Re: CSM GSLB probes

pkrohn · ‎05-17-2006

When configuring GSLB on the CSM a probe on the GSLB real is needed. When using the 'predictor leastload' this probe has to be a 'kal-ap-udp' probe, even if the GSLB real is referring to a vserver configurred locally on the CSM.

I am unable to make it work. Below my configuration and debug output from which it is clear, that no load is reported. Can anyone help me out, or point me to relevant documentation (have been unable to find full configuration examples) to make GSLB probing work:

Regards Peter

2w2d: CSM8: SLB-GSLB[aCR] Request from 1.1.1.3 for telnet.tdk.dk, type is T_A

2w2d: CSM8: SLB-GSLB[aCR] Located:telnet.tdk.dk in HdTbl.

2w2d: CSM8: SLB-GSLB[aCR] Matched rule:8:DNSPOLICY

2w2d: CSM8: SLB-GSLB[aCR] No Agroup members reporting load!

2w2d: CSM8: SLB-GSLB[aCR] No members reporting load Agroup:GSLBTELNET

2w2d: CSM8: SLB-GSLB[aCR] Request from 1.1.1.3 for telnet.tdk.dk, type is T_A

2w2d: CSM8: SLB-GSLB[aCR] Located:telnet.tdk.dk in HdTbl.

2w2d: CSM8: SLB-GSLB[aCR] Matched rule:8:DNSPOLICY

2w2d: CSM8: SLB-GSLB[aCR] No Agroup members reporting load!

2w2d: CSM8: SLB-GSLB[aCR] No members reporting load Agroup:GSLBTELNET

module ContentSwitchingModule 8

!

vlan 201 client

ip address 172.22.201.10 255.255.255.0 alt 172.22.201.11 255.255.255.0

gateway 172.22.201.1

!

vlan 2010 server

ip address 172.22.201.10 255.255.255.0 alt 172.22.201.11 255.255.255.0

!

probe TELNET tcp

interval 10

port 23

!

probe TEST kal-ap-udp

address 172.22.201.10 routed

!

map DNSMAP dns

match protocol dns domain telnet.tdk.dk

!

serverfarm GSLBTELNET dns-vip

predictor leastload

real 172.22.201.222

health probe TEST

inservice

!

serverfarm TELNET-ROUTERS

nat server

no nat client

predictor leastconns

real 172.22.201.200

inservice

probe TELNET

!

policy DNSPOLICY dns

dns map DNSMAP

serverfarm primary GSLBTELNET ttl 5 responses 1

!

vserver DNSSERVER dns

dns-policy DNSPOLICY

inservice

!

vserver TELNETVIP

virtual 172.22.201.222 tcp telnet

serverfarm TELNET-ROUTERS

inservice

Gilles Dufour · ‎05-17-2006

vlan 30 server

ip address 192.168.30.104 255.255.255.0 alt 192.168.30.105 255.255.255.0

probe KAL1 kal-ap-udp

address 192.168.30.104 routed

serverfarm DNS1 dns-vip

predictor leastload

real 192.168.30.5

health probe KAL1

inservice

policy MYDNS dns

dns map MYDNS

client-group 22

serverfarm primary DNS1 ttl 20 responses 1

vserver MYDNS dns

dns-policy MYDNS

dns-policy BACKDNS

inservice

gdufour-cat6k-2#sho mod csm 3 server name dns1 det

DNS1, type = DNS-VIP, predictor = LeastLoad

nat = None

hit count = 0, reals = 1

Real servers:

192.168.30.5, weight = 8, OPERATIONAL, hit count = 0, load = 2

gdufour-cat6k-2#sho mod csm 3 gslb probe

probe type successes failures pkts sent pkts rcvd

--------------------------------------------------------

icmp 13498 13497 26995 13498

dns 0 0 0 0

kal-ap-udp 11 0 11 11

http 0 0 0 0

So, this is the same config and it works for me.

I'm using version 4.2.3a.

What is your version ?

Is this a lab environment or a production network ?

Gilles.

pkrohn · ‎05-17-2006

Hi Gilles -

Im running 4.2(3). At present the environment is non-prod. I'm testing the planned configuration and setup, and ran in to this problem.

Mod MAC addresses Hw Fw Sw Status

--- ---------------------------------- ------ ------------ ------------ -------

2 0016.c75a.f7c4 to 0016.c75a.f7f3 2.3 12.2(14r)S5 12.2(18)SXF4 Ok

3 0016.c8c4.bca4 to 0016.c8c4.bcd3 2.3 12.2(14r)S5 12.2(18)SXF4 Ok

5 0014.a981.da60 to 0014.a981.da63 4.5 8.1(3) 12.2(18)SXF4 Ok

8 0013.c39f.8428 to 0013.c39f.842f 1.9 4.2(3) Ok

9 0016.9daa.7a88 to 0016.9daa.7a8f 4.0 7.2(1) 3.1(1) Ok

Rgds Peter

pkrohn · ‎05-17-2006

Just tried same command as you, and actually a load is being displayed at the bottom, so it might not be the probing that is the problem.

