We have a LD-416 running software version 4.2.4. The LD is setup to balance port 80 connections to seven real servers behind one virtual IP.
Lately, we have had an issue where if enough simultaneous connections hit the virtual IP address, the LD fails to distribute them. Our web server logs are showing one or two out of the seven carrying the brunt of the simultaneous connections. It is never the same two servers during any such instance.
When this occurs, we'll often see large (hundreds) unchanging connection numbers to each server according to "show real" where our normal load is between 20-40. Checking the monitoring on our web servers, they aren't registering anything beyond the normal connections. What is really troubling is that if we reset web services on the web servers during this time, the individual servers never show as failed like they do during normal operation.
Mind you, the traffic is valid traffic. It is coming from people opening a link in a newsletter we have sent. The page they are viewing is not very intensive, so the web servers should be able to handle the load, were it being properly distributed. However, near as we can determine, it seems that the Local Director is crumbling under the sudden load.
Is there a limit to the number of simultaneous connections an LD-416 can process? Is there anything in the settings I can tweak to help it along?
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...