WAN multi-site traffic shaping/QoS setup

We have multiple sites connected to a private WAN cloud (Layer 2) with varying CIR's.  Our QoS setup from our main site is 3 tiered in order to shape traffic to our overall CIR at the main site and shape traffic on different child classes based on the remote CIR.  Parent policy is applied to interface connected to the service provider.  We continue to have drops even though we don't seem to be reaching the CIRs for the remote sites or the CIR limit on the ciruit.  I've worked with TAC and we have adjusted queue limits based on drops but this is an ongoing issue.  Should there be a relationship between the queue limits and shape averages?
Sample config
NOTE: Shape averages are 95% of CIR
Policy-map Parent
class class-default
  shape average 142500000
  queue-limit 1024 packets
   service-policy ASE-Remotes-Policy
policy-map ASE-Remotes-Policy
Class site1
shape average 4750000
  queue-limit 400 packets
   service-policy ASE-QoS-Policy
Class site2
shape average 19000000
  queue-limit 1024 packets
   service-policy ASE-QoS-Policy
class site 3
shape average 95000000
  queue-limit 1024 packets
   service-policy ASE-QoS-Policy
multiple other sites
policy-map ASE-QoS-Policy
 class VoIP
  priority percent 40
  queue-limit 1024 packets
 class Citrix
  bandwidth percent 40
  queue-limit 1024 packets
 class class-default
  queue-limit 1024 packets

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Logically, what you're doing makes sense, but only Cisco "knows" how their queuing really works.  I've long suspected their embedded CBWFQ shapers have their own queues, which you may not have direct control over for setting their queue depths.
Yes, logically, there's a relationship between bandwidth (including shaping) and queue limits, but it depends on multiple factors.  Shaping is also a special case, because although you're trying to emulate a certain link bandwidth, it's not the same.

Similar Messages

  • Can Anyone Help Me Configure My Verizon (D-Link) DSL-2750B "Traffic Shaping" (QoS)?

    Well ... I just spent a wonderful hour and a half (not) bouncing around VZ technical support, etc. trying to get assistance regarding configuring my DSL router.* Between the low-quality Skype connection to India and my lack of success, I'm a little bummed out right now.
    Could one of you perhaps help me? I'm trying to configure a single, wire-attached network node (port 4 of the router) so that it can only consume up to 320 Kbps of my 750 Kbps (7.5 Mbps) DSL bandwidth ... no matter what. This results from this node consuming virtually all of the circuit's bandwidth when streaming or during bulk file transfers.
    I have tried to remedy the problem using priority with no discernible impact.
    The Quality of Service (QoS) element called Traffic Shaping (Services | QoS | Traffic Shaping), described on Page 51 of the VZ DSL-2750B User Manual , appears to be the ideal solution to my problem. Repeated attempts at activating this QoS have all resulted in no throttling of bandwidth consumption.
    My most recent attempt was to define the device on Port 4 as the DMZ host ... and then apply a new rule (320 TX, 320 RX) to this interface. Again, no joy.
    Does anyone have any experience with this service on this router?
    Am I chasing my tail trying to configure the router without validating that my circuit is not configured with "Fastpath (PSE) inactive"?
    If the circuit configuration is a potential problem, which office should I ask for at VZ customer service?
    Here is the information from the System page of the Router Control Panel:
      Gateway ID: PX2M1BC000000
      Software Version: 5.4.12.1.44
      Release Date: Feb 19 2012
      Platform: D-Link DSL-2750B
      Board Tag:... Ntag-5_4_12_1_44
      Compilation Flags:... LIC=/home/bat/bat/dlink_bcm96328_5_4_12_1/20120219_1343/conf/jpkg_bcm9636x_dlink.lic CONFIG_RG_PROD_IMG=y DIST=DLINK_DSL2750B
    I'll note that the Router provides a notification that "RX QOS might not operate when Fastpath (PSE) is active" when I update the router configuration page concerning Traffic Shaping. Because Fastpath is not mentioned in the User Manual, I'm guessing that Fastpath (PSE) might be a configurable attribute of the circuit servicing my PoP, but I have no idea if this is the case.
    I searched for relevant messages on this board ... without success. If this has already been addressed, please provide a link, and accept my apologies. (My Google-Fu tends to be weak.)

