Configuring Health Probe for Server Farm

If I have a server farm with real servers listening on port 8888 and I apply an HTTP-type health probe with no port number specified, will the ACE know to probe the servers at 8888 or will it try to probe port 80?

Hi,
Yes it should inherit the port from the real servers defined in the serverfarm. This gives you the flexibility to associate same probe with different serverfarms probing different servers on different ports. This is probe port inheritance feature which is there in ACE.
Regards,
Kanwal

Similar Messages

  • CSM health probe for server farm with multiple vservers

    Is there a way to specify the vserver port that a health probe monitors when multiple vservers are configured for the same serverfarm? Let's say I have a serverfarm named farm1. farm1 services two ports www and https so two vservers vserver_www and vserver_https are configured and bound to farm1. I would like to enable http health probe on farm1 with the intention of only monitoring vserver_www http port but, instead, the health probe monitors both www and https and since a http probe on https fails it takes farm1 reals and both vservers vserver_www and vserver_https out-of-service. Is there a way to configure a health probe to monitor a specific port? Or, should I create two duplicate serverfarms farm1 bound to vserver_www and farm2 bound to vserver_https and only enable http health probe on farm1? Any other ideas welcomed.

    Appreciate the feedback. I also found what I was looking for in configuration examples. To summarize I've borrowed the comment from the URL below:
    # The port for the probe is inherited from the vservers.
    # The port is necessary in this case, since the same farm
    # is serving a vserver on port 80 and one on port 23.
    # If the "port 80" parameter is removed, the HTTP probe
    # will be sent out on both ports 80 and 23, thus failing
    # on port 23 which does not serve HTTP requests.
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/csm/csm_4_2/config/cfgxpls.htm

  • Health probe for RDP farm

    I have an RDP server farm that lost a disk. The RDP service was still running but users were unable to log in. I'd like to create a health probe that does maybe a combination of TCP probe for port 3389 and something that can determine if the drive that stores user profiles is available.
    I cannot add any new service (http or ftp) to the server.
    Can anyone think of another way to do this? Is there any way I can check SNMP mibs on the windows server or maybe WMI through TCL?
    Thanks.

    Can you drop me a mail offline ([email protected]) and I can share what I have. Matthew

  • What is the maximun recommended number of probes, rservers, server-farms

    Team,
    What is the maximun recommended number of probes, rservers, server-farms, class-maps, policy-maps per context on an ACE module?
    Regards,
    John...

    John,
    A practical limit on ACE module is 4k each for probes, serverfarms, class-maps & policy-maps. Rserver instances can be up to 16K. These limits represent total per system. They may exist all in a single context if desired. These numbers will vary based on specific configuration requirements.
    For more specific guidance please reach out to your account team or technical marketing engineer.
    Other resource info can be found under Cisco Application Control Engine (ACE) Troubleshooting Guide -> ACE Module Resource Limits:
    http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_%28ACE%29_Module_Troubleshooting_Guide%2C_Release_A2%28x%29_--_ACE_Module_Resource_Limits
    DocWiki for ACE:
    http://docwiki.cisco.com/wiki/ACE
    HTH.

  • ACE Health probe for SIP

    I've setup a SIP probe to check the health of a Microsoft OCS. The health of this server is always failed. What am I missing? I also tried it with a telnet probe on port 5061, but got the same result. A telnet from ACE to the server on port 5061 works fine.
    See below a show probe SIP detail and the relevant configuration.
    ACE21_Secondary/MOCS# sh probe SIP det
    probe : SIP
    type : SIP
    state : ACTIVE
    description :
    port : 5061 address : 0.0.0.0 addr type : -
    interval : 10 pass intvl : 10 pass count : 3
    fail count: 3 recv timeout: 4
    request-method : OPTIONS
    conn termination : GRACEFUL
    expect offset : 0 , open timeout : 2
    expect regex : -
    ------------------ probe results ------------------
    associations ip-address port porttype probes failed passed health
    ------------ ---------------+-----+--------+--------+--------+--------+------
    rserver : OCS_11
    10.105.11.70 5061 -- 7566 7566 0 FAILED
    Socket state : CLOSED
    No. Passed states : 0 No. Failed states : 0
    No. Probes skipped : 0 Last status code : 0
    No. Out of Sockets : 0 No. Internal error: 0
    Last disconnect err : Server reply timeout (no reply)
    Last probe time : Thu Oct 30 14:18:42 2008
    Last fail time : Tue Oct 28 16:31:30 2008
    Last active time : Never
    ACE21_Secondary/MOCS# sh run
    probe sip tcp SIP
    port 5061
    interval 10
    passdetect interval 10
    receive 4
    expect status 200 200
    open 2
    rserver host OCS_11
    ip address 10.105.11.70
    probe SSL
    probe PING
    probe SIP
    probe SIP_TELNET
    inservice
    Cheers
    Peter

