[prev in list] [next in list] [prev in thread] [next in thread] 

List:       loadbalancing-l
Subject:    RE: [load balancing] redirecting http to https for secure webapps
From:       "Dan O'Neill" <dano () atlasdmt ! com>
Date:       2004-07-12 21:52:22
Message-ID: 754B21FBFC848C478F950EC8351DAAAF6DFD51 () seaexch01 ! corp ! avenuea ! com
[Download RAW message or body]

We use option 4 with our ssl apps that are terminated on BigIP.  Been
doing this for a while with good success.  Only difference in our setup
is we point bigip:443 to server:80 and then bigip:80 to server:82 and we
make server:82 redirect to https://.  Simplifies testing/troubleshooting
for our support folks where they'd like to hit server:80 directly
without using BigIP.  They don't have to remember to put the oddball
port in the URL.

________________________________

From: owner-lb-l@vegan.net [mailto:owner-lb-l@vegan.net] On Behalf Of
Fletcher Cocquyt
Sent: Friday, July 09, 2004 12:35 PM
To: lb-l@vegan.net
Subject: [load balancing] redirecting http to https for secure webapps


Fellow lb'ers,
 
We have a webapp (/secureapp/) that we only want to make available
through https SSL.
Users trying to access http://site/secureapp/ should be redirected to
https://site/secureapp/
 
Given that:
1)       https://site <https://site/>  is a BigIP SSL proxied site
2)       Apache web servers in the pool only see port 80 coming from the
BigIP (good thing - that means the SSL is offloaded on the BigIP HW)
3)       Some apps (/nonsecureapp/) do not require SSL redirect
 
How do I best configure this redirect?
 
I have seen various options:
 
1)       Rewrite rules like the one below do not work because the server
port is 80 regardless
a.       RewriteCond   %{SERVER_PORT}  !^443$
b.       RewriteRule ^/secret(.*)$ https://www.domain.com/secret$1 [L,R]
2)       BigIP Rules do not seem to work - I get a loop in my testing:
a.       if (http_uri matches_regex "/secureapp/" and client_port == 80)
{
b.          redirect to "https://%h/%u"
c.       }
3)       Setting a Header value in the BigIP Proxy to trigger a re-write
rule seems like it should work, but complicated.
4)       Having the BigIP SSL Proxy point to a new Apache webserver pool
listening on port 81 (something other than 80) and have the port 80
accesses to /secureapp/ redirect to https://site/secureapp/
 
 
I am thinking of doing option 4 - but thought I'd ask what others found
works best.
 