    The asterisk in the first post refers to the following summary of events:
    10:40 - Attempt to solve my configuration question using VZ chat begins.
    10:49 - VZ chat agent Danish refers me to phone support.  (Chat ID number is 020813176471 if you're with VZ and are interested.)
    10:50 - Call VZ phone support.
    11:02 - Talk with Angel.  Because she has not heard of, nor received training in, "traffic shaping," she says my question about configuring this VZ DSL modem must be addressed by "Premium Technical Support."  She transfers me.
    11:13 - Talk with Pamela.  Premium Technical Support only responds to questions about 3d party products.  Because my question concerns a VZ DSL modem, Basic Technical Support is responsible.  She transfers me.
    11:17 - Talk with Joe.  He says either the vendor (D-Link) or premium technical support is required.  Because I had already tried with D-Link (they referred me to Verizon, as this modem was built exclusively for VZ), I explained what I had already experienced, and described how I wanted "assistance configuring my VZ DSL modem, specifically a feature described on page 51 of the User Manual."  He transfers me.
    11:23 - The automated phone system asks for my 12-digit customer ID.  I wasn't able to find it fast enough, and rolled through to Financial Services.  Eventually Trig picked up, listened to my story, and transferred me to "Technical Support" providing the direct dial number, just in case (866.945.79xx).
    11:32 - Entered the phone queue.  Lots of hissing and clicks.
    11:35 - Talk with Monika.  (The voice clarity from this point onward was on the order of 1st-generation Skype.  Between the horrible language problem -- Monika is in India don'cha know -- and the lousy line quality, this was the most frustrating.)  No matter what I said, I couldn't convey the reason for my call.  I asked to talk with a supervisor, which Monika related was not possible.  She also related that she could not transfer me to an American POC or supervisor.
    12:01 - Hung up the phone ... and started down the path that led to my post immediately above.
    I was repeatedly queried about the account name and number throughout the process.  Conveying this information was especially challenging during the Indian call segment.

  • Traffic shaping G723 traffic between 2 companies

    Hi,
    Can someone put me on the right way to implement traffic shaping (QoS) for G723 traffic.
    Situation:
    Two companies connected to each other with a vpn tunnel. The hardware is Cisco 2621xm at the sublocation and on the hq location is an 2651XM.
    There is an GRE tunnel configured between the two sites. The GRE tunnel is up and working.
    On both sites there is an telephony system that can use G723 anr/or G711. Both telephony systems are connected to each other.
    Voice is working, but now we want to implement QoS for the VOIP connection.
    Has someone suggestions for me ?

    Hi,
    Appy a policy-map with the desired QoS policy to the tunnel interface.
    First of all, issue 'qos pre-classify' on the the tunnel itself, otherwise the congestion management mechanism will be useless.
    Cheers,
    Gabriel

  • QoS:: Traffic Shaping query

    Hi,
    I want to apply QoS:: Traffic shaping with CBWFQ to our enterprise network, i want to ask you that where i should apply classification and QoS policy i mean to which interface. We have a Central site router 3660 and branch sites connected either to F.R E1 or TDM E1. I tried to create class maps and policy maps at the central site router and apply the desired policy to the desired branch site at the subinterface at the main router but CBWFQ is NOT supported at the subinterfaces, Should I apply policy maps at each branch site router or where ???
    plz. HELP

    Its always better that the classification be done at the access sites in your case. QOS policies can be applied on any interface. I think they can be applied to sub interface aswell . Please refer to the configuration documents on Frame-Relay to learn how to apply QOS on Frame-relay interfaces.

  • QoS Traffic shaping and peak shaping

    Hi,
    Could somebody tell me what is the difference between traffic shaping and peak shaping?
    Kind Regards.

    Standard traffic shaping (the shape average command) will keep the average rate of the traffic to the limit you specify, which should be the committed rate of your circuit.
    Peak shaping will also do traffic shaping (using queues, etc), guaranteeing a minimum rate, but will allow traffic to levels to burst above your configured (committed) rate.
    From the documentation:
    Traffic shaping limits the rate of transmission of data. In addition to using a specifically configured transmission rate, you can use Generic Traffic Shaping (GTS) to specify a derived transmission rate based on the level of congestion.
    You can specify two types of traffic shaping; average rate shaping and peak rate shaping. Average rate shaping limits the transmission rate to the CIR. Using the CIR ensures that the average amount of traffic being sent conforms to the rate expected by the network.
    Peak rate shaping configures the router to send more traffic than the CIR. To determine the peak rate, the router uses the following formula:
    peak rate = CIR(1 + Be / Bc)
    where:
    •Be is the Excess Burst size.
    •Bc is the Committed Burst size.
    Peak rate shaping allows the router to burst higher than average rate shaping. However, using peak rate shaping, the traffic sent above the CIR (the delta) could be dropped if the network becomes congested.
    If your network has additional bandwidth available (over the provisioned CIR) and the application or class can tolerate occasional packet loss, that extra bandwidth can be exploited through the use of peak rate shaping. However, there may be occasional packet drops when network congestion occurs. If the traffic being sent to the network must strictly conform to the configured network provisioned CIR, then you should use average traffic shaping.
    Examples
    The following example sets the uses average rate shaping to ensure a bandwidth of 256 kbps:
    shape average 256000
    The following example uses peak rate shaping to ensure a bandwidth of 300 kbps but allow throughput up to 512 kbps if enough bandwidth is available on the interface:
    bandwidth 300
    shape peak 512000

