CSM Sticky Group or predictor command?

Hi,
i want to ensure that my client connections are connecting to the same real server as long as it is inservice. When it goes down a second server will take this job. Question: Is it possible to reach that goal by using a parameter in the predictor or weight command, or is it solely required to configure a sticky group?
Thanx, Stephan

If you do not need to loadbalance i would suggest to do a vserver with one serverfarm that has one server and assign to that serverfarm a sorry/backup serverfarm with one server
rp(config-slb-vserver)#serverfarm black-red backup green-blue

Similar Messages

  • CSM: Sticky groups limitation (1..255)

    Hi,
    The number off total different STICKY GROUPS is limited to 255
    This limits directly the number off VSERVERS/SERVERFARMS.
    In case I have different serverfarms (and each different vserver maps to only 1 different serverfarm)
    AND I want them all to be sticky (for example based on source ip address), I will have to configure
    a different sticky group for each serverfarm.
    This limits the number off vservers/serverfarms also to the maximun number off sticky groups.
    (which is limited to 255)
    Correctly or can I bypass this issue?
    Thank you, Wim

    That's correct.
    You can use different form of stickyness that do not require a sticky group, like 'predictor hash'.
    Regards,
    Gilles.

  • CSM: Sticky timeout parameter: difference between sticky group and vserver

    Hi,
    Concerning the example in the CSM manual about configuration of stickiness:
    What (or why) is exactly the difference between the timeout parameter (100 minutes):
    sticky 12 cookie foo timeout 100 AND the sticky 50 group 12 in the vserver.
    The timeout parameter is overruled in the vserver configuration. (100 -> 50)
    For what could this be usefull?
    Thank you!
    Kind regards,
    Wim
    This example shows how to configure a virtual server named barnett, associate it with the server farm
    named bosco, and configure a sticky connection with a duration of 50 minutes to sticky group 12:
    Router(config)# mod csm 2
    Router(config-module-csm)# sticky 12 cookie foo timeout 100
    Router(config-module-csm)# exit
    Router(config-module-csm)#
    Router(config-module-csm)# serverfarm bosco
    Router(config-slb-sfarm)# real 10.1.0.105
    Router(config-slb-real)# inservice
    Router(config-slb-real)# exit
    Router(config-slb-sfarm)#
    Router(config-slb-sfarm)# vserver barnett
    Router(config-slb-vserver)# virtual 10.1.0.85 tcp 80
    Router(config-slb-vserver)# serverfarm bosco
    Router(config-slb-vserver)# sticky 50 group 12
    Router(config-slb-vserver)# inservice
    Router(config-slb-vserver)# exit
    Router(config-module-csm)# end

    if you configure the group under a policy, there is no option for the timeout.
    This is why the option exist under the stick-group.
    In the vserver, you can overrid this timeout - so the timeout is per vserver.
    If you want the same timeout, just configure the same value.
    gdufour-cat6k-2(config-module-csm)#policy test1
    gdufour-cat6k-2(config-slb-policy)#sticky-group ?
    <1-255> sticky group ID
    gdufour-cat6k-2(config-slb-policy)#sticky-group 12 ?
    Gilles.

  • CSM sticky limitations

    Hello,
    I have a couple of CSMs in my ServerFarm Distribution Layer and am hoping someone could advise and help me, if possible.
    If I have a vserver with "sticky" applied and with a url policy applied in addition to a default serverfarm. Is there a way to force the CSM to make a load balance decision after an initial decision gets made and entered into the sticky table???
    Note: The policy points to different reals than the default serverfarm.
    With the "sticky" command applied to the vserver and a user comes in (1st time), they are processed either by the policy or by the default serverfarm (based on url) and are load balanced and entered into the sticky table. Everything works. However, if they come back in a 2nd time and need to be load balanced by the opposite process, (by policy or by default serverfarm this time), the CSM never processes it because the user is already in the sticky table. The CSM will not make a load balancing decision to other reals if the user is already in the sticky table from a previous load
    balancing decision.
    Is there any way the CSM can do this?? Or is the CSM limited for this type of
    requirement??
    Note: I cannot change the host name portion of my url.
    Thanks for your help. I greatly appreciate it.
    Tony

    We will need to see your config - policy and sticky.
    I'm not sure to understand how you created this.
    The CSM will normally parse the policy sequentially, and when it finds a match statement, it will use the sticky method or serverfarm configured.
    If no match, it goes to the next policy.
    Maybe all you need to do is configure different sticky group for each policy.
    ie:
    map Host1 header
    match protocol http header Host header-value ...
    map Host2 header
    sticky 1 ......
    sticky 2 ......
    policy P1
    header-map Host1
    sticky-group 1
    policy P2
    header-map Host2
    sticky-group 2
    Gilles.

