Forum Discussion

Stefan_Klotz's avatar
Stefan_Klotz
Icon for Cumulonimbus rankCumulonimbus
Nov 20, 2013

Connection limit on poolmembers with CMP -> wrongly displayed

Hi,

 

I currently have configured a connection limit of 400 on each of the poolmembers, but when I check the statistics the current value "stops" at 200, means 50%. When I change to 600 it "stops at 300.

 

Any idea why and where this comes from? Is this maybe related to a OneConnect profile with /32-mask, which is in place on the VS?

 

And if I'm correctly informed, access to this VS is going through Akamai (if that's maybe important).

 

Based on the fact 200 < 400 the status is green, instead of expected yellow.

 

Thanks for your help or further ideas! If you need any further information, please let me know.

 

Ah, it's running on a 3600 with 10.2.3HF1

 

Ciao Stefan :)

 

3 Replies

  • Richard__Harlan's avatar
    Richard__Harlan
    Historic F5 Account
    Nov 20, 2013

    Connection limits are done per TMM, the 3600 has two TMM running so each gets a connection limit of 50% the value so with a limit of 600 each TMM would enforce a limit of 300. If the connections are coming in from a single ip address it would go to one TMM. Also if the VIP is in CMP mode single you will also see this

     

    http://support.f5.com/kb/en-us/solutions/public/8000/400/sol8457.html?sr=33312690 http://support.f5.com/kb/en-us/solutions/public/7000/700/sol7751.html

     

  • Stefan_Klotz's avatar
    Stefan_Klotz
    Icon for Cumulonimbus rankCumulonimbus
    Nov 21, 2013

    Hi Richard,

     

    ok makes sense, but how does this behavior reflect the status of the poolmember? I mean, will a poolmember then ever become yellow? Or in other words, what do I have to configure in such environments, that the poolmembers still have the status yellow (unavailable) if the connection limit is reached? Do I have to disable CMP for this VIP then or are there other possibilities?

     

    Thank you!

     

    Ciao Stefan :)

     

  • Stefan_Klotz's avatar
    Stefan_Klotz
    Icon for Cumulonimbus rankCumulonimbus
    Nov 22, 2013

    I found out that traffic for the affected VIP will be handled by just one TMM, as there is an iRule in place, which refers to a DGL with "$::". Means CMP should be disabled for this VIP.

     

    But how does this result in the connection limit and why is it showing only 50%?

     

    Or do I have to configure then the connection limit on the VS? But then I can't use the "active_members < 1" to catch all dropped requests to redirect them to a sorrypage.

     

    Thanks for your help!

     

    Ciao Stefan :)