CSS 11501 - Balancing vs. Sorry Server

Hi,
I need a little advice.
I have configured my test CSS box with two services. I enabled keepalives and load balancing with one server having a weight of 5, while the other is set to the default.
Testing has proven successfull in redirecting requests when the primary server (weight 5) is taken offline. However, when it comes back online, not all requests are sent to it, and some requests still go to the secondary server.
My question:
If I want all requests to go to the primary server except in the event it is unavailable, should I configure the secondary server as a Sorry server, and not as a load balanced peer? I would effectively be using the Sorry server as a secondary content server.
Is this workable? Am I missing something?
Thanks,
JM

JM,
yes you need the sorryserver option if you don't want traffic to go to your backup.
Whatever weight option you configure, there will always be a fraction of the traffic going to the backup.
Gilles.

Similar Messages

  • CSS Load Balancing Citrix Terminal server, is ti possible ?

    Hi we have to balance a Terminal Server Citrix Server Farm with css, did anyone already realize it? Is there any problem to do it ? Someone told me there is nat problem with citrix metaframe terminal server, has anyone information about it ?
    Any help will be greatly appreciated. Many thanks
    Max

    Stickyness means that once a user is directed to a server through the load balancer, that user will remain on the server he was first load balanced to for the duration of their connection. Otherwise, every tcp connection that a user makes is load balanced to whatever servers are configured. There are severalways to configure stickyness. You can do it via:
    -source IP
    -source IP and destination port
    -text string in a cookie or URL
    -SSL session ID
    take a look at this document that explains it better than I could:
    http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_guide_chapter09186a0080772d96.html

  • CSS Load Balancing with Billing Server

    Hi Gilles
    Could I have a CSS load balancing two servers and also have it communicate with a billing server across the network. If yes then how can I do it?
    Regards,
    Sushil

    the CSS does not have the notion of billing server. A separate device - like the CSG - should be used if you need to collect billing info.
    Gilles.

  • CSS Load balancing for Exchange Server

    Hi,
    I have CSS configured in single arm and I have multiple servers configured for load balancing and it is working fine but when I am configuring Exchange server for load balancing I am facing problem and applications and printer/scanners are not able to send the email through the Virtual IP address configured for exchaneg server.
    But if we configured the real server IP in the printer/scanners they are able to send the email. While checking the logs on the exchange server, it is showing that request for the email so coming from the Exchange VIP configured in the CSS.
    I can telnet on port 25 on the VIP address (192.168.200.237). But unable to send the email through this VIP.
    Below is the configuration
    service ENOC_EXCHANGE-1
      ip address 192.168.200.235
      active
    service ENOC_EXCHANGE-2
      ip address 192.168.200.236
      active
    content EXCHANGE
        add service ENOC_EXCHANGE-2
        add service ENOC_EXCHANGE-1
        vip address 192.168.200.237
        active
    group EXCHANGE
      add destination service ENOC_EXCHANGE-1
      add destination service ENOC_EXCHANGE-2
      vip address 192.168.200.237
      active
    DC-CSS01# show rule GIT EXCHANGE
    Name:                EXCHANGE   Owner:                ENOC_GIT
    State:                 Active   Type:                     HTTP
    Balance:          Round Robin   Failover:                  N/A
    Persistence:          Enabled   Param-Bypass:         Disabled
    Session Redundancy:  Disabled
    IP Redundancy:    Not Redundant
    L3:         192.168.200.237
    L4:         Any/Any
    Url:       
    Redirect: ""
    TCP RST client if service unreachable: Disabled
    Rule Services & Weights:
    1: EXCHANGE-1-Alive, S-1
    2: EXCHANGE-2-Down, S-1
    =============================================================================
    Please let me know how to solve this problem. System team is saying with the physical IP address it is working fine problem with Load balancing. I have even tried with the
    Add service command in the group but didnt work for me. If i will remove the group command then I cant telnet on port 25.
    I think this is related to single arm modle or some wrong configuration for the NAT.
    Kindly assist me

