cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
712
Views
0
Helpful
4
Replies

round robin

davidm101
Level 1
Level 1

round robin is not working as expected - CSS11800 v6.1.

service TEST-WB1

protocol tcp

ip address 10.10.10.235

domain test.com

no cache-bypass

keepalive type tcp

keepalive port 443

active

service TEST-WB2

protocol tcp

ip address 10.10.10.236

domain test.com

no cache-bypass

keepalive type tcp

keepalive port 443

active

owner TEST

content 10.10.10.237

vip address 10.10.10.237

add service TEST-WB1

add service TEST-WB2

port 443

protocol tcp

primarySorryServer TEST-WB1

advanced-balance sticky-srcip

sticky-inact-timeout 30

active

output of "show summary"

10.10.10.237 Active TEST-WB1 91

TEST-WB2 2457

Any suggestion? Thanks.

4 Replies 4

jfoerster
Level 4
Level 4

HI,

Why have you configured test-wb1 as sorry service if it is used as normal service. Give it a try removing the sorry service.

If this does not help, test the behaviour by removing the stickiness.

Kind Regards,

Joerg

Both server are up running. If I kept on doing "show flows 0.0.0.0 x.x.x.x", most likely I would see few flows to the server-2 (no connection to server-1).

It does not look anything changed after I removed the primarysorryserver from the content rule.

the web server has timeout value set to 30-minute. If I removed the src sticky, would the next get request to forward to a different server?

Thanks.

you can't expect with sticky source ip to have equal loadbalancing.

There some mego proxy in the world, hiding many users behind a few ip addresses.

Do a 'sho sticky-table l3" and you should see you have much more hits on some entries than others.

As recommended previously, give it a try without stickyness if you want to verify that roundrobin works.

Gilles.

pknoops
Level 3
Level 3

A couple of things.

1. Make sure one server is not failing atleast from the CSS perspective by doing a "show service summary" and check the state transitions.

2. Could you have users coming in from a Mega proxy whereby they all have the same source ip address (like an AOL users) ?

I would recommend checking that first

Regards

Pete..

Review Cisco Networking for a $25 gift card