  • QoS Class-Based Traffic Shaping (what is Be)

    Guys,
    two questions on the output below :
    1. What is the Be, is this an amount per interval that can go over Bc or is it the total amount of data that can be sent?
    ie, i interpret the command to read, Bc is the sustained rate per interval and Be is the sustained rate plus another amount, it I would use sommat like this
    shape average 128000 7936 8500
    this would show that I could send in total up to 8500 bits per interval
    or does it work like this ?
    shape average 128000 7936 564
    this would show that I could send in total up to 8500 bits per interval
    if it is the first one, you would not expect to be able to configure a Be of less than Bc?
    Also, how can you show what traffic is within the Bc and what is in the Be? ie, how much data is being sent out of contract?
    Many kind regards,
    Ken
    Metro2(config-pmap-c)#policy-map test1_cos
    Metro2(config-pmap)# class class-default
    Metro2(config-pmap-c)# shape average ?
    <8000-154400000> Target Bit Rate (bits per second), the value needs to be
    multiple of 8000
    percent % of interface bandwidth for Committed information rate
    Metro2(config-pmap-c)# shape average 128000 ?
    <256-154400000> bits per interval, sustained. Needs to be multiple of 128.
    Recommend not to configure it, the algorithm will find out
    the best value
    <cr>
    Metro2(config-pmap-c)# shape average 128000 7936 ?
    <0-154400000> bits per interval, excess. Needs to be multiple of 128. Bc
    will be used if you don't configure it.
    <cr>
    Metro2(config-pmap-c)# shape average 128000 7936 1000 ?
    <cr>
    Metro2(config-pmap-c)# shape average 128000 7936 1000
    Metro2(config-pmap-c)#^Z
    Metro2#
    Metro2#sh policy-map int fa 0/1 out
    FastEthernet0/1
    Service-policy output: test1_cos
    Class-map: class-default (match-any)
    5476 packets, 1934775 bytes
    30 second offered rate 0 bps, drop rate 0 bps
    Match: any
    Traffic Shaping
    Target/Average Byte Sustain Excess Interval Increment
    Rate Limit bits/int bits/int (ms) (bytes)
    128000/128000 1117 7936 1000 62 992
    Adapt Queue Packets Bytes Packets Bytes Shaping
    Active Depth Delayed Delayed Active
    - 0 5476 1934775 967 1448313 no
    Metro2#
    Metro2# conf t
    Enter configuration commands, one per line. End with CNTL/Z.
    Metro2(config)#policy-map test1_cos
    Metro2(config-pmap)# class class-default
    Metro2(config-pmap-c)# shape average 128000
    Metro2(config-pmap-c)#^Z
    Metro2#sh policy-map int fa 0/1 out
    FastEthernet0/1
    Service-policy output: test1_cos
    Class-map: class-default (match-any)
    5479 packets, 1934955 bytes
    30 second offered rate 0 bps, drop rate 0 bps
    Match: any
    Traffic Shaping
    Target/Average Byte Sustain Excess Interval Increment
    Rate Limit bits/int bits/int (ms) (bytes)
    128000/128000 1984 7936 7936 62 992
    Adapt Queue Packets Bytes Packets Bytes Shaping
    Active Depth Delayed Delayed Active
    - 0 5479 1934955 967 1448313 no
    Metro2#

