CSS 11501 - 32,000 sticky table entries or 128,000?

The product guide below says the sticky table has either 32,000 or 128,000 entries depending on your model but then doesn't spell out which model has which.
This figure also appears unavailable on their product data sheet. Anyone know the skinny?
http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_qanda_item09186a00801aa6d1.shtml
http://www.cisco.com/en/US/prod/collateral/contnetw/ps5719/ps792/product_data_sheet0900aecd800f851e.html

I found my own answer. Looking at the "show sticky-stats" - it looks like 131,071 is the magic number.
CSS11501# show sticky-stats
Sticky Statistics - SFM Slot 1, Subslot 1:
Total number of new sticky entries is 0
Total number of sticky table hits is 0
Total number of sticky rejects (no entry) is 0
Total number of sticky collision is 0
Total number of available sticky entries is 131071
Total number of used sticky entries is 0
Total L3 sticky entries are 0
Total L4 sticky entries are 0
Total SSL sticky entries are 0
Total WAP sticky entries are 0
Total number of SIPCID sticky entries is 0

Similar Messages

  • CSS 11500 - how to clear sticky-table entry

    Hi together,
    1. is there any possibility to clear an entry in the sticky table ?
    2. how could I find a sticky table entry, belong to a certain IP Addres or flow ?
    commands I know to find more details infos about the sticky table and the flows find below, but how could I merge these infos ?
    #sh sticky-table l3-sticky
    L3 Sticky List on Slot 1, subslot 1:
    Entries for page 1.
    Entry Hash Rule Rule Srv Srv Time(Sec) Hit Col Elem Inact
    Number Value Indx State Indx State Elapsed Cnt Cnt Type Cfg(Min)
    1 a18015a 26 ACT 23 ALIVE 659 1 0 L3 15
    2 a18015a 28 ACT 12 ALIVE 43 19 0 L3 15
    3 a18016d 28 ACT 13 ALIVE 16 22 0 L3 15
    4 a180170 26 ACT 12 ALIVE 727 1 0 L3 15
    5 a180170 28 ACT 13 ALIVE 37 20 0 L3 15
    6 a180171 28 ACT 12 ALIVE 46 24 0 L3 15
    7 a180188 26 ACT 24 ALIVE 695 1 0 L3 15
    for the flows:
    # flow-agent show active_fcbs
    Flow ID Src IP SPort Dst IP DPort Pr slot sub spt dpt Flow flg
    8499f000 172.29.149.144 443 172.21.211.155 52988 6 2 1 1 1 00000098
    83e0c860 172.19.28.47 1107 172.29.149.144 443 6 2 1 1 1 00001098
    84049a40 172.29.148.149 389 172.29.27.133 35292 6 2 1 1 1 00000119
    83b97160 172.28.19.130 4647 172.29.149.144 81 6 2 1 1 1 00001089
    84588ae0 172.29.27.133 6101 172.29.148.167 33054 6 2 1 1 1 00000508
    # flow-agent show fcb_details 0x83650080
    Fcb Details for FCB: 0x83650080
    SRC: 172.29.148.149-389 NAT: 172.29.149.136-389
    DST: 172.29.27.133-40833 NAT: 172.29.27.133-40833
    DMAC: 00-01-f4-16-e5-e6 SMAC: 00-0b-fd-be-c6-7d
    IP Hdr ChkD: 65292 TCP/UDP Hdr ChkD: 65292
    TCP SequenceD: 0 Task CE: 0
    BytesIn: 1460 Frames In: 14
    Dest VLAN: 101 Src/Dst Ports: 0/0
    Slot/SubSlot: 2/1 SmbQ/PrcSwP: 32/1
    Time Stamp / Time Out Info:
    CurSecs: 1846643:342, started: 1793589:504 last activity: 1845164
    May timeout due to inactivity: Yes , inactiveTimeout: 1048528
    Inactive Secs: 1479, will timeout in: 1047049 secs
    FCB Flags: 0x0119
    0x0001 - Natting In Use
    0x0000 - NOT L5 Aware
    0x0000 - Non-Spoofed
    0x0008 - IP/TCP Flow
    0x0010 - Remote - Egress port
    0x0100 - In LL List
    0x0000 - Server-side
    FCB FlaFlags: 0x8040
    0x0040 - Is a static FCB
    0x8000 - Handled an ACK

    1/ to clear use the comand 'sticky-purge ...' from llama mode.
    2/ To see if an entry exist of a particular ip address, use the command 'sho sticky-table l3-sticky ipaddress ...'
    Regards,
    Gilles.

  • CSS SNMP counter "apCntStickyStatsNewCt".. query on sticky table entry lifetime.

