From: ccie2be (ccie2be@nyc.rr.com)
Date: Wed Jul 07 2004 - 14:37:44 GMT-3
Hi Steve,
With all due respect, you are partially mistaken. The client http requests
can be redirected at either the interface through which they enter the
router or at the interface they would leave the router. This is assuming
the purpose of the cache engine is to speed up web browsing for hosts that
are inside your network.
Let's assume that router has 3 ethernet interfaces and 1 serial interface.
If these interfaces are attached as follows:
E0 -- inside hosts
E1 -- inside hosts
E2 -- cache engine
S0 -- connected to Internet
You have a number of choices as to how to config wccp.
The easiest config is to enter "ip wccp web cache redirect out" on the
serial interface. This will intercept client requests on both the E0 and E1
segments. However, this comes at a cost. The router has to use cpu
resources to switch the http request packets from the incoming interfaces
(E0 & E1) only to have the packets redirected back to E2 where the cache
engine is sits.
As an alternative, the "ip wccp web cache redirect in" command can be
entered on the E0 & E1 interfaces where those http request packets will be
immediately switched to E2.
If clients on the E0 segment shouldn't be redirected to the cache engine,
then you shouldn't put the redirect command on the serial interface without
an acl. However, it's probably easier to just use "ip wccp web cache
redirect in" on int E1.
Now, if the idea of the cache engine is to speed up response times for
requests coming in from the Internet, then the configuration is reversed.
The concept to keep in mind is that client requests are what are redirected.
And, redirection can be configured at either the interface from which the
requests arrive as they come into the router or the requests can be
redirected at the interface out of which they would normally leave the
router enroute to their destination.
Remember that any packet not addressed to the router itself, will enter the
router at one interface and leave the router at another interface and you
can redirect http request packets at either one of those 2 points.
HTH, Tim
----- Original Message -----
From: <steve.skinner@uk.pwc.com>
To: <karim_ccie@hotmail.com>
Cc: <ccielab@groupstudy.com>
Sent: Wednesday, July 07, 2004 12:27 PM
Subject: Re: WCCP web cache redirect ???
> -- The in or out is used according to the direction of the traffic. Ex: if
> I am applying the command on an ethernet that is connected to the hosts,
so
> I will use "ip wccp web cache redirect in".
>
>
> no ...
>
> you will re-direct outbound.....
>
> if you re-direct in ...all inbound traffic from the net would get
> re-directed to the engine BEFORE getting to your network
>
> rememeber that you want all traffic leaving your network ...going to the
> internet to be re-directed before leaving your network
>
> but also you want to do it on the outside interface ..
>
> if you imagine the flow of the traffic is going out towards the internet
>
> it hit`s the router going in an outbound direction ......it is at that
> point that you want to re-direct it ..
>
> the way cisco has implemented it ...is that you redirect on your outside
> interface
>
> here is my config for a small lan that has 1 connection to the internet
> ...and has a local engine
> !
> interface FastEthernet0/0
> description Content inside interface
> ip address 10.0.40.1 255.255.255.0
> ip accounting output-packets
> ip route-cache same-interface
> load-interval 30
> duplex auto
> speed auto
> !
> interface FastEthernet0/1
> description content outward interface
> ip address 10.0.88.9 255.255.255.0
> ip wccp web-cache redirect out
> load-interval 30
> duplex auto
> speed auto
> !
>
> my engine is connected to a 10.0.40 switch (don`t worry about the
> accounting )
> and it works a treat
>
> -- As for having both the host and the engine on the same ether segment.
> And
> asked to apply the ip wccp command on this ethernet interface. Will It use
> in or out at the end of the command ??
>
> it will use outbound.....but it must be done on the outside interface
....(
> these are cisco rules ....not mine )
> you use ip route-cache same-interface on the inside interface to speed up
> proceesing of packets
>
> - For the example you gave regarding "ip wccp <number> redirect <in|out>",
> I believe it can be done also with ip wccp web cache redirect. So what is
> the difference ??
>
> the only difference is again users
>
> if you use ip wccp web-cache ...it will turn it on globaly for all traffic
> and all web traffic (incl internal web server`s ,which you might not
want )
> to get
> the ip wccp web-cache redirect-list allows an ACL to be used to re-direc
> traffic only for certain ip`s ..
>
> hth
>
> Stephen Skinner
> Senior Network Support Analyst
> UK IT
> Price WaterHouse Coopers
> Tel +44 207 2134182
>
>
>
>
> "Karim"
> <karim_ccie@hotmail To: Steve
Skinner/UK/GTS/PwC@EMEA-UK
> .com> cc:
<ccielab@groupstudy.com>
> Subject: Re: WCCP web
cache redirect ???
> 07/07/2004 16:39
>
>
>
>
>
>
>
>
> Thanks for your reply. Just to confirm.
>
> -- The in or out is used according to the direction of the traffic. Ex: if
> I am applying the command on an ethernet that is connected to the hosts,
so
> I will use "ip wccp web cache redirect in".
>
> -- As for having both the host and the engine on the same ether segment.
> And
> asked to apply the ip wccp command on this ethernet interface. Will It use
> in or out at the end of the command ??
>
> -- For the example you gave regarding "ip wccp <number> redirect
<in|out>",
> I believe it can be done also with ip wccp web cache redirect. So what is
> the difference ??
>
>
> Karim.
>
>
> ----- Original Message -----
> From: <steve.skinner@uk.pwc.com>
> To: "Karim" <karim_ccie@hotmail.com>
> Cc: <ccielab@groupstudy.com>
> Sent: Wednesday, July 07, 2004 5:01 PM
> Subject: Re: WCCP web cache redirect ???