Thanks, 
 
Fletcher Cocquyt
Senior Systems Administrator
fcocquyt@stanford.edu
 

[Attachment #3 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o = 
"urn:schemas-microsoft-com:office:office" xmlns:w = 
"urn:schemas-microsoft-com:office:word" xmlns:st1 = 
"urn:schemas-microsoft-com:office:smarttags"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content=Word.Document name=ProgId>
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<META content="Microsoft Word 10" name=Originator><LINK 
href="cid:filelist.xml@01C465B1.1AC6F600" rel=File-List><o:SmartTagType 
name="PersonName" 
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><!--[if \
gte mso 9]><xml>  <o:OfficeDocumentSettings>
  <o:DoNotRelyOnCSS/>
 </o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:SpellingState>Clean</w:SpellingState>
  <w:GrammarState>Clean</w:GrammarState>
  <w:DocumentKind>DocumentEmail</w:DocumentKind>
  <w:EnvelopeVis/>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
  </w:Compatibility>
  <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
 </w:WordDocument>
</xml><![endif]--><!--[if !mso]>
<STYLE>st1\:* {
	BEHAVIOR: url(#default#ieooui)
}
</STYLE>
<![endif]-->
<STYLE>@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; \
mso-header-margin: .5in; mso-footer-margin: .5in; mso-paper-source: 0; } P.MsoNormal \
{  FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; \
mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times \
New Roman" }
LI.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; \
mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times \
New Roman" }
DIV.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; \
mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times \
New Roman" }
A:link {
	COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlink {
	COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
A:visited {
	COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlinkFollowed {
	COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
P.MsoAutoSig {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; \
mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman" }
LI.MsoAutoSig {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; \
mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman" }
DIV.MsoAutoSig {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; \
mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman" }
PRE {
	FONT-SIZE: 10pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Courier New"; mso-pagination: \
widow-orphan; mso-fareast-font-family: "Times New Roman" }
SPAN.EmailStyle17 {
	COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose; \
mso-style-noshow: yes; mso-ansi-font-size: 10.0pt; mso-bidi-font-size: 10.0pt; \
mso-ascii-font-family: Arial; mso-hansi-font-family: Arial; mso-bidi-font-family: \
Arial }
SPAN.SpellE {
	mso-style-name: ""; mso-spl-e: yes
}
SPAN.GramE {
	mso-style-name: ""; mso-gram-e: yes
}
DIV.Section1 {
	page: Section1
}
OL {
	MARGIN-BOTTOM: 0in
}
UL {
	MARGIN-BOTTOM: 0in
}
</STYLE>
<!--[if gte mso 10]>
<style>
 /* Style Definitions */ 
 table.MsoNormalTable
	{mso-style-name:"Table Normal";
	mso-tstyle-rowband-size:0;
	mso-tstyle-colband-size:0;
	mso-style-noshow:yes;
	mso-style-parent:"";
	mso-padding-alt:0in 5.4pt 0in 5.4pt;
	mso-para-margin:0in;
	mso-para-margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:10.0pt;
	font-family:"Times New Roman";}
</style>
<![endif]--></HEAD>
<BODY lang=EN-US style="tab-interval: .5in" vLink=purple link=blue>
<DIV dir=ltr align=left><SPAN class=308374521-12072004><FONT face=Arial 
color=#0000ff size=2>We use option 4 with our ssl apps that are terminated on 
BigIP.&nbsp; Been doing this for a while with good success.&nbsp; Only 
difference&nbsp;in our setup is we point bigip:443 to server:80 and then 
bigip:80 to server:82 and we make server:82 redirect to https://.&nbsp; 
Simplifies testing/troubleshooting for our&nbsp;support folks&nbsp;where they'd 
like to hit server:80 directly without using BigIP.&nbsp; They don't have to 
remember to put the oddball port in the URL.</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> owner-lb-l@vegan.net 
[mailto:owner-lb-l@vegan.net] <B>On Behalf Of </B>Fletcher 
Cocquyt<BR><B>Sent:</B> Friday, July 09, 2004 12:35 PM<BR><B>To:</B> 
lb-l@vegan.net<BR><B>Subject:</B> [load balancing] redirecting http to https for 
secure webapps<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=Section1>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Fellow <SPAN 
class=SpellE>lb&#8217;ers</SPAN>,<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">We have a <SPAN 
class=SpellE>webapp</SPAN> (/<SPAN class=SpellE>secureapp</SPAN>/) that we only 
want to make available through https SSL.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Users trying to access <A 
href="http://site/secureapp/">http://site/secureapp/</A> should be redirected to 
<A 
href="https://site/secureapp/">https://site/secureapp/</A><o:p></o:p></SPAN></FONT></P>
 <P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Given 
that:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 0.5in; TEXT-INDENT: -0.25in; mso-list: l0 level1 lfo1; tab-stops: \
list .5in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">1)<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><A 
href="https://site/">https://site</A> is a <SPAN class=SpellE>BigIP</SPAN> SSL 
<SPAN class=SpellE>proxied</SPAN> site<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 0.5in; TEXT-INDENT: -0.25in; mso-list: l0 level1 lfo1; tab-stops: \
list .5in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">2)<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Apache web servers in the pool only 
see port 80 coming from the <SPAN class=SpellE>BigIP</SPAN> (good thing &#8211; that 
means the SSL is offloaded on the <SPAN class=SpellE>BigIP</SPAN> 
