Stickiness Troubleshooting and stickyDebug

[RHLloydBGF]

Does anyone know how to use stickyDebug?

We have set up an Internet facing Web Hosting facility with two Apache servers behind a CSS11051. We have configured several of the available types of stickiness and the server people keep telling me that it is not working and that sessions are drawing pages from both servers even when sticky is configured. Any advice on how to see what the CSS is doing with the sessions will be much appreciated. Thanks.

[eric369]

No one can help you if you do not post your configuration here.

[pknoops]

As the previous person said, it would help to have the config. Quite honestly you probably have a persistence issue thus you should add "no persistent" in the content rule and add "persistance reset remap" in the global section of the config. Give that a go

Regards

Pete Knoops

Cisco Systems

[RHLloydBGF]

Here is the relevant part of the config.

We have also tried

sticky-srcip on it's own

cookies on ports 80 and 443

arrowpoint-cookies on ports 80 and 443

Cheers

!************************** SERVICE **************************

service s1-dc1_sunfire_01

ip address 172.18.6.11

keepalive type http

keepalive uri "/index.html"

string s1dc1sunfire01

active

service s1-dc1_sunfire_01test

ip address 172.18.6.13

keepalive type http

keepalive uri "/index.html"

active

service s1-dc1_sunfire_01uat

ip address 172.18.6.12

keepalive type http

keepalive uri "/index.html"

active

service s2-dca_sunfire_01

ip address 172.18.6.10

keepalive type http

keepalive uri "/index.html"

string s2dcasunfire01

active

!*************************** OWNER ***************************

owner x_1

content Green_Web_Hosting_01

balance aca

add service s1-dc1_sunfire_01

add service s2-dca_sunfire_01

vip address 172.18.4.72

sticky-serverdown-failover reject

protocol tcp

port 443

url "/*"

advanced-balance ssl

application ssl

active

content Green_Web_Hosting_01b

protocol tcp

balance aca

add service s1-dc1_sunfire_01

add service s2-dca_sunfire_01

vip address 172.18.4.72

sticky-serverdown-failover reject

advanced-balance sticky-srcip

port 80

active

[pknoops]

Try the persistent stuff I mentioned in the previous post

[RHLloydBGF]

We discovered that ssl encrypts cookies even if generated by the CSS - should have guessed it perhaps. So cookie methods would never work.

ssl session id did not work because IE renegotiates ssl session every two minutes - see http://support.microsoft.com/default.aspx?scid=kb;EN-US;265369

srcip did not work UNTIL we did a reboot and then it worked! Seems like changing content rules on the fly may NOT be foolproof.