Still when trying to resolve telnet.tdk.dk I get:

2w2d: CSM8: SLB-GSLB[aCR] Request from 1.1.1.3 for telnet.tdk.dk, type is T_A

2w2d: CSM8: SLB-GSLB[aCR] Located:telnet.tdk.dk in HdTbl.

2w2d: CSM8: SLB-GSLB[aCR] Matched rule:8:DNSPOLICY

2w2d: CSM8: SLB-GSLB[aCR] No Agroup members reporting load!

2w2d: CSM8: SLB-GSLB[aCR] No members reporting load Agroup:GSLBTELNET

From the debug it seems that probing does return something (load 2):

2w2d: CSM8: SLB-GSLB[aCR] Calculated Freq: 45 Total KALs: 1 Wait-time 45000ms

2w2d: CSM8: SLB-GSLB[aCR] KAL-AP (seq# 59830)=> Host 172.22.201.10

2w2d: CSM8: SLB-GSLB[aCR] Respond to [172.22.201.10] for [172.22.201.222] with load=2

2w2d: CSM8: SLB-GSLB[aCR] NO Encryption set for ac16c90a

2w2d: CSM8: SLB-GSLB[aCR] Response from CAPP-ID 0x199 [src: 172.22.201.10]

2w2d: CSM8: SLB-GSLB[aCR] Received from [172.22.201.10] sequence#: 59830

2w2d: CSM8: SLB-GSLB[aCR] Checking SN 59830 vs. 59830

2w2d: CSM8: SLB-GSLB[aCR] ParsePkt type is 10

2w2d: CSM8: SLB-GSLB[aCR] pEntry->kalSpec.kalAp.uLoad is 2

2w2d: CSM8: SLB-GSLB[aCR] uLoad is 2

2w2d: CSM8: SLB-GSLB[aCR] (*itKalAp)->kalStat.eKalState is 1

2w2d: CSM8: SLB-GSLB[aCR] ParsePkt type is 255h

MH2142#sho mod csm 8 server name gslbtelnet det

GSLBTELNET, type = DNS-VIP, predictor = LeastLoad

nat = None

hit count = 0, reals = 1

Real servers:

172.22.201.222, weight = 8, OPERATIONAL, hit count = 8, load = 2

Gilles Dufour · ‎05-17-2006

009580: May 17 15:02:04: CSM3: SLB-GSLB[aCR] Request from 192.168.30.27 for www.gdufour.net, type is T_A

009581: May 17 15:02:04: CSM3: SLB-GSLB[aCR] Located:www.gdufour.net in HdTbl.

009582: May 17 15:02:04: CSM3: SLB-GSLB[aCR] Matched rule:34:MYDNS

009583: May 17 15:02:04: CSM3: SLB-GSLB[aCR] clause:0 LL using addr:192.168.30.5 LID:14 GID:15 from AG:13

could you get a 'sho mod csm x tech gslb' and post it here.

Could you reload the CSM and let me know if the problem comes back.

Also, you really want to move away from 4.2.3 and go to 4.2.3a.

4.2.3 was removed from CCO because causing too much issues.

Gilles.

pkrohn · ‎05-17-2006

Hi Gilles -

Attached the sh tech output (taken before reset of module)

I'll shall upgrade first thing tomorrrow.

rgds Peter

After reset of CSM module the problem is gone - seems to be a sw rather than configuration issue - agree?

2w2d: CSM8: SLB-GSLB[aCR] Response from CAPP-ID 0xa4c0 [src: 172.22.201.10]

2w2d: CSM8: SLB-GSLB[aCR] Request from 1.1.1.3 for telnet.tdk.dk, type is T_A

2w2d: CSM8: SLB-GSLB[aCR] Located:telnet.tdk.dk in HdTbl.

2w2d: CSM8: SLB-GSLB[aCR] Matched rule:17:DNSPOLICY

2w2d: CSM8: SLB-GSLB[aCR] .....Ordering by weighted load.....

2w2d: CSM8: SLB-GSLB[aCR] membersInUseByWtLoad[0]->load:2

2w2d: CSM8: SLB-GSLB[aCR] clause:0 LL using addr:172.22.201.222 LID:11 GID:12 from AG:10

2w2d: CSM8: SLB-GSLB[aCR] Calculated Freq: 45 Total KALs: 1 Wait-time 45000ms

2w2d: CSM8: SLB-GSLB[aCR] KAL-AP (seq# 57647)=> Host 172.22.201.10

2w2d: CSM8: SLB-GSLB[aCR] Respond to [172.22.201.10] for [172.22.201.222] with load=2