    Hello,
    Can someone confirm the meaning of SNMP counter "apCntStickyStatsNewCt" please? Does it just mean that for every new sticky table entry created that this counter gets incremented ?
    My understanding is that there is a finite number of sticky table entries. There is one table for all entries and these can be made up of L3, L4, SSL etc.. and it operates on a First-In-First-Out system.
    Assuming we fill all available sticky table slots, when this "apCntStickyStatsNewCt" counter increments and inserts a new sticky entry then the oldest sticky table entry gets removed from the end of the of the table. Is this correct ?
    By taking a delta of this counter every 60 seconds I'm trying to determine if this counter can be used to work out how long a sticky entry will remain in the sticky table before being purged/pushed out.
    The full namepsace/OID info for apCntStickyStatsNewCt is below:
    Name  .iso.org.dod.internet.private.enterprises.cisco.ciscoMgmt.arrowPoint.apMgmt.cntExt.apCntStickyStatsTable.apCntStickyStatsEntry.apCntStickyStatsNewCt
    (OID .1.3.6.1.4.1.9.9.368.1.16.25.1.2)
    Many thanks,
    Scott

    Hi Gilles,
    Thank you very much for your pointing and suggestion and I am sorry for my delay response.
    I understand there are two kind of CLI on CSM depend on using CSM mode or RP mode.
    - show command begins with "show ip slb" when using CSM mode (ip slb mode csm)
    - show command begins with "show mode csm x" when using RP mode (ip slb mode rp)
    And "show mod csm x sticky config" command can be done on RP mode only.
    So I tried to "show ip slb sticky config" command on CSM mode, but I could not find
    "config" argument as follows,
    ct65svf1#sh ip slb sticky ?
    client sticky associated with a specific client IP address
    groups list configured sticky groups
    | Output modifiers
    ct65svf1#sh ip slb sticky
    So I think, on CSM mode, I can not calculate the amount of sticky entry by executing one
    show command.
    Is my understanding correct ?
    Best regards,

  • HTTP Sticky Table entries

    All,
    When using the advanced-balance ssl method, I can issue the command show sticky-table all-sticky and see the sticky information entered there.
    I have been trying to setup the equivilent with HTTP for the last few days. I have used the advanced-balance cookies method and the advanced-balance arrowpoint-cookies method.
    Although I see the cookies getting set in the packet traces, the CSS does not create an entry in the sticky table.
    My question is: Should I see entries in the show sticky-table all-sticky when using these methods?
    Thanks in advance.

    there is no sticky table for cookie sticky.
    The cookie value contains the sticy information [ie: the ip address of the real server].
    So no need for sticky table.
    Regards,
    Gilles.

  • MIB to monitor sticky table entries

    Does anyone know the MIB and OID I can use to monitor the current number of entries in my sticky table

    this does not exist currently but developpers agreed this is something that would be useful so they will at the possibility to implement it.
    Thanks,
    Gilles.

  • CSS Sticky-table analysis

    We have a CSS 11503 at 7.4.2.02.
    It has a number of L3 Sticky rules.
    The users or rather their workstations are working 24 x 7.
    We would like to work out what is the best sticky-inact-timeout value to use so that we can gracefully close a server (weight = 0) and drain the sticky entries for that backend server.
    It would be good to have more information about the life of the sticky-entry in the table. For example when it was first loaded and perhaps the maximum elapsed time value.
    Are there any debug commands that can get more information on the sticky-table entries?
    Or has anyone got any other ideas on how to find out how long it would take to drain a server without actually setting the weight to zero and seeing what happens?
    My last thought is to change the sticky-inact-timeout value on the rule. As I understand it this change, which appears to be dynamic will only impact new sticky sessions. So a show sticky-table should show the new value for new entries where previous sessions elapsed time has exceeded the old value. Measuring the time taken from the change to the rule to the time that the majority of sessions have shifted to the new timeout value should give an indication of the time it would take to drain the majority of users off the server to be closed.
    If this is true then the only problem is how to interrogate the sticky-table which can only be paged at 100 entries a time and does not seem to be filterable in normal CLI. Hence the request for more info on Debug mode.

