Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
689
Views
0
Helpful
2
Replies

unbalanced load ACE

p.diaz
Level 1
Level 1

‎12-23-2010 12:28 PM - edited ‎03-04-2019 10:53 AM

Hello.

Can somebody tell me why the ace is not balancing the load equally or almost equally through the all 3 servers?

3 servers

^

|

|

ACE

^

|

SW

^

|

|

USERS

The following commands shows that the server SP2 is  having the most of the connections to it.

ACE-DIGENERAL/OCS# sh serverfarm Herramientas_Col
serverfarm     : Herramientas_Col, type: HOST
total rservers : 3
---------------------------------
                                                ----------connections-----------
       real                  weight state        current    total              
   ---+---------------------+------+------------+----------+--------------------
   rserver: SP1
       10.10.24.5:0          8      OPERATIONAL  390         296043280         
   rserver: SP2
       10.10.24.6:0          8      OPERATIONAL  1003        3371471400         
   rserver: SP3
       10.10.24.7:0          8      OPERATIONAL  354         164816790         

ACE-DIGENERAL/OCS# sh conn serverfarm Herramientas_Col

conn-id    np dir proto vlan source                destination           state
----------+--+---+-----+----+---------------------+---------------------+------+
70         1  in  TCP   951  10.10.22.13:3837      10.10.24.3:80         ESTAB
17239      1  out TCP   324  10.10.24.7:80         10.10.22.13:3837      ESTAB
76         1  in  TCP   951  10.83.21.32:1419      10.10.24.3:80         ESTAB
5531       1  out TCP   324  10.10.24.6:80         10.83.21.32:1419      ESTAB
95         1  in  TCP   951  10.20.7.51:1702       10.10.24.3:80         ESTAB
16237      1  out TCP   324  10.10.24.6:80         10.20.7.51:1702       ESTAB
98         1  in  TCP   951  10.80.31.55:3188      10.10.24.3:80         ESTAB
11995      1  out TCP   324  10.10.24.6:80         10.80.31.55:3188      ESTAB
32749      1  in  TCP   951  10.80.21.23:1926      10.10.24.3:80         ESTAB
108        1  out TCP   324  10.10.24.7:80         10.80.21.23:1926      ESTAB
110        1  in  TCP   951  10.25.14.231:1705     10.10.24.3:80         ESTAB
37994      1  out TCP   324  10.10.24.6:80         10.25.14.231:1705     ESTAB
7438       1  in  TCP   951  10.31.102.32:2329     10.10.24.3:80         ESTAB
141        1  out TCP   324  10.10.24.7:80         10.31.102.32:2329     ESTAB
31247      1  in  TCP   951  10.81.36.32:1650      10.10.24.3:80         ESTAB
151        1  out TCP   324  10.10.24.5:80         10.81.36.32:1650      ESTAB
176        1  in  TCP   951  10.20.208.124:2598    10.10.24.3:80         ESTAB
13219      1  out TCP   324  10.10.24.7:80         10.20.208.124:2598    ESTAB
32576      1  in  TCP   951  10.233.9.40:1577      10.10.24.3:80         ESTAB
233        1  out TCP   324  10.10.24.6:80         10.233.9.40:1577      ESTAB
27499      1  in  TCP   951  10.218.16.28:2902     10.10.24.3:80         ESTAB
244        1  out TCP   324  10.10.24.5:80         10.218.16.28:2902     ESTAB
248        1  in  TCP   951  10.85.19.55:1540      10.10.24.3:80         ESTAB
14014      1  out TCP   324  10.10.24.7:80         10.85.19.55:1540      ESTAB
27166      1  in  TCP   951  10.25.22.90:1766      10.10.24.3:80         ESTAB
