01-19-2011 08:59 AM
Hello all,
I have a web application load balanced between 2 ACE modules. The model of the ACE is ACE20-MOD-K9 and the IOS version c6ace-t1k9-mz.A2_3_2a.bin
The configuration of the application is attached.
The problem I am facing is with Internet Explorer 7.0 and not with Firefox. Everything starts when I click nervously application's links, at the end the browser shows "ERROR_INTERNET_CONNECTION_RESET " error. You have available the httpwatch if someone wants to see the pic.
If I refresh the browser, the application starts working fine (until I repeat the process, very fast clicking) but I get a pop up window saying "DSM Terminator"
If I check ACE connection to this serverfarm I see that I have no connection to it:
BEFORE:
mchl1se1v_ACE/ACE-Qual1# sh conn serverfarm SWD_MCH_U3Q
conn-id np dir proto vlan source destination state
----------+--+---+-----+----+---------------------+---------------------+------+
2837577 1 in TCP 1353 10.160.8.73:2091 10.143.253.8:80 ESTAB
2841850 1 out TCP 1353 10.128.40.159:9197 10.128.58.254:1227 ESTAB
4030858 2 in TCP 1353 10.148.194.73:1623 10.143.253.8:80 ESTAB
4031143 2 out TCP 1353 10.128.40.157:9197 10.128.58.236:1447 ESTAB
4032359 2 in TCP 1353 10.160.8.73:2092 10.143.253.8:80 ESTAB
4031908 2 out TCP 1353 10.128.40.159:9197 10.128.58.254:1230 ESTAB
AFTER (with the error)
mchl1se1v_ACE/ACE-Qual1# sh conn serverfarm SWD_MCH_U3Q
conn-id np dir proto vlan source destination state
----------+--+---+-----+----+---------------------+---------------------+------+
4030858 2 in TCP 1353 10.148.194.73:1623 10.143.253.8:80 ESTAB
4031143 2 out TCP 1353 10.128.40.157:9197 10.128.58.236:1447 ESTAB
4032359 2 in TCP 1353 10.160.8.73:2092 10.143.253.8:80 ESTAB
4031908 2 out TCP 1353 10.128.40.159:9197 10.128.58.254:1230 ESTAB
If I bypass the ACE by accessing the real servers using server name, the error does not appear. Therefore, in my opinion, the problem is related to the load balancing.
Anybody has an idea about the problem? I would appreciate any feedback.
thanks in advance
Ion
01-25-2011 04:22 PM
Hello Ion-
A wireshark capture on your client and server simultaneously would be helpful in this situation - but given what you have provided, I would guess that there is something non-RFC compliant that your client sends to ACE which makes it send a reset. Something in the config caught my eye - you have a parameter map named "parameter-map type http SWD_MCH_U3Q_HTTP" which is not needed. ACE is much pickier about HTTP request at a L5/L7 level when it is dealing with proxying the connection. Try removing the parameter map, then capture traces an post them up if you still see the issue.
Regards,
Chris Higgins
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide