Welcome to ISAserver.org

(My)SQL server response.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> (My)SQL server response.

Page: [1]

Message

<< Older Topic Newer Topic >>

(My)SQL server response. - 18.Aug.2006 7:42:32 PM

brett.leuszler

Posts: 2
Joined: 18.Aug.2006
Status: offline

Our organisation recently implemented an ISA 2004 server as our firewall. With this, we changed the configuration of our webservers, moving them into a DMZ.

At this point we have successfully set-up and configured all points of access and everything is working correctly with one major problem:

Our main webserver is a basic Windows/IIS/MySQL/PhP (WIMP) configuration. The MySQL portion, however resides on a server that lives on our internal network.

So, to faciliate MySQL access for the web server, we've opened a routing permission on the ISA server permitting port 3306 traffic from the Perimeter to the Internal. This works and data flows as expected, except that there's ALWAYS a 5+ second delay, EVERY time the webserver attempts to access MySQL.

This means that, for pages requiring multiple MySQL queries, it can take a LONG time to generate (often resulting in PHP Timeouts on big pages). This is a major problem for our e-commerce site as it is painful to use which is, of course BAD. Can anyone please explain to me what might be causing this 5+ second delay? We AREN'T proxy-ing MySQL, it's a simple route grant permission for traffic from the IIS server to the MySQL server on port 3306.

As additional information, neither the ISA server nor the Webserver experience average CPU load over 50% with the typical amount being 25% or less. It appears that LDAP traffic (which we have permitted in the same fashion as MySQL) experiences the same delay, resulting in a double-performance-hit on pages where we perform LDAP user identification AND MySQL queries...

Any help would be greatly appreciated!!

Sincerely,

Brett D. Leuszler MCSE

Post #: 1

Featured Links*

RE: (My)SQL server response. - 21.Aug.2006 12:16:34 AM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Hi Brett,

What are the network rules and related firewall rules?

Thanks

Mark

(in reply to brett.leuszler)

Post #: 2

RE: (My)SQL server response. - 21.Aug.2006 6:08:35 AM

brett.leuszler

Posts: 2
Joined: 18.Aug.2006
Status: offline

Well, I find that I must apologise:

I have been going at this problem for over a week and since it began only when we implemented the ISA server, I had pursued that angle as the most likely problem. In growing frustration I'd posted my message above in hopes of finding where I'd gone wrong.

My post notwithstanding, I began some more in-depth testing of the MySQL server response. In furtherance of that test, I connected a crossover ethernet cable between the DMZ'd webserver and the internal MySQL server and changed the MySQL php-object on our server so it would access MySQL through that network (thereby removing the ISA server from the equation altogether).

Unfortunately, the latency persists -- We're still experiencing the slow load times despite the data not crossing the ISA machine at all.

So, beginning tomorrow morning, I start trying to determine why the MySQL server has suddenly developed this delay in responding to requests (including whether or not the timing with the ISA/DMZ implementation is causal or coincidental).

Thank-you for taking the time to respond though, hopefully I'll get to the bottom of this soon! (I'll post again if there's anything more to add to this.)

-Brett

(in reply to mrupright)

Post #: 3