topic Re: Sticky resource issue in Cisco ACE 4710 in Application Networking

Sticky resource issue in Cisco ACE 4710

Saroj Pariyar — Fri, 29 Mar 2013 17:39:16 GMT

All,

Sticky resource usage is always at peak in one of my context in Cisco ACE 4710.Users are reporting slowness/packets drop issue frequently for the rules which has source-ip based sticky.Can high utilization of Sticky resource cause this issue ?? Also I did a lot of cisco docs reading but i didn't find what kind of resource sticky use. ?? can someone shade some lights like by sticky resource what kind of resource it is ?? is it like CPU,memory,concurrent connections,ssl connections etc etc ??

sh resource usage resource sticky

Allocation

Resource Current Peak Min Max Denied

-------------------------------------------------------------------------------

Context: PROD_Apps

sticky 40960 40960 40960 40960 0

Thanks,

Re: Sticky resource issue in Cisco ACE 4710

sesoerensen — Sat, 30 Mar 2013 12:11:56 GMT

Hi Saroj,

Would it be possible for you to share the sticky configuration of the context?
What version of code is used on the ACE?

From the looks of it, the ACE uses Ll of the available sticky resources, but is not dropping flows due to sticky at least.

Reserving sticky resources to a specific context is done using resource class maps, in the Admin context.

Cheers,

Søren

Re: Sticky resource issue in Cisco ACE 4710

Saroj Pariyar — Sun, 31 Mar 2013 14:38:44 GMT

HI Sesoerensen,

I am using code version A4(2.1a).

Here's the config: But could you please let me know what kind of resources the sticky uses.By resource does it mean CPU,memory etc etc .

rserver host

ip address

inservice

rserver host

ip address

inservice

rserver redirect REDIRECT-TO-HTTPS_app_googleTV_prod

webhost-redirection 301

inservice

serverfarm host app_googleTV_prod

probe TCP_16850

rserver 16850

inservice

rserver 16850

inservice

ssl-proxy service CLIENT_SSL_GOOGLETV

ssl advanced-options HTTPS_PARAM_MAP

ssl-proxy service Server_SSL_GOOGLETV

key GOOGLETV_PROD_KEY.PEM

cert GOOGLETV_PROD_CERT.PEM

chaingroup GOOGLETV_PROD_IntermedCA

ssl advanced-options HTTPS_PARAM_MAP

sticky ip-netmask 255.255.255.255 address source app_googleTV_prod_HTTPS_STICKY

timeout 720

replicate sticky

serverfarm app_googleTV_prod

policy-map type loadbalance first-match app_googleTV_prod_HTTPS_policy

class class-default

sticky-serverfarm app_googleTV_prod_HTTPS_STICKY

ssl-proxy client CLIENT_SSL_GOOGLETV

policy-map type loadbalance first-match app_googleTV_prod_HTTP_policy

class class-default

serverfarm REDIRECT-SERVERFARM_app_googleTV_prod

class-map match-all app_googleTV_prod_HTTPS_class

2 match virtual-address tcp eq https

class-map match-all app_googleTV_prod_HTTP_class

2 match virtual-address tcp eq www

policy-map multi-match POLICY-LB-VLAN488

class app_googleTV_prod_HTTPS_class

loadbalance vip inservice

loadbalance policy app_googleTV_prod_HTTPS_policy

loadbalance vip icmp-reply active

nat dynamic 1 vlan 488

ssl-proxy server Server_SSL_GOOGLETV

class app_googleTV_prod_HTTP_class

loadbalance vip inservice

loadbalance policy app_googleTV_prod_HTTP_policy

loadbalance vip icmp-reply active

nat dynamic 1 vlan 488

Thanks