Sticky resource issue in Cisco ACE 4710

[Saroj Pariyar]

All,

Sticky resource usage is always at peak in one of my context in Cisco ACE 4710.Users are reporting slowness/packets drop issue frequently for the rules which has source-ip based sticky.Can high utilization of Sticky resource cause this issue ?? Also I did a lot of cisco docs reading but i didn't find what kind of resource sticky use. ?? can someone shade some lights like by sticky resource what kind of resource it is ?? is it like CPU,memory,concurrent connections,ssl connections etc etc ??

sh resource usage resource sticky

                                                     Allocation

        Resource         Current       Peak        Min        Max       Denied

-------------------------------------------------------------------------------

Context: PROD_Apps

  sticky                    40960      40960      40960      40960          0

Thanks,

[sesoerensen]

Hi Saroj,

Would it be possible for you to share the sticky configuration of the context?
What version of code is used on the ACE?

From the looks of it, the ACE uses Ll of the available sticky resources, but is not dropping flows due to sticky at least.

Reserving sticky resources to a specific context is done using resource class maps, in the Admin context.

Cheers,

Søren

[Saroj Pariyar]

HI Sesoerensen,

I am using code version A4(2.1a).

Here's the config: But could you please let me know what kind of resources the sticky uses.By resource does it mean CPU,memory etc etc .

rserver host

  ip address

  inservice

rserver host

  ip address

  inservice

rserver redirect REDIRECT-TO-HTTPS_app_googleTV_prod

  webhost-redirection 301

  inservice

serverfarm host app_googleTV_prod

  probe TCP_16850

  rserver 16850

    inservice

  rserver 16850

    inservice

ssl-proxy service CLIENT_SSL_GOOGLETV

  ssl advanced-options HTTPS_PARAM_MAP

ssl-proxy service Server_SSL_GOOGLETV

  key GOOGLETV_PROD_KEY.PEM

  cert GOOGLETV_PROD_CERT.PEM

  chaingroup GOOGLETV_PROD_IntermedCA

  ssl advanced-options HTTPS_PARAM_MAP

sticky ip-netmask 255.255.255.255 address source app_googleTV_prod_HTTPS_STICKY

  timeout 720

  replicate sticky

  serverfarm app_googleTV_prod

policy-map type loadbalance first-match app_googleTV_prod_HTTPS_policy

  class class-default

    sticky-serverfarm app_googleTV_prod_HTTPS_STICKY

    ssl-proxy client CLIENT_SSL_GOOGLETV

policy-map type loadbalance first-match app_googleTV_prod_HTTP_policy

  class class-default

    serverfarm REDIRECT-SERVERFARM_app_googleTV_prod

class-map match-all app_googleTV_prod_HTTPS_class

  2 match virtual-address  tcp eq https

class-map match-all app_googleTV_prod_HTTP_class

  2 match virtual-address  tcp eq www

policy-map multi-match POLICY-LB-VLAN488

  class app_googleTV_prod_HTTPS_class

    loadbalance vip inservice

    loadbalance policy app_googleTV_prod_HTTPS_policy

    loadbalance vip icmp-reply active

    nat dynamic 1 vlan 488

    ssl-proxy server Server_SSL_GOOGLETV

  class app_googleTV_prod_HTTP_class

    loadbalance vip inservice

    loadbalance policy app_googleTV_prod_HTTP_policy

    loadbalance vip icmp-reply active

    nat dynamic 1 vlan 488

Thanks