    Hi
    Printers are on Vlan 80 ( gw is 192.168.80.1) and exange server is on vlan 200 (gw is 192.168.200.1) i have multiple vlan which will communcate with exchange.
    I hv other servers on 200 subnet which are working fine in load balancing.
    My CSS is single arm setup.
    Please assist
    Sent from Cisco Technical Support iPhone App

  • How to set up load balancing with overload server on css

    can anyone tell me how to set up a load balancing config on css that will enable me to LB proxy caches and when they have too many connections then LB against an overload proxy-cache.
    Such that when the normal proxy-cache farm is under the ceiling of max connections then the overload server is not used ?
    I don't think redirect or sorry server will do this ?

    see the below configuration,any question,just tell me.
    service proxy-1
    ! below is the real ip of server
    ip address 10.1.1.1
    keepalive type icmp
    active
    service proxy-2
    ip address 10.1.1.2
    keepalive type icmp
    active
    ! enter owner config-mode
    owner proxy
    ! define a content rule,match what you want to load balancing
    content rule-proxy
    ! below is virtual ip,it can be another ip segment
    vip address 10.1.1.50
    add service proxy-1
    add service proxy-2
    protocol any
    advanced-balance sticky-srcip
    active

  • CSS 11501 Load Balancing with X-forwarded-for

    Hi,
    We have a pair of CSS 11501,
    Currently it is using source ip for load balancing and 5 servers as backend , however we have users loggin in using http and based on its source IP (ISP PROXY) , it is forwarded to SERVER A.
    However, we have a SSL page and when the client switches over to SSL , it is forwarded to SERVER B/C/D/E  based on its source IP ( REAL CLIENT IP) .
    This will cause the user to be terminated as the 5 servers are independent and not running in a cluster.
    Is there any way that we can use the X-Forwarded-For address to load balance so that when users loging , they are sent to SERVER A (Based on X-Forwarded-For Header IP which translate to REAL CLIENT IP).
    This way we are able to also send it back to the same server when it uses SSL.
    I believe that we should be able to load balance using X-Forwarded-For IP or to rewrite the X-Forwarded-For IP into client source IP
    Regards

    Hi,
    Unfortunately CSS does not support X-Forwarded-For, and even if CSS supports that, this wont work if you are not using SSL termination.
    One option that you can use here, is using SSL termination, so you can manage the SSL traffic on HTTP on the CSS, in this way you can use the same HTTP content rule which is the one currently working.
    In summary, you will have an SSL content rule that will decrypt the traffic, and this one will use the same content rule that already exist for HTTP, in case that the server is the one doing the redirect to SSL, but this is something that requires testing since depending on the redirect behavior we might have a redirect loop, but without details it is kind of hard to confirm that you will face this with this option.
    Another option, which is less complex, is to use a portless content rule, so this content rule will match port 443 and 80 at the same time, and using sticky or balance based on source IP, you will get the same result with less config. The downside is the troubleshooting, but in this way you will have what you want.
      content HTTP-HTTPS
        vip address 10.198.44.70
        advanced-balance sticky-srcip
        add service server1
        add service server2
        add service server3
        add service server4
        add service server5
        protocol tcp
        active
    Here the content rule is not looking for the destination port, it is just looking for the source IP, and HTTP and HTTPS will end all the time on the same server.
    Thanks,
    Rodrigo