    Peter,
    make sure to NOT run version A2(1.1a) as SIP probes are broken in that specific release.
    If your version is something else, get a sniffer trace on the server to see what is going on.
    Seems like we don't get a reply according to the line :
    "Last disconnect err : Server reply timeout (no reply) "
    Gilles.

  • ACE Health Probe for SQL

    Hi All,
    Has anyone seen sample TCL code for probing a generic SQL server?
    Thanks,
    Dave

    You can use the following configuration:
    probe tcp MS-SQL
    description TO-RBSQL1
    ip address 10.15.160.3
    port 1433
    interval 2
    faildetect 2
    passdetect interval 2
    passdetect count 2
    rserver host RBWEB1
    ip address 10.15.177.11
    rserver host RBWEB3
    ip address 10.15.177.13
    inservice
    serverfarm host RBWEB
    description TO-VLAN-177-RBWEB-SERVERS
    predictor leastconns
    probe WWW-RISKBROWSER
    probe PING
    rserver RBWEB1
    rserver RBWEB3
    inservice
    And also you can use the command sh probe MS-SQL, to know probe association probed-address probes health. Sure that the server respond or responded with a RST.

  • Failover for server farm

    If you have a basic configuration on the ACE which consists of
    VIP --> serverfarm -----> server1
                               -----> server 2
    if one of the servers is removed or fails will the ACE detect this without probes being configured? and if so how does it detect the failure?
    thanks

    When you doesn't configure probe, ACE only detects server down with arp table.
    It mean rserver goes down when arp timer is expired and rserver state will become ARP_FAILED.
    Default arp timeout of rserver is 300 seconds as below.
    ACE20/Admin# sh arp timeout
    Context:Admin
    Refresh Time:
       Learned Address      : 14400 seconds
       Configured Address   : 300 seconds
    Retry Rate              : 10 seconds
    Max retries per host    : 3
    Periodic Sync Interval  : 5
    You can change this value with 'arp interval' command on configuration mode.
    However, this configuration change effects all configured address.
    So, I recommend you configure probe.
    Regards,
    Yuji

  • Health Probe for Proxy Servers

    We have 2 Microsoft ISA servers that are using the CSM's as loadbalancing. Does anyone have an example of a probe script that I could use as a template. Idealily we would want the script to either hit our external router or site.

    Can you drop me a mail offline ([email protected]) and I can share what I have. Matthew

  • How to Configuring case sensitivity for NFS on Windows Server 2012

    Configure Case Sensitivity for File and Folder Names
    http://technet.microsoft.com/en-us/library/cc725747.aspx
    To configure case sensitivity for file and folder names using the command prompt             
    Open a command prompt.
    To enable case sensitivity, type:
    nfsadmin server [ComputerName] config casesensitivelookups=yes
    But, "casesensitivelookups" is removed in Windows 2012 version.
    Help Me~

    Hi,
    Sorry for the delayed response.
    According to the following article, we still can use
    nfsadmin to configure case sensitivity for Server for NFS in Windows Server 2012.
    Nfsadmin
    http://technet.microsoft.com/en-us/library/cc771599.aspx
    Note:We
    need to disable Windows kernel case-insensitivity in order for Server for NFS to support case-sensitive file names. We can disable Windows kernel case-insensitivity by clearing the following registry key to 0:
    HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\kernel
    DWORD “obcaseinsensitive”
    Hope it helps.
    Best regards,
    Frank Shen

  • ACE probe for rserver

    Hi I've following requirement to do health check for server.
    I need to add below three ports in probe with OR condition so if any of these 3 port is up along with 10292 connection should  go that  server:
    10721
    10722
    10723
    how to do this? can we setup up such health check with using script?

