Migrating CSS to CSM

Hi,
I am a newbee. I am migrating from CSS to CSM. I have attached conversion config. Can some one please verify that I am doing the right conversion?
Thanks

actually there is a mistake.
Here is what it should look like
real XX1
address x.x.x.x
inservice
real XX2
address x.x.x.x
inservice
serverfarm YYY
nat server
no nat client
real name XX1
inservice
real name XX2
inservice
probe tcp
sticky 1 ssl timeout 60
vserver YYY
virtual xx.xx.xx.03 tcp http
serverfarm YYY
inservice
vserver YYY1
virtual xx.xx.xx.03 tcp https
serverfarm YYY
sticky 60 group 1
inservice
Gilles.

Similar Messages

CSS to CSM migration and http health checking

Hi All,
I hope someone can help me here.
We are migrating number of web services to new DC and I have some issue migrating load balancing from CSS 11501 to CSM module in 6509 within new environment.
Here is config from CSS:
content WS1
vip address 192.168.1.125
add service 192.168.1.105-80-web1
add service 192.168.1.115-80-web2
port 80
protocol tcp
balance leastconn
active
service 192.168.1.105-80-web1
ip address 192.168.1.105
keepalive port 80
keepalive uri "/URIDirect_Default.aspx"
keepalive method get
keepalive type http
keepalive hash "44baffe2618ba829a6b14ad9bccfdcf4"
active
service 192.168.1.115-80-web2
ip address 192.168.1.115
keepalive port 80
keepalive uri "/URIDirect_Default.aspx"
keepalive method get
keepalive type http
keepalive hash "f41469e68c42273622774ec706e3ddcf"
active
With this config CSS uses URI health check to determine whether or not the app live on the nodes of the farm (CSS checks for certain file's existing in app's home folder by checking the hash value of the file name - I beleive so). This is also handy for windows team which remove/rename checked file on server when want to remove it from web farm.
However, reading manuals for CSM I can not see http health probe checking for hash, but only for return status.
Can someone help me with how can I replicate above configuration using CSM.
Regards,
Sasa

Sasa,
the hash corresponds to a hash of all the text contained in the html page.
This is to guarantee that the page was not modified.
This is some kind of security in case a hacker would alter your pages.
The CSM does not have this feature.
But honestly, you usually get more troubles with this option than benefits.
If the Apps team wants to have the server down while changing files, they can I guess turn off the server themselves before doing changes. And then re-enable after.
Gilles.

Migrating from CSS to CSM

Hi there,
I'm planning on migrating from a 4500 and CSS infrastructure on to a 6500 and CSM infrastructure. My CSS's currently handle a high volume of load-balancing on non-web TCP traffic. Is there any reason why I wouldn't want to migrate to the 6500 with CSM?
Thanks in advance

Personally, I would migrate to ACE or stay with the CSS.
You really do not gain much benefit going to the CSM.
You may even lose some features as they do not share the same features.
Gilles.

Migrating from LocalDirector to CSM?

We have a LocalDirector 416 Version 3.2.2 which we are trying to migrate to the CSM. They are both connected to the same 6509 switch IOS. They are both in bridge mode and on the same subnet. When removing the VIP and RIP on the LD even after 300 minutes the VIP mac-address is still advertised. I cleared the arp table on the 6509 and Local Director but it appears the LD is still advertising its mac for this VIP any ideas?

Personally, I would migrate to ACE or stay with the CSS.
You really do not gain much benefit going to the CSM.
You may even lose some features as they do not share the same features.
Gilles.

CSS to ACE Migration Tool

Hi,
We are planning to upgrade from the existing CSS 11500 series to ACE (6506 bundle with 720 Sup engine). To facilitate a smooth migration, do we have any tool/procedure set?
Thanks,
RG.

