CVP: CSS or ACE

Could you please help us in answering the below query from the customer,
Kotak Mahindra Bank currently has one Primary and one Secondary CVP Server on Version 7.X
Now since they are expanding, we are proposing an additional server MCS-7845-I2-CCE2
Now for load balancing, do i propose CSS or ACE?
If CSS, then which model is being currently sold by Cisco?
If ACE, then how do i select which model of ACE suits best...There is 0.5Gbps, 1Gbps, 2Gbps and 10Gbps..Which one is more appropriate for this CC Size?
The CVP BOM guide suggests an ACE Appliance on CVP 8.0, but for CVP 7.X it suggest CSS 11500 series with WebNS 7.5X...
Can i chose ACE for CVP 7.X, will it be supported?

ACE is the direction going forward.
I have used the CSS pair in the past, but at Cisco Live I spoke to the ACE team in the World of Solutions and ACE pricing was quite similar to CSS (say the ACE 4710 1U model) and it looked to be an effective solution. ACE is also soon available on a Network Module (ACE30 - could be out now) and that looked great.
Be aware of the similar restrictions that apply to CSS if you have the pair geographically separated. With ACE, you would need a GSS above.
Regards,
Geoff

Similar Messages

CSS to ACE Convertion

Hello all,
We will change the CSS's to ACE's plataform's.
Do u know any aplication wich can convert the basic CSS configuration into ACE configuration?
Plataform's:
CSS11501S-C-K9
ACE 4710
The certificates installed in the CSS could be migratted to the ACE ?

Hello,
The 4710 with the ACE software has a built-in CSS-to-ACE conversion tool accessible through the web interface. See http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/css_to_ace/user/guide/cssaceug.html for example.
The tool may not convert 100% but it may provide a good starting point.
I don't see any reason why you can't export the certificates from the CSS (assuming you remember the password) and import them into the ACE.
HTH
Cathy

CSS to ACE migration Tool in A4(2.0)

Hi,
I'm currently working on migration from CSS to ACE. The ACE appliance is running A4(2.0) code. And i couldn't find the CSS to ACE conversion tool in the Web gui. Anybody faced the same issue?
merci,
arun

Hi Arun,
As we discussed over the phone for the TAC case , the conversion tool is avialable over HTTP access only.
The tool is not avialable over HTTPS to ACE.
Sincerely,
Viral

CSS to ACE conversion tool

Hi ,
Is their any CSS to ACE configuration conversion tool

Currently, there isn't one available yet, the conversion tool is embedded into the software image of the ACE. Not sure if there are plans to make it standalone, I have been looking for those answers as well.

Cisco CSS and ACE study guide

Hi,
Im ready to kick start Cisco CSS and ACE load balancers. I found that 642-972 DCASD and 642-975 DCASI are the relevant exams for that. But, they are expired now. And, I couldn't even find the old materials for those. Could you please anyone assist me in getting started with this?

Hi Kanwal,
Thanks for your reply. BTW, wasn't there any specific study guides for 642-972 DCASD and 642-975 DCASI from Cisco? The reason behind this question is, I want to go step by step starting from how load balancing works, the basics and terminologies of load balancing and its various options and operations etc. I have been working with Network Security and just stepping in to DC operations.

CSS and ACE appliance SSL TPS

Hi,
Can someone explain how are SSL Transactions per second calculated on CSS and ACE?
We need to select appropriate SSL license needed for future ACE appliance, wich is defined in terms of TPS.
We also currently have CSS device with SSL module. Is there any way to find current SSL TPS info on a CSS device?
Thank you and regards,
Jasmina

What is the method used to calculate SSL TPS requirement.
example,
Current: Peak SSL Transactions 6,000
If I expect a peak concurrent connection of 200,000 what would be the methodology for calculating SSL TPS needs. (Some sample calculation steps would be appreciated.)
Can I interpret the licensing as follows,
SSL TPS: SSL Transactions per second: Number of NEW transactions that can be setup by ACE per second. (Does this mean established SSL transactions are not counted by the license, though each of the packets in established transactions require SSL termination!)
Thanks
Sri

Moving from CSS to ACE

I'm trying to find documentation on moving from a CSS to the ACE but have not been able to find much on the ACE in general (no books at all). Does anyone have any info on this? We are currently using the CSS for multiple Web and Server farms, and are looking to add SSL in the mix. Trying to decide if we should just offload the SSL to the ACE for now (eventually migrating completely to the ACE) or if we should convert everything over at the same time.
Any links or book suggestions would be appreciated!

Hi,
Here is the official link to ACE documentaton (but you probably have already found this...):
http://www.cisco.com/en/US/products/ps6906/tsd_products_support_model_home.html
I don't believe that there is a book, as this is relatively new product. Also don't hope too much to find migration guide :)
You may use some design guides for CSM module and try to apply a part of it to ACE (Topology will be simmilar for ACE and CSM, but with ACE you additionaly have possibility of virtualization/contexts).
But, pay attention, becouse ACE and CSM have completely different config command syntax and configuration philosophy!
I did not quite understand your dilemma regarding migration?
Personally, I have not yet had a chance to implement SSL offload on ACE, but it sounds logical to move the server farm that will use SSL offload behind ACE, and do SSL termination and load-balancing for that server farm on ACE. Then, gradually you can move other servers behind ACE...
You will have to decide based on conditions and requirements in your network, and after reading thousands of pages of documentation... ;)
Good luck!
Best regards,
Jasmina

CSS v ACE 4710 Performance Comparison

Am trying to verify performance figures for a CSS 11503 EOL replacement using ACE 4710
Trying to comapre apples with apples (is a CSS SSL TPS the same as a ACE 4710 TPS etc...)
Pulling figures from data sheets, release notes etc I have only come up with the following
Is there any further figures available for the ACE 4710 to fill in the blanks in table?
Am sure that ACE 4710 smokes the CSS but have to do the due diligence
<TR style="HEIGHT: 30pt" mcestyle="height: 30pt;">
<TD style="WIDTH: 170pt; HEIGHT: 30pt" height=40 width=226 mcestyle="width: 170pt; height: 30pt;"> Metric</TD>
<TD style="BORDER-LEFT: medium none; WIDTH: 83pt" width=110 mcestyle="border-left: medium none; width: 83pt;"> CSS 11503
(1xSSL Module)
<TD style="BORDER-LEFT: medium none; WIDTH: 83pt" width=110 mcestyle="border-left: medium none; width: 83pt;"> ACE 4710</TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> SSL - Transactions per second</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 1,400/sec</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;">7,500/sec</TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> SSL - RSA operations per second</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 4,000/sec</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> </TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> SSL - Bulk encryption (ARC4)</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 256 Mbps</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> </TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> Maximum concurrent connections</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 40,000</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> </TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> Compression </TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 500 Mbps</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;">2 Gbps</TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> Sticky Table</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 128K entries</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> </TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> L4 connections/sec</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 22,500</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> </TD></TR>
<TR style="HEIGHT: 15pt" mcestyle="height: 15pt;">
<TD style="HEIGHT: 15pt; BORDER-TOP: medium none" height=20 mcestyle="height: 15pt; border-top: medium none;"> L7 connections/sec</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;"> 10,000</TD>
<TD style="BORDER-LEFT: medium none; BORDER-TOP: medium none" mcestyle="border-left: medium none; border-top: medium none;">
thanks,
Sez

Have reposted this msg, as table format garbled by forum
Sez

CSS to ACE Migration Tool

Hi,
We are planning to upgrade from the existing CSS 11500 series to ACE (6506 bundle with 720 Sup engine). To facilitate a smooth migration, do we have any tool/procedure set?
Thanks,
RG.

Currently there is no such tool to migrate CSS configs to ACE module. I heard that such a tool will be available with the release of ACE appliance (ACE box).
Syed

CSS or ACE

Hi,
We would like to load blance Sharepoint app on two servers in two datacentres.I would like to know which applince is better for this purposes.
CSS 11501/11503 series or ACE 4710
Regards.