HW)<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 0.5in; TEXT-INDENT: -0.25in; mso-list: l0 level1 lfo1; tab-stops: \
list .5in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">3)<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Some apps (/<SPAN 
class=SpellE>nonsecureapp</SPAN>/) do not require SSL 
redirect<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">How do I best configure this 
redirect?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">I have seen various 
options:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 0.5in; TEXT-INDENT: -0.25in; mso-list: l1 level1 lfo2; tab-stops: \
list .5in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">1)<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]>Rewrite rules like the one below do 
not work because the server port is 80 regardless<FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 1in; TEXT-INDENT: -0.25in; mso-list: l1 level2 lfo2; tab-stops: \
list 1.0in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">a.<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><SPAN 
class=SpellE>RewriteCond</SPAN><SPAN style="mso-spacerun: yes">&nbsp;&nbsp; 
</SPAN>%{SERVER_PORT}<SPAN style="mso-spacerun: yes">&nbsp; </SPAN>!^443$<FONT 
face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 1in; TEXT-INDENT: -0.25in; mso-list: l1 level2 lfo2; tab-stops: \
list 1.0in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">b.<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><SPAN 
class=SpellE>RewriteRule</SPAN> ^/secret(.*)$ https://www.domain.com/secret$1 
[L,R]<FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 0.5in; TEXT-INDENT: -0.25in; mso-list: l1 level1 lfo2; tab-stops: \
list .5in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">2)<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><SPAN class=SpellE><FONT face=Arial 
size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">BigIP</SPAN></FONT></SPAN><FONT 
face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"> Rules do 
not seem to work &#8211; I get a loop in my testing:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 1in; TEXT-INDENT: -0.25in; mso-list: l1 level2 lfo2; tab-stops: \
list 1.0in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">a.<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">if (<SPAN 
class=SpellE>http_uri</SPAN> <SPAN class=SpellE>matches_regex</SPAN> "/<SPAN 
class=SpellE>secureapp</SPAN>/" and <SPAN class=SpellE>client_port</SPAN> == 80) 
{<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 1in; TEXT-INDENT: -0.25in; mso-list: l1 level2 lfo2; tab-stops: \
list 1.0in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">b.<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><SPAN 
style="mso-spacerun: yes">&nbsp;&nbsp;&nbsp;</SPAN>redirect to 
"https://%h/%u"<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 1in; TEXT-INDENT: -0.25in; mso-list: l1 level2 lfo2; tab-stops: \
list 1.0in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">c.<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">}<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 0.5in; TEXT-INDENT: -0.25in; mso-list: l1 level1 lfo2; tab-stops: \
list .5in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">3)<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Setting a Header value in the <SPAN 
class=SpellE>BigIP</SPAN> Proxy to trigger a re-write rule seems like it should 
work, but complicated.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal 
style="MARGIN-LEFT: 0.5in; TEXT-INDENT: -0.25in; mso-list: l1 level1 lfo2; tab-stops: \
list .5in"><![if !supportLists]><FONT  face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: Arial"><SPAN 
style="mso-list: Ignore">4)<FONT face="Times New Roman" size=1><SPAN 
style="FONT: 7pt 'Times New Roman'">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
</SPAN></FONT></SPAN></SPAN></FONT><![endif]><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Having the <SPAN 
class=SpellE>BigIP</SPAN> SSL Proxy point to a new Apache <SPAN 
class=SpellE>webserver</SPAN> pool listening on port 81 (something other than 
80) and have the port 80 accesses to /<SPAN class=SpellE>secureapp</SPAN>/ 
redirect to <A 
href="https://site/secureapp/">https://site/secureapp/</A><o:p></o:p></SPAN></FONT></P>
 <P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">I am thinking of doing option 4 &#8211; 
but thought I&#8217;d ask what others found works best.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Thanks, 
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoAutoSig><st1:PersonName 
style="BACKGROUND-POSITION: left bottom; BACKGROUND-IMAGE: \
url(res://ietag.dll/#34/#1001); BACKGROUND-REPEAT: repeat-x"  tabIndex=0><FONT \
face="Times New Roman" size=3><SPAN  style="FONT-SIZE: 12pt; mso-no-proof: \
yes">Fletcher  Cocquyt</SPAN></FONT></st1:PersonName><SPAN 
style="mso-no-proof: yes"><o:p></o:p></SPAN></P>
<P class=MsoAutoSig><FONT face="Times New Roman" size=3><SPAN 
style="FONT-SIZE: 12pt; mso-no-proof: yes">Senior Systems 
Administrator<o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><FONT face="Times New Roman" size=3><SPAN 
style="FONT-SIZE: 12pt; mso-no-proof: yes">f</SPAN></FONT><st1:PersonName 
style="BACKGROUND-POSITION: left bottom; BACKGROUND-IMAGE: \
url(res://ietag.dll/#34/#1001); BACKGROUND-REPEAT: repeat-x"  tabIndex=0><SPAN 
style="mso-no-proof: yes">cocquyt@stanford.edu</SPAN></st1:PersonName><SPAN 
style="mso-no-proof: yes"><o:p></o:p></SPAN></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN 
style="FONT-SIZE: 12pt"><o:p>&nbsp;</o:p></SPAN></FONT></P></DIV></BODY></HTML>


____________________
The Load Balancing Mailing List
Unsubscribe:    mailto:majordomo@vegan.net?body=unsubscribe%20lb-l
Archive:        http://vegan.net/lb/archive
LBDigest:       http://lbdigest.com
MRTG with SLB:  http://vegan.net/MRTG
Hosted by:	http://www.tokkisystems.com


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic