Cisco Application Velocity System User Guide (Software Version 5.0)
Preface

Table Of Contents

Preface

Audience

Organization

Related Documentation

New in Version 5.0

New in Version 4.0

Conventions

Obtaining Documentation

Cisco.com

Documentation DVD

Ordering Documentation

Documentation Feedback

Cisco Product Security Overview

Reporting Security Problems in Cisco Products

Obtaining Technical Assistance

Cisco Technical Support Website

Submitting a Service Request

Definitions of Service Request Severity

Obtaining Additional Publications and Information


Preface


Cisco Application Velocity System User Guide is the configuration, administration, and user's guide for the Cisco Application Velocity System (AVS).

This preface provides an overview of this document and discusses the conventions that are used in this document. It includes the following sections:

Audience

Organization

Related Documentation

New in Version 5.0

New in Version 4.0

Conventions

Obtaining Documentation

Documentation Feedback

Cisco Product Security Overview

Obtaining Technical Assistance

Obtaining Additional Publications and Information

Audience

This document is intended for system administrators who want to install and configure the Cisco AVS in their network data center to provide dynamic content acceleration and reduce outbound bandwidth usage.

This document is intended for those with previous Linux system administration experience.

Organization

This publication is organized as follows:

Chapter/Appendix
Description

"Product Overview"

Provides an overview of the Application Velocity System architecture.

"AVS Description"

Provides an overview and description of the Application Velocity System software components, features, and operation.

"Appliance Administration"

Describes administration details such as starting and stopping the server software, managing disk space usage, clock synchronization, etc.

"Command Line Interface"

Describes the CLI commands that you can use to configure basic network parameters and other operating characteristics.

"Configuration Reference"

Provides reference documentation on all application appliance configuration options.

"AppScreen Configuration"

Provides reference documentation on AppScreen configuration options.

"Management Console"

Describes how to use the web browser-based Management Console to administer one or more application appliances.

"Reporting"

Describes how to generate reports.

 

Note If you have installed only a Cisco AVS 3120 Application Velocity System, reporting, NMS integration, and database functions are not available and you will not see a Reports folder in the menu at the left side of the Management Console window. You must be running the Management Console on a Cisco AVS 3180 Management Station in order to see the Report items in the Management Console. This note does not apply to users who have performed software upgrades to AVS 5.0 from older software products or on the Velocity Appliance or AVS 3110.

"NMS Integration"

Describes how to configure and use the NMS (Network Management System) integration features that allow you to access AppScope statistics via SNMP to a NMS.

"Availability Manager Clustering"

Describes how to configure and use the Availability Manager, which provides a built-in high availability and load balancing capability for a cluster of application appliances.

"Database Maintenance"

Describes how to configure the automatic database archiving feature.

"Logs"

Describes the log files generated by the product.

"SNMP MIB"

Provides the SNMP (Simple Network Management Protocol) MIB (Management Information Base) for the application appliance.

"Deployment Options"

Describes various deployment options and scenarios.

"Frequently Asked Questions and Troubleshooting"

Provides answers to frequently asked questions and troubleshooting information.

"Anonymous Base File Statistical Model"

Describes a statistical model that quantifies the probability of any confidential data common to a set of users being present within an anonymous base file.

"Regular Expressions"

Describes the regular expression syntax used by application appliance.

"AppScreen Rules DTD"

Provides the document type definition (DTD) of the AppScreen rules XML files.

 

Provides a glossary of terms.


Related Documentation

In addition to this document, the AVS documentation set includes:

Document Title
Provides

Cisco AVS 3120 Application Velocity System Hardware Installation Guide

Information on installing the Cisco AVS 3120 Application Velocity System and getting it ready for operation.

Cisco AVS 3180 Management Station Hardware Installation Guide

Information on installing the Cisco AVS 3180 Management Station and getting it ready for operation.

Release Note for the Cisco Application Velocity System

Information on upgrading the AVS software, new features, operating considerations, and caveats for the AVS software.


New in Version 5.0

This section summarizes the changes in the AVS and documentation for version 5.0 and contains links to the sections where you can find more details:

The product was acquired by Cisco Systems and the user interface was rebranded to reflect this change.

The product now operates on two different hardware platforms: AVS 3120 and AVS 3180. The AVS 3120 device implements all product features except for reporting and database functions. The AVS 3180 device implements all Management Console features, including reporting and database functions.

A new command-line interface (CLI) that allows you to configure networking and related functions on the Cisco application appliance hardware. For details, see "Command Line Interface." If you are running the AVS 5.0 software on the AVS 3110 product or older hardware due to an upgrade, the CLI is not available.

On the AVS 3120 and AVS 3180 hardware, there is a new directory structure for application components, logs, and other files. This is reflected throughout the documentation where directories and paths are mentioned.

The mechanism that uploads FgnStatLog data to the management station database is new and improved. FgnStatLog data is collected on the AVS 3120 and is then sent to the AVS 3180 for loading into the management station database.

Syslog logging is now supported.

The meaning and default value of the FgnStatLogArchivingPolicy configuration keyword has changed; see Table 5-1. The default value of the FgnStatLogFileSizeLimit configuration keyword has also changed; see Table 5-1 for more information.

The access_log file is no longer generated by default. For more information about the access_log file, see "Logs."

The error_log file is no longer viewable from within the Management Console.

The User Agent report is no longer supported.

The product documentation is no longer included in the Management Console GUI. You can access the product documentation on Cisco.com under the AVS products.

A new software upgrade procedure is covered in the Release Note for the Cisco Application Velocity System.

New in Version 4.0

This section summarizes the changes in the software and documentation for version 4.0 and contains links to the sections where you can find more details:

The Availability Manager was added, which provides a built-in high availability and load balancing capability for a cluster of application appliances. For details, see "Availability Manager Clustering."

A business transaction feature was added to AppScope that allows you to group several individual transactions together as a set. Reporting on business transactions is described in the "Basic Reports" section, and defining business transactions is described in the "Defining Business Transactions" section.

The ability to define transaction groups that contain business transactions allows business transaction statistics to be made available via an NMS. This is described in the "Transaction Grouping" section.

The ability was added to measure server timings for requests where client-side timings are not available. For details, see the "Substitute Client Timing" section.

The ability to add unlisted parameters in the Web Configurator has been documented. See the "Global" section, the "Global" section, the "Application Class" section, and the "Application Class" section.

The ModifyXForwardedFor Application Class keyword has been added, as described in Table 5-2.

Information about generating a core file for troubleshooting purposes was added, as described in the "Generating a Core File" section.

Conventions

This document uses the following conventions:

boldface font

Commands and keywords are in boldface.

italic font

Variables for which you supply values are in italics.

[   ]

Elements in square brackets are optional.

{x | y | z}

Alternative keywords are grouped in braces and separated by vertical bars.

[x | y | z]

Optional alternative keywords are grouped in brackets and separated by vertical bars.

string

A nonquoted set of characters. Do not use quotation marks around the string, or the string will include the quotation marks.

screen font

Terminal sessions and information the system displays are in screen font.

boldface screen font

Information you must enter is in boldface screen font.

italic screen font

Variables for which you supply values are in italic screen font.

 

This pointer highlights an important line of text in an example.

^

The symbol ^ represents the key labeled Control. For example, the key combination ^D in a screen display means hold down the Control key while you press the D key.

<   >

Nonprinting characters, such as passwords, are in angle brackets.



Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in this manual.



Caution Means reader be careful. You might do something that could result in equipment damage or loss of data.

1. A numbered list indicates that the order of the list items is important.

a. An alphabetical list indicates that the order of the secondary list items is important.

A bulleted list indicates that the order of the list topics is unimportant.

An indented list indicates that the order of the list subtopics is unimportant.

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation DVD

Cisco documentation and additional literature are available in a Documentation DVD package, which may have shipped with your product. The Documentation DVD is updated regularly and may be more current than printed documentation. The Documentation DVD package is available as a single unit.