  • Sticky group for multiple serverfarms

    For ACE, would the inclusion of more than one serverfarm on a sticky group create a conflict for the connections to servers?
    On CSM, usig the same sticky group on two different vservers will create a conflict for corresponding serverfarms.
    Is this an issue on ACE - should a separate sticky group created foe each ServerFarm?
    sticky ip-netmask 255.255.255.0 address source Group1
    timeout 60
    replicate sticky
    serverfarm SF1
    serverfarm SF2
    serverfarm SF3

    Its same as CSM. You can have just one serverfarm per sticky group.
    you should never use the same sticky group for different farms, otherwise that will break the VIP logic i.e. connections meant to serverfarm1 could end up being sent to serverfarm2.
    Syed Iftekhar Ahmed

  • Csm sticky - number of groupings

    We have numerous vservers supporting L4 load balancing - and have configured sticky based on source IP. We don't need stickieness across vservers - each vserver is independent and we just need to ensure that clients hitting a vserver will be directed to the same real server each time.
    We have over 255 vservers defined. Looks like there is limitation of 255 sticky groups. How do we keep stickieness for these vservers (we see that if we use the same sticky group in multiple vservers, we run into problems described in this forum since the real servers are different between vservers). Thanks.

    unfortunately the limitation can't be removed.
    So you need to find other form of stickyness that do not require a sticky group.
    You could use a 'predictor hash...' which is more or less equivalent to the sticky group.
    Regards,
    Gilles.

  • CSM sticky timeout value - is this an idle timeout value?

    We have sticky groups configured in our CSM, with an timeout value of 60 minutes. My question is does the timeout value reference an 'idle' value, such as a user disconnected from the session, and now that timer is counting down from the 60 minutes to 0, to remove the stale session out of CSM?
    Or is this some other kind of value? If so, what does the value actually represent?
    Group  CurrConns Timeout  Type
    17     290       60       src-ip netmask 255.255.255.255
    Also, from this info below, is "this" timeout value in seconds, or should this show in minutes? Or is this a bug that I need to resolve by updating the CSM version? We're still on v2.2(1).
    CSM with SSL  WS-X6066-SLB-S-K9
    Thanks, Tony
    switch#sho mod csm 1 sticky group 17
    group   sticky-data              real              timeout
    17      ip 10.x.x.x            10.x.x.x            3469
    17      ip 10.x.x.x            10.x.x.x            3275
    17      ip 10.x.x.x            10.x.x.x            3016
    17      ip 10.x.x.x            10.x.x.x            2791
    17      ip 10.x.x.x            10.x.x.x            879

    Hi Ajay, thank you for the response. From your reply, "It appears that you have configured the sticky timeout value higher then the default value. So the sticky timeout value is in minutes," we set each group to have a 60 minute timeout value. I had read from another string that the timeout values I'm seeing in this table were incorrectly displayed, due to an upgraded needed on the CSM. We're running 2.2(1), and I thought I remember reading 4.2.2 was required to correct this bug?
    switch#sho mod csm 1 sticky group 17
    group   sticky-data              real              timeout
    17      ip 10.x.x.x            10.x.x.x            3469
    17      ip 10.x.x.x            10.x.x.x            3275
    17      ip 10.x.x.x            10.x.x.x            3016
    17      ip 10.x.x.x            10.x.x.x            2791
    17      ip 10.x.x.x            10.x.x.x            879

  • Sticky group timer?