254        1  out TCP   324  10.10.24.6:80         10.25.22.90:1766      ESTAB
380        1  in  TCP   951  10.23.22.62:1855      10.10.24.3:80         ESTAB
11563      1  out TCP   324  10.10.24.6:80         10.23.22.62:1855      ESTAB
397        1  in  TCP   951  10.212.35.30:1540     10.10.24.3:80         ESTAB
15491      1  out TCP   324  10.10.24.7:80         10.212.35.30:1540     ESTAB
35588      1  in  TCP   951  10.100.30.5:1773      10.10.24.3:80         ESTAB
405        1  out TCP   324  10.10.24.6:80         10.100.30.5:1773      ESTAB
31392      1  in  TCP   951  10.216.27.41:1524     10.10.24.3:80         ESTAB
449        1  out TCP   324  10.10.24.6:80         10.216.27.41:1524     ESTAB
592        1  in  TCP   951  10.25.21.219:1364     10.10.24.3:80         ESTAB
2988       1  out TCP   324  10.10.24.5:80         10.25.21.219:1364     ESTAB
614        1  in  TCP   951  10.25.42.221:1517     10.10.24.3:80         ESTAB
18877      1  out TCP   324  10.10.24.6:80         10.25.42.221:1517     ESTAB
21553      1  in  TCP   951  10.80.39.123:1634     10.10.24.3:80         ESTAB
652        1  out TCP   324  10.10.24.6:80         10.80.39.123:1634     ESTAB
13640      1  in  TCP   951  10.206.2.34:1385      10.10.24.3:80         ESTAB
708        1  out TCP   324  10.10.24.6:80         10.206.2.34:1385      ESTAB
26959      1  in  TCP   951  10.100.30.7:1289      10.10.24.3:80         ESTAB
719        1  out TCP   324  10.10.24.5:80         10.100.30.7:1289      ESTAB
29277      1  in  TCP   951  10.100.202.50:1248    10.10.24.3:80         ESTAB
758        1  out TCP   324  10.10.24.5:80         10.100.202.50:1248    ESTAB
6185       1  in  TCP   951  10.25.27.222:1497     10.10.24.3:80         ESTAB
760        1  out TCP   324  10.10.24.6:80         10.25.27.222:1497     ESTAB
767        1  in  TCP   951  10.97.21.28:1821      10.10.24.3:80         ESTAB
23511      1  out TCP   324  10.10.24.7:80         10.97.21.28:1821      ESTAB
826        1  in  TCP   951  10.31.105.140:3810    10.10.24.3:80         ESTAB
13460      1  out TCP   324  10.10.24.6:80         10.31.105.140:3810    ESTAB
21987      1  in  TCP   951  10.25.31.213:1855     10.10.24.3:80         ESTAB
839        1  out TCP   324  10.10.24.5:80         10.25.31.213:1855     ESTAB
874        1  in  TCP   951  10.88.29.27:1503      10.10.24.3:80         ESTAB
29839      1  out TCP   324  10.10.24.6:80         10.88.29.27:1503      ESTAB
945        1  in  TCP   951  10.27.122.13:1286     10.10.24.3:80         ESTAB
32298      1  out TCP   324  10.10.24.6:80         10.27.122.13:1286     ESTAB
24330      1  in  TCP   951  10.40.21.50:2368      10.10.24.3:80         ESTAB
954        1  out TCP   324  10.10.24.6:80         10.40.21.50:2368      ESTAB
961        1  in  TCP   951  10.80.26.76:1414      10.10.24.3:80         ESTAB
11176      1  out TCP   324  10.10.24.5:80         10.80.26.76:1414      ESTAB
28989      1  in  TCP   951  10.91.22.38:1408      10.10.24.3:80         ESTAB
985        1  out TCP   324  10.10.24.5:80         10.91.22.38:1408      ESTAB
1006       1  in  TCP   951  10.217.4.20:1522      10.10.24.3:80         ESTAB
26946      1  out TCP   324  10.10.24.5:80         10.217.4.20:1522      ESTAB