    Guys,
    this is great stuff and I really apprciate it.
    The thing is this.
    One one URL it says the following :-
    For Class-based Shaping - How it Works
    When the Be size equals 0, the interface sends no more than the burst size every interval, achieving an average rate no higher than the mean rate. However, when the Be size is greater than 0, the interface can send as many as Bc + Be bits in a burst, if in a previous time period the maximum amount was not sent. Whenever less than the burst size is sent during an interval, the remaining number of bits, up to the Be size, can be used to send more than the burst size in a later interval.
    The other URL says :-
    DTS How It Works
    The Be size allows more than the Bc size to be sent during a time interval under certain conditions. Therefore, DTS provides two types of shape commands: average and peak. When shape average is configured, the interface sends no more than the Bc size for each interval, achieving an average rate no higher than the CIR. When the shape peak command is configured, the interface sends Bc plus Be bits in each interval.
    So which one is correct. I am really confused.
    As far as I am aware, I am running CB Shaping and not DTS, but when I go into the router configurations I get both options.
    average and peak ?
    Please see example :-
    Metro2(config)#policy-map test1_cos
    Metro2(config-pmap)#class class-default
    Metro2(config-pmap-c)#shap ?
    adaptive Enable Traffic Shaping adaptation to BECN
    average configure token bucket: CIR (bps) [Bc (bits) [Be (bits)]],
    send out Bc only per interval
    fecn-adapt Enable Traffic Shaping reflection of FECN as BECN
    fr-voice-adapt Enable rate adjustment depending on voice presence
    max-buffers Set Maximum Buffer Limit
    peak configure token bucket: CIR (bps) [Bc (bits) [Be (bits)]],
    send out Bc+Be per interval
    Many kind regards and thx for the help with this :)
    Ken

  • MPLS Traffic Shaping/Policing on PE-CE link

    Hi everyone,
    We are considering to upgrade our remote sites to MPLS/VPN type of connectivity from ATM/FRASI.
    Lets say we take a 10Mb link in the main office and 2-4Mb links for remote sites. Majority of servers (services) reside in main site, so majority of traffic flow will be from main site to remote sites.
    1. Since CE at main site sees all the remote sites "coming" from provider's PE, how can you handle traffic shaping/policing issues on this main site CE?
    2. Do you use MQC based on destination IP to apply shaping/policing configs on the CE-PE interface?
    3. Is it necessary to even bother with this question?
    Thank a lot.
    David

    BGP contains a multitude of knobs which allow a SP to control the traffic sent on one PE-CE link as opposed to the other. One can also make use of the Link Bandwidth extended community to control how traffic is distributed among multiple egress PE-CE links.
    The VPN scheme is of course compatible with the use of traffic engineering techniques (RSVP-TE based or otherwise) in the backbone network.
    A PE may support additional QoS support by means of one or more of the following methods:
    -i. One COS per PW End Service (PWES), mapped to a single COS PW at the PSN.
    -ii. Multiple COS per PWES mapped to a single PW with multiple COS at the PSN.
    -iii. Multiple COS per PWES mapped to multiple PWs at the PSN.

  • Exchange 2013 Multi Site Not SR/HA

    This is the first time we have deployed a multi site Exchange organization.  Here is the scenario and I am wondering if it is the correct one or if I should have done it a different way.
    We have a VPN setup between our corporate location and a satellite campus.  The satellite campus has it's own namespace and is a tree in our forest.  We have Exchange 2013 SP1 setup at the corp location.  We installed two Exchange 2013 SP1 servers
    at the satellite location in that domain in the same Exchange organization.  I was able to create a few linked users mailboxes (newly acquired and in process of user migration into our forest) and mail delivers between the two without issue.  But
    lately every new user will not receive email and they will be in the queue.  Does not matter if the email is from a corp user or a local user on the same mailbox server.
    We decided to do this because we want them to have all of their Exchange resources, email, CAS services and UM local to them, but they are still part of our system.  I am having a hard time finding why this is happening.  I also noticed that the emails
    sent from one satellite user to another is actually going through the corp hub transport server and not their local.  Sites and Services is setup with the correct subnets for each site.  I have verified the send and receive connectors.
    Is this scenario the best way to configure our organization or should we simply have created a second organization of their own and tried to share calendars, etc between the two?  All of our other services are centrally located so it only made sense that
    this should also work but before going live I wanted to see if this was the optimal way.  This is not a high availability or site resiliency plan.  No DAGs are used.  We are just one company with two separate very remote disjoint locations and
    even though we have a small VPN for services we would like to keep as much as possible local to that site.
    I have not been able to find information on this scenario.  Everything seems to point to SR/HA scenarios.  Any advice would be greatly appreciated.