  • CSS 11501 Load Balancing Issue

    Hi,
    We are facing some issue in load balancing in cisco CSS 11501 as we are not able to access the application  through virtual IP. Below is the ruuning configuration of the CSS:
    CSS11501# sh running-config
    !Generated on 10/06/2010 16:51:34
    !Active version: sg0810106
    configure
    !*************************** GLOBAL ***************************
      ip route 0.0.0.0 0.0.0.0 132.186.199.1 1
    !************************** CIRCUIT **************************
    circuit VLAN1
      ip address 132.186.199.145 255.255.255.0
    !************************** SERVICE **************************
    service Server1
      ip address 132.186.199.243
      port 5001
      protocol tcp
      keepalive port 5001
      active
    service Server2
      ip address 132.186.199.246
      protocol tcp
      port 5001
      keepalive port 5001
      active
    !*************************** OWNER ***************************
    owner L5_Owner
      content L3_Rule
        vip address 132.186.199.146
        protocol tcp
        port 5001
        add service Server1
        add service Server2
        active
      content L5_Rule
        vip address 132.186.199.146
        add service Server1
        add service Server2
        protocol tcp
        port 5001
        url "//132.186.199.146:5001/emi"
        active
    CSS11501#
    Observation : We are able to telnet on VIP: 132.186.199.146 on port 5001,  but not able to access the application.
    In Actual scenarion customer access  application by accessing URL: http://132.186.199.243:5001/emi and once he enter this URL in web browser the request redirects ( by server itself)  to URL: https://132.186.199.44:6002/cas/login?service=http%3A%2F%2F132.186.199.243%3A5001%2Femi%2Findex.jsp&acceptStrength=BASIC on backend server for user authenticaton and once user is authenticated then it again redirect to main URL ( http://132.186.199.243:5001/emi ) to access the application but when we are trying to access the application through VIP ( URL: http://132.186.199.146:5001/emi) we are not getting the login page as the request is not gettting redirected to backend server for user authentication.
    Please suggest a solution here.

    The problem is that you are in one-armed mode.
    So you need to configure client nat.
    Without nating the client ip address, the server response goes back directly to the client and bypasses the CSS.
    Therefore the client receives a response from an unknown server ip address (not the vip).
    So configure a group.
    For example
    group Client
        vip address 132.186.199.146
        add destination service Server1
         add destination service Server2
        active
    Also, remove the url command from your content rule.
    It is useless in your case and will just make performance worst.
    Gilles.

  • Sorry Server for CSS 11500

    Hi,
    I have a question regarding sorry server configuration on the CSS 11500 series.
    Is there a way for the sorry server to ignore the URL path and always send the user traffic to the "root" page (e.g. index.html) of the sorry server web server?
    The problem I have is the redirection of the "root" page (url "/") that is configured for the normal traffic is causing the sorry page not to work since the URL path ("/psp/CUSTOMER1/?cmd=login") does not exist on the sorry page web server:
    service Sorry-Server
      protocol tcp
      port 8000
      keepalive type tcp
      ip address 192.168.2.254
      active
    service server1
      ip address 192.168.2.101
      protocol tcp
      keepalive type tcp
      port 8080
      active
    service server2
      ip address 192.168.2.102
      protocol tcp
      keepalive type tcp
      port 8080
      active
    owner Customer1
      content Content1
        vip address 192.168.1.101
        port 80
        protocol tcp
        url "/*"
        balance aca
        advanced-balance arrowpoint-cookie
        flow-timeout-multiplier 6
        add service server1
        add service server2
        primarySorryServer Sorry-Server
        active
      content Content1-Redirect
        redirect "/psp/CUSTOMER1/?cmd=login"
        vip address 192.168.1.101
        port 80
        protocol tcp
        url "/"
        active
    Thanks in advance for your help!
    Best regards,
    Harry

    Hi again,
    During a maintenance window I made the following change and that made things a bit better:
    service Sorry-Server
      type redirect
      keepalive type none
      redirect-string "192.168.2.254:8000"
      active
    However, since the redirect string points to a private address, Internet users are not able to access the URL.
    As a work-around I sent the redirect to a new content rule with a public address and then configured a second sorry page server:
    service Sorry-Server
      type redirect
      keepalive type none
      redirect-string "sorry.example.com:8000"
      active
    service Sorry-Server-2
      ip address 192.168.2.254
      protocol tcp
      port 8000
      keepalive type tcp
      active
    owner Customer1
      content Content2
        vip address x.x.x.x
        add service Sorry-Server-2
        port 8000
        protocol tcp
        active
    Is there a better way to do this?
    Best regards,
    Harry

  • CSS and a Sorry Server

    I have been trying to get my CSS 11506 to redirct to a Sorry Server when our content servers go offline. We thought that we had it working, but after some downtime it turned out that our configuration did not work.
    After extensive reading I can't figure out what is wrong with my config, or if the problem lies else where. I am attaching my config below, can anyone tell me if they see any problems with what I have or if there is something that I need to do in addition to what I have. Thank you for you help, here is the config:
    *************************** GLOBAL ***************************
    no restrict web-mgmt
    no restrict xml
    bypass persistence disable
    snmp community ******read-write
    snmp name "******"
    snmp contact "*******r"
    snmp location "CSS11056"
    snmp trap-host 10.20.1.4 ******
    dns primary 10.20.1.2
    ftp-record ******10.20.1.17 *** des-password
    ibfebcgg6aheuc4h1hfcqhpcubwdxcjb cssgui
    ip route 0.0.0.0 0.0.0.0 10.20.1.1 1 !
    *************************INTERFACE*************************
    interface 1/1
    phy 1Gbits-FD-sym !
    **************************CIRCUIT**************************
    circuit VLAN1
    router-discovery lifetime 1000
    ip address 10.20.1.4 255.255.255.0
    router-discovery
    **************************SERVICE**************************
    service Blade01
    ip address 10.20.1.60
    active
    service Blade02
    ip address 10.20.1.61
    active
    service Blade03
    ip address 10.20.1.62
    active
    service Blade04
    ip address 10.20.1.63
    active
    service sorry
    ip address 10.20.1.41
    active
    !*************************** OWNER***************************
    owner ***
    email-address ******
    content Content1
    vip address 10.20.1.80
    balance aca
    add service Blade01
    add service Blade02
    no persistent
    primarySorryServer sorry
    active
    content Content2
    vip address 10.20.1.81
    add service Blade03
    add service Blade04
    balance aca
    active
    !*************************** GROUP***************************
    group content1nat
    vip address 10.20.1.80
    add destination service Blade01
    add destination service Blade02
    add destination service sorry
    group content2nat
    add destination service Blade03
    add destination service Blade04
    vip address 10.20.1.81
    !**************************** ACL ****************************
    acl 10
    clause 5 permit any 10.20.1.60 destination content ****
    sourcegroup ****
    clause 6 permit any 10.20.1.61 destination content ICC/flippid
    sourcegroup Content1
    clause 99 permit any any destination any
    clause 2 permit any 10.0.0.0 destination content ****
    sourcegroup ****
    apply circuit-(VLAN1)
    clause 7 permit any 10.20.1.41 destination content ****
    sourcegroup Content1

    One problem I can see is that you don't have any keepalives configured under the services, so they will default to a Ping. As long as they respond to ping, it will keep traffic going to those servers.
    What services run on these Servers? We generally recommend you use as higher layer keepalive as possible, so if it is a web server for example, use a HTTP keepalive.
    Have a look here for more info:
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.10/configuration/content_lb/guide/KAL.html

