I have some problem here which is some users can access and some users cannot access to the Webserver using https (SSL). The users cannot access is not totally cannot access. For example morning session user A can login and do transaction but on afternoon session user A cannot access and have to wait for a couple of time before can access to webserver again. Is there any fine tunnig did i need to change for the configuration above ?. What is the best sticky-inact timeout time ?
you should capture a sniffer trace to verify what is going on.
I feel like one of your server is having problems, so with your example, user A would connect to web1 and have no problem, and with your sticky timeout, user A will keep using web1 until the sticky entry timeout.
So, when connection again in the afternoon, user A is sent to web2 which is having a problem and the connection fail.
But for the time of sticky-timeout, A will be sent to web2 and the connections will fail.
Thanks for your reply. Is there any solution or config change to make sure load balancer will not send to web2 which is having problem?. What i mean is load balancer can define which server is dead and alive.
The CSS will be sending pings to the servers by default. If it receives a response, it will mark the server as alive. If the webserver software is having problems, the CSS will still be keeping it up if it responds to a ping.
You can change the keepalive to HTTP, which will give a better indication. Have a look at this URL for more details:
Topology & Design:
Two ACI fabrics
Stretching VLANs using OTV
Both fabrics are advertising BD subnets into same routing domain
Some BDs(or say VLANs) are stretched, but some are not.
Endpoints can move betwee...
VMware Trunk Port Group is supported from ACI version 2.1
VMM integration must be configured properly
ASA device package must be uploaded to APIC
ASAv version must be compatible with ACI and device package version
Topology &Design:Traffic flow within same fabric:Endpoint moves to Fabric-2Bounce Entry Times OutTraffic Black-holedSummarySolutionAppendix:
In the Previous articles of ACI Automation, we are using Postman/Newman a...