cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
455
Views
5
Helpful
4
Replies

CSS always points to 1 server

shibindong
Level 1
Level 1

please see my CSS configure, it is a basic config, but CSS always divert the traffic to 10.122.70.13, even it is down, while 10.122.70.14 untouched:

!************************* INTERFACE *************************

interface 1/1

trunk

vlan 25

vlan 70

interface 1/2

isc-port-one

interface 2/1

trunk

vlan 25

vlan 70

!************************** CIRCUIT **************************

circuit VLAN25

description "Management VLAN 25"

ip address 10.122.25.37 255.255.255.0

circuit VLAN70

ip address 10.122.70.30 255.255.255.0

!************************** SERVICE **************************

service Server13

ip address 10.122.70.13

port 514

protocol udp

active

service Server14

ip address 10.122.70.14

port 514

protocol udp

active

!*************************** OWNER ***************************

owner L3_Owner

content L3_Rule_syslog

add service Server13

add service Server14

vip address 10.122.70.15

balance leastconn

protocol udp

port 514

advanced-balance sticky-srcip

active

!*************************** GROUP ***************************

group syslog

vip address 10.122.70.15

add destination service Server13

add destination service Server14

active

CSS11503# sh service summary

Service Name State Conn Weight Avg State

Load Transitions

Server13 Alive 0 1 2 10

Server14 Alive 0 1 2 8

CSS11503# sh keepalive-summary

Keepalives:

AUTO_nexthop00002 State: Alive 10.122.25.1

AUTO_Server13 State: Alive 10.122.70.13

AUTO_Server14 State: Alive 10.122.70.14

CSS11503# sh flows

--------------- ----- --------------- ----- --------------- --- ------- ------

Src Address SPort Dst Address DPort NAT Dst Address Prt InPort OutPort

--------------- ----- --------------- ----- --------------- --- ------- ------

10.122.48.41 49 10.122.25.37 11219 0.0.0.0 TCP 2/1-25 Ipv4

10.122.70.2 2333 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

10.122.23.18 514 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

10.122.23.13 2307 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

10.122.23.17 514 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

Can someone let me know why?

thanks

4 Replies 4

I suspect its because of Source IP based stickiness. Are you hitting the VIP using the same source ip (e.g users are using a proxy servers using proxy's IP as source).

Syed Iftekhar Ahmed

I don't think it is the problem, even I suspend the server Server13, or shutdown server with 10.122.70.13, it still points to it.

after i remove the sticky srcip configure, not changed

what ever you do won't affect active connections.

You may have to kill all connections.

Gilles.

thanks, Gilles. after i restart the CSS I saw traffic been load balanced...

if there any command to restart the service? I cannot every time restart CSS. thanks...