Ace is the future.
It is IPv6 ready and new features are being added every day.
The CSS is still supported but there is no more development of new features and IPv6 will never be available on that machine.
Personally, I will go for the appliance.
Gilles

CSS to ACE migration

I am in the process of Migration all servers from our Content switch to CIsco ACE4710.
one content has this line item
advanced-balance sticky-srcip
What would be similar option in ACE.?
Thanks for any help on this.
Mehdi

Hello,
Here you have a sample about it:
rserver host SLB-1
ip address 10.198.16.100
inservice
serverfarm host SLB
rserver SLB-1
    inservice
sticky ip-netmask 255.255.255.255 address both ACE-SLB
timeout 10
timeout activeconns
serverfarm SLB
policy-map type loadbalance first-match SLB-Policy
class class-default
    sticky-serverfarm ACE-SLB
Here you have a document about it:
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_0/configuration/slb/guide/sticky.html
Some of feature under the sticky group may vary based on your requirements but besides that, the sample above is what you could be looking for.
Jorge

L7 URL Policy command for CSS to ACE

Hi All !
What will be exact Layer 7 URL matching policy command for below CSS configuration .
owner PRO
content proservers
    add service proweb2
    vip address x.x.x.x1
    add service proweb3
    balance leastconn
    protocol tcp
    port 80
    url "/*"
    advanced-balance arrowpoint-cookie
    arrowpoint-cookie name prolianceweb
    arrowpoint-cookie browser-expire
    active
Thansk In Advance .

Umeshkumar,
The config would look something like this.
probe http WEB_SERVERS
interval 30
passdetect interval 30
passdetect count 2
request method get url /index.html
expect status 200 200
rserver host proweb2
ip address 192.168.0.200
inservice
rserver host proweb3
ip address 192.168.0.201
inservice
serverfarm host SF-1
probe WEB_SERVERS
rserver proweb2
    inservice
rserver proweb3
    inservice
sticky http-cookie prolianceweb cookie-sticky
cookie insert browser-expire
serverfarm SF-1
class-map match-all L4-CLASS-HTTP
   2 match virtual-address x.x.x.1 tcp eq http
policy-map type loadbalance http first-match HTTP-POLICY
class class-default
    sticky-serverfarm COOKIE-STICKY
policy-map multi-match VIPs
class L4-CLASS-HTTP
    loadbalance vip inservice
    loadbalance policy HTTP-POLICY
    loadbalance vip icmp-reply
Thank you
Jim

Maximum header size on ACE and CSS

whats the max size for header that u can allocate on CSS and ACE?

The CSS limit is in terms of packets...
501-1(config)# spanning-packets ?
Integer value(Range: 1-20)
501-1(config)# spanning-packets
We can hold max 20 packets per connection.
So, if you are doing L7 loadbalancing and are looking for a cookie, it better be in the first 20 packets.
ACE has a limit in buffers per connection and a limit of header size.
They are controller with a parameter-map
switch/User2(config-parammap-http)# set header-maxparse-length ?
<1-65535> Enter max-parse length for header
G.

ACE: Google Search appliance unable to crawl

Hi,
I moved load balancing configurationg from CSS to ACE. after the migration google search appliance (GSA) is unable to crawl. what GSA does is: it goes to the given two urls and then it crawls...load balancing is done on port 80..so, crawl urls are port 80 urls.
would there be something on the ACE that might stop it crawling?
servers being load balanced are on different subnets than the GSA.

Do a malware check with several malware scanning programs on the Windows computer.
Please scan with all programs because each program detects different malware.
All these programs have free versions.
Make sure that you update each program to get the latest version of their databases before doing a scan.
*Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php
*AdwCleaner: http://www.bleepingcomputer.com/download/adwcleaner/ http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml
*SuperAntispyware: http://www.superantispyware.com/
*Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx
*Windows Defender: http://windows.microsoft.com/en-us/windows/using-defender
*Spybot Search & Destroy: http://www.safer-networking.org/en/index.html
*Kasperky Free Security Scan: http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
*Anti-rootkit utility TDSSKiller: http://support.kaspersky.com/5350?el=88446
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
*https://support.mozilla.org/kb/troubleshoot-firefox-issues-caused-malware

Regex limits on ACE

Hello!
We are moving from CSS to ACE and I'm concerned about the number of regular expression rules we will have to implement.
I've read that using double wildcard expressions (.*) in too many class-maps can cause memory problems for the entire ACE. For example .*website.*
If I consolidate my regular expression rules into something like the following:
(www\.)*website(1|2)*\.(mobi|net|org).*
should I still be concerned about using too much memory? Does a statement like (www)* constitue a wildcard expression?
We have more than 100 domains that we need rules like this for.