    Gilles,
    thanks for the response.
    However, what I am trying to acheive is a little more than see the sticky-entries as they are displayed using the standard show sticky-table command.
    For Layer three sticky entries even if you filter on IP address, you get a single entry in the standard 1 line format. I actually would like to see all entries with a given set of characteristics.
    Also for SSL sticky entries there is a Hash argument that allows the ability to see much more information for an individual entry. I cannot find an equivalent for Layer 3 sticky entries.
    The inability to search the whole table for certain characteristics without devizing a script with a loop on page count is giving us some interesting challenges. The abscence of information about statistics/timers on each flow is also a bit of a barrier for diagnosis.
    Hence the request for more information about the sticky-table debug facilities.
    regards
    Andrew T

  • CSS 11501 Trouble shooting data throughput

    I have two groups of servers that talk to each other through the Load Balancer. It appears that on certain transactions where there is a "get", "head" or "trace" in the actual http data, the transaction is not forwarded through the CSS 11501. This happens maybe once in 11,000 transactions. It appears the word get, head or trace has to be in a certain part of the data payload to cause this problem too occur. Has anybody heard of such an issue? If so, do you have a work around? If not, any suggestion on how I can further isolate the issue. FYI I have a TAC case open but it does not appear to be going any where any time soon.

    is it happening in the middle of a persistent connection or with the first request ?
    There are 2 possibilities I can think off.
    First one would be a flow timeout and the next request is just dropped because the css reclaim the fcb.
    The 2nd option is that by default the CSS does not support the "TRACE" http method.
    It must be enabled.
    See info at :
    http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_command_reference_chapter09186a008040c3cf.html
    So, configure a flow-timeout-multiplier and enable parsing of rfc2518 methods.
    Gilles.

  • Identifying source IP in sticky table on ACE

    Hi,
    A newbie question :-)
    How can I see a real source IP address of a sticky table entry on ACE running 2.1.1 code?
    If I do "show sticky database" I see a hash value, but not IP itself. In CSM the command shows the source IP, but not on ACE....
    Thanks!
    David

    Well there is no command to get what you are looking for. Infact you can find a bug CSCsg58769 in this regard in bugtoolkit.
    Previously it used to be IP in decimal format and was needed to be converted to IP dotted quad."I think" some change has been made to the code.
    There are some other ways to workaround it
    for example
    If you want to see stciky database entries for a given client ip you can use
    sh sticky database client
    If you want to see stciky database entries for a given rserver you can use
    sh sticky database rserver
    Syed Iftekhar Ahmed

  • CSS 11501 clear sticky table

    How can i clear the sticky table on this CSS? Is it even possible? I am only running version 7.1 so I do not even have the show sticky-table commands.

    I think your commands are for the CSM. Or possibly a newer OS version for the CSS...one that i'm not running.
    However, in case anybody does come across this thread in the future, I was able to get an answer from TAC. The command is as follows...
    CSS# llama (press enter)
    CSS(debug)# sticky-purge all-sticky

  • Can I see how long the longest entry has been in the sticky table ?

    Hi,
    I have a customer who has a possible issue with the sticky inactivity timeout on the CSS. At the moment we are using no timeout, just relying on the CSS to purge the entries.
    However, is it possible to see how long the longest entry has been in the sticky table. I can see the 'elapsed time' with the 'show sticky' command but this only shows 100 entries per time and not in time order ?
    Thanks in advance for any help

    Michael,
    You can use the command "show sticky-table" with L3 or L4 options, depending on what you have configured, then add ip addressing to the command, to focus down to where the oldest sticky entries are likely to be, but theres no other way. If your problem is having too many entries, configure a sticky timeout, as the default of 0 will keep then forever, or until overwritten due to the table being full. If the problem is sticky entries timing out too early, you can use the timeout parameter to increase their life, but the sticky table is limited to 32k entries.
    Peter

  • Question about the CSS behavior when using layer 3 sticky and sticky table

    Hi everyone,
    I have a question about the CSS behavior when using layer 3 sticky and sticky table is full.
    If I configure layer 3 sticky and specify the inactivity timeout as below, how does the CSS
    handle subsequent needed sticky requests ?
    advanced-balance sticky-srcip
    sticky-inact-timeout 30
    CSS document says that
    Note:
    If you use the sticky-inact-timeout command to specify the inactivity timeout
    period on a sticky connection, when the sticky table becomes full and none of
    the entries have expired from the sticky table, the CSS rejects subsequent
    needed sticky requests.
    My question is what is the next reaction by doing the CSS if the CSS is in the
    following condition:
    when the sticky table becomes full and none of the entries have expired from
    the sticky table, the CSS rejects subsequent needed sticky requests
    Does CSS just rejects/drops subsequent needed sticky requests ?
    or
    Does CSS does not stick subsequence requests to particular service but CSS forward
    subsequence requests with round-robin basis ? which means if the sticky table is full,
    the CSS just works round-robin load balancing fashion for subsequence requests ?
    Your information would be appreciated.
    Best regards,

