CSS 11503 sticky database

[dpastor]

Hello,

Am I able to clear the sticky database/cache on the CSS 11503?  I have done it on the ACE, but I cannot find the command on the CSS.

Thanks,

Dave

[dpastor]

Sorry, I found it in an old thread from Gilles.

You have to be in llama(debug) mode and use the "sticky-purge" command.

Thanks Gilles,

Dave

[sachinga.hcl]

Hi,

This process is completely automated, however, there is a sticky purge command in debug mode that can be used to force this behavior. This is sample command output:

css1# llama
css1(debug)# sticky-purge all-sticky
ALL Sticky Purge on Slot 5, subslot 1:
Total number of entries purged is 0.
css1(debug)#

The CSS has a 32K sticky table that contains entries for the sticky source-ip command and sticky Secure Socket Layer (SSL). This amount increased to 128K entries if the Service Connection Manager (SCM) has 288Mb of memory on board.

Sticky cookies are not maintained in the sticky table on the CSS. After the cookie is assigned to a client, the client stores the cookie locally and provides it to the CSS when in session. The CSS does not need to store the cookie since the client always provides it.

Sticky Table Timings
These are three reasons for an entry to be removed from the sticky table:

1.By default, using a First In First Out (FIFO) method. Entries remain in the table until the 32K or 128Kbuffer is full. At that time, any new entries cause the CSS to remove an entry based on FIFO.

2.The default behavior changes if the sticky-inact-timeout minutes command is issued. If this command is used, the CSS removes an idle sticky entry according to the number of minutes configured in the content rule. This is an example:

owner arrowpoint

             content L5sticky
                 vip address 192.1.1.1
                 add service test1
                 add service test2
                 protocol tcp
                 port 443
                 url "/*"
                 advanced-balance ssl
                 application ssl
               sticky-inact-timeout 9

!--- The entry is removed after nine minutes.

                 active
Note: When the sticky-inact-timeout command is issued, the CSS has filled the 32K or 128K buffer, and no entries are set to timeout, the CSS rejects the next sticky request.

3.When a content rule is suspended and reactivated, the sticky table entries applied to that rule are removed.

To view the sticky table entries, issue this command:

CSS# show sticky-table all-sticky                                          
ALL Sticky List on Slot 5, subslot 1:

Entries for page 1.

Entry   Hash    Rule Rule  Srv  Srv      Time(Sec)     Hit Col  Elem Inact
Number  Value   Indx State Indx State    Elapsed       Cnt Cnt  Type Cfg(Min)
------------------------------------------------------------------------------

Total number of entries found is 0.

CSS#

HTH

Sachin Garg

[dpastor]

Sachin,

Thank you for all of the information, it helps a lot.

What is the best way to determine if I have the 32k or 128k sticky table?

Thanks,

Dave

[sachinga.hcl]

Hi Dpastor,

The CSS has a 32K sticky table that contains entries for the sticky source-ip command and sticky Secure Socket Layer (SSL). This amount increased to 128K entries if the Service Connection Manager (SCM) has 288Mb of memory on board.

The total number of entries in the CSS sticky table depends on the size of the CPU memory.

The CSS 11501 supports a 128K sticky table (288 MB of CPU memory).

The CSS 11503 and 11506 supports either a 128K or 32K sticky table, depending on whether the System Control module (SCM) has 288 MB or 144 MB of memory. With 288 MB of memory, the CSS supports a 128K sticky table. With 144 MB of memory, the CSS supports a 32K sticky table.

you will find the CSS data sheet at

http://www.cisco.com/en/US/prod/collateral/contnetw/ps5719/ps792/product_data_sheet0900aecd800f851e.html

Kindly rate.

HTH

Sachin Garg

Message was edited by: sachinga.hcl