topic Re: qlik sense user disconnections behind F5 Reverse Proxy in Management & Governance

qlik sense user disconnections behind F5 Reverse Proxy

jchoucq — Fri, 15 Nov 2024 23:44:42 GMT

Dear all,

a customer of ours is trying to use Qlik Sense from outside the company with F5 reverse Proxy. Everything is ok, but there are many disconnections. The IT team look for timeout but without any success.

there is an interesting article : https://community.qlik.com/t5/Knowledge/Hub-access-times-out-with-Error-Connection-lost-Make-sure-that/ta-p/1712823 but for the moment, the customer still have the problem.

Disconnections can occur even during reload task or working on design.

Does anybody already met the same architecture ?

Thanks and have a good day.

Joh

Re: qlik sense user disconnections behind F5 Reverse Proxy

Maria_Halley — Tue, 14 Sep 2021 08:35:02 GMT

@jchoucq

Have you looked at this article? It addresses how to external load balancers for QlikSense

https://community.qlik.com/t5/Knowledge/Network-Load-Balancer-NLB-Requirements-for-Qlik-Sense-Enterprise/ta-p/1715665

Re: qlik sense user disconnections behind F5 Reverse Proxy

rohitk1609 — Thu, 30 Sep 2021 12:21:39 GMT

Ask your user what is the minimum time when connection stays alive. Use this article and set few seconds above that threshold.

https://community.qlik.com/t5/Knowledge/Enabling-TCP-Keep-Alive-Functionality-In-Qlik-Sense/ta-p/1714735

Thanks,

Rohit

Re: qlik sense user disconnections behind F5 Reverse Proxy

jchoucq — Thu, 16 Sep 2021 09:26:52 GMT

Hi @rohitk1609 , thank you for this answer.

it seems that the disconnection occurs every 5 minutes, and the user has set the keep-alive timeout in the QMC to 30 seconds.

You mentioned to set few seconds above the threshold, does it mean, we should test with 305 sceonds as a keep-alive timeout ? maybe i don't undestand, sorry.

Joh

Re: qlik sense user disconnections behind F5 Reverse Proxy

jchoucq — Thu, 16 Sep 2021 09:27:33 GMT

thanks @Maria_Halley i will check this article !

Re: qlik sense user disconnections behind F5 Reverse Proxy

rohitk1609 — Fri, 17 Sep 2021 13:09:32 GMT

Do it as per article in config file.

Re: qlik sense user disconnections behind F5 Reverse Proxy

Qlik_Administrator_Dude — Fri, 17 Sep 2021 13:29:14 GMT

Hello,
I have used Qlik Sense behind an F5 before. First, what sort of balancing rules on your F5 are you using? I am guessing something like RoundRobin with Sticky Sessions.

Ensure your Virtual Proxies are working properly. They need to be set up in a way that work with the algorithm you are using on your F5. For instance, if you only have a virtual proxy set up on your Central node, and Users are sent to RIM Node 1, I would expect a disconnect. https://help.qlik.com/en-US/sense-admin/May2021/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/virtual-proxies-overview.htm

Last I would ensure that the Load Balancing Rules are set up correctly. Check this link out for details:
https://help.qlik.com/en-US/sense-admin/May2021/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Administer_QSEoW/Managing_QSEoW/add-load-balance.htm

Now to put it all together: The Session is going to be set up on One Node. If you authenticate, and then the F5 changes the Node, the session is lost, and it will cause you to disconnect. You need the Session to be persistent to the the Worker Node (Or Scheduler) for the entire session. https://help.qlik.com/en-US/sense-developer/May2021/Subsystems/Platform/Content/Sense_PlatformOverview/Concepts/Load%20balancing.htm

Additional Tip: It might be worth it to double check all of your timeout values as well. Check this link out for further details on that: https://community.qlik.com/t5/Knowledge/Increase-session-timeout-in-Qlik-Sense/ta-p/1713275

Use Session Monitor, Reloads Monitor, Operation Monitor, Browser Web Developer Tools (or Fiddler), and the Native F5 Tools to try to solve this problem. Reach back out if you are stuck. You can reach out via Linked In for more detailed support too (in my profile).

Ah, one last thing. The Central Node is the one that does all of the authentication. Be aware of this.

Re: qlik sense user disconnections behind F5 Reverse Proxy

rohitk1609 — Fri, 03 Dec 2021 19:39:28 GMT

do it with 290 Seconds. so before session expire, it will recreate it