topic Re: CSM redirect - header length in Application Networking

topic Re: CSM redirect - header length in Application Networking https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966583#M18982 <HTML><HEAD></HEAD><BODY><P>I upgraded our CSM in our lab environment with 4.2.9. This did not fix the problem. It still appears that the url can be cut down to around 1850 bytes and the CSM will reply with the redirect. But the one that is posted here shows up to be 2277 bytes and it never gets a redirect. I am currently waiting on our TCOM guys (I am a web guy) to get their sniffer set up so I can get a capture file. Hope to post this up this afternoon. Thanks for all of your suggestions and help so far.</P></BODY></HTML> Thu, 22 May 2008 16:49:26 GMT aanelso1 2008-05-22T16:49:26Z CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966575#M18974 <P>We have a set of vservers on a CSM running 4.2.5. The TCP port 80 rule sends the request to a serverfarm with a vserver-redirect to force the request to use TCP port 443. There is a second vserver for TCP port 443 that accepts the redirect and forwards to the SSL module.</P><P></P><P>The problem is that when an extra long url is sent the CSM never replies from the request to TCP port 80 (we see the syn, syn-ack, ack, then several tries from the client using the GET verb (all others are TCP restransmissions - no ACKs from the CSM or server).</P><P></P><P>If we send the same request directly to the vserver on TCP port 443 it works fine. Can you give us insight as to what we might be able to do? Thanks in advance.</P> Fri, 16 May 2008 15:13:30 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966575#M18974 aanelso1 2008-05-16T15:13:30Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966576#M18975 <HTML><HEAD></HEAD><BODY><P>http parse length problem.</P><P>Increase it with the command :</P><P></P><P>gdufour-cat6k-2(config-slb-vserver)#parse-length ?</P><P> <1-4000> maximum number of bytes to parse</P><P> default-policy set default policy when maximum parse length is reached for a</P><P> session</P><P> <CR></CR></P><P></P><P></P><P>Gilles.</P></BODY></HTML> Fri, 16 May 2008 17:07:43 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966576#M18975 Gilles Dufour 2008-05-16T17:07:43Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966577#M18976 <HTML><HEAD></HEAD><BODY><P>Thanks for your quick reply!</P><P></P><P>I looked at the request with an HTTP sniffer and see that it is 2277 bytes. I changed the vserver that is its destination using the parse-length command to 4000 bytes (max), but it is still hanging. I will do some more testing, but is it possible that maybe the redirect serverfarm is having the problem? I never see the 302 redirect take place with this length of request, however shorter requests work fine. </P></BODY></HTML> Fri, 16 May 2008 17:43:31 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966577#M18976 aanelso1 2008-05-16T17:43:31Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966578#M18977 <HTML><HEAD></HEAD><BODY><P>gdufour-cat6k-2#sho mod csm 3 tech proc 4 | i parse</P><P> LB Rjct: L7 max parse len 0</P><P> LB Rjct: L7 parser 0</P><P>gdufour-cat6k-2#</P><P></P><P></P><P>If these counters are still increasing, you did not solve the problem of header length.</P><P>The default is 2000 bytes, so 2277 is above it and would clearly result in no response.</P><P>Increasing the parse length should work.</P><P></P><P>Gilles.</P></BODY></HTML> Fri, 16 May 2008 18:41:49 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966578#M18977 Gilles Dufour 2008-05-16T18:41:49Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966579#M18978 <HTML><HEAD></HEAD><BODY><P>Must be something else...I do not see that counter incrementing. See the output below (I had my browser trying to open the url during this time). Also notice details on the vserver that is its destination. max parse len = 12000 (is this bytes or bits?).