8360       1  in  TCP   951  10.11.3.28:1679       10.10.24.3:80         ESTAB
1020       1  out TCP   324  10.10.24.6:80         10.11.3.28:1679       ESTAB
9498       1  in  TCP   951  10.25.42.221:1519     10.10.24.3:80         ESTAB
1031       1  out TCP   324  10.10.24.6:80         10.25.42.221:1519     ESTAB
18510      1  in  TCP   951  10.165.55.51:1232     10.10.24.3:80         ESTAB
1072       1  out TCP   324  10.10.24.7:80         10.165.55.51:1232     ESTAB
5583       1  in  TCP   951  10.25.14.12:2086      10.10.24.3:80         ESTAB
1142       1  out TCP   324  10.10.24.6:80         10.25.14.12:2086      ESTAB
39713      1  in  TCP   951  10.25.36.58:1663      10.10.24.3:80         ESTAB
1144       1  out TCP   324  10.10.24.7:80         10.25.36.58:1663      ESTAB
8601       1  in  TCP   951  10.217.26.34:1677     10.10.24.3:80         ESTAB
1167       1  out TCP   324  10.10.24.6:80         10.217.26.34:1677     ESTAB
17209      1  in  TCP   951  10.165.40.45:1526     10.10.24.3:80         ESTAB
1173       1  out TCP   324  10.10.24.5:80         10.165.40.45:1526     ESTAB
18708      1  in  TCP   951  10.31.105.137:3714    10.10.24.3:80         ESTAB
1175       1  out TCP   324  10.10.24.6:80         10.31.105.137:3714    ESTAB
1180       1  in  TCP   951  10.201.18.40:4777     10.10.24.3:80         ESTAB
6528       1  out TCP   324  10.10.24.6:80         10.201.18.40:4777     ESTAB
1214       1  in  TCP   951  10.31.104.46:1501     10.10.24.3:80         ESTAB
5924       1  out TCP   324  10.10.24.6:80         10.31.104.46:1501     ESTAB
1228       1  in  TCP   951  10.231.37.32:1161     10.10.24.3:80         ESTAB
15171      1  out TCP   324  10.10.24.6:80         10.231.37.32:1161     ESTAB
28431      1  in  TCP   951  10.25.5.76:2317       10.10.24.3:80         ESTAB
1293       1  out TCP   324  10.10.24.5:80         10.25.5.76:2317       ESTAB
1328       1  in  TCP   951  10.201.2.26:1293      10.10.24.3:80         ESTAB
19276      1  out TCP   324  10.10.24.7:80         10.201.2.26:1293      ESTAB
1356       1  in  TCP   951  10.80.23.27:1396      10.10.24.3:80         ESTAB
4141       1  out TCP   324  10.10.24.6:80         10.80.23.27:1396      ESTAB
1368       1  in  TCP   951  10.80.36.124:1428     10.10.24.3:80         ESTAB
19905      1  out TCP   324  10.10.24.6:80         10.80.36.124:1428     ESTAB
30280      1  in  TCP   951  10.25.8.11:4836       10.10.24.3:80         ESTAB
1438       1  out TCP   324  10.10.24.6:80         10.25.8.11:4836       ESTAB
1478       1  in  TCP   951  10.216.6.46:4153      10.10.24.3:80         ESTAB
12312      1  out TCP   324  10.10.24.6:80         10.216.6.46:4153      ESTAB
23389      1  in  TCP   951  10.211.30.38:1593     10.10.24.3:80         ESTAB
1527       1  out TCP   324  10.10.24.6:80         10.211.30.38:1593     ESTAB
1562       1  in  TCP   951  10.90.21.58:2889      10.10.24.3:80         ESTAB
36398      1  out TCP   324  10.10.24.7:80         10.90.21.58:2889      ESTAB
1587       1  in  TCP   951  10.84.22.29:2121      10.10.24.3:80         ESTAB
37031      1  out TCP   324  10.10.24.6:80         10.84.22.29:2121      ESTAB
1624       1  in  TCP   951  10.25.21.218:1465     10.10.24.3:80         ESTAB
4941       1  out TCP   324  10.10.24.6:80         10.25.21.218:1465     ESTAB