  • CSS Sorry Server for HTTPS

    How to configure Sorry server for HTTPS (443) port. Sorry server works fine with HTTP, But not with 443
    In the following config if server1 and server2 are down, the HTTP requests goes to the Sorry Server, but for HTTPS nothing is displayed. I am running the sorry server on port 81
    Please suggest
    !************************** SERVICE **************************
    service prisorry
    ip address 10.100.11.11
    keepalive type http
    keepalive port 81
    port 81
    active
    service secsorry
    ip address 10.100.11.12
    keepalive port 81
    keepalive type http
    port 81
    active
    service server1
    ip address 10.100.11.11
    keepalive type http
    keepalive port 80
    active
    service server2
    ip address 10.100.11.12
    keepalive type http
    keepalive port 80
    active
    !*************************** OWNER ***************************
    owner Loadbalancing
    content L4Rule1
    protocol tcp
    add service server2
    add service server1
    port 80
    url "/*"
    vip address 10.100.11.4
    advanced-balance sticky-srcip-dstport
    primarySorryServer prisorry
    secondarySorryServer secsorry
    active
    content L4Rule2
    protocol tcp
    add service server2
    port 443
    add service server1
    vip address 10.100.11.4
    advanced-balance sticky-srcip-dstport
    primarySorryServer prisorry
    secondarySorryServer secsorry
    application ssl
    active
    content L4Rule3
    add service server2
    protocol tcp
    port 1443
    add service server1
    vip address 10.100.11.4
    advanced-balance sticky-srcip-dstport
    primarySorryServer prisorry
    secondarySorryServer secsorry
    active
    Thanks

    I just deployed a couple 11050's the other day so my experience is limited, but I'd guess your problem is that, when using the Primary Sorry Server, you end up with clients sending HTTPS requests to an HTTP port. Having HTTPS requests redirected to HTTP ports is one thing because the client then makes an HTTP request to that port, but the way you have it above, it appears to me that the client will be talking HTTPS to port 81 on the Sorry Server, which is listening for HTTP.

  • CSS Sorry server requirements

    Folks,
    The documentation says that the sorry server concept will only work if the loadbalancing is done at layer 7. My question is why, why can't i see the sorry server redirect if all services are down when doing load balancing at Layer 3 or Layer 4?

    Hi,
    Can you point me to those docs. I believe sorry server should work regardless of which layer is the content rule configured to check.
    Actually this doc's example is layer 3:
    http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a0080093de8.shtml
    I will build a working config at layer 3 for you soon.

  • CSS 11051: Sorry Server receives request although the normal server is up

    Hello,
    my customer has configured a sorry for his server. If the normal server is down the Sorry Server receives the requests. That works fine. But if the normal server comes back the Sorry Server still receives some requests( 2 hours and more). Has anybody an idea what might be the reason for that ?
    regards
    Dietrich Schleyer
    content webserver
    add service server12
    vip address 10.40.52.20
    primarySorryServer server13
    protocol tcp
    port 80
    url "/*"
    no persistent
    active
    service server12
    ip address 10.40.52.12
    port 80
    protocol tcp
    keepalive type named applicationwww01
    active
    service server13
    ip address 10.40.52.13
    protocol tcp
    port 80
    keepalive type named applicationwww02
    active
    keepalive applicationwww01
    ip address 10.40.52.12
    port 80
    type http non-persistent
    uri "/test.html"
    frequency 10
    method get
    active
    keepalive applicationwww02
    ip address 10.40.52.13
    port 80
    uri "/test.html"
    frequency 10
    method get
    type http non-persistent
    active

    According to: http://www.cisco.com/warp/public/117/css_sorry_server.html “After the CSS 11000 directs requests to a primary sorry server, the switch will continue to use the primary sorry server even when the original server becomes functional. To force the connection back to the original server, you must suspend the primary sorry server or wait until the connection is dropped or times out. When a new session is initiated by the CSS 11000, the connection should go back to the original server.”