</P><P></P><P>% Unrecognized command</P><P>bvldclbrtr1#sho mod csm 1 tech pro</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | in</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5 (5)</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 tech proc 4 | include parse</P><P> LB Rjct: L7 max parse len 5</P><P> LB Rjct: L7 parser 0</P><P>bvldclbrtr1#sho mod csm 1 vser</P><P>bvldclbrtr1#sho mod csm 1 vservers name ITS-T detail</P><P>ITS-T, type = SLB, state = OPERATIONAL, v_index = 527</P><P> virtual = 158.139.218.77/32:80 bidir, TCP, service = NONE, advertise = FALSE</P><P> idle = 3600, replicate csrp = none, vlan = 218, pending = 30, layer 4</P><P> max parse len = 12000, persist rebalance = TRUE</P><P> ssl sticky offset = 0, length = 32</P><P> conns = 0, total conns = 64</P><P> Default policy:</P><P> server farm = R-ITS-T, backup = <NOT assigned=""></NOT></P><P> sticky: timer = 0, subnet = 0.0.0.0, group id = 0</P><P> Policy Tot matches Client pkts Server pkts</P><P> -----------------------------------------------------</P><P> (default) 64 1069 871</P><P></P><P>bvldclbrtr1#</P></BODY></HTML> Fri, 16 May 2008 18:55:04 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966579#M18978 aanelso1 2008-05-16T18:55:04Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966580#M18979 <HTML><HEAD></HEAD><BODY><P>what version do you run ?</P><P>Could you show the current config ?</P><P>Can you sniff the traffic from the CSM portchannel when connecting from the client ?</P><P>Is this counter increasing when you connect from the client :</P><P></P><P>(default) 64 1069 871</P><P></P><P></P><P>??</P><P></P><P>Gilles.</P></BODY></HTML> Sat, 17 May 2008 12:32:02 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966580#M18979 Gilles Dufour 2008-05-17T12:32:02Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966581#M18980 <HTML><HEAD></HEAD><BODY><P>We are running version 4.2.5. I will get a sniff of the traffic on port channel 257 for you. No the counter that you had me check for is not increasing when I connect as a client. Below is the current configuration:</P><P></P><P> serverfarm R-ITS-T</P><P> nat server</P><P> no nat client</P><P> redirect-vserver R-ITS-T</P><P> webhost relocation its-t.conocophillips.net/%p</P><P> ssl 443</P><P> idle 120</P><P> inservice</P><P>!</P><P> vserver ITS-T</P><P> virtual 10.12.120.77 tcp www</P><P> vlan 218</P><P> serverfarm R-ITS-T</P><P> persistent rebalance</P><P> parse-length 4000</P><P> inservice</P><P>!</P><P> vserver ITS-T-SSL</P><P> virtual 10.12.120.77 tcp https</P><P> serverfarm SSL-MODULE2</P><P> persistent rebalance</P><P> inservice</P><P>!</P><P> vserver ITS-T-V4</P><P> virtual 10.12.120.77 tcp www</P><P> vlan 4</P><P> serverfarm BVLWBIT184</P><P> persistent rebalance</P><P> inservice</P><P></P><P>The url that is trying to be sent is below (which works fine if we send it to vserver ITS-T-SSL on port 443). It is on the redirect that is failing:</P><P></P><P><A class="jive-link-custom" href="http://its-t.conocophillips.net/sap/bc/bsp/sap/z_ext_resp/default.htm?WI=000101281590&OBT=ZEPAYINVST&OBK=2008042510064100108846WRMATHE&RSP=2&MSC=00001-00002-00003-00004-00005-00006-00007-00008-00009-00010-00011-00012-00013-00014-00015-00016-00017-00018-00019-00020-00021-00022-00023-00024-00025-00026-00027-00028-00029-00030-00031-00032-00033-00034-00035-00036-00037-00038-00039-00040-00041-00042-00043-00044-00045-00046-00047-00048-00049-00050-00051-00052-00053-00054-00055-00056-00057-00058-00059-00060-00061-00062-00063-00064-00065-00066-00067-00068-00069-00070-00071-00072-00073-00074-00075-00076-00077-00078-00079-00080-00081-00082-00083-00084-00085-00086-00087-00088-00089-00090-00091-00092-00093-00094-00095-00096-00097-00098-00099-00100-00101-00102-00103-00104-00105-00106-00107-00108-00109-00110-00111-00112-00113-00114-00115-00116-00117-00118-00119-00120-00121-00122-00123-00124-00125-00126-00127-00128-00129-00130-00131-00132-00133-00134-00135-00136-00137-00138-00139-00140-00141-00142-00143-00144-00145-00146-00147-00148-00149-00150-00151-00152-00153-00154-00155-00156-00157-00158-00159-00160-00161-00162-00163-00164-00165-00166-00167-00168-00169-00170-00171-00172-00173-00174-00175-00176-00177-00178-00179-00180-00181-00182-00183-00184-00185-00186-00187-00188-00189