Need more info on ACE 4710 bandwidth/throughput denied

[Andy Johnson]

I am seeing the following on our ACE:

/Admin# sh resource usage
                                                     Allocation
        Resource         Current       Peak        Min        Max       Denied
-------------------------------------------------------------------------------
Context: Admin
  conc-connections            333        517        100    2000000          0
  mgmt-connections             12         28        100     100000          0
  proxy-connections             0         18          0     262143          0
  xlates                        0          0          0      65535          0
  acc-connections               0          0          0        105          0
  bandwidth                 37863   62528533    2500000  187500000    4848517
    throughput              36819   62500000    1250000   62500000    4848517
    mgmt-traffic rate        1044      28533    1250000  125000000          0
  connection rate              10        126        100     120000          0
  ssl-connections rate          0          0          0       7500          0
  mac-miss rate                 0          4          0       2000          0
  inspect-conn rate             0          0          0      40000          0
  http-comp rate                0          0          0  262144000          0
  acl-memory                90040      90040          0   69793680          0
  sticky                      160        191      81920     819200          0
  regexp                      795        795          0    1048576          0
  syslog buffer           4194304    4194304          0    4194304          0
  syslog rate                   2        170          0     100000          0

The bandwidth and throughput denied is very high. The license installed currently is the default .5 Gbps

Resource allocation is set for 0% min and 100% max for bandwidth and throughput.

Admin# show license status

Licensed Feature                            Count
------------------------------------        -----
Compression Performance in Mbps             2000      
Web Optimization Concurrent Conns.          105       
SSL transactions per second                 7500      
Virtualized contexts                        20        
Module bandwidth in Gbps                    0.5

Where can I find more information on what server farm and when this traffic is being denied? Is there any history or graphs that would show this to see if it is actually causing issues with server performance?

Thanks.

[Kanwaljeet Singh]

Hi,

If you have only one context and you see denies, then it means that you are hitting the limit. Unfortunately, you cannot see if a traffic to specific serverfarm is very high or if it is having an impact on specific serverfarm. This output is context wide. Of course, there will be an impact to the whole context since traffic would be dropped. If the denied counter is continuously increasing, i would suggest contacting local account team to upgrade the license on this device. Are you using any SNMP polling or have ANM. There may be certain parameters which could help but again, if these counters are increasing frequently, it is best to upgrade the license or ensure that only traffic that needs LB is hitting the ACE.

Regards,

Kanwal

Note: Please mark answers if they are helpful.