topic Error: sticky resource not available in Application Networking

Error: sticky resource not available

netternewbie — Wed, 30 Oct 2013 17:14:13 GMT

Hi,

I get the following error when I try to add sticky config to a context.

Error: sticky resource not available

I have added the following to the admin context but no joy:

resource-class **********

limit-resource all minimum 0.00 maximum unlimited

limit-resource sticky minimum 10.00 maximum equal-to-min

One thing I noticed is it is only on the admin context of one ace module. It ain't on the admin module of the other ace context. Do I need to add it manly to both? Afraid of putting them out of sync.

Can anyone please advise?

Error: sticky resource not available

netternewbie — Wed, 30 Oct 2013 17:28:08 GMT

I just added it on the other ACE admin context manually and still no joy.

resource-class **********

limit-resource all minimum 0.00 maximum unlimited

limit-resource sticky minimum 10.00 maximum equal-to-min

Can anyone tell me what I need to do to get stickiness working?

Error: sticky resource not available

Kanwaljeet Singh — Wed, 30 Oct 2013 18:08:25 GMT

Hi Netter,

You have defined the resource class and defined the limits but did you associate with the respective "Contexts"? Without association with any context it is just a resource class!

Please associate if you haven't already and let me know if you still face the same problem.

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Wed, 30 Oct 2013 18:22:06 GMT

Hi Kanwal,

Thanks for your response. I am new to this and taking over from someone else. Can you tell me how you associate it with a particular context? Is it in the context itself? Whats the command?

Many thanks

Error: sticky resource not available

Kanwaljeet Singh — Wed, 30 Oct 2013 18:25:09 GMT

Hi Netter,

Here is the configuration that you need to do in "Admin" context. So i created a class (like you did above) named as "Test1". After that i go to context "Kan" and made it member of resource class Test1.

switch/Admin(config)# context Kan

switch/Admin(config-context)# member Test

Test Test1

switch/Admin(config-context)# member Test1

switch/Admin(config-context)# exit

Let me know how it works and if this resolves your problem.

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Wed, 30 Oct 2013 18:33:43 GMT

Thanks Kanwal,

I will give this a go. There are other services live already in this context. Will this cause any issues? Presume I just do it in active context?

Thanks.

Error: sticky resource not available

Kanwaljeet Singh — Wed, 30 Oct 2013 18:35:55 GMT

Hi Netter,

You should what is the current resoruce allocation for your context and see what is changing. There should be no problem as long as you are increasing the resource.

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Wed, 30 Oct 2013 18:44:25 GMT

Thanks Kanwal,

Another stupid question but how do I check current resource allocation? There was nothing in admin or its context until I greated class above. So presume its default resources?

Thanks.

Error: sticky resource not available

Kanwaljeet Singh — Wed, 30 Oct 2013 19:06:25 GMT

Hi Netter,

You can use ,

show running-config resource-class

show resource-allocation

The above two commands shall show the details.

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Wed, 30 Oct 2013 19:19:38 GMT

Thanks Kanwal,

I did this in the admin context and it has no resources assigned to it.

Error: sticky resource not available

Kanwaljeet Singh — Wed, 30 Oct 2013 20:00:03 GMT

Hi,

So you can create resource class and assign to the context you are having issues with. You can look through the user guide for better understanding of how resource allocation works.

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Wed, 30 Oct 2013 22:10:20 GMT

Thanks, yes will do this and let you know how it goes tomorrow.

Error: sticky resource not available

netternewbie — Thu, 31 Oct 2013 11:37:52 GMT

Thanks Kanwal, this did the trick and I can apply stickness now. Unfortunately it didn't fix my main problem. Load balancing 2 web servers with redirest on port 80 to 443. But I get the following error:

This webpage has a redirect loop

Can open a separate discussion on this if you like. Config is fairly basic. Not sure what is wrong. If its me or the server guys. Any thoughts?

Error: sticky resource not available

Kanwaljeet Singh — Thu, 31 Oct 2013 13:05:35 GMT

Hi Netter,

Send me the configuration and i will have a look. 80 t0 443 should be a simple redirection. Who is doing the redirection here, ace or webserver?

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Thu, 31 Oct 2013 13:16:23 GMT

Hi Kanwal,

Should be ace but think server guys have a redirect as well. Will get them to turn off. Just heading to a meeting now. Will try and get a config onto you in the next hr. Thanks again.

Error: sticky resource not available

Kanwaljeet Singh — Thu, 31 Oct 2013 13:19:16 GMT

Hi Netter,

My pleasure in assisting you. Get me the configuration and we will see what is going on here.

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Thu, 31 Oct 2013 14:35:22 GMT

Thanks Kanwal. Here is the current config. I think I am on right track.

crypto chaingroup ****-CHAINGRP
cert chain-ROOT

cert ****CAcert

crypto csr-params CSR-PARAMS
country
state
locality
organization-name
organization-unit
common-name ****.co.uk
serial-number 601
access-list BPDU ethertype permit bpdu

probe tcp ****-WEB-PROBE
interval 3
passdetect interval 5

parameter-map type ssl SSL-****-ADVANCED
cipher RSA_WITH_RC4_128_MD5

rserver host ****TC1
ip address *.*.*.*
inservice
rserver host ****TC2
ip address *.*.*.*
inservice
rserver redirect HTTP-****
webhost-redirection https://%h/%p 301
inservice

ssl-proxy service SSL-****-PROXY
key ****.pem
cert ****CAcert
chaingroup ****-CHAINGRP
ssl advanced-options SSL-****-ADVANCED

serverfarm host ****-FARM
predictor leastconns
probe ****-WEB-PROBE
rserver ****TC1 80
    inservice
rserver ****TC2 80
    inservice
serverfarm redirect HTTP-****-FARM
rserver HTTP-****
    inservice

sticky ip-netmask 255.255.255.255 address source STICKY-SSL-****-FARM
timeout 720
timeout activeconns
replicate sticky
serverfarm ****-FARM

class-map match-any ****-HTTPS-VIP
2 match virtual-address *.*.*.* tcp eq https
class-map match-any REDIRECT-HTTP-****
2 match virtual-address *.*.*.* tcp eq www

policy-map type loadbalance first-match ****-HTTPS-POLICY
class class-default
sticky-serverfarm STICKY-SSL-****-FARM
policy-map type loadbalance first-match ****-POLICY-REDIRECT
class class-default
serverfarm HTTP-****-FARM

policy-map multi-match ****-POLICY
class ****-HTTPS-VIP
    loadbalance vip inservice
    loadbalance policy ****-HTTPS-POLICY
    loadbalance vip icmp-reply active
    ssl-proxy server SSL-****-PROXY
policy-map multi-match ****REDIRECTPOLICY
class REDIRECT-HTTP-****
    loadbalance vip inservice
    loadbalance policy ****-POLICY-REDIRECT
    loadbalance vip icmp-reply active
    loadbalance vip advertise

service-policy input ****REDIRECTPOLICY
service-policy input ****-POLICY

Error: sticky resource not available

Kanwaljeet Singh — Thu, 31 Oct 2013 14:56:45 GMT

Hi Netter,

The configuration looks absolutely fine to me.

So this configuratio didn't work? You said there was redirection loop which i assume could happen because client didn't come with https url to which it was redirected otherwise it would have matched a different class and loadbalanced to different serverfarm.

Can you capture on client itself and see what URL client goes with after it has been redirected? That should tell us why the redirection is happening again and again.

You can also install iehttp for IE or Live utility in Mozilla to see the HTTP based communication between client and server(ACE).

And you don't need to define two policy mutli-match. You can simply call both class maps under the same policy mutli match. If it doesn't match the first class, it will look into second and so on. Once a match is done it stops.

Regards,

Kanwal

Error: sticky resource not available

netternewbie — Thu, 31 Oct 2013 15:20:04 GMT

Hi Kanwal,

Just got word from the server guys server runs on 8443. Do I just change

serverfarm host ****-FARM

predictor leastconns

probe ****-WEB-PROBE

rserver ****TC1 80

inservice

rserver ****TC2 80

serverfarm host ****-FARM

predictor leastconns

probe ****-WEB-PROBE

rserver ****TC1 8443

inservice

rserver ****TC2 8443

Error: sticky resource not available

Kanwaljeet Singh — Thu, 31 Oct 2013 15:25:27 GMT

Hi Netter,

If the server is listening on 8443 then backend connection would be SSL too which means you need to do end to end ssl loadbalancing or you can simply loadbalance based on TCP port and if you do so you need to remove SSL proxy configuration.

For end to end ssl you have to configure ACE both as ssl server and client and configuration will need a slight change. Please go through the below link for same.

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA4_1_0/configuration/ssl/guide/endtoend.html

Let me know if have any questions.

Regards,

Kanwal