    Hello,
    There is a good document explaining this on Cisco web site
    http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a0080094b4b.shtml
    It depends if the sticky-inact-timeout is used or not. If not, it's FIFO (the oldest entry in the sticky table is removed). If yes, the CSS will reject the next sticky request.
    Rgds,
    Gaetan
    Rgds
    Gaetan

  • Exploring CSS 11503 sticky table / sticky mask

    Hi All
    I am currently undergoing some testing with a client.
    We have a VIP load balancing 8 instances. We are testing with the following configs
    content test-test
        add service a
        add service b
        add service c
        add service d
        add service e
        add service f
        add service g
        add service h
        vip address 10.10.10.1
        flow-timeout-multiplier 225
        sticky-mask 255.255.255.252
        redundant-index 1000
        port 443
        protocol tcp
        advanced-balance sticky-srcip-dstport
        sticky-inact-timeout 360
        balance leastconn
    active
    We  have traffic been sourced from 32 IP addresses and want all 8 instances  to be used/hit, but this is not happening in all instances.
    (from the above config, 4 consecutive IPs will be stuck to the same instance based on the sticky mask -- yes?)
    For instance I would expect the following: with the Test IP addresses used based on the sticky mask:
    10.120.1.168
    10.120.1.169
    10.120.1.170
    10.120.1.171 
    (to be stuck to maybe instance a)
    10.120.1.176
    10.120.1.177
    10.120.1.178
    10.120.1.179
    (to be stuck to maybe instance b)
    I have tried the following command during tests:
    show sticky-table l4-sticky ipaddress 10.10.10.1  255.255.255.252  443
    and get an empty table back.
    L4 Sticky List on Slot 1, subslot 1:
    Entries for page 1.
    Entry   Hash    Rule Rule  Srv  Srv      Time(Sec)     Hit Col  Elem Inact
    Number  Value   Indx State Indx State    Elapsed       Cnt Cnt  Type Cfg(Min)
    Total number of entries found is 0.
    L4 Sticky List on Slot 2, subslot 1:
    Entries for page 1.
    Entry   Hash    Rule Rule  Srv  Srv      Time(Sec)     Hit Col  Elem Inact
    Number  Value   Indx State Indx State    Elapsed       Cnt Cnt  Type Cfg(Min)
    Total number of entries found is 0.
    I would like to ascertain what source IP address is been stuck to what load balanced instance at any one time.
    I have tried looking at the flow table but, that clears out quite quicky so not really an accurate method.
    Thanks!

    Hi All
    I am currently undergoing some testing with a client.
    We have a VIP load balancing 8 instances. We are testing with the following configs
    content test-test
        add service a
        add service b
        add service c
        add service d
        add service e
        add service f
        add service g
        add service h
        vip address 10.10.10.1
        flow-timeout-multiplier 225
        sticky-mask 255.255.255.252
        redundant-index 1000
        port 443
        protocol tcp
        advanced-balance sticky-srcip-dstport
        sticky-inact-timeout 360
        balance leastconn
    active
    We  have traffic been sourced from 32 IP addresses and want all 8 instances  to be used/hit, but this is not happening in all instances.
    (from the above config, 4 consecutive IPs will be stuck to the same instance based on the sticky mask -- yes?)
    For instance I would expect the following: with the Test IP addresses used based on the sticky mask:
    10.120.1.168
    10.120.1.169
    10.120.1.170
    10.120.1.171 
    (to be stuck to maybe instance a)
    10.120.1.176
    10.120.1.177
    10.120.1.178
    10.120.1.179
    (to be stuck to maybe instance b)
    I have tried the following command during tests:
    show sticky-table l4-sticky ipaddress 10.10.10.1  255.255.255.252  443
    and get an empty table back.
    L4 Sticky List on Slot 1, subslot 1:
    Entries for page 1.
    Entry   Hash    Rule Rule  Srv  Srv      Time(Sec)     Hit Col  Elem Inact
    Number  Value   Indx State Indx State    Elapsed       Cnt Cnt  Type Cfg(Min)
    Total number of entries found is 0.
    L4 Sticky List on Slot 2, subslot 1:
    Entries for page 1.
    Entry   Hash    Rule Rule  Srv  Srv      Time(Sec)     Hit Col  Elem Inact
    Number  Value   Indx State Indx State    Elapsed       Cnt Cnt  Type Cfg(Min)
    Total number of entries found is 0.
    I would like to ascertain what source IP address is been stuck to what load balanced instance at any one time.
    I have tried looking at the flow table but, that clears out quite quicky so not really an accurate method.
    Thanks!

  • Is sticky table really FIFO ?