Hi Jeremy,
I ran into an issue someday where I had exhausted all of the regexp memory in my ACE from using too many wildcards in my URL matching. The symptoms were class-maps not matching regex despite being the correct syntax.
I opened a ticket with Cisco, but they could not reproduce the issue in their labs.
We were stumped until the engineer examined my “show tech-support” output and saw that the regexp memory usage was very high (i.e. maxed out!):
ACE/Staging# show resource usage
Allocation
Resource Current Peak Min Max Denied
Context: Staging
conc-connections 756 2902 0 7999900 0
mgmt-connections 0 17 0 99900 0
proxy-connections 0 267 0 1048574 0
xlates 0 0 0 1048574 0
bandwidth 2104660 124535514 0 622500016 0
throughput 2104406 124522546 0 498750016 0
mgmt-traffic rate 254 12968 0 123750000 0
connections rate 3 389 0 324900 0
ssl-connections rate 0 21 0 1000 0
mac-miss rate 0 5 0 2000 0
inspect-conn rate 0 3 0 6000 0
acl-memory 37688 102608 0 70844416 0
sticky 0 4 41942 0 0
regexp 915387 1047557 0 1048576 63
syslog buffer 0 0 0 4194304 0
syslog rate 0 59 0 100000 0
Wow, that looks ugly in HTML.
Anyway, the line you’re interested in is the regexp line with 915387 bytes currently used, 1047557 bytes used at peak, 1048576 bytes max, and 63 denied requests to access the regexp memory.
Note that the regexp memory usage was consuming 900+ KB of the 1MB for regexp.
Also note the denies in the right-hand column.
I knew something was up because when I added my regex class-maps, my policy-map said that Regex dnld status: FAILED.
ACE/Staging# sh service-policy int530 class-map Secure-Stage-Map
Status : ACTIVE
Interface: vlan 520 530
service-policy: int530
class: Secure-Stage-Map
ssl-proxy server: secure-stage
loadbalance:
L7 loadbalance policy: Secure-Stage-Policy
Regex dnld status : FAILED
VIP Route Metric : 77
VIP Route Advertise : ENABLED-WHEN-ACTIVE
VIP ICMP Reply : ENABLED-WHEN-ACTIVE
VIP State: INSERVICE
curr conns : 0 , hit count : 0
dropped conns : 0
client pkt count : 0 , client byte count: 0
server pkt count : 0 , server byte count: 0
conn-rate-limit : 0 , drop-count : 0
bandwidth-rate-limit : 0 , drop-count : 0
Parameter-map(s):
HTTP_MAP
The Cisco TAC engineer said that they recommend no more than 10 double wildcard regex statements per ACE.
A double wildcard regex is one where you have a wildcard (.*) before and after a string:
class-map type http loadbalance match-any Website-Class
5 match http url .*Website.*
I had probably 20-something of those.
For whatever reason, double wildcard statements use MUCH more memory than other single wildcard statements.
So I locked my regex down to use only one wildcard per match:
class-map type http loadbalance match-any Website-Class
5 match http url /Website/.*
Once I removed the double wildcards, the memory usage stayed roughly the same.
Hhmm… Another call to my Cisco TAC engineer reveals that if the memory is not immediately freed, I need to remove the class-maps and policy-maps using the regex.
Basically, when I created the VIP class-map and then created the regex class-map to be tied to the policy-map, the VIP requested the regexp memory for the regex class-map. So in order to free that memory, I had to remove the VIP class-maps.
Actually, I had to remove the VIP class-maps, regex class-maps, AND relevant policy-maps.
Good thing I had a backup to paste it all in once I typed “no class-map” a couple hundred times.
About a minute after removing and then re-adding the class-maps, the regexp memory usage was at a much more desirable level:
ACE/Staging# show resource usage
Allocation
Resource Current Peak Min Max Denied
Context: Staging
conc-connections 1008 2902 0 7999900 0
mgmt-connections 0 17 0 99900 0
proxy-connections 0 267 0 1048574 0
xlates 0 0 0 1048574 0
bandwidth 1004219 124535514 0 622500016 0
throughput 1004219 124522546 0 498750016 0
mgmt-traffic rate 0 12968 0 123750000 0
connections rate 4 389 0 324900 0
ssl-connections rate 0 21 0 1000 0
mac-miss rate 0 5 0 2000 0
inspect-conn rate 0 3 0 6000 0
acl-memory 37688 102608 0 70844416 0
sticky 0 4 41942 0 0
regexp 2198 1047557 0 1048576 63
syslog buffer 0 0 0 4194304 0
syslog rate 0 59 0 100000 0
Note that the regexp line is now consuming only 2198 bytes of the 1MB of regexp memory. Success!
Sure enough, once I checked to make sure my regex was matching URLs in my class-maps, it was working like a champ.