    Hi,
    What is the timer in the sticky group do? It is an idle timer or cache timer? I am using source ip based sticky on one of my vserver. there are two reals behind it and only two front end (proxy) web servers that hits it. when I remove one of the real (serverA), all the connection sourced by the two web server goes to the other real(serverB). When I bring back serverA, I don't see any connection going to it. I think that's because the two front end web servers are being "stuck" to serverB. When I view the sticky table, I see the specific group with a timer value that's decreasing. I'm tempted to change the sticky timer to 1 (minute) but am not sure it it's a idle timer or a cache timer.
    example config:
    sticky 130 netmask 255.255.255.255 timeout 30
    vserver backend_App
    virtual x.x.x.x
    server x
    sticky 30 group 130
    thanks,
    Steve

    Steve,
    sticky source-ip when there is only 2 ip coming in is not a very good solution.
    If we are talking http, you should check the possibility to use cookie.
    If your servers do not have a cookie that can be used for stickyness, then I would suggest to use the cookie-insert feature of the CSM allowing the CSM to generate is own cookie.
    Gilles.

  • CSM Sticky counters

    I am investigating resources for a new application that must have sticky set. I'm looking att counters for sticky and are a little confused. See following info.
    sho mod csm 5 sticky group 16
    group sticky-data real timeout
    16 ip 10.10.159.16 192.168.137.161 5398
    16 ip 10.10.167.36 192.168.137.165 6926
    16 ip 10.10.175.79 192.168.137.165 5923
    16 ip 10.10.187.84 192.168.137.165 4698
    16 ip 10.10.64.226 192.168.137.165 821
    16 ip 10.10.203.212 192.168.137.161 5028
    16 ip 10.10.81.227 192.168.137.165 6137
    16 ip 10.10.209.31 192.168.137.161 7177
    16 ip 10.10.210.84 192.168.137.165 574
    16 ip 10.10.232.8 192.168.137.161 5126
    16 ip 10.10.115.84 192.168.137.165 2443
    16 ip 10.10.138.14 192.168.137.165 498
    16 ip 10.10.138.87 192.168.137.165 248
    16 ip 10.10.139.148 192.168.137.165 5248
    16 ip 10.10.19.71 192.168.137.161 5319
    sho mod csm 5 sticky config
    Group CurrConns Timeout Type
    16 27 120 src-ip netmask 255.255.255.255
    The number of entries in sticky table and number of CurrConns doesn´t matsh. Is it a bug? How do I find out how meny entry I have in the sticky database? From my understanding ther can be 256.000 entries. Is it planned to increase that number? I'm running Ver 4.1(2).
    Regards
    Mats

    Currconns is number of connections.
    When source ip address can have multiple connections open, it will only create 1 single sticky entry.
    There is no plan to increase the number of entries.
    If you think you will need more, change the netmask, this will reduce the number of entries required.
    Regards,
    Gilles.

  • CSM Sticky Cookie Insert

    Hello,
    We have a Catalyst 6500 w/ CSM-S configuration that has 2 serverfarms with identical real servers using the same VIP. Each farm has 50 real servers (2 IPs with 25 consecutive ports each). One of the serverfarms is defined under a SLB policy with client NAT and the second one directly under the vserver. Both serverfarms are configured with the same sticky group for cookie insert. When I issue "show mod csm 13 sticky group 4" I only see 52 entries instead of 100. Also, some of the entries are duplicate. All the rest of the sticky groups are displaying the correct number of cookie entries, matching the number of real servers in the farms. Any ideas on why this is?

    You probably have encountered the following bug fixed only in version 4.2.2
    CSCsa74493
    CSM: sticky insert table not updated if adding new reals
    The workaround is to reboot the CSM or reconfigure reals, policy and vserver in the correct order.
    Gilles.

  • CSM Sticky Rule Limitation

    Hi
    Does anyone know if it is possible to have the same STICKY rule on multiple VIPs or what the max number of STICKY rules is on CSM SW version 3.2(1).
    Since we are using SSL modules too, we use an SSL STICKY rule per VIP and a Sticky rule per DECRYPT VIP. We currently have 209 Sticky Rules and would like to know when we will hit our limit.
    Regards
    Wayne

    you can use the same sticky group in multiple vserver.
    Just be aware that if client X is stuck to server Y for vserver Z, the same client X will get stuck to the same server Y for vserver Z' that would be using the same group.
    By using different group a client could be stuck to different server depending on the vserver they hit.
    Also, if you use the same group in multiple vserver, you need to make sure the same reals exist for the vserver.
    ie: if client X gets stuck to server Y on vserver Z, if client X open a connection with vserver Z' then the server Y must be part of the serverfarm under vserver Z'.
    Regards,
    Gilles.

