CSS11500 connection counts

[shday]

Why do my connection not clear when my service goes to a down state.  The only way I can get the connections to clear is by bouncing my content rule.  CSS11503 version 08.20.4.05s - SSL all the way to the server  --- I also have flow permanent port3 443 configured, but I don't understand why the other two servers go to zero while server01 never goes to zero.  If I remove the flow permanent port3 all the counters go to zero, but I would think if the servers goes down then the connections should go to zero regardless of the flow permanent port configuration.

For example:

Name:          Hits:      Wgt:  State:   Ld: KAlive:   Conn: DNS:   SlwStrt:

-----          -----      ----- ------   --- -------   ----- ----   --------

server01

                144,389   S-1   Down     255 TCP-443   49     0      Out of SS

server02

                182,495   S-1   Down     255 TCP-443   0     0      Out of SS

server03

                190,409   S-1   Down     255 TCP-443   0     0      Out of SS

Location Cookie Services:

Name:            Hits:         State:   Ld: KAlive:   Conn:

-----            -----         ------   --- -------   -----

content rule01

    vip address xxx.xxx.xxx.xxx

    add service server01

    add service server02

    redundant-index 414

    add service server03

    balance leastconn

    port 443

    protocol tcp

    leastconn-slow-start 25

    active

service server01

  ip address x.x.x.x

  protocol tcp

  keepalive type tcp

  keepalive port 443

  keepalive frequency 120

  keepalive retryperiod 15

  redundant-index 609

  active

service server02

  ip address x.x.x.x

  protocol tcp

  keepalive type tcp

  keepalive port 443

  keepalive frequency 120

  keepalive retryperiod 15

  redundant-index 609

  active

service server03

  ip address x.x.x.x

  protocol tcp

  keepalive type tcp

  keepalive port 443

  keepalive frequency 120

  keepalive retryperiod 15

  redundant-index 609

  active

[Andrew Nam]

If you disable flow permanent, then do you still see the same failure?

CSS will not be reclaimed by the CSS when the flows are inactive if you configure the flow

permanent.

regards

Andrew

[shday]

Thats what I was thinking, but when I run tests and the test completes, some of the server connections will roll back to zero, but not all of them.

I didn't think the connection count was related to flows since a single flow connection can support multiple connections.  If what your saying is the case how can I get an accurate connections count at a given period of time?

[Andrew Nam]

I could not find any engineering doc explaining in detail of how conn counter from show rule all should reflect in relation to flow permanent cmd applied.

However, the "flow permanent" instructs the CSS to never tear down the flow regardless your service (server) status. The conn counter you have should reflect the last concurrent connection # right before the Down.

I will also leave it here to see if there is any other thought on this.

regards

Andrew