connection resets happening to web services servers when clients uses load balanced url. Need help to capture traffic.
Hi,
I'm seeing complaints saying that there are intermittent resets happening when the client uses load balanced url. Out of 60 web request sent from clients in 30 minutes, 8 to 9 requests were getting dropped intermittently. And I'm asked to identify the issue with resets and root cause.
Here is the configuration of the VIP. can someone suggest me the best way to capture the traffic when the resets happen. Bear in mind, I cannot run tcpdump for all the 30 minutes as it could generate a huge log file or pcap file. Please suggest me the appropriate procedure or tcpdump commands that I can use to capture the traffic when resets happen and I can give them the reason behind the that resets - can use ringdump process (I don't know how to do it though). Please suggest. thanks.
ltm virtual vs_gpdef_app_amvescap_ha {
destination 10.196.1.15:http
ip-protocol tcp
mask 255.255.255.255
persist {
simple-18000 {
default yes
}
}
pool pool_GPDEF_app_amvescap_ha
profiles {
tcp-gccp { }
}
source 0.0.0.0/0
source-address-translation {
type automap
}
vs-index 66
}
ltm pool pool_GPDEF_app_amvescap_ha {
members {
10.194.232.127:http {
address 10.194.232.127
session monitor-enabled
state up
}
10.194.232.134:http {
address 10.194.232.134
session monitor-enabled
state up
}
}
monitor http
}
ltm profile tcp tcp-gccp {
abc enabled
ack-on-push disabled
app-service none
close-wait-timeout 5
cmetrics-cache enabled
congestion-control high-speed
defaults-from tcp
deferred-accept disabled
delayed-acks enabled
dsack disabled
ecn disabled
fin-wait-timeout 5
idle-timeout 2000
ip-tos-to-client 0
keep-alive-interval 1800
limited-transmit enabled
link-qos-to-client 0
max-retrans 8
md5-signature disabled
md5-signature-passphrase none
nagle enabled
pkt-loss-ignore-burst 0
pkt-loss-ignore-rate 0
proxy-buffer-high 16384
proxy-buffer-low 4096
proxy-mss disabled
proxy-options disabled
receive-window-size 32768
reset-on-timeout enabled
selective-acks enabled
send-buffer-size 32768
slow-start enabled
syn-max-retrans 3
time-wait-recycle enabled
time-wait-timeout 2000
timestamps enabled
verified-accept disabled
zero-window-timeout 20000
}