Currently there is no such tool to migrate CSS configs to ACE module. I heard that such a tool will be available with the release of ACE appliance (ACE box).
Syed

CSS/CSM & IPv6

Any idea when the CSS/CSM will include support for IPv6?
Thanks,
Zach

Hello Gilles,
this is very interesting.
Do you have some near Infomrations how this is planned?
Will the be a complete new generation?
Are there any Upgrades for the CSS11500 possible because they are chassi-based?
CSS and CSM are so different solutions, how will the merege be done?
More CSS or more CSM like?
Do you have some more Informations about this?
Best Regards

CSM: Maximum policies under 1 vserver

Hi,
We are migrating from CSS to CSM.
For one particular VIP on the CSS we have about 20 Contentrules (each time different url's), the services used in these contentrules are not always the same.
We have run in to a problem on the CSM. We created a vserver, and started adding policies.
Each of those 20 contentrules on the CSS = 1 policy, each policy=1 headermap and 1 serverfarm. (in the headermaps we only use host-header names, without wildcards)
The 7th policy didn't work anymore, as did the 8th, and when you add a 9th all policies in the vserver stop functioning.
We found out that the vserver runs out of memory. Each time we add a policy the memory-usage of that vserver more than doubles (checked it with "show mod csm 5 mem).
The vserver with 1 policy uses about 237 bytes, 2 policies=860 bytes, 3=2348,... with 8 policies it's 141824 bytes, and finally 9=insufficient memory (the maximum is 260944 bytes).
Are we doing something fundamentally wrong? We use policies so we can use different serverfarms.
We have opened a case for this with the TAC, but it seems strange to me that nobody has noticed this before.
Did somebody run in to this issue before?
Regards,
Joeri

The TAC engineer that handles your case will soon send you the following answer.
The problem is the 256k memory available for the policies. As you already know, you are running out of memory with your policies.
The reason the memory usage increases exponentially is when you try to match something like *STRING*.
The double * is the problem. It should be avoided.
Now, you are going to tell me you are not using such a search criteria.
The 2nd problem is that the CSM converts header map into a ** string.
So each header map is equivalent to a *STRING*.
There is no workaround to this currently.
You have to avoid header map or reduce the number of policies [try to combine them]
Gilles.

Source Nating in CSM one armed design

What is the best practice for creating Source Nating in CSM One armed design? I am doing CSS to CSM migration. I have created the NATPOOL used the VIP address like natpool CSS0 10.xxx.xx.xxx 10.xxx.xx.xxx netmask 255.255.255.0. I did experience some latency after migrating to CSM. Then I used diffrent Ip address is the NATPOOL that improved the latency. Is there any documentation which clearly explains this issue?
Thanks

the natpool will have no impact on performance.
The problem must come from somewhere else.
You should capture a sniffer trace and verify what is going on.
Gilles.

CSM vs MS NLB

Hi,
Is anybody able to explain the advantages/disavantages of using Microsoft Windows NLB for load balancing of the IIS web services as opposed to use the CSM ?
Our web group is pushing to use NLB but I want to assess if that is the right thing to do and if the CSM can provide any value in this case ?
Thanks

I'm not sure what the MS solution can provide.
I would say the advantage is network based vs server based.
You want the inteligence in the server or the network ?
The CSS and CSM offers DoS protection mechanism.
You can do ssl offloading.
You can inspect url request and select a specific server based on some url, file extension, ...
I also would like to mention that the CSS11501 might be a cheaper solution than a CSM [escpecially if you do not have already a cat6k].
If you decide to go to CSS11501, it would be good to decide if you need ssl offload as the 11501 is not modular - so you'll need to buy this functionality immediately even if you only need it in the future.
The 11503 and 11506 are modular and you can ssl module later on.
Regards,
Gilles.

Data center design! What is ACE

Hi Everyone,
We are planning to have a datacenter. decided to buy 2 core 6500 series switches. what exactly is ACE? i understand it does loadbalancing. but then why wd not one use CSS instead on ACE. if we use ACE , can we eliminate the need of FWSM module. i read ACE has lots of security features. also it does web caching.. i may be wrong here.
So if we only have ACE in 6500, do we still need FWSM and some web caching engine (WASS). please also let me know some important features of ACE-Thanks

The ACE module is a loadbalancer that should eventually replace the CSS and CSM.
It comes with some firewall features but not all of them. Some users have enough FW features on the ACE module so they don't need the FWSM.
Others still need the FWSM.
Depends on what you need.
Finally, the ACE module does not come with caching option. Only the ACE Appliance - c4710 - has the caching and optimization features.
Gilles.

A business case for billing customer for asset use

One of my clients has a equipment which he hires it out for customers . Based on its usage (like if customers uses it for for more than some quantity ) then he wants to bill customer automatically . He says while service confirmation if quantity is of usage is more than some X unit , then automatic billing is to be triggered else no billing .
For equipment maintenance he wants PR to be created automatically from service order .After vendor invoicing , at service confirmation he wants to bill the customer with vendor invoice amount .
I am aware of PM order process , but can any one pl suggest step by step solution for the scenario ?
Thanks in advance
This is a duplicate [thread|http://forums.sdn.sap.com/thread.jspa?threadID=2084697&tstart=0]
Edited by: Paul Meehan on Nov 23, 2011 4:45 PM

regarding the selection of the servers based on the content requested, the current CSM is limited to match only 6 - 10 host name while the CSS has no limitation except the size of the config.
The only protocol that can be loadbalanced based on content - so layer 5-7 is HTTP and RTSP.
IF your citrix application makes use of these protocols, you can do L5/7 content rules.
My favorite between CSS and CSM is the CSM because of its ability to link a vserver/content rule to a vlan and because there is no such thing as garbage collection which is annoying on the CSS with long lasting flows.
Regards,
Gilles.

L4 Load Balancing

We have two servers in the different networks, not using DNS service.
And we want to use one server by backup.
Then, using L4 switch, is it possible?
What configuration and protocol will be necessary for L4 configuration?

This can be done in hardware with a Cisco CSS or CSM for the 6500.
It can also be done in software using IOS SLB in directed mode. This will NAT translate so you don't have to have the servers L2 attached. Of course the L2 attached way works as well.
Here is the documents for configuration.
http://www.cisco.com/en/US/products/sw/iosswrel/ps1833/products_feature_guide09186a0080080fd2.html#1160598
Please rate any helpful posts
Thanks
Fred

ACE 4710- Global Site load-balancing

Does the 4710 have a feature like global site load balancing like the CSS?
We have a site that will have 2 ISPs but we don't have our own block of IP addresses to advertise so we would need to use the ISPs IP blocks. We've had issues in the past advertising one ISPs IP block out another ISP so I was wondering if there was a way we could configure the ACE similar to the way the CSS did global site load balancing. Basically have the ACE act as a DNS server and respond back with the IP address of whichever ISP we wanted the end user to come in on and use a probe to ping the ISPs remote WAN IP to verify the circuit is passing traffic and resolve the correct IP if it's not.
Thanks

ACE does not have DNS server functionality.
And these methods are not supported on the CSS anymore.
The solution we offer is to install a Cisco GSS (Global Site Selector) which can interact with the ACE or CSS or CSM to determine which vip is up or down.
Gilles.

CE and HTTP 1.1 multiple GET

Hi all,
I configured a CE as forward incoming proxy but it seems that it can't cope with HTTP 1.1 pipelining:
If the client sends a number of consecutive HTTP GET in the same HTTP flow, the CE is not able to give back the content to the client.
The CE is running ACNS 5.1.3 (b15)
Thanks in advance
Fausto

Fausto,
a lot of content networking devices do not support pipelining. The main reason is the difficulty to implement and the fact that web browser usually do not use it and can turn this option on or off.
I assume in the future we will have to implement it but you should better check with your local Cisco representative if he can introduce a feature request on your behalf.
Only workaround is to disable pipelining on the client side.
FYI, if you use CSS or CSM layer 7 content rules, you will get into problem as well with pipelining.
Regards,
Gilles.

CSS/CSM to ACE conversion tool

Hi,
Are there any plans to release a standalone CSS/CSM to ACE config migration tool? (just like the CatOS to IOS tool)?
thanks,
Andrew.

Currently, there isn't one available yet, the conversion tool is embedded into the software image of the ACE. Not sure if there are plans to make it standalone, I have been looking for those answers as well.

Migrating CSS to CSM

Similar Messages

Maybe you are looking for