Any questions? Post'em
Hi everyone, If you have any questions or comments about the performance report or it's supporting documents, please feel free to post them here. I'm one of the engineers who helped to create the performance report, and I'll be actively monitoring this forum to answer questions. Mike Lowell
Throughput per virtual server
Hi! Not quite sure if my question fits this forum, but I'm trying anyway :) I'm trying to measure performance through our LTMs. Is there any way to get throughput numbers per virtual server? The default graph in the dashboard gives a good indication of the total traffic, but it would be nice to be able to drill down to a specific vip. Is it perhaps possible to query with snmp? /NiklasView current bandwidth for particular interface
Is it possible (with some built in command or such) to through ssh see how much bandwidth (in mbit/s or so) a F5 BigIp unit utilizes over a particular interface? ifconfig can be used to see number of packets and tcpdump can be used to capture the actual traffic but I want for debugging purposes see how many mbit/s there are for a particular interface.
Ideas on how to measure performance hit of SSL on a VIP?
Running LTM 9.3.1, users complain of response time problems for websites through it, as compared to hitting the website bypassing the F5. Lots of places to look, I know, but we use a tool called HTTPWatch and it points out that on a web page load that might have 50 objects, some of them (always gifs and jpgs), the "time chart" or breakdown of where the time was spent to download that item shows an unusually long time in the TCP Connect portion of the Get. HTTPWatch help says "Connect is the time required to create a TCP connection to the web server (or proxy). If a secure HTTPS connection is being used this time includes the SSL handshake process. Keep-Alive connections are often used to avoid the overhead of repeatedly connecting to the web server." SSL Overhead is one part of this slice of time, and when my testers go around the F5 they're not hitting the server using SSL (and time to load a page is cut in half or better). I set up a test VIP to try and prevent SSL Offload, however some of the redirects on the page still go to HTTPS for a subset of GIFs (I haven't gotten Redirect Rewrite to rewrite all the Redirects correctly). The thing I notice, which drives this question, is that it's pretty consistent when there's a "[1 to 3 second] delay" in grabbing an object on the webpage, it's always when that object is at HTTPS://.... and never when the object is just HTTP://... So I'm wondering if you have any thoughts on how to measure just how much overhead/delay SSL processing adds. It's not consistently on the same objects for each repeat of the same page loading, but there's always at least one or two objects SSL protected on the page that throw out one of these relatively long delays. Changing our website to not use SSL is not an option, but if our LTM is the bottleneck in it's ability to handle the SSL TPS (which according to the onboard Performance graph is <=20), I'd like to know that. If you look at the screenshot attached to this post, the picture really is worth a thousand words.
High CPU usage?
Hi, one of our ASM biggest customer is worried about the performance of his new LTM + ASM machine. They own a pair of 6900 running 9.4.8.HF4 with LTM + ASM (full of licensed capabilities). And what they can see in performance graphics is almost (always) a baseline of 50% cpu usage for CPU00, CPU01 and CPU02 (CPU03 is 100% by TMM, that's normal). If we have a look at CPU usage with top we can see the following: 3 bd processes, 2 running in CPU 1 and 2 in CPU 2, using 12.2% CPU. TMM running in CPU 3 is using 25% of CPU (normal), mysqld is just using 01% of CPU... As I can see it, there is no justification for that 50% that is always shown in performance graphics. The machine has a baseline of 3K HTTP connections with peaks of 5K. New connections has a baseline of 200 each second with peaks of 500. SSL transactions are 200 per second, with peaks of 300. CPU usage graphics show 50% of constant usage with peaks of 70% (matching new connections and HTTP transactions peaks). ASM CPU utilization graphics show 12% of constant CPU usage, with peaks of 20% (matching the other peaks). As I can see it, maybe just system CPU usage (showed by top as 16-23% for the 3 CPU) is a little high, but the customer is not sure. Any appreciation?About 100% tmm cpu (50% in dual CPU) usage for BIG-IP 6400 LTM
Hello, We use two F5 BIG-IP 6400 LTM for Active-Standby mode. I've found that our tmm use 50% CPU resource in 6400 (in fact it's 100% in cpu01). First question is, is this normal behavior ? Both active & standby LTM use 100% in single cpu. Second question is how many req/sec does 6400 LTM can handle ? Thanks,
iRule test & analysis tool
I'm looking for an iRule analyzer that would allow testing simple traffic scenarios independent of configuring a BIG-IP device. The user would specify values for system variables such as [HTTP:uri] and [HTTP:cookie] and the analyzer would output rewrite url and name of pool routed to , or redirect url , etc. Also would be nice if the tool would also analyzed the iRule for optimum code and performance load testingMRTG graph for CPU utilization on GTM and LTM
We were using MRTG to monitor the cpu utilization on out older BigIP boxes and have now converted to GTM. Obviously the mrtg graph is now broken and I am going to have to rebuild it. Does anyone know how to generate the graph. It seems as though I have to add a bunch of different oids in order for this to work. This is no small feat since I am a novice at mrtg.
How to test APM access policy locally?
Very new to BIG-IP. I have downloaded the BIG-IP VE and imported it into VirtualBox. Followed the basic configuration mentioned here https://f5.bravais.com/s/vf4XckakhbTbCRUwa2sb I created an APM access policy to use AD. But is there any way to test it? Some internal URL which simulates the real world behavior? As I am on VBox, any virtual server I create, is directly accessible from local. How do I get BIG-IP into the picture?