Registered Cisco.com users (Cisco direct customers) can order a Cisco Documentation DVD (product number DOC-DOCDVD=) from the Ordering tool or Cisco Marketplace.

Cisco Ordering tool:

http://www.cisco.com/en/US/partner/ordering/

Cisco Marketplace:

http://www.cisco.com/go/marketplace/

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Ordering tool:

http://www.cisco.com/en/US/partner/ordering/index.shtml

Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).

Documentation Feedback

You can send comments about technical documentation to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Cisco Product Security Overview

Cisco provides a free online Security Vulnerability Policy portal at this URL:

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

From this site, you can perform these tasks:

Report security vulnerabilities in Cisco products.

Obtain assistance with security incidents that involve Cisco products.

Register to receive security information from Cisco.

A current list of security advisories and notices for Cisco products is available at this URL:

http://www.cisco.com/go/psirt

If you prefer to see advisories and notices as they are updated in real time, you can access a Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:

http://www.cisco.com/en/US/products/products_psirt_rss_feed.html

Reporting Security Problems in Cisco Products

Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you might have identified a vulnerability in a Cisco product, contact PSIRT:

Emergencies — security-alert@cisco.com

Nonemergencies — psirt@cisco.com


Tip We encourage you to use Pretty Good Privacy (PGP) or a compatible product to encrypt any sensitive information that you send to Cisco. PSIRT can work from encrypted information that is compatible with PGP versions 2.x through 8.x.

Never use a revoked or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one that has the most recent creation date in this public key server list:

http://pgp.mit.edu:11371/pks/lookup?search=psirt%40cisco.com&op=index&exact=on


In an emergency, you can also reach PSIRT by telephone:

1 877 228-7302

1 408 525-6532

Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, Cisco Technical Support provides 24-hour-a-day, award-winning technical assistance. The Cisco Technical Support Website on Cisco.com features extensive online support resources. In addition, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not hold a valid Cisco service contract, contact your reseller.

Cisco Technical Support Website

The Cisco Technical Support Website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, 365 days a year, at this URL:

http://www.cisco.com/techsupport

Access to all tools on the Cisco Technical Support Website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:

http://tools.cisco.com/RPF/register/register.do


Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting a web or phone request for service. You can access the CPI tool from the Cisco Technical Support Website by clicking the Tools & Resources link under Documentation & Tools. Choose Cisco Product Identification Tool from the Alphabetical Index drop-down list, or click the Cisco Product Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: by product ID or model name; by tree view; or for certain products, by copying and pasting show command output. Search results show an illustration of your product with the serial number label location highlighted. Locate the serial number label on your product and record the information before placing a service call.


Submitting a Service Request

Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco TAC engineer. The TAC Service Request Tool is located at this URL:

http://www.cisco.com/techsupport/servicerequest

For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco TAC engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.

To open a service request by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447

For a complete list of Cisco TAC contacts, go to this URL:

http://www.cisco.com/techsupport/contacts

Definitions of Service Request Severity

To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.

Severity 1 (S1)—Your network is "down," or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.

Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.

Severity 3 (S3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.

Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Visit Cisco Marketplace, the company store, at this URL:

http://www.cisco.com/go/marketplace/

Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press at this URL:

http://www.ciscopress.com

Packet magazine is the Cisco Systems technical user magazine for maximizing Internet and networking investments. Each quarter, Packet delivers coverage of the latest industry trends, technology breakthroughs, and Cisco products and solutions, as well as network deployment and troubleshooting tips, configuration examples, customer case studies, certification and training information, and links to scores of in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/packet

iQ Magazine is the quarterly publication from Cisco Systems designed to help growing companies learn how they can use technology to increase revenue, streamline their business, and expand services. The publication identifies the challenges facing these companies and the technologies to help solve them, using real-world case studies and business strategies to help readers make sound technology investment decisions. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/ipj

World-class networking training is available from Cisco. You can view current offerings at this URL:

http://www.cisco.com/en/US/learning/index.html