>
>
> >
> > Hi
> >
> > Q1/2
> >
> > the traffic redirects both ways because you can have local or remote
> > cache`s
> >
> > E.G
> >
> > i have a local network ,with a router connecting me to the outside
> > world/internet and i have my cache engine on the local network .
> >
> > in this situation you would need to redirect outbound traffic .
> >
> > in a standard scenario all traffic to the internet would follow this
path
> >
> > access switch - distribution switch - router -(firewall that's passive )
> -
> > internet
> >
> > what we want to do it put a stop for all traffic going outbound to the
> net
> > and send it to the cache engine first ,which will then check it and
> either
> > issue the page ..or retrieve the page itself and then re-issue it ..
> >
> > if we are hosting a web page for example , and instead of going to the
> web
> > site THROUGH our DMZ we could put an engine on the outside of our DMZ
and
> > get the web page requests to be re-directed to the engine first....this
> > would be inbound re-direct
> >
> > Q3
> >
> > no you don't have to specify a service to get wccp to work
> >
> > the command "ip wccp <number> redirect <in|out>" enable`s you to config
> > re-direct for a preset service using an access list ..
> >
> > i.e if you only want web traffic re-directed for the 10.45.60.0 network
> you
> > could use
> >
> > ip wccp 80 group-list 1
> > access-list 1 permit 10.45.60.0
> >
> > i just put ip wccp web-cache ,as this is a dynamic protocol that
> discover`s
> > the engine you use and associate's itself with any engine's
> >
> > HTH
> >
> >
> > Stephen Skinner
> > Senior Network Support Analyst
> > UK IT
> > Price WaterHouse Coopers
> > Tel +44 207 2134182
> >
> >
> >
> >
> > "Karim"
> > <karim_ccie@hotmail To:
> <ccielab@groupstudy.com>
> > .com> cc:
> > Sent by: Subject: WCCP web cache
> redirect ???
> > nobody@groupstudy.c
> > om
> >
> >
> > 07/07/2004 14:26
> >
> >
> >
> > Please respond to
> > "Karim"
> >
> >
> >
> >
> >
> >
> > Hi all,
> >
> > I was confused about the redirect direction used in the "ip wccp
redirect
> > <in|
> > out>" command. How can say that the in or out will be used ?? does it
> > depend
> > on the direction of the traffic and the interface applied on ??
> >
> > Another question, may be It will be solved by itself if the got the
> > concept.
> > If the host sending the http traffic and the cache engine used for
> caching,
> > are both on the same ether segment. Will I use "ip wccp web cache IN" OR
> > "ip
> > wccp web cache out" on the interface of the router connected to both the
> > host
> > and the cache engine ????
> >
> >
> > My last question, when do I need to use the commands "ip wccp <number>"
> and
> > "ip wccp <number> redirect <in|out>" instead of "ip wccp web-cache" and
> > "ip
> > wccp web cache redirect <in|out>" ???
> >
> >
> > Thanks for your help,
> > Karim.
> >
> > _______________________________________________________________________
> > Please help support GroupStudy by purchasing your study materials from:
> > http://shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> >
> >
> >
> > _________________________________________________________________
> > --------------------- End of message text --------------------
> >
> > This e-mail is intended only for the person to whom it is addressed. If
> an
> > addressing or transmission error has misdirected this e-mail, please
> notify
> > the author by replying to this e-mail. If you are not the intended
> > recipient you must not use, disclose, print or rely on this e-mail.
> >
> > PricewaterhouseCoopers LLP is a limited liability partnership registered
> in
> > England with registered number OC303525. The registered office of
> > PricewaterhouseCoopers LLP is 1 Embankment Place, London WC2N 6RH. All
> > partners in PricewaterhouseCoopers UK Associates A are authorised to
> > conduct business as agents of, and all contracts for services to clients
> > are with, PricewaterhouseCoopers LLP. PricewaterhouseCoopers LLP is
> > authorised and regulated by the Financial Services Authority for
> designated
> > investment business.
> >
> > PricewaterhouseCoopers LLP may monitor outgoing and incoming
> > e-mails and other telecommunications on its e-mail and
> > telecommunications systems. By replying to this e-mail you
> > give your consent to such monitoring.
> >
> > ----------------------------------------------------------------
> > Visit our website http://www.pwc.com
> >
> >
> >
>
>
>
>
>
> _________________________________________________________________
> --------------------- End of message text --------------------
>
> This e-mail is intended only for the person to whom it is addressed. If
an
> addressing or transmission error has misdirected this e-mail, please
notify
> the author by replying to this e-mail. If you are not the intended
> recipient you must not use, disclose, print or rely on this e-mail.
>
> PricewaterhouseCoopers LLP is a limited liability partnership registered
in
> England with registered number OC303525. The registered office of
> PricewaterhouseCoopers LLP is 1 Embankment Place, London WC2N 6RH. All
> partners in PricewaterhouseCoopers UK Associates A are authorised to
> conduct business as agents of, and all contracts for services to clients
> are with, PricewaterhouseCoopers LLP. PricewaterhouseCoopers LLP is
> authorised and regulated by the Financial Services Authority for
designated
> investment business.
>
> PricewaterhouseCoopers LLP may monitor outgoing and incoming
> e-mails and other telecommunications on its e-mail and
> telecommunications systems. By replying to this e-mail you
> give your consent to such monitoring.
>
> ----------------------------------------------------------------
> Visit our website http://www.pwc.com
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:11:48 GMT-3