Hi all
We have a setup involving two CSS11503's, redundant config, SSL module, and what *should* be a very simple configuration.
We have a number of simple layer 5 HTTP content rules, which all listen on the same IP address/port, and should be routing client requests by way of URL. (e.g., "/*", "/test/*", and "/client/file")
The configuration goes something like this:
owner web content www_clientfile vip address 1.1.1.1 protocol tcp port 80 url "/client/file" add service serverX add service serverY active
content www_images vip address 1.1.1.1 protocol tcp port 80 url "/im/*" add service serverA add service serverB add service serverC active
content www vip address 1.1.1.1 protocol tcp port 80 url "/*" add service serverD add service serverE add service serverF active
99% of the time, the requests for /client/file are routed to the correct servers (X & Y), but very occassionally the rules appear to be ignored and the HTTP request is matched against the less-specific content rule ("www") and is subsequently passed to service D/E/F etc - despite the fact that all services on the most-specific content rule are available.
After investigation it appears that a majority of the incorrectly routed requests come from various ISP's proxy servers (the requests contain HTTP headers such as X-Forwarded-For), but I'm stumped as to exactly why it is these requests that arrive at the wrong location. It doesn't appear to be load related either.
Does anyone out there know what might be going on?
Thanks;
-Steven