[THIN] Re: XA5 x64 and SSLRelay

  • From: "Webster" <webster@xxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Tue, 22 Dec 2009 05:52:28 -0600

New farm since they basically publish Office 2007 and Desktops.  Different
install paths for Office 2007.  Plus having it in a test farm allows them to
thoroughly test everything on x64 and then we can slowly migrate users as we
switch servers over to x64.  They are running Server 2003 x86 Ent with 24GB
of RAM they are experiencing resource issues.  Seems with that much RAM,
Windows is running out of paged-pool memory when they hit 40 to 45 users.
When you look at counters, only 6GB of RAM is in use and the page file isn't
touched but paged-pool, non-paged pool and one other I can't remember right
now are all depleted and the system slows to a crawl.  There is a Microsoft
KB about this and it basically says to remove RAM from the system to get it
to 8GB but they can't do that with these blade servers.  That is why they
are testing 64 bit.

 

I did check the Trust XML setting and it is checked.

 

I was also curious how many people actually use SSLRelay?  I was at Citrix
HQ last week and the only person in the room who uses SSLRelay was the guy
who setup this 32-bit farm.  He had to help me setup SSLRelay on the 64-bit
farm because of the SSL cert software he used.  The process to generate and
issue SSL certs was not documented and it took him over an hour to remember
how to do it using OpenSSL.  So I have not found anyone who uses SSLRelay in
production besides this one guy and he uses it on every one of his installs.

 

Thanks

 

 

Webster

 

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jeremy Saunders
Subject: [THIN] Re: XA5 x64 and SSLRelay

 

I think you're doing everything right, but it's been a while since I've used
an SSL relay. I'm fairly sure you need to set your servers to "Trust
requests sent to the XML service". Remember that WI 4.6 is 2.5 years old, so
there may be something quirky with this setup to your new farm. Deploy a Web
Interface 5.1.2 or 5.2 and try again.

 

Just curious as to why you are deploying it as a separate farm. You can
happily mix XA 4.5 and 5.0 and 32-bit and 64-bit servers in the same farm.

 

Cheers,

Jeremy.

 

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Webster
Subject: [THIN] XA5 x64 and SSLRelay

 

2 Farms: 1 PS 4.5 32-bit and 1 test 64-bit farm using XA5 x64 on 2003 x64.

On the 32-bit farm they are using WI 4.6, CSG 3.1.0 and SSLRelay

 

I have SSLRelay configured on the x64 server.  Cannot get the WI4.6 servers
to see the published apps on the x64 server if I enable SSLRelay in the WI
farm settings.  Change it to HTTP and all the published apps appear.

 

Am I doing something wrong or is this a known issue?

  _____  

Other related posts: