ERROR_INTERNET_CONNECTION_RESET on ACE

ion.zabalza · ‎01-19-2011

Hello all,

I have a web application load balanced between 2 ACE modules. The model of the ACE is ACE20-MOD-K9 and the IOS version c6ace-t1k9-mz.A2_3_2a.bin

The configuration of the application is attached.

The problem I am facing is with Internet Explorer 7.0 and not with Firefox. Everything starts when I click nervously application's links, at the end the browser shows "ERROR_INTERNET_CONNECTION_RESET " error. You have available the httpwatch if someone wants to see the pic.

If I refresh the browser, the application starts working fine (until I repeat the process, very fast clicking) but I get a pop up window saying "DSM Terminator"

If I check ACE connection to this serverfarm I see that I have no connection to it:

BEFORE:

mchl1se1v_ACE/ACE-Qual1# sh conn serverfarm SWD_MCH_U3Q

conn-id np dir proto vlan source destination state

----------+--+---+-----+----+---------------------+---------------------+------+

2837577 1 in TCP 1353 10.160.8.73:2091 10.143.253.8:80 ESTAB

2841850 1 out TCP 1353 10.128.40.159:9197 10.128.58.254:1227 ESTAB

4030858 2 in TCP 1353 10.148.194.73:1623 10.143.253.8:80 ESTAB

4031143 2 out TCP 1353 10.128.40.157:9197 10.128.58.236:1447 ESTAB

4032359 2 in TCP 1353 10.160.8.73:2092 10.143.253.8:80 ESTAB

4031908 2 out TCP 1353 10.128.40.159:9197 10.128.58.254:1230 ESTAB

AFTER (with the error)

mchl1se1v_ACE/ACE-Qual1# sh conn serverfarm SWD_MCH_U3Q

conn-id np dir proto vlan source destination state

----------+--+---+-----+----+---------------------+---------------------+------+

4030858 2 in TCP 1353 10.148.194.73:1623 10.143.253.8:80 ESTAB

4031143 2 out TCP 1353 10.128.40.157:9197 10.128.58.236:1447 ESTAB

4032359 2 in TCP 1353 10.160.8.73:2092 10.143.253.8:80 ESTAB

4031908 2 out TCP 1353 10.128.40.159:9197 10.128.58.254:1230 ESTAB

If I bypass the ACE by accessing the real servers using server name, the error does not appear. Therefore, in my opinion, the problem is related to the load balancing.

Anybody has an idea about the problem? I would appreciate any feedback.

thanks in advance

Ion

chrhiggi · ‎01-25-2011

Hello Ion-

A wireshark capture on your client and server simultaneously would be helpful in this situation - but given what you have provided, I would guess that there is something non-RFC compliant that your client sends to ACE which makes it send a reset. Something in the config caught my eye - you have a parameter map named "parameter-map type http SWD_MCH_U3Q_HTTP" which is not needed. ACE is much pickier about HTTP request at a L5/L7 level when it is dealing with proxying the connection. Try removing the parameter map, then capture traces an post them up if you still see the issue.

Regards,

Chris Higgins