topic Re: VIP timeout in Application Networking

VIP timeout

edaguet — Wed, 17 Aug 2005 12:25:39 GMT

Hello all,

I have a strange problem.

many remote connection to VIP have timeout. However local connection to VIP works.

#sh mod csm 9 stats

Connections Created: 69

Connections Destroyed: 14

Connections Current: 55

Connections Timed-Out: 47

Connections Failed: 33

Server initiated Connections:

Created: 0, Current: 0, Failed: 0

L4 Load-Balanced Decisions: 69

L4 Rejected Connections: 0

L7 Load-Balanced Decisions: 0

L7 Rejected Connections:

Total: 0, Parser: 0,

Reached max parse len: 0, Cookie out of mem: 0,

Cfg version mismatch: 0, Bad SSL2 format: 0

L4/L7 Rejected Connections:

No policy: 0, No policy match 0,

No real: 0, ACL denied 0,

Server initiated: 0

Checksum Failures: IP: 0, TCP: 0

Redirect Connections: 0, Redirect Dropped: 0

FTP Connections: 0

MAC Frames:

Tx: Unicast: 4636, Multicast: 108, Broadcast: 736,

Underflow Errors: 0

Rx: Unicast: 27655, Multicast: 19800, Broadcast: 4629,

Overflow Errors: 0, CRC Errors: 0

Any ideas about connections timeout?

Re: VIP timeout

Gilles Dufour — Wed, 17 Aug 2005 21:44:04 GMT

is your server forwarding the traffic back to the CSM ?

Verify that the server is not bypassing the csm when forwarind the response to the client.

Make sure traffic comes in on 1 vlan and that the response goes out through the same vlan.

If that does not explain the problem, sniff the traffic on the CSM portchannel so we can see everything going in and out.

Regards,

Gilles.

Re: VIP timeout

edaguet — Thu, 18 Aug 2005 06:57:18 GMT

Hi Gilles,

Yes. I have analyzed the traffic, and when remote user try to connect to the VIP through a GRE tunnel, the last router send a "fragmentation needed" (ICMP 3/4) to the CSM. So how specify the max length of the packet from the CSM.?

For example, i would like that the CSM send a packet of 1300 bit max instead of 1460.

Re: VIP timeout

Gilles Dufour — Thu, 18 Aug 2005 08:10:27 GMT

As mentioned in another response, the CSM will forward the icmp packet to the corresponding real server which should then adjust the packet size.

Gilles.

Re: VIP timeout

dknov — Tue, 23 Jan 2007 08:03:33 GMT

Hi,

Sorry to bring up this old thread. Is there a "hidden" port-channel from switch bus to CSM that can be referenced? Similar to ports 15/1 and 16/1 in Hybrid IOS for MSFC module from Supervisor...

Thanks,

David