    Hi, looking at my sticky table on the CSS I can see entries that have been in their for an extremely long time - 3810341 seconds = 44 days.
    We have many services on the CSS but one service on the CSS has 14,000 logons per hours, with a 32K sticky table I would expect entries to get purged within the day ?
    Can anyone explain this behaviour ?
    cheers,
    Mike

    Hi Gilles,
    First thing, we actually have 288Mb of memory so we have 128K sticky entries, not 32K.
    I just spoke with the server guys and they have a total amount of users of 100,000 so it is possible the entries stay in the table for a long time as the other services do not have so many users.
    We do not have sticky-inact-timer set but we are looking to do this for this service to see if the load on the servers becomes more equal.
    CONTENTSWITCH(debug)# show sticky-stats
    Total number of available sticky entries is 0
    Total number of used sticky entries is 131071
    Total L3 sticky entries are 131071
    Total L4 sticky entries are 0
    Total SSL sticky entries are 0
    Total WAP sticky entries are 0
    Total number of SIPCID sticky entries is 0
    One other question, if a sticky entry exisit for Client A going to Server A, then server A fails. Client A will get redirected to Server B. Will the original sticky entry be overwritten with this new one ? I would expect so.
    cheers,
    Mike

  • Right way to preserve all parent table entries in a join with many tables!!

    This problem is quite interesting to me. I have asked this question to others but no body is able to provide me with proper answers.
    The problem is: How do I join a huge parent table with many child tables (more than 5 child tables) preserving all of the parent table entries. Lets say there is the parent table parentTable and three child tables childTable1, childTable2, childTable3. In order to get the data after joining these tables the query that I have been using was:
    select parent.field1, parent.field2, parent.field3, child1.field4, child1.field5, child2.field6, child3.field7 from ParentTable parent, childTable1 child1, childTable1 child2, childTable3 child3 where parent.fielda = child1.fieldb and parent.fieldc = child.fieldd and parent.fielde = child.fieldf.
    Although the tables are huge (more than 100,000 entries), this query is very fast, however those parent table entries which do not have child entries are lost. I know that I can left join a parent table with a child table and then with the next child table and then with the next child table and continue. Isn't there a simple solution for this commonly happening problem?
    Please provide suggestions please...

    Hello Lakshmi,
    Although I do not know exactly how to achieve what you want to achieve but I have seen DBAs/ABAPers in my experience can run queries/scripts using the COUNT function to give the actual number of line items per table for all your 100 or odd tables.
    Rgds
    CONMJI

  • Table entries change

    Hi,
       how we will see who is the lastchanged in table entries.

    Hi Kumarraju,
    Sorry, got your question a wrong way. The following is the information on table log:
    You must start the SAP system with the <b>rec/client</b> parameter. This parameter specifies whether the SAP system logs changes to table data in all clients or only in specific clients. The parameter can have
    the following values:
      - rec/client = ALL logs all clients
      - rec/client = 000 [,...] logs the specified clients
      - rec/client = OFF turns logging off
    In the technical settings (use transaction SE13), set the Log data changes flag for those tables that you want to have logged.
    If both of these conditions are met, the database logs table changes in the <b>DBTABPRT</b> table.
    Use the RSTBHIST report to obtain a list of those tables that are currently set to be logged.
    Hope it helps.
    Thanks & Regards,
    Santosh
    Message was edited by:
            NAVABOTHU SANTOSH KUMAR

Maybe you are looking for

  • Error while Importing Wsdl file of of 189 KB to XI Server.

    Hi, I am working on SAP NW 7.0.This is the Error I am getting while importing wsdl file of 189 KB to XI server. Error : Connection Interrupted. Connection to server lost. You can log on again once the server is available again. Do you want to log on

  • Windows server for home user

    hi i have windows 7 on my desktop and a home network included cellphones, laptops and TV. i want to manage my network with active directory. i'm going to install windows server on my PC and my questions is: does the windows server at home is good? of

  • KT3 MB = My PC Cannot Shutdown

    I have shutdown my PC but my PC cannot turn off (my PC ATX Support). I'm using Windows XP. It hang/halt until the last screen Shutting Down Computer. I have update my bios but it still happen. I have install Linux but it still cannot turn off when I

  • FAGLL03 Sales Invoice Number

    Hi I want to  add the sales invoice number(VBRK-VBELN to the FAGLL03 GL display transaction, has anyone done this before? I tried to add it as a special field for GL line items but this table cannot be added. I know billing document is shown on the l

  • Can you embed HTML code into a Captivate project?

    Hi there. Is it possible to embed HTML code into a project? I can't find any options to do it. I'm using Captivate 7. Thanks.