When using a Load Balancer in front of two OneClick servers, it shows the URL for the 2nd OneClick when it redirects to it

Products

• Network Observability
• Spectrum

Issue/Introduction

A Load Balancer is setup to always direct to the first OneClick (OC) server when it is up and running. So it will only direct to OC2 when OC1 is down.

However, when it does so, it is showing the OC2 URL in the browser rather than the Load Balancer's. It should show the Load Balancer's as it does when directing to OC1 and not expose the direct URL address of either OC.

Environment

DX NetOps Spectrum all currently supported releases

Cause

Since the Load Balancer is always setup to go to OC1 if it is up, when it is is down and it switches to OC2, it shows the OC2 URL instead of the Load Balancer's one. This is due to the fact that on OC2 fediz_config.xml file, the OC2 URL is placed after the Load Balancer one as per:

<audienceUris>
      <audienceItem>https://Load-balancer.net/spectrum/</audienceItem>
             <audienceItem>https://my-SpectroServer.net:8443/spectrum/</audienceItem>
</audienceUris>

This makes the system use the 2nd URL as it overwrites the first.

Resolution

Switching this order in the fediz_config.xml, will allow it to work properly, showing the Load Balancer URL in the browser bar when redirecting to OC2:

<audienceUris>
     <audienceItem>https://my-SpectroServer.net:8443/spectrum/</audienceItem>
     <audienceItem>https://Load-balancer.net/spectrum/</audienceItem>
</audienceUris>

• update same URLs in the same order <realm>xxx</realm>
• update same URLs in the same order <reply>xxx</reply>

So:

     <realm>https://my-SpectroServer.net:8443/spectrum/</realm>
     <realm>https://Load-balancer.net/spectrum/</realm>

and

     <reply>https://my-SpectroServer.net:8443/spectrum/</reply>
     <reply>https://Load-balancer.net/spectrum/</reply>

Additional Information

KB : Can we hide the Spectrum OneClick URL behind a Vanity URL when Using SSO\SAML?