CSM: the Use of the Predictor forward serverfarm and associated vserver

Unanswered Question
Jan 17th, 2008
User Badges:


Just wanted to have clarified the use of the following serverfarm and vserver for "direct access":

# Configure serverfarm for direct-access.

Router(config-module-csm)#serverfarm SERVER-SUBNETS

Router(config-slb-sfarm)#predictor forward



Configure vserver for direct-access.

Router(config-module-csm)#vserver DIRECT-ACCESS

Router(config-slb-vserver)#virtual any

Router(config-slb-vserver)#serverfarm SERVER-SUBNETS




as documented in this doc:


I've noticed that this is standard config, however i just need clarification on the direction that access is allowed. That is does the above config:

1. Allow direct connections to the frontend network (i.e. user side) from the real servers (backend) , or

2. Does this allow direct connections to the real servers (backend) from the frontend network (i.e. user side)?

My assumption is the latter, i.e. the config allows connections to the reals servers (backend) directly from users - is this correct?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Gilles Dufour Wed, 01/23/2008 - 23:13
User Badges:
  • Cisco Employee,

to be correct it allows connection from anywhere to the subnet

realservers are always routed.

They don't need anything special to allow their outbound connections.

Client on the other end are dropped by default until the traffic hits a vserver.

So, to allow direct access to your reals from the client, you need a vserver similar to what you showed.



This Discussion