Troubleshooting traffic spike on loadbalancer
Can someone help me how can i troubleshoot this issue?
Customers are accessing a VIP:8080 and there are around 2k connections on the VIP.
But at 10:00AM CET everyday, connections are going form 2k to 5k+ for 10mins and then going to back to normal.
Traffic flow is as below
Intranet > DC WAN router > Firewall > router > Loadbalancer > Backend servers.
Please help me how to identify this sudden spike in traffic.
Do you happen to know the source IP of all those connections?
I would start by looking at the connection table during that spike. Something like this...
tmsh show sys connection cs-server-addr <VIP> cs-server-port 8080
If everything comes from the same IP it could possibly narrow your tshoot down to a specific client.
Best of luck!