    You can't create a second organization when the domain is in the same forest, so you shouldn't have done that.
    You're saying that SMTP messages are stuck in the queue?  That can be caused by any number of problems, but my experience is that it is most likely one of the following.  Look at the SMTP queue and see if any error code is listed, and post that
    here.
    1. In the main site, the site to which the messages are being sent, someone has modified the Default receive connector(s) in a way that the Exchange server can't connect.  The most likely issues would be modifying the PermissionGroups or RemoteIPRanges
    properties.  Best practice is to not modify the Default receive connector (except maybe to add AnonymousUsers to the PermissionGroups to allow inbound mail), and instead create a new connector for the special purpose with the connection limitations supplied.
    2. You have a firewall or relay device between the servers that's "helping" your SMTP connections (Cisco PIX firewalls are notorious for this, disable "SMTP Fixup") or breaking authentication.  The servers must be able to connect on port 25 without
    any molestation of the transactions.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  • ESYU: R12 - Order Management를 위한 Multi Org Access Control(MOAC) setup 방법

    Purpose
    Oracle Order Management - Version: 12.0 to 12.0
    Information in this document applies to any platform.
    R12의 Order Management에 대핸 Multi Org Access Control(MOAC) setup 방법에 대해 알아본다.
    Solution
    일반적인 MOAC Setup:
    1. HRMS에서 Security Profile을 정의:
    a. HRMS Management responsibility 선택
    b. HRMS Manager> Security> Profile로 이동
    c. Security Profile이 정의되어 있는지 확인 (OM responsibility 혹은 Site level로)
    d. 만일 아직 setup 되어져 있지 않다면 Operating Units를 입력
    e. 저장
    Note: 만일 위 d step과 같이 새로운 security profile을 생성하였다면 concurrent program 'Security List Maintenance'를 꼭 실행해야 한다.
    그렇지 않으면 multiple operating units가 OM forms의 LOV에 나타나지 않을 것이다.
    이 program은 multi-org access를 validating 하기 위해 사용하는 table에 data를 생성한다.
    Navigation: HRMS Management> HRMS Manager> Processes & Reports> Submit Process & Report> Security List Maintenance
    2. MO Profile Options setup:
    a. MO: Security Profile - 이 profile setting은 MOAC functionality를 활성화 한다.
    b. MO: Default Operating Unit - 이 Operating Unit는 OM forms과 report에서 default가 될 것이며, 이를 clear 하거나 변경하기 위해 LOV를 사용할 수 있다.
    Keep the MO profiles in sync:
    MO: Security Profile은 site와 responsibility level로 setting 할 수 있다.
    MO: Default Operating Unit은 site, responsibility, user level로 setting 할 수 있다.
    Application이 원하는대로 동작되지 않는것을 발견하면 이 profile options의 setting 값을 확인한다.
    3. OM setup:
    R12 upgrade 시 OM Profile에서 migrate 된 새로운 OM System Parameters를 확인:
    Order Management Super User> Setup> System Parameters> Values
    (See <<NOTE 393646.1>>-R12 Readiness Cheat Sheet: Migrated OM Profile Options)
    4. Form에서 hidden field 'Operatin Unit'를 활성화시키고 default folder로 저장:
    Sales Order and Order Organizer forms
    Quick Sales order and Organizer forms
    Sales Agreement forms
    Pricing and Availability form
    Other forms
    Note: Sales Order form에서 hidden field 'Operating Unit'를 'Show' 하기 전에 fotm안에 이 field를 위한 공간을 만들어 놓아야 한다.
    예를 들면 Customer Number field를 짧게 하거나 Operating Unit field로 이 field를 덮어씌울수 있다.
    Reference
    Note 393634.1

    Hi Larry,
    Have you considered adding the exec apps.mo_global.set_policy_context call to your connection's start-up script?
    Tools -> Preferences -> Database -> Filename for connection startup scriptNot the most flexible approach, so I'm not sure if it is appropriate for your application, but just a thought. You might create distinct connection names with different start-up scripts for each org_id.
    Regards,
    Gary
    SQL Developer Team

  • A doozy: DWCS5, WordPress 3.0 Multi Site, XAMPP: File discovery problems

    Just trying to get the related files function working properly.
    This is on a fresh local install of WordPress 3.0 beta 2, multi site activated using subdomains.
    It keeps insisting my testing server has the wrong settings even though both Live View and Live Code are working without a hitch.
    I set the local folder and testing folder to point to the same location. The files bar is even able to pick up a few links such as my scripts and the theme's css file, but none of the core WP files.
    Any suggestions? (Aside from using subdirectories? Client is adamant about subdomains.)