------------------------------------In the following lines are the configuration of the ACE--------------------------------

ACE-DIGENERAL/OCS# sh run
Generating configuration....

logging enable
logging buffered 7

access-list OCS-Traffic-Outbound line 8 extended permit ip any any
access-list any line 10 extended permit icmp any any
access-list any line 20 extended permit ip any any


probe icmp PING
  interval 2
  passdetect interval 2
  passdetect count 1
probe tcp SIP
  port 5061
  interval 30
  passdetect interval 2
  passdetect count 1

parameter-map type connection TCP_IDLE_30min
  set timeout inactivity 1800

rserver host DIRS1
  description Director1
  ip address 10.10.27.11
  inservice
rserver host DIRS2
  description Director2
  ip address 10.10.27.12
  inservice
rserver host S1
  description Exchange1
  ip address 10.10.27.6
  inservice
rserver host S2
  description Exchange2
  ip address 10.10.27.7
  inservice
rserver host S3
  description Exchange3
  ip address 10.10.27.8
  inservice
rserver host SP1
  description SP1
  ip address 10.10.24.5
  inservice
rserver host SP2
  description SP3
  ip address 10.10.24.6
  inservice
rserver host SP3
  description SP3
  ip address 10.10.24.7
  inservice

serverfarm host Exchange-CACHE
  predictor leastconns
  probe PING
  rserver S1
    inservice
  rserver S2
    inservice
  rserver S3
    inservice
serverfarm host Herramientas_Col
  predictor leastconns
  rserver SP1
    inservice
  rserver SP2
    inservice
  rserver SP3
    inservice
serverfarm host OCS_DIR
  predictor leastconns
  rserver DIRS1
    inservice
  rserver DIRS2
    inservice

sticky ip-netmask 255.255.255.255 address source POOL2
  timeout 30
  replicate sticky
  serverfarm OCS_DIR
sticky ip-netmask 255.255.255.255 address source POOL1
  timeout 30
  replicate sticky
  serverfarm Exchange-CACHE
sticky ip-netmask 255.255.255.255 address source POOL3
  timeout 30
  replicate sticky
  serverfarm Herramientas_Col

class-map match-all REAL_SERVER
  3 match source-address 10.10.24.0 255.255.255.0
class-map match-all REAL_SERVERS
  2 match source-address 10.10.27.0 255.255.255.0
class-map type management match-any REMOTE_ACCESS
  2 match protocol ssh any
  3 match protocol telnet any
  4 match protocol icmp any
  5 match protocol snmp any
class-map match-any VIP-Exchange
  3 match virtual-address 10.10.27.5 any
class-map match-any VIP_DIR
  3 match virtual-address 10.10.27.10 any
class-map match-any VIP_SP
  3 match virtual-address 10.10.24.3 any

policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
  class REMOTE_ACCESS
    permit
policy-map type loadbalance first-match Exchange_cache_POLICY
  class class-default
    sticky-serverfarm POOL1
policy-map type loadbalance first-match HERRA_COL
  class class-default
    sticky-serverfarm POOL3
policy-map type loadbalance first-match OCS_POLICY_DIR
  class class-default
    sticky-serverfarm POOL2
policy-map multi-match Exchange_cache-POLICY-MAP
  class VIP-Exchange
    loadbalance vip inservice
    loadbalance policy Exchange_cache_POLICY
    loadbalance vip icmp-reply
    connection advanced-options TCP_IDLE_30min
policy-map multi-match HERRA_COL_DIR
  class VIP_SP
    loadbalance vip inservice
    loadbalance policy HERRA_COL
    loadbalance vip icmp-reply
    connection advanced-options TCP_IDLE_30min
policy-map multi-match OCS-POLICY-MAP-DIR
  class VIP_DIR
    loadbalance vip inservice
    loadbalance policy OCS_POLICY_DIR
    loadbalance vip icmp-reply
    connection advanced-options TCP_IDLE_30min

interface vlan 324
  description Herramientas_col
  ip address 10.10.24.240 255.255.255.0
  access-group input any
  service-policy input Exchange_cache-POLICY-MAP
  service-policy input HERRA_COL_DIR
  service-policy input REMOTE_MGMT_ALLOW_POLICY
  no shutdown
interface vlan 326
  description Server-side-vlan
  ip address 10.10.27.240 255.255.255.0
  access-group input any
  service-policy input OCS-POLICY-MAP-DIR
  service-policy input REMOTE_MGMT_ALLOW_POLICY
  service-policy input Exchange_cache-POLICY-MAP
  no shutdown
interface vlan 951
  description Client-side-vlan
  ip address 10.10.61.245 255.255.255.0
  access-group input any
  service-policy input REMOTE_MGMT_ALLOW_POLICY
  service-policy input OCS-POLICY-MAP-DIR
  service-policy input Exchange_cache-POLICY-MAP
  service-policy input HERRA_COL_DIR
  no shutdown

ip route 0.0.0.0 0.0.0.0 10.10.61.240

snmp-server community bancol007 group Network-Monitor


ACE-DIGENERAL/OCS#

thanks

Labels:
0 Helpful
2 Replies 2

huangedmc
Level 3
Level 3

‎12-27-2010 09:52 PM

You'll probably get more replies by posting in the Datacenter / Application Networking section.

Anyway, I suspect the unbalanced connections to the three servers is due to your sticky by source IP configuration:

sticky ip-netmask 255.255.255.255 address source POOL3
  timeout 30
  replicate sticky
  serverfarm Herramientas_Col

0 Helpful

danielng83
Level 1
Level 1
In response to huangedmc

‎12-28-2010 10:03 AM

If you are using sticky and are in a proxy environment whereby client requests are usually going through a proxy, then it might also be a potential cause of unequal load balancing. Have u tried removing the sticky to see if that is the cause of the problem?

Daniel

0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card