  • CSM - STICKY FOR SAP PORTAL USING SAPLB_* COOKIE

    Hello,
    Please, someone could send me an sample config implementing session persistence in SAP using saplb_* cookie in CSM with software 4.2 ?
    Thank You,

    we need more details.
    What's the cookie name ?
    Is it saplb_ ? is it changing  (so the asterisk saplb_*) ?
    The CSM can only learn the value of a cookie for a specific name which is static.
    This is done easily.
    IE:
    gdufour-cat6k-2(config-module-csm)#sticky 100 cookie saplb
    Once you have created your sticky group, you can assign to your vserver
    gdufour-cat6k-2(config-module-csm)#vserver www
    gdufour-cat6k-2(config-slb-vserver)#sticky 60 group 100
    Gilles.

  • ICal Group Calendar - Line command

    Does anyone know how to create a group calendar other than through the wiki interface? I would think there is a line command as well.
    I have created group calendars on several osx servers in the past. I have two 10.6.4 servers that seem to have an authorization or communication issue when creating the calendar through the wiki.
    Apache: *PROPFIND /principals/wikis/company/ HTTP/1.1" 500 201*
    Ical err Failure: *twisted.internet.error.ConnectionRefusedError: Connection was refused by other side: 61: Connection refused*.
    Accessing the group calendar through the wiki give in in browser error:
    quest URL:
    *https://www.mycompany.com/principals/wikis/company/*
    *Request Method:PROPFIND*
    *Status Code:500 Internal Server Error*
    I thought I'll debug it further by creating a group calendar by command line. Does anyone know how to do that? Or any other suggestions where to continue?

    Thanks for that, Jonathan, but it appears to have a problem: you apparently can't use the Address Panel if you fill in the Account URL field, and all the attendees I fill in to events aren't "real" they have little exclams before their name, instead of check marks.
    It seems that the Address Panel only works with accounts that have "Automatically discover server address" checked, and each account for which you have that checked must have a different Username -- you can't use a group name.
    I suppose you could set up dummy user names so you could access the groups somehow, AND have the Address Panel working properly...
    It's too bad this stuff doesn't work better. I'll bet it doesn't get better before the next "kitty" release, 18-24 months from now...

  • Photoshop CC 2014 hangs for nearly 15 seconds when using Layer Group Layers or Layer Palette Group from Layers commands.

    Photoshop hangs for nearly 15 seconds when using Layer > Group Layers or Layer Palette > Group from Layers commands. NOT on creating new group and creating layers and drag-n-dropping layers into group manually in Layer Palette. Got a UI design file with nearly 800 layers and lot of groups. This doesn't occur in smaller files. Using OS X Mavericks, Photoshop CC 2014.2.2, Mid 2014 15-inch Retina Macbook Pro.
    I understand that the solution would be just to cut the file into smaller files and design each UI view in a separate file but that would be painful. And it does not seem to be a very hard task to just group layers.

    Does the document also have a lot of layer comps?
    And can you post that document or send me a copy of it so we can see exactly why it is hanging?

  • EPM 11.1.2.1 add a MSAD user to a HSS native group via MaxL command

    Hi there
    I want to take over MSAD user as EPM (Essbase) user in a HSS native group via MaxL command:
    This works fine as long as the user is already in at least one other group (with at least server access).
    If I want to do same for a "new" user it fails.
    Is there any trick to also make it work for this case?
    see here:
    alter user 'mynewuser' add to group 'ALL_SERVER_ACCESS_ ESS1';
    ERROR - 1051012 - User mynewuser does not exist.
    or even
    alter user 'mynewuser@domain' add to group 'ALL_SERVER_ACCESS_ ESS1';
    ERROR - 1051012 - User mynewuser@domain does not exist.
    Thanks in advance!
    Regards
    Andre

    You will probably need issue a create first for example
    create or replace user 'essuser' type external;
    alter user 'essuser' add to group essgroup;
    or
    create or replace user 'essuser@LDAPNAME' type external;
    alter user 'essuser@LDAPNAME' add to group essgroup;
    Cheers
    John
    http://john-goodwin.blogspot.com/

Maybe you are looking for