    Hi Adam
    Can you send us a bug report so we can get more details on your setup?:
    http://www.adobe.com/go/wish
    Thanks,
    David Alcala
    Dreamweaver QE

  • SQL Server 2012 Multi-Site clustering with 2 nodes for HA and DR

    Usually we setup 2 Node Prod cluster for Local HA and 1 or 2 Nodes in other data centre for DR
    Given that we have an option to setup multi-site / multi-subnet clustering from SQL 2008 R2/2012. I am planning to use just 2 nodes, 1 in prod data centre and 1 in DR data centre with 2 or 3 instances. This will act as both HA and DR solution.
    I would like to know if this solution is good, and any disadvantages, any best practices, etc.? By implementing this I can save some cost on physical servers.
    Following will be configured:
    * Will be using different subnets, quorum on different server with "Node and File Share Majority"
    * All virtual IPs will be registered for virtual name, and Subnetdelay, Subnet threshold will be modified accordingly
    * All nodes on same domain
    * Use SAN Disk with replication to DR site

    SQL 2008 R2 doesn't support multi-subnet clustering. You would still need 3rd party component like VLAN and Disk Replication. SQL 2012 is the first version to support multi-subnet clustering without using VLAN. you would still need disk replication hardware/software.
    Taken from my book
    Since nodes are often located in two different data centers at geographically dispersed locations, there is no shared storage between the nodes in a multi-site cluster. Clustering across two different data centers provides a higher level of availability and
    protection at the storage level as we have more than a single copy of the data.
    For SAN replication technology implemented in such clusters, the main activity is to keep data replicated between the sites. Typically, if we have nodes on two different sites, we would have two different network infrastructures and the nodes would be in
    different subnets. In such cases, if we are on a SQL Server version before 2012, we need to use third party VLAN (Virtual LAN) technology so that one IP address travels between two sites. This is called wide-IP. Companies hesitate with this solution because
    of the need to buy a third party solution to deploy the VLAN. Using VLAN technology means the same IP address would failover to the remote site in case of a local site disaster. Network administration might consider this as an overhead to maintenance and an
    extra piece of the networking component that needs to be secure.
    With SQL Server 2012 we do not need to use stretch VLAN technology but SAN replication is still needed for multi-site clustering. The OS version for this can be from Windows Server 2008 R2 and above. In this deployment, we can have a SQL virtual network
    name having an “OR” dependency on two different IP addresses. One address would be representing each subnet. With the “OR” dependency, if IP1 or IP2 is online we just use the network name. This is one of the Enterprise Editions only features.
    Other option which you can think of, without using 3rd party solutions would be AlwaysOn Availability Group. I have written details about it in my book.
    Balmukund Lakhani | Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
    This posting is provided "AS IS" with no warranties, and confers no rights.
    My Blog |
    Team Blog | @Twitter
    Author: SQL Server 2012 AlwaysOn -
    Paperback, Kindle

  • Windows 2008 R2 Multi-Site (geo) Cluster File Server

    We need to come up with a new HA file server (user drive data) solution complete with DR. It needs to be 2008 R2, cater for about 25TB of data, and be suitable for 500 users (nothing high end on I/O). I don't want to rely on DFS for any form of resilience
    due to its limitations for open files. We have two active-active data centers (a third can be used for file share quorum).
    We could entertain:
    1)
    Site1 - 2 x HP ProLiants with MSA storage, replicating with something like DoubleTake to a third HP Proliant at site 2 for DR.
    2)
    Site1 - 2 x HP ProLiants with local storage and VSA or HP StoreVirtual array (aka LeftHand), using SAN replication to site 2 where we could have a one or two node config of the same setup.
    Ideally I would like all 3/4 nodes in these configurations to be part of the same multi-site cluster to ensure resources like file shares are in sync. With two pieces of storage across this single cluster (either a DoubleTake or SAN replication to local
    disks in DR) will this work? How will the cluster/SAN fail over the storage?
    We do have VMWare 5.0/1 (not 5.5 yet). We don't have Hyper-V yet either. Any thoughts on the above, and possible alternatives welcome. HA failover RTO we'd like in seconds. DR longer, perhaps 30 mins.
    Thanks in advance for any thoughts and guidance.