    Hi,
    You will need a custom script. The supplied CHECKPORT_STD_SCRIPT should provide a reasonable starting point. You just need to implement the logic behind setting the return code.
    HTH
    Cathy

  • ACE Health probe using get URL

    Hello,
    We are trying to create a health probe for our google search appliances and as part of the URL get there is a question mark but the ACE doesn't like that.  Is there a way around this or should it be done differently?
    request method get url /searchq? (This is what we want the URL to be)
    request method get url /searchq (This is where it thinks i'm asking it for help)
    Thanks in Advance.

    Hello,
    You need to typ CRTL+v prior to entering the ?
    That's the Control key then lowercase v, then your question mark.
    Hope this helps,
    Sean

  • ACE http health probes - best practice for interval and passdetect interval?

    Hi,
    Is there a recommended standard for http health probes in terms of interval and passdetect interval timings, i.e. should the passdetect interval always be less than the interval or visa versa? Can a http probe be 'mis-configured', i.e. return a 'false positive' by configuring an interval timeout thats 'incompatible' with the device it's polling?
    I have a http probe for a serverfarm consisting of two Apache http servers and get intermittent 'server reply timeout' probe failures. I'm keen to ensure that the configuration of the probe isn't at fault so I can be confident that a failed probe indicates a problem with the server and not my configuration.
    The probe is currently configured as below:-
    probe http http-apache
      interval 30
      passdetect interval 15
      passdetect count 6
      request method get url /cs/images/ACE.html
      expect status 200 304
    Any advice on the subject woud be gratefully received.
    thanks
    Matthew

    Hi Gilles,
    Thanks for the advice. In another dicussion (found here https://supportforums.cisco.com/message/462397#462397) a poster has stated that:-
    "(The) "Probe interval" should always be less then (open+recieve) timeout  value. Default open & receive timeouts are 10 seconds."
    Are you able to advise on whether the above is correct and if so, why? I currently have an interval value of 30 that obviously goes against the advice above (which I've interpretted to mean that if you leave the open & receive timeouts at their default settings your probe interval should be less than 20 seconds?).
    thanks
    Matthew

  • The server farm account should not be used for other services

    I have created a new SharePoint Foundation 2013 Farm. I only used the Farm Configuration Wizard to create the Search Service Application, all other aspects of the Farm was created using PowerShell.
    The SharePoint Health Analyzer is reporting the following error:
    Title: The server farm account should not be used for other services.
    Severity: 1 - Error
    Category: Security
    Explanation: DOMAIN\FARM_ACCOUNT, the account used for the SharePoint timer service and the central administration site, is highly privileged and should not be used for any other services on any machines in the server farm.  The following services were
    found to use this account: Distributed Cache Service(Windows Service)
    Remedy: Browse to
    http://centraladminsite:port/_admin/FarmCredentialManagement.aspx and change the account used for the services listed in the explanation. For more information about this rule, see "http://go.microsoft.com/fwlink/?LinkID=142685".
    Now I understand how to change the account used to run the Distributed Cache Service, but my query is what account should I use in the least privelage model? I have setup the following 6 accounts as per TechNet guidelines (Link)
    and am not sure if one of these accounts should be used or if another account is required:
    SQL Server service account
    Setup user account
    Server farm account
    SharePoint Server Search service account
    Default content access account
    Application pool identity
    After reviewing the TechNet article again, I don't fully understand the section titled "Service application accounts". Is the article advising me to create a seperate account for each row in the table? e.g. 1 account for Business Data Connectivity
    Service, a different account for "Application Discovery and Load Balancer Service", another account for "App management" and another account for "Distributed Cache", so 4 extra accounts if I choose to install all of these services
    within the Farm?
    Also, what does the article mean when it says "Plan one set of an application pool and proxy group for each service application that you plan to implement."? How do I go about doing this?
    Kevin Evans