  • NAT and Servers behind CSS 11501

    All,
    Please forgive my asking this question again. I was injured shortly after asking the last time and out of work for a long period of time.
    My problem stems from needing to allow my web servers to initiate traffic to the outside world from behind our CSS boxes.
    The web servers sit behind a pair of CSS 11501 content switches in Active-Passive ASR with fate sharing. We are only interested at this time with load balancing HTTP and HTTPS.
    Everything works inbound no problem.
    What I need to do is setup some type of NAT for my 3 web servers to initiate HTTP/HTTPS for patches, send SMTP from the web apps, and initiate HTTPS for credit card validation.
    I have setup NAT on PIX units and routers no problem, but I seem to be unable to do it on these boxes. :(
    In reality something as simple as a PAT translation on the outside of the CSS boxes should be sufficient.
    Is this possible with our setup? Does anyone have some code examples?
    Thanks in advance.
    Addresses changed to protect the innocent:
    Load Balancer 1:
    !*************************** GLOBAL ***************************
    bridge spanning-tree disabled
    sntp server 1.1.1.41 version 1
    snmp community noway read-only
    snmp community noway read-write
    app session 1.1.1.252
    app
    logging subsystem netman level info-6
    dns primary 2.2.2.41
    dns secondary 2.2.2.42
    ip route 0.0.0.0 0.0.0.0 1.1.1.1 1
    !************************* INTERFACE *************************
    interface e1
    phy 100Mbits-FD
    description "Connect to Primary DMZ 1 3550 Switch"
    interface e2
    bridge vlan 2
    phy 100Mbits-FD
    description "Connected to Primary LB Server Switch"
    interface e8
    description "Inter Switch Communication (ISC) Port"
    isc-port-one
    !************************** CIRCUIT **************************
    circuit VLAN1
    description "DMZ 1 Subnet (1.1.1.x/24)"
    ip address 1.1.1.251 255.255.255.0
    ip virtual-router 1 priority 254 preempt
    ip redundant-interface 1 1.1.1.250
    ip redundant-vip 1 1.1.1.161
    ip redundant-vip 1 1.1.1.162
    ip redundant-vip 1 1.1.1.70
    ip redundant-vip 1 1.1.1.71
    ip redundant-vip 1 1.1.1.72
    ip critical-service 1 upstream_downstream
    circuit VLAN2
    description "Load Balanced Servers Subnet"
    ip address 2.2.2.2 255.255.255.0
    ip virtual-router 2 priority 254 preempt
    ip redundant-interface 2 2.2.2.1
    ip critical-service 2 upstream_downstream
    Various Services, Owners and Content
    Load Balancer 2:
    !*************************** GLOBAL ***************************
    bridge spanning-tree disabled
    sntp server 1.1.1.41 version 1
    snmp community noway read-only
    snmp community noway read-write
    app session 1.1.1.251
    app
    logging subsystem netman level info-6
    dns primary 2.2.2.41
    dns secondary 2.2.2.42
    ip route 0.0.0.0 0.0.0.0 1.1.1.1 1
    !************************* INTERFACE *************************
    interface e1
    phy 100Mbits-FD
    description "Connect to Secondary DMZ 1 3550 Switch"
    interface e2
    bridge vlan 2
    phy 100Mbits-FD
    description "Connected to Secondary LB Server Switch"
    interface e8
    description "Inter Switch Communication (ISC) Port"
    isc-port-one
    !************************** CIRCUIT **************************
    circuit VLAN1
    description "DMZ 1 Subnet (1.1.1.x/24)"
    ip address 1.1.1.252 255.255.255.0
    ip virtual-router 1
    ip redundant-interface 1 1.1.1.250
    ip redundant-vip 1 1.1.1.161
    ip redundant-vip 1 1.1.1.162
    ip redundant-vip 1 1.1.1.70
    ip redundant-vip 1 1.1.1.71
    ip redundant-vip 1 1.1.1.72
    ip critical-service 1 upstream_downstream
    circuit VLAN2
    description "Load Balanced Servers Subnet"
    ip address 2.2.2.3 255.255.255.0
    ip virtual-router 2
    ip redundant-interface 2 2.2.2.1
    ip critical-service 2 upstream_downstream
    Various Services, Owners and Content.

    Gilles,
    I added the following commands, and things seem to be working.
    To circuit VLAN1
    ip redundant-vip 1 1.1.1.80
    !*************************** GROUP ***************************
    group natout
    vip address 1.1.1.80
    add service nat_web_servers
    active
    service nat_web_servers
    ip address 192.168.1.10 range 3
    active
    I do have a question about the above service commands.
    I have 3 servers behind the CSS. Let's call them 192.168.1.10, 192.168.1.11 and 192.168.1.12. Am I correct in my thinking that adding range 3 then allows a match on all 3 of those servers and the CSS will then PAT these servers from the VIP address assigned to the group?
    Otherwise, I think you have resolved this problem for us. Thank you.