Would’ve rather spent the day implementing more ACE config than finding this problem, but meh.
Hope you get your answer in this scenario.
And when I am seeing your examle you are using triple wildcard expression.
(www\.)*website(1|2)*\.(mobi|net|org).*
I don't know how much memory it would use to process your triple wildcard regular expressions , but all the time always with your configuration you can estimate how much memory is getting consumed by your regular expressions , using the above mentioned resource usage commands and then modify your regular expressions accordingly so as to best otimized usage of your memory for inculcating more regular expressions using wildcards but probably no more then 10 double wildcard regular expresion or take consultation from your Cisco TAC engineer according to the model of your ace device/card.
Also remember that header-map also consumes regexp.
As I said the limit is 10 regular expression.
Each header-map consume 1 regexp.
Each sticky cookie consume also 1 regexp.
So, check your whole configuration for counting the total number of regular expression this way may be if you have hit the limit.
For that sake try to combine header-maps.
In regard to ACE,
You can allocate all resources or individual resources to all member contexts of a resource class. For example, you can allocate only concurrent connections or sticky table memory or management traffic. To allocate system resources to all members (contexts) of a resource class, use the limit-resource command in resource-class configuration mode.
The syntax of this command is as follows:
limit-resource {acl-memory | all | buffer {syslog} | conc-connections | mgmt-connections | proxy-connections | rate {bandwidth | connections | inspect-conn | mac-miss | mgmt-traffic | ssl-bandwidth | syslog} | regexp | sticky | xlates} {minimum number} {maximum {equal-to-min | unlimited}}
Note:      The limit that you set for individual resources when you use the limit-resource command overrides the limit that you set for all resources when you use the limit-resource all command.
If you lower the limits for one context (context A) in order to increase the limits of another context (context B), you may experience a delay in the configuration change because the ACE will not lower the limits of context A until the resources are no longer being used by the context.
Following is the limit for 4 GBps bandwidth ACE device
Regular Expression Memory     1,048,576 bytes( approx 1MB)
You can upgrade the ACE maximum bandwidth to 8 Gbps or 16 Gbps by purchasing a separate license from Cisco.
Displaying the ACE Resource Allocation and Usage
To view the current resource allocation in your ACE, enter the following command:
ACE_mdule5/Admin# show resource allocation
Parameter                 Min      Max         Class
acl-memory                0.00%    100.00%    default
syslog buffer             0.00%    100.00%    default
conc-connections          0.00%    100.00%    default
mgmt-connections          0.00%    100.00%    default
proxy-connections         0.00%    100.00%    default
bandwidth                 0.00%    100.00%    default
connection rate           0.00%    100.00%    default
inspect-conn rate         0.00%    100.00%    default
syslog rate               0.00%    100.00%    default
regexp                    0.00%    100.00%    default
sticky                    0.00%    100.00%    default
xlates                    0.00%    100.00%    default
ssl-connections rate      0.00%    100.00%    default
mgmt-traffic rate         0.00%    100.00%    default
mac-miss rate             0.00%    100.00%    default
throughput                0.00%    100.00%    default
To view the current resource usage, enter the following command:
ACE_mdule5/Admin# show resource usage
Allocation
Resource         Current       Peak        Min        Max       Denied
Context: Admin
conc-connections              0          0          0    8000000          0
mgmt-connections              2          8          0     100000          0
proxy-connections             0          0          0    1048574          0
xlates                        0          0          0    1048574          0
bandwidth                  1094      80192          0 625000000          0
throughput                938      75902          0 500000000          0
