Product Documentation
ADC
Current Release 13.1 13.0 12.1
View PDF

Configure the source port for server-side connections

September 14, 2021
Contributed by:
S C

When the Citrix ADC appliance connects to a physical server, it can use the source port from the client’s request, or it can use a proxy port as the source port for the connection. You can set the Use Proxy Port parameter to YES to handle situations such as the following scenario:

  • The Citrix ADC appliance is configured with two load balancing virtual servers, LBVS1 and LBVS2.
  • Both the virtual servers are bound to the same service, S-ANY.
  • Use (the client’s) source IP address (USIP) is enabled on the service.
  • Client C1 sends two requests, Req1 and Req2, for the same service.
  • LBVS1 receives Req1 and LBVS2 receives Req2.
  • LBVS1 and LBVS2 forward the request to S-ANY, and when S-ANY sends the response, LBVS1 and LBVS2 forward the response to the client.
  • Consider two cases:
    • Use the client port. When the appliance uses the client port, both the virtual servers use the client’s IP address (because USIP is ON) and the client’s port when connecting to the server. Therefore, when the service sends the response, the appliance cannot determine which virtual server must receive the response.
    • 使用代理端口。当设备使用一个代理rt, the virtual servers use the client’s IP address (because USIP is ON), but different ports when connecting to the server. Therefore, when the service sends the response, the port number identifies the virtual server that must receive the response.

However, if you require a fully transparent configuration, such as a fully transparent cache redirection configuration, you must disable the Use Proxy port Setting so that the Citrix ADC appliance can use the source port from the client’s request.

使用代理端口选项如果发挥作用use source IP (USIP) option is enabled. For TCP-based service types, such as TCP, HTTP, and SSL, the option is enabled by default. For UDP-based service types, such as UDP and DNS, including ANY, the option is disabled by default. For more information about the USIP option, see “Enabling Use Source IP Mode.”

You can configure theUse Proxy Portsetting either globally or on a given service.

Configure the use proxy port setting on a service

You configure theUse ProxyPortsetting on the service if you want to override the global setting.

To configure the Use Proxy Port setting on a service by using the CLI

At the command prompt, type:

set service  -useProxyPort (YES | NO)

Example:

set service svc1 -useproxyport YES Done show service svc1 svc1 (10.102.29.30:80) - HTTP State: UP . . . Use Source IP: YES Use Proxy Port: YES . . . Done

To configure the Use Proxy Port setting on a service by using the GUI

  1. Navigate toTraffic Management > Load Balancing > Services, and open a service.
  2. In Advanced Settings, select Traffic Settings, and selectUse Proxy Port.

Configure the use proxy port setting globally

You configure theUse Proxy Portsetting globally if you want to apply the setting to all the services on the Citrix ADC appliance. The service-specificUse Proxy Portsettings overrides the global setting.

To configure the Use Proxy Port setting globally by using the CLI

At the command prompt, type the following commands to configure theUse Proxy Portsetting globally and verify the configuration:

set ns param -useproxyport ( ENABLED | DISABLED )` show ns param`

Example:

set ns param -useproxyport ENABLED Done show ns param Global configuration settings: . . . Use Proxy Port: ENABLED Done

To configure the Use Proxy Port setting globally by using the GUI

Navigate toSystem > Settings > Change global systemsettings, and select or clear Use Proxy Port.

Configure the source port for server-side connections
September 14, 2021
Contributed by:
S C
September 14, 2021
Contributed by:
S C

In this article

Site feedback | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999-Cloud Software Group, Inc. All rights reserved.