    For automated failover between sites, the storage replication needs to have a way to script the failover so you can have a custom resource that performs the failover at the SAN level before the disks come online. 
    DoubleTake has GeoCluster which should accomplish this. I'm not sure about how automated Lefthand's solution is for multi-site clusters.
    VMware has Site Recovery Manager, though this is really an assisted failover and not really an automatic site failover solution. It's automated so that you can failover between sites at the push of a button, but this would need to be a planned failover.
    RTO of seconds might be difficult to accomplish as you need to give the storage replication enough time to reverse direction while giving the MS cluster enough time to bring cluster applications online. 
    When planning your multi-site cluster, I'd recommend going with 2 nodes on each site and then use the file share witness quorum on your 3rd site. If you only had one node on the remote site, the primary site would never be able to failover to the remote
    site without manually overriding the quorum as 1 node isn't enough to gain enough votes for quorum. With 2 nodes on each site and a FSW, each site has the opportunity to gain enough votes to maintain quorum should one of the sites go down.
    Hope this helps.
    Visit my blog about multi-site clustering

  • Traffic Shaping ASR9k in output interface.

    If we configure output traffic shaping  on an ASR 9000 interface the Service Policy is not installed, however in cco we can find that traffic shaping is supported see the next link:
    http://www.cisco.com/en/US/docs/routers/asr9000/software/asr9k_r4.2/qos/configuration/guide/b_qos_cg421asr_chapter_0100.html#ID407
    My configuration is:
    policy-map I4-TEST-OUT
    class class-default
      shape average 300000 bps
    interface GigabitEthernet0/0/1/10
    description <DESCRIPTION . CIRCUIT_ID>
    bandwidth 300
    service-policy input I4-TEST-IN
    service-policy output I4-TEST-OUT
    ipv4 address 1.1.1.1 255.255.255.252
    ipv4 verify unicast source reachable-via rx
    load-interval 30
    ASR9k#show policy-map int g0/0/1/10
    GigabitEthernet0/0/1/10 input: I4-TEST-IN
    Class class-default
      Classification statistics          (packets/bytes)     (rate - kbps)
        Matched             :                   0/0                    0
        Transmitted         : N/A
        Total Dropped       :                   0/0                    0
      Policing statistics                (packets/bytes)     (rate - kbps)
        Policed(conform)    :                   0/0                    0
        Policed(exceed)     :                   0/0                    0
        Policed(violate)    :                   0/0                    0
        Policed and dropped :                   0/0
    GigabitEthernet0/0/1/10 direction output: Service Policy not installed
    RP/0/RSP1/CPU0:CE.HTCHP.RPE01#
    as you can see we got a message "GigabitEthernet0/0/1/10 direction output: Service Policy not installed".
    If I use a class instead of the class class-default the policy-map is correctly installed,  If I use a child policy-map under the class class-default the policy is installed also.
    Do you know if it is a restriction to use traffic shaping in an output interface and using the default class?
    regards
    thanks

    I forgot to post the 15.x otuput; here it is.
    R2#sh policy-map int f0/0
     FastEthernet0/0
      Service-policy output: SHAPE_10M
        Class-map: class-default (match-any)
          14 packets, 1056 bytes
          5 minute offered rate 0000 bps, drop rate 0000 bps
          Match: any
          Queueing
          queue limit 64 packets
          (queue depth/total drops/no-buffer drops) 0/0/0
          (pkts output/bytes output) 14/1056
          shape (average) cir 10000000, bc 40000, be 40000
          target shape rate 10000000

  • Traffic shaping on 6509

    I have got a Catalyst 6509 switch with MSFC3 and IOS 12.2(18)SXD3.Can anyone suggest how to implement Layer2 traffic shaping in the MSFC.

    thanks Prashanth
    This helped me alot.This document indicates policing in MSFC is done on IP.But can we implement policing on MAC basis? Because my setup is such that I have a firewall module operationg in routed mode. I create L2 VLANs in MSFC and map the same onto the firewall module.As traffic shaping/policing cant be done on the firewall module i have to do it on the MSFC. Can policing help limiting bandwidth on L2 VLANs in this scenario?
    thanks again
    Ashish