mgmt-traffic rate         156       4290          0 125000000          0
connection rate               1         28          0    1000000          0
mac-miss rate                 0          0          0       2000          0
inspect-conn rate             0          0          0       6000          0
acl-memory                23776      28616          0   78610432          0
sticky                        0          0          0          0          0
regexp                        0          0          0    1048576          0
syslog buffer                 0          0          0    4194304          0
syslog rate                   0          0          0     100000          0     Note:      All bandwidth values are in bytes per second. To convert to bits per second (bps), multiply the values by eight. The ACE guarantees 1 Gbps of bandwidth for management traffic. So, the total bandwidth for a 4-Gbps ACE license is actually 5 Gbps. Throughput is still 4 Gbps.
To display the data plane resource allocation and usage and to cross-check the output of the above two commands, enter the following command:
ACE_module5/Admin# show np 1 me-stats -L0
Resource limts for context : 0
Rate                  Configured     Counters
Policer Name          Min      Max   min-toks max-toks   peak-toks    deny
bandwidth:       0   ee6b280        0 ee6b0fa     d8a4        0
throughput:       0   ee6b280        0 ee6b280     d8a4        0
mgmt-traffic rate:      0   3b9aca0        0 3b9aca0      a0e        0
connection rate:       0     7a120        0    7a120       11        0
ssl-connections rate:   0       9c4        0      9c4        0        0
mac-miss rate:       0       3e8        0      3e8        0        0
inspect-conn rate:      0       bb8        0      bb8        0        0
Resource              Configured        Counters
Policer Name          Min      Max      Min      Max     peak     deny
conc-connections:       0   3d0900        0        0        0        0
mgmt-connections:       0     c350        0        0        4        0
proxy-connections:      0    7ffff        0        0        0        0
ip-reassemble buffer:   0        0        0        0        0        0
tcp-ooo buffer:       0        0        0        0        0        0
regexp:       0        0        0        0        0        0
xlates:       0    7ffff        0        0        0        0
ACE/Admin# show resource usage virtual partition eng
Allocation
Resource Current Peak Min Max Denied
Virtual partition: eng
conc-connections 1076261 2852238 4000000 4000000 0
mgmt-connections 8 24 2500 2500 0
proxy-connections 136152 201376 524288 524288 0
xlates 170226 293546 524288 524288 0
bandwidth 62946459 156087362 250000000 250000000 0
connection rate 117652 283887 500000 500000 0
ssl-connections rate 124 397 500 500 0
mgmt-traffic rate 16754661 313562819 62500000 62500000 0
mac-miss rate 0 0 1000 1000 0
inspect-conn rate 824 1782 3000 3000 0
acl-memory 9806253 20248853 39305216 39305216 0
regexp 148878 524288 524288 524288 3
syslog buffer 577166 1199438 2097152 2097152 0
syslog rate 234 786 1500 1500 0
The Admin context has a context ID of 0. To display the resource allocation and and usage statistics for another context, change the "0" in the "-L" parameter to the context ID of another context.
Use the below mentione dsite to get few more similar details for the same:
http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps6906/White_Paper_Cisco_Application_Control_Engine_A_Technical_Overview_of_Virtual_Partitioning_ps7027_Products_White_Paper.html
For more details on limit of different resources of ACE kindly refer the following URL:
Cisco Application Control Engine (ACE) Troubleshooting Guide -- ACE Resource Limits
http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_(ACE)_Troubleshooting_Guide_--_ACE_Resource_Limits
Cisco Application Control Engine (ACE) Troubleshooting Guide -- Managing Resources
http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_(ACE)_Module_Troubleshooting_Guide,_Release_A2(x)_--_Managing_Resources
Also use the following site to know more about using regular expressions and their impact:
http://www.cisco.com/web/about/security/intelligence/preventing_activex_ace.html
HTH
Please rate if you find the above mentioned information useful to you.
Sachin

CVP: CSS or ACE

Similar Messages

Maybe you are looking for