ACE 4710 - Exchange 2010

[dclee]

So far I have 2 exchange 2010 servers in a server farm.

The ACE seems to be load balancing (1 armed config) the connections fine.

However when I show server farm stats I see alot of "failures"

real                  weight state        current    total      failures
   ---+---------------------+------+------------+----------+----------+---------
   rserver: xch01
       172.31.210.21:0       8      OPERATIONAL  1          86         34
   rserver: xch02
       172.31.210.22:0       8      OPERATIONAL  12         80         40

Is this normal ?

Any help would be appreciated...

Cheers

Dave

[Cesar Roque]

The Total Conn-failures counter in the show rserver detail command displays the total 
number of connection attempts that failed to establish a connection to the real server. 

For Layer 4 traffic with normalization on, the count increments if the three-way handshake 
fails to be established for either of the following reasons:

-- A RST comes from the client or the server after a SYN-ACK.

-- The server does not reply to a SYN. The connection times out.

-- For Layer 4 traffic with normalization off, the count does not increment. 
For Layer 7 traffic (normalization is always on), the count increments if the 
three-way handshake fails to be established for either of the following reasons:

  - A RST from the server after the front-end connection is established.
  - The server does not reply to a SYN. The connection times out. 

 

Questions:
- Are you seeing failures without meeting any of the above reasons?
- Are you performing end-to-end SSL?

[dclee]

I'll have to fire up the sniffer and have a look..

There is no end - end SSL.

How do I know if normalization is on or not ? Why would I need normalization ?

Appreciate the help.

Cheers

Dave

[Gilles Dufour]

normalization is on by default on all interface.

You can turn if off with the command "no normalization" on an interface.

Normalization is there to protect your network against illegal traffic patern.

Gilles.