  • CSS 11501 - Network reconnection issue

    Using a CSS 11501 switch to configure both Load balancing and server hot standby between two servers (of same config). Clients are connecting to the server using tcp/ip sessions.
    The configuration used is shown below:
    =========================================
    configure
    ip route 0.0.0.0 0.0.0.0 10.167.50.1 1
    !************************* INTERFACE
    interface e2
    bridge vlan 9
    interface e3
    bridge vlan 9
    !************************** CIRCUIT
    circuit VLAN1
    ip address 10.167.50.108 255.255.254.0
    circuit VLAN9
    ip address 10.167.70.1 255.255.254.0
    !************************** SERVICE
    service abc_service1
    ip address 10.167.70.2
    protocol tcp
    port 6300
    keepalive type tcp
    active
    service abc_service2
    ip address 10.167.70.3
    protocol tcp
    port 6300
    keepalive type tcp
    active
    !*************************** OWNER
    owner xxxxx
    content abc_crule
    vip address 10.167.50.109
    add service abc_service1
    add service abc_service2
    protocol tcp
    port 6300
    balance aca
    active
    ===============================
    We conducted three tests to verify the hot standby while client sending the data to server app thro tcp/ip.
    1) Brought down the service on one server 2) Restarted the OS (Windows 2003) on one server 3) Removed a network cable of one of the server connecting to CSS.
    client app lost the conn to the service/server, but when it tried reconnecting to the alternate server, it was successful.
    CSS status reflected the actual status of the service/server.
    But in third test (removing network conn) the service state changed from "Alive" to "Down" and client app lost conn to the server. Client app tried reconnecting and it was successful connecting to the alternate server.
    But when we connected the network cable back, the CSS state was continue to be in "Down". Also,the network connection between CSS and server was not available after reconnection. Also, the status of alternate server changed to "Down", but still client app was successfully transmitting to the alternate server. Stopping the client app and tried reconnecting,
    the connection was not going thro.
    The connection could be established between CSS and server boxes only after restarting the OS(running windows 2003).
    Issues:
    1. Service status in CSS continue to be down even after reconnecting the cable with the service running.
    2. CSS status of the first service also went down after reconnecting the other server.
    3. Client app could not reconnect to any of the servers.
    Are we missing any configuration parameter in CSS which will address the above?
    regards
    Param

    Param,
    what software version for the CSS ?
    Did you see an ARP entry on the server for the CSS ?
    Did you see an ARP entry on the CSS for the server ?
    is the server directly connected to the CSS or is there an L2 switch inbetween ?
    Could you configure 'bridge spanning-tree disabled' on the CSS and see if this improves the situation.
    Regards,
    Gilles.

  • Sorry server - different replies

    We have CSS 11000 that provides load balancing between several servers with configured max-session .
    How to configure that sorry server sends different reply:
    1) if all servers are down, it has redirect to page "sorry, server is down"
    2) in case of overload, it it has to redirect to page "sorry, server is bussy, try later"
    Can you advise how it possible to configue this?
    thanks in advance,
    Natalia

    there is no direct way of doing this.
    However, my solution is to do this :
    service sorry_down
    service sorry_overloaded
    keepalive type script check_service_down use-output
    owner mycompany
    content www
    vip ...
    add service ...
    primarysorryserver sorry_overloaded
    secondarysorryserver sorry_down
    active
    The script check_service_down, will do a 'show service ' grep -u Alive to detect if a service is alive or just not used because down.
    Or you could also simply do ap-kal-pinglist and ping the services.
    Anyway, the idea for the kal for the service sorry_overloaded is to check the status of the other services and detect if they are down or just overloaded.
    Gilles.

Maybe you are looking for