    After reviewing the TechNet article again, I don't fully understand the section titled "Service application accounts". Is the article advising me to create a seperate account for each row in the table? e.g. 1 account for Business Data Connectivity Service,
    a different account for "Application Discovery and Load Balancer Service", another account for "App management" and another account for "Distributed Cache", so 4 extra accounts if I choose to install all of these services within the Farm?
    Inder: Yes, It is suggested to have multiple service account for each service application. This increases security and dependencyof 1 account on multiple Service applications. Like below
    SQL Server service
    Local System account (default)
    Setup user
    Member of the Administrators group on the local computer
    Server farm
    Network Service (default)
    No manual configuration is necessary.
    SharePoint Server Search Service
    By default, this account runs as the Local System account.
    If you want to crawl remote content by changing the default content access account or by using crawl rules, change this to a domain user account. If you do not change this account to a domain user account, you cannot change the default content access account
    to a domain user account or add crawl rules to crawl this content. This restriction is designed to prevent elevation of privilege for any other process running as the Local System account.
    Default Content Access
    No manual configuration is necessary if this account is only crawling local farm content. If you want to crawl remote content by using crawl rules, change this to a domain user account, and apply the requirements listed for a server farm.
    Content Access
    Same requirement as the default content access account.
    Profile import Default Access
    Same requirements as server farm.
    Excel Services Unattended Service
    Must be a domain user account.
    http://technet.microsoft.com/en-us/library/cc263445%28v=office.15%29.aspx
    Also, what does the article mean when it says "Plan one set of an application pool and proxy group for each service application that you plan to implement."? How do I go about doing this?
    Inder: Each service account has a application pool and you can plan to use same application pool for multiple
    service accounts if required. These application pool are then consumed by proxy connection
    of each service application. On service application pool, you can see all the service applications and its proxy connection.
    If this helped you resolve your issue, please mark it Answered

  • ACE failing server out using TCP health probe

    We have a mix of ACE20s and ACE30s currently and I am seeing the ACE in both HW platforms failing out our servers sporadically after a sucessful TCP handshake.  Here is the configuration:
    probe tcp TCP-25
       port 25
       interval 25
       faildetect 2
       passdetect interval 90
       open 10
    When I do a show probe TCP-25 detail I see the default recv timeout is 10.
    I captured a trace between the ACE and the server.  When the health probes pass I see a good 3 way TCP handshake, then 50ms later the server sends a SMTP 220 then ace from ace, fin ack from ace and graceful TCP termination occurs.  When the probe fails I see a sucessful TCP handshake but the ACE sends FIN ACK 47ms after it sends ACK for the TCP connection.  Server then sends ACK and ACE sends RST.
    Shouldn't ACE wait 10 seconds in this example for server to respond after TCP handshake?

    TAC/Martin Nash was very helpful in explaining this.  The TCP 3 way handshake was sucessful, but the ACE sent a FIN ACK as expected, but after the server sent an ACK the server did not send a FIN ACK so the ACE marked it down.  The health check not only requires a 3 way handshake, but a clean teardown of the TCP session.

  • SharePoint 2013 - Server Error in '/' Application - This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database

    Hi
    After I ran SharePoint configuration wizard successfully to upgrade to SharePoint 2013 / SP1.
    I can open Central Administration site just fine.
    but now when I open any Site collection,  I got this error.
    Server Error in '/' Application
    This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database. To connect this server to the server farm, use the SharePoint Products Configuration
    Wizard, located on the Start menu in Microsoft SharePoint 2010 Products
    I have restarted all the servers:  SQL server, WFE and APP servers but still cann't get this resolve.
    Services on all servers are running,  IIS - application pools are running.
    Can someone help with where that could be a problem or if there is a solution.
    Thanks in advance for your comments or advices.
    Swanl

    Please verify the followings:
    Make sure that from the SharePoint front end and application servers that you can ping your SQL server.
    Make sure that your Farm account has permission to the configuration database.
    Lastly verify that your database didn't for some reasons go into recovery mode.
    once everything is fine and you are still having issues, restart the SQL host service on the SQL server.
    Once the service is restarted you will need to reboot Central Admin and then your front end servers.
    In addition, as you built your farm inside the firewall, please disable the firwall, or create rules for SQL Server service in the firwall on SQL server.
    More information about creating rules in firewall, please refer to the following posts: http://social.technet.microsoft.com/Forums/en-US/c5d4d0d0-9a3b-4431-8150-17ccfbc6fb82/can-not-create-data-source-to-an-sql-server http://www.mssqltips.com/sqlservertip/1929/configure-windows-firewall-to-work-with-sql-server/
    Here is a similar post for you to take a look at: http://social.technet.microsoft.com/Forums/en-US/ea54e26c-1728-48d4-b2c5-2a3376a1082c/this-operation-can-be-performed-only-on-a-computer-that-is-joined-to-a-server-farm-by-users-who-have?forum=sharepointgeneral 
    Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

Maybe you are looking for