  • Traffic-shaping for delay sensitive traffic

    Hello, I would like to verify the use of a traffic-shaping policy within an MQC. I was told that you need to apply a shaping policy in order for QoS to always be engaged and not simply during times of congestion. This apparently is critical when you have apps like VoIP. 
    On a similar note, i remember reading up on Ciscopress that you might NOT want to subject VoIP to any form of Shaping as this introdues delay and can cause Jitter.
    Below is a sample config. If you can post an authoritative source on CCO that explains this I would greatly appreciate it.
    Regards,
    -Mike
    policy-map QoS-Policy
     class realtime
      priority 512
        police 512000 conform-action transmit  exceed-action drop
     class preferred
      bandwidth remaining percent 40
      random-detect dscp-based
     class missioncritical
      bandwidth remaining percent 39
      random-detect dscp-based
     class trans-apps
      bandwidth remaining percent 16
      random-detect dscp-based
     class general
      bandwidth remaining percent 1
      random-detect dscp-based
     class class-default
      bandwidth remaining percent 4
      random-detect dscp-based
    policy-map shape-20MB
     class class-default
      shape average 2000000
      service-policy QoS-Policy
    interface Serial0/0/0
     service-policy output shape-20MB

    Disclaimer
    The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
    Liability Disclaimer
    In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
    Posting
    I was told that you need to apply a shaping policy in order for QoS to always be engaged and not simply during times of congestion.
    Nope.
    You only need to shape when you're dealing with a path where you know the end-to-end bandwidth is less the the egress interface's physical bandwidth and where you cannot manage congestion further downstream along the end-to-end path.
    On a similar note, i remember reading up on Ciscopress that you might NOT want to subject VoIP to any form of Shaping as this introdues delay and can cause Jitter.
    Semi-true.
    The problem can be mitigated by decreasing the shaper's Tc.  Also, if shaper doesn't account for L2 overhead (and I believe many do not), you'll need to shape "slower" than the nominal bandwidth.  The major problem with the latter, L2 overhead varies, as a percentage, based on packet size.  So, you can either allow for worst case, which will best guarantee VoIP service, but tends to give up much of the available bandwidth, or you can shape for average case, which will make VoIP latency and jitter more variable but usually not so much to exceed its service requirements.
    You can also bypass shaping for some traffic, but then you need to shape all your other traffic even slower to guarantee the non-shaped traffic bandwidth is always available.  As you're effectively reserving this bandwidth, it then becomes unavailable for your other traffic even when unused.
    An example of the latter:
    policy-map QoS-Policy
     class preferred
      bandwidth remaining percent 40
      random-detect dscp-based
     class missioncritical
      bandwidth remaining percent 39
      random-detect dscp-based
     class trans-apps
      bandwidth remaining percent 16
      random-detect dscp-based
     class general
      bandwidth remaining percent 1
      random-detect dscp-based
     class class-default
      bandwidth remaining percent 4
      random-detect dscp-based
    policy-map shape-20MB
     class realtime
      priority 512
        police 512000 conform-action transmit  exceed-action drop
     class class-default
      shape average 1950000
      service-policy QoS-Policy
    interface Serial0/0/0
     service-policy output shape-20MB
    NB: BTW, the above doesn't account for L2 overhead, and I wouldn't recommend it for other reasons, but it should show how you can bypass the shaper.

Maybe you are looking for

  • Read   table and loop at

    Hi EXpert, I have an internal table say itab and I need to fetch a single record with some given conditions. Hence I have used READ table statement , But on using this read table statement , I am unable to fetch the record :-(((( . It gives sy-subrc 

  • I've tried everything to get my phone out of recovery mode but nothing is working.

    Hi, I recently started updating my phone to I.O.S 8.1.3, and it was downloading and updating fine, then it said it had an error updating. I turned it off and on again to see if that would work, and when I clicked install it showed up as if it was tur

  • 1st Gen iPod Touch stuck, won't restore!

    I have an old iPod touch, 1st generation. I plugged it into my computer to restore it to original settings. My computer recognizes it, but says it has detected an iPod that is stuck in recovery mode. So the option is to restore the iPod. When I click

  • Can I add a second ATI 4870 to my 2009 Mac Pro?

    1. Can I add a second ATI 4870 to my 2009 Mac Pro? Sorry if posted already, I searched and Googled and could not find it. 2. What is the general consensus on the EVGA GTX285? Will this out perform the 4870? I read somewhere that the ATI needs additio

  • NEW F5, F55 Firmware Version v4.11 and AXS-R5 v4.1

    All, We are releasing firmware version 4.11 for the F5, F55 and version 4.1 for the AXS-R5 RAW recorder (Version 5 firmware is expected before the end of the year) Please note: If you proceed to update firmware, you must update both the camera and AX