, I was able to get to my test page.
0

Featured Post

Database Solutions Engineer FAQs

In this series, we will discuss common questions received as a database Solutions Engineer at Percona. In this role, we speak with a wide array of MySQL and MongoDB users responsible for both extremely large and complex environments to smaller single-server environments.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
A small collection of useful tips and tricks for Windows 10 users that I decided to write as a result of recent questions that were asked and answered at Experts Exchange. Two short video tutorials included. Enjoy..
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question