Performance Issue

[s_shekeil]

I have a performance issue with ACE 20, urls is very slow sometimes, and not from all computers, some computers are facing this problem not all of them,

here is my config,

ACE20-02/Admin# show running-config

Generating configuration....

hostname ACE20-02

boot system image:c6ace-t1k9-mz.A2_1_6a.bin

resource-class GOLD

  limit-resource all minimum 0.00 maximum unlimited

  limit-resource sticky minimum 50.00 maximum equal-to-min

access-list any line 8 extended permit icmp any any

access-list any line 16 extended permit ip any any

class-map type management match-any REMOTE-ACCESS

  description REMOTE ACCESS TRAFFIC MATCH

  2 match protocol telnet any

  3 match protocol ssh any

  4 match protocol icmp any

policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY

  class REMOTE-ACCESS

    permit

interface vlan 306

  description *** SERVERS SIDE ***

  ip address 10.30.1.198 255.255.255.0

  access-group input any

  service-policy input REMOTE_MGMT_ALLOW_POLICY

  no shutdown

interface vlan 330

  ip address 10.30.30.198 255.255.255.0

  access-group input any

  service-policy input REMOTE_MGMT_ALLOW_POLICY

  no shutdown

ft interface vlan 443

  ip address 192.168.12.2 255.255.255.0

  peer ip address 192.168.12.1 255.255.255.0

  no shutdown

ft peer 1

  heartbeat interval 300

  heartbeat count 20

  ft-interface vlan 443

ip route 0.0.0.0 0.0.0.0 10.30.1.1

context SIS

  description ##CONTEXT FOR SIS APPLICATION##

  allocate-interface vlan 306

  member GOLD

ft group 1

  peer 1

  priority 200

  associate-context SIS

  inservice

username admin password 5 $1$Z3k/MC5/$41.ndPnnPDSp5UkI8.fRo.  role Admin domain default-domain

username www password 5 *  role Admin domain default-domain

Regards,

Salah

[litrenta]

This looks like config just for admin context, is your performance problem related to loadbalancing in the SIS context (to a vip) ? If so I would like to see the config from that context.

[s_shekeil]

here is the SIS Context configuration

Generating configuration....

access-list any line 8 extended permit icmp any any

access-list any line 16 extended permit ip any any

access-list test line 8 extended permit ip any any

probe http HTTP_PROBE

  interval 20

  passdetect interval 60

  expect status 200 300

rserver host Server01

  ip address 10.30.1.73

rserver host Server02

  ip address 10.30.1.76

  inservice

serverfarm host SIS

  rserver Server01

    weight 5

    inservice

  rserver Server02

    weight 5

    inservice

sticky ip-netmask 255.255.255.255 address source STICKY-IP

  serverfarm SIS

class-map match-any L4VIPCLASS

  2 match virtual-address 10.30.1.172 tcp eq 8000

  3 match virtual-address 10.30.1.172 tcp eq www

  4 match virtual-address 10.30.1.172 tcp eq 8085

  5 match virtual-address 10.30.1.172 tcp eq 8020

  6 match virtual-address 10.30.1.172 tcp eq 8050

  7 match virtual-address 10.30.1.172 tcp eq 8065

  8 match virtual-address 10.30.1.172 tcp eq 8035

class-map type management match-any REMOTE-ACCESS

  description REMOTE ACCESS TRAFFIC MATCH

  2 match protocol telnet any

  3 match protocol ssh any

  4 match protocol icmp any

class-map type http loadbalance match-any SIS_VIP_URL

  2 match http url .*/hcs9fgtpwd.*

  3 match http url .*/hcs9prd.*

  4 match http url .*/hcs9gst_u.*

  5 match http url .*/hcs9gst_p.*

  6 match http url .*/hcs9gst_t.*

  7 match http url .*/hcs9gst_v.*

policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY

  class REMOTE-ACCESS

    permit

policy-map type loadbalance first-match POLICYMAP_L7

  class SIS_VIP_URL

    sticky-serverfarm STICKY-IP

policy-map multi-match VIPs

  class L4VIPCLASS

    loadbalance vip inservice

    loadbalance policy POLICYMAP_L7

    loadbalance vip icmp-reply active

    loadbalance vip advertise active

    nat dynamic 1 vlan 306

interface vlan 306

  ip address 10.30.1.203 255.255.255.0

  access-group input any

  nat-pool 1 10.30.1.172 10.30.1.172 netmask 255.255.255.255 pat

  service-policy input REMOTE_MGMT_ALLOW_POLICY

  service-policy input VIPs

  no shutdown

ip route 0.0.0.0 0.0.0.0 10.30.1.1