cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
453
Views
5
Helpful
4
Replies

CSS always points to 1 server

shibindong
Level 1
Level 1

please see my CSS configure, it is a basic config, but CSS always divert the traffic to 10.122.70.13, even it is down, while 10.122.70.14 untouched:

!************************* INTERFACE *************************

interface 1/1

trunk

vlan 25

vlan 70

interface 1/2

isc-port-one

interface 2/1

trunk

vlan 25

vlan 70

!************************** CIRCUIT **************************

circuit VLAN25

description "Management VLAN 25"

ip address 10.122.25.37 255.255.255.0

circuit VLAN70

ip address 10.122.70.30 255.255.255.0

!************************** SERVICE **************************

service Server13

ip address 10.122.70.13

port 514

protocol udp

active

service Server14

ip address 10.122.70.14

port 514

protocol udp

active

!*************************** OWNER ***************************

owner L3_Owner

content L3_Rule_syslog

add service Server13

add service Server14

vip address 10.122.70.15

balance leastconn

protocol udp

port 514

advanced-balance sticky-srcip

active

!*************************** GROUP ***************************

group syslog

vip address 10.122.70.15

add destination service Server13

add destination service Server14

active

CSS11503# sh service summary

Service Name State Conn Weight Avg State

Load Transitions

Server13 Alive 0 1 2 10

Server14 Alive 0 1 2 8

CSS11503# sh keepalive-summary

Keepalives:

AUTO_nexthop00002 State: Alive 10.122.25.1

AUTO_Server13 State: Alive 10.122.70.13

AUTO_Server14 State: Alive 10.122.70.14

CSS11503# sh flows

--------------- ----- --------------- ----- --------------- --- ------- ------

Src Address SPort Dst Address DPort NAT Dst Address Prt InPort OutPort

--------------- ----- --------------- ----- --------------- --- ------- ------

10.122.48.41 49 10.122.25.37 11219 0.0.0.0 TCP 2/1-25 Ipv4

10.122.70.2 2333 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

10.122.23.18 514 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

10.122.23.13 2307 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

10.122.23.17 514 10.122.70.15 514 10.122.70.13 UDP 1/1-70 1/1-70

Can someone let me know why?

thanks

4 Replies 4

I suspect its because of Source IP based stickiness. Are you hitting the VIP using the same source ip (e.g users are using a proxy servers using proxy's IP as source).

Syed Iftekhar Ahmed

I don't think it is the problem, even I suspend the server Server13, or shutdown server with 10.122.70.13, it still points to it.

after i remove the sticky srcip configure, not changed

what ever you do won't affect active connections.

You may have to kill all connections.

Gilles.

thanks, Gilles. after i restart the CSS I saw traffic been load balanced...

if there any command to restart the service? I cannot every time restart CSS. thanks...

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: