Hi
I have a policy-map to insert an Ip address into the http header. I am also binding this to a sticky group using src ip address(See policy ICHAIN1-INSERT).
When I initiate a connection within the policy, although the connection is successful, when I try to view the connection stats (show mod csm 3 conns) my client is not listed in the connection table.
When I remove the "sticky-group 10" command then show the connection table, I see my client listed.
Is this normal behaviour?
Also when I issue the show sticky command the real ip's are garbled as shown:-
10 ip 143.52.208.19 D^OI^TD^Z^P!KP 65282
10 ip 10.6.1.14 P2^hD^Z^D^B*^X 79985
Config;
module ContentSwitchingModule 2
ft group 1 vlan 107
priority 20 alt 10
preempt
!
vlan 105 client
ip address 10.14.105.6 255.255.255.0
gateway 10.14.105.1
!
natpool CSM-PR1-USERS 10.14.105.10 10.14.105.18 netmask 255.255.255.0
!
probe ICHAIN-HTTP1 tcp
interval 10
failed 60
port 80
!
probe ZEN-APPS1-PRB tcp
interval 10
failed 60
port 524
!
probe ZEN-LDAP1-PRB tcp
interval 10
failed 60
port 636
!
probe ZEN-SERVER1-PRB tcp
interval 10
failed 60
port 524
!
map ICHAIN1-X-FOR header
insert protocol http header X-Forwarded-For header-value %is
!
real BONG
address 143.52.2.120
inservice
real HUORN
address 10.11.33.44
inservice
real ICHAIN101
address 10.14.72.21
inservice
real ICHAIN202
address 10.14.72.70
inservice
real JOSHUA
address 143.52.2.121
inservice
real KARAKA
address 143.52.2.42
inservice
real KARO
address 10.11.33.30
inservice
real PATE
address 10.11.33.32
inservice
!
serverfarm ICHAIN-BB1
nat server
nat client CSM-PR1-USERS
predictor leastconns
real name ICHAIN1
inservice
real name ICHAIN2
inservice
probe ICHAIN-HTTP1
!
serverfarm ZEN-APPS1
nat server
nat client CSM-PR1-USERS
predictor leastconns
real name BONG
inservice
real name JOSHUA
inservice
real name KARO
inservice
real name PATE
inservice
probe ZEN-APPS1-PRB
!
serverfarm ZEN-LDAP1
nat server
nat client CSM-PR1-USERS
predictor leastconns
real name HUORN
inservice
real name KARAKA
inservice
probe ZEN-LDAP1-PRB
!
serverfarm ZEN-SERVER1
nat server
nat client CSM-PR1-USERS
predictor leastconns
real name HUORN
inservice
real name KARAKA
inservice
probe ZEN-SERVER1-PRB
!
sticky 10 netmask 255.255.255.255 timeout 2880
!
policy ICHAIN1-INSERT
header-map ICHAIN1-X-FOR
sticky-group 10
serverfarm ICHAIN-BB1
!
vserver VIP-ICHAIN1
virtual 10.14.105.20 tcp www
serverfarm ICHAIN-BB1
sticky 2880 group 10
replicate csrp sticky
replicate csrp connection
persistent rebalance
slb-policy ICHAIN1-INSERT
inservice
!
vserver VIP-ICHAIN1-SSL
virtual 10.14.105.20 tcp https
serverfarm ICHAIN-BB1
sticky 1440 group 10
replicate csrp sticky
replicate csrp connection
persistent rebalance
inservice
!
vserver ZEN-APPS1-VIP
virtual 10.14.105.21 tcp 0
serverfarm ZEN-APPS1
replicate csrp connection
persistent rebalance
inservice
!
vserver ZEN-LDAP1-VIP
virtual 10.14.105.22 tcp 0
serverfarm ZEN-LDAP1
replicate csrp connection
persistent rebalance
inservice
!
vserver ZEN-SERVER1-VIP
virtual 10.14.105.23 tcp 0
serverfarm ZEN-SERVER1
replicate csrp connection
persistent rebalance
inservice
Many Thanks
Scott
