I have many "Conns Drop". Is this a problem?

Question

Hi all,
I have a two ACEs operating in HA. In this moment I have one service through of ACE, which is a Proxy Service. The topology is in One Arm Mode, therefore I am using SNAT in the ACE.
Although until this moment the service work correctly, I can see in the output of  "sh service-policy summary" many "conns drop".
You can see:
ACE-CC/Contexto_A# sh service-policy summ
service-policy: LB-VIP
Class                                          VIP             Prot          Port        VLAN          State       Curr Conns   Hit Count   Conns Drop
VIP_ISA_SERVER                   172.16.10.79    tcp           any         1,10           IN-SRVC         797          396935     12537
My question is if this could be a problem in the future. Is normal this behavior?.
Could I see the detail the "Conns Drop"?.
Regards.

Answer 1

Hi all,
In this moment I have reports of our client with problems of connection of your users. I review the staticstic I can see many conn drops.
ACE-CC/Contexto_A# sh service-policy summary
service-policy: LB-VIP
Class                            VIP             Prot  Port        VLAN          State    Curr Conns   Hit Count  Conns Drop
VIP_ISA_SERVER                   172.16.10.79    tcp   any         1,10           IN-SRVC        1071       96066      54336
It is more than 50%.
Other statistics are:
ACE-CC/Contexto_A# sh serverfarm ISA_SERVER
serverfarm     : ISA_SERVER, type: HOST
total rservers : 2
                                                ----------connections-----------
       real                  weight state        current    total      failures
   ---+---------------------+------+------------+----------+----------+---------
   rserver: achs-isa01
       10.0.0.139:0          8      OPERATIONAL  539        3113479    601898
   rserver: achs-isa02
       10.0.0.140:0          8      OPERATIONAL  555        3279904    428178
ACE-CC/Contexto_A# sh stats connection
+------------------------------------------+
+------- Connection statistics ------------+
+------------------------------------------+
Total Connections Created  : 17797953
Total Connections Current  : 2128
Total Connections Destroyed: 16236630
Total Connections Timed-out: 1364700
Total Connections Failed   : 194495
ACE-CC/Contexto_A# sh stats loadbalance
+------------------------------------------+
+------- Loadbalance statistics -----------+
+------------------------------------------+
Total version mismatch                       : 0
Total Layer4 decisions                       : 7432007
Total Layer4 rejections                      : 101061
Total Layer7 decisions                       : 0
Total Layer7 rejections                      : 0
Total Layer4 LB policy misses                : 0
Total Layer7 LB policy misses                : 0
Total times rserver was unavailable          : 1
Total ACL denied                             : 0
Total IDMap Lookup Failures                  : 0
Total Cipher Lookup Failures                 : 0
Total Msg sent to Optimization               : 0
Total Direct Msg received from Optimization  : 0
Total Indirect Msg received from Optimization: 0
Total Optimization Msg sent to Real Servers  : 0
Regards,
Jaime