-00190-00191-00192-00193-00194-00195-00196-00197-00198-00199-00200-00201-00202-00203-00204-00205-00206-00207-00208-00209-00210-00211-00212-00213-00214-00215-00216-00217-00218-00219-00220-00221-00222-00223-00224-00225-00226-00227-00228-00229-00230-00231-00232-00233-00234-00235-00236-00237-00238-00239-00240-00241-00242-00243-00244-00245-00246-00247-00248-00249-00250-00251-00252-00253-00254-00255-00256-00257-00258-00259-00260-00261-00262-00263-00264-00265-00266-00267-00268-00269-00270-00271-00272-00273-00274-00275-00276-00277-00278-00279-00280-00281-00282-00283-00284-00285-00286-00287-00288-00289-00290-00291-00292-00293" target="_blank">http://its-t.conocophillips.net/sap/bc/bsp/sap/z_ext_resp/default.htm?WI=000101281590&OBT=ZEPAYINVST&OBK=2008042510064100108846WRMATHE&RSP=2&MSC=00001-00002-00003-00004-00005-00006-00007-00008-00009-00010-00011-00012-00013-00014-00015-00016-00017-00018-00019-00020-00021-00022-00023-00024-00025-00026-00027-00028-00029-00030-00031-00032-00033-00034-00035-00036-00037-00038-00039-00040-00041-00042-00043-00044-00045-00046-00047-00048-00049-00050-00051-00052-00053-00054-00055-00056-00057-00058-00059-00060-00061-00062-00063-00064-00065-00066-00067-00068-00069-00070-00071-00072-00073-00074-00075-00076-00077-00078-00079-00080-00081-00082-00083-00084-00085-00086-00087-00088-00089-00090-00091-00092-00093-00094-00095-00096-00097-00098-00099-00100-00101-00102-00103-00104-00105-00106-00107-00108-00109-00110-00111-00112-00113-00114-00115-00116-00117-00118-00119-00120-00121-00122-00123-00124-00125-00126-00127-00128-00129-00130-00131-00132-00133-00134-00135-00136-00137-00138-00139-00140-00141-00142-00143-00144-00145-00146-00147-00148-00149-00150-00151-00152-00153-00154-00155-00156-00157-00158-00159-00160-00161-00162-00163-00164-00165-00166-00167-00168-00169-00170-00171-00172-00173-00174-00175-00176-00177-00178-00179-00180-00181-00182-00183-00184-00185-00186-00187-00188-00189-00190-00191-00192-00193-00194-00195-00196-00197-00198-00199-00200-00201-00202-00203-00204-00205-00206-00207-00208-00209-00210-00211-00212-00213-00214-00215-00216-00217-00218-00219-00220-00221-00222-00223-00224-00225-00226-00227-00228-00229-00230-00231-00232-00233-00234-00235-00236-00237-00238-00239-00240-00241-00242-00243-00244-00245-00246-00247-00248-00249-00250-00251-00252-00253-00254-00255-00256-00257-00258-00259-00260-00261-00262-00263-00264-00265-00266-00267-00268-00269-00270-00271-00272-00273-00274-00275-00276-00277-00278-00279-00280-00281-00282-00283-00284-00285-00286-00287-00288-00289-00290-00291-00292-00293</A></P></BODY></HTML> Thu, 22 May 2008 12:06:27 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966581#M18980 aanelso1 2008-05-22T12:06:27Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966582#M18981 <HTML><HEAD></HEAD><BODY><P>I tested your config with 4.2(8) and it works fine.</P><P>We had to change the rediret code due to ddts CSCse98829: %p in redirect doesn't work for small GETs which was integrated with 4.2.6</P><P></P><P>This change may have solved a problem with long url that had not been detected.</P><P></P><P>You can try an upgrade to 4.2.9 to see if that solves your problem.</P><P></P><P>Gilles.</P></BODY></HTML> Thu, 22 May 2008 14:50:05 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966582#M18981 Gilles Dufour 2008-05-22T14:50:05Z Re: CSM redirect - header length https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966583#M18982 <HTML><HEAD></HEAD><BODY><P>I upgraded our CSM in our lab environment with 4.2.9. This did not fix the problem. It still appears that the url can be cut down to around 1850 bytes and the CSM will reply with the redirect. But the one that is posted here shows up to be 2277 bytes and it never gets a redirect. I am currently waiting on our TCOM guys (I am a web guy) to get their sniffer set up so I can get a capture file. Hope to post this up this afternoon. Thanks for all of your suggestions and help so far.</P></BODY></HTML> Thu, 22 May 2008 16:49:26 GMT https://community.cisco.com/t5/application-networking/csm-redirect-header-length/m-p/966583#M18982 aanelso1 2008-05-22T16:49:26Z