Table Of Contents
Managing Sticky Groups
Viewing Sticky Groups
Adding a Sticky Group
Editing a Sticky Group
Viewing Cookie Sticky Groups
Adding a Cookie Sticky Group
Editing a Cookie Sticky Group
Viewing Header Sticky Groups
Adding a Header Sticky Group
Editing a Header Sticky Group
Viewing Netmask Sticky Groups
Adding a Netmask Sticky Group
Editing a Netmask Sticky Group
Viewing SSL Sticky Groups
Adding an SSL Sticky Group
Editing an SSL Sticky Group
Managing Sticky Groups
Sticky connections limit traffic to individual servers by allowing multiple connections from the same client to stick to the same real server using source IP addresses, source IP subnets, cookies, and the secure socket layer (SSL) or by redirecting these connections using HTTP redirect messages.
Configuring a sticky group involves configuring the attributes of that group and associating it with a policy. This ensures that connections from the same client matching the same policy use the same real server. The default sticky time value is 1440 minutes (24 hours).
Session persistence (or stickiness) refers to the functionality of sending multiple (simultaneous or subsequent) connections from the same client consistently to the same server. This is a typical requirement in certain load balancing environments.
The CVDM-CSM can uniquely identify clients and perform stickiness with the following methods:
•
Cookie sticky, offset and length—Allows you to configure a specific cookie name and automatically learn its value either from the client request HTTP header or from the server Set Cookie message.
By default CVDM-CSM learns the entire cookie value, this feature enables CVDM-CSM to learn only a portion of the cookie value.
•Cookie insert—Allows the CVDM-CSM to insert a cookie in the Set-Cookie header of the HTTP response. This enables cookie sticky even when the servers are not configured to set cookies. The cookie contains information that the CVDM-CSM uses to ensure persistence to a specific real server.
This section contains the following topics:
• Viewing Sticky Groups
• Viewing Cookie Sticky Groups
• Viewing Header Sticky Groups
• Viewing SSL Sticky Groups
• Viewing Netmask Sticky Groups
Note You can view Header Sticky Groups only in 12.2(18)SXD1 and later IOS versions.
Viewing Sticky Groups
Figure 9-1 Sticky Groups Page
You can view the existing configuration details in the configuration dialog box and edit the specified fields.
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups from the object selector. The Sticky Group table appears, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
ID of the sticky group to which the virtual server belongs.
|
Sticky Type
|
Type of sticky group.
The different types are:
•Cookie
•Header
•SSL
•Netmask
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Associated Policy
|
The list of policies to which this sticky group is associated.
|
Step 3 When you select any row, the configuration details of the corresponding sticky group appears, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
A unique ID for the sticky group.
|
Name
|
Name of the sticky group attached to the Sticky ID value.
|
Type
|
Type of sticky group.
The different types are:
•Cookie
•Header
•SSL
•Netmask
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Offset
|
Specifies the byte offset count.
|
Length
|
Specifies the length of the portion of the cookie.
|
Static Sticky
|
Value
|
Value of the static sticky.
|
Real Server IP Address
|
IP address of the real server.
|
Step 4 Select Cookie, SSL, Header or Netmask from the object selector under Sticky Groups, to view the configuration details of the corresponding sticky group.
From the Sticky Group dialog box, you can do the following:
•Click Add to add a new sticky group. For more information, see "Adding a Sticky Group" section.
•Click Edit to edit a sticky group. For more information, see "Editing a Sticky Group" section.
Related Topics
• Viewing Cookie Sticky Groups
• Viewing Header Sticky Groups
• Viewing SSL Sticky Groups
• Viewing Netmask Sticky Groups
Adding a Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups from the object selector.
Step 3 Click Add. The Add Sticky Group dialog box appears.
The columns that appear in the dialog box will vary according to the type of sticky group that you choose.
Related Topics
• Adding a Cookie Sticky Group
• Adding a Header Sticky Group
• Adding a Netmask Sticky Group
• Adding an SSL Sticky Group
Editing a Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups from the object selector.
Step 3 Click Edit or double click the selected sticky group to edit its configuration details. The Edit Sticky Group dialog box appears.
The columns that appear in the dialog box will vary according to the type of sticky group that you choose.
Related Topics
• Editing a Cookie Sticky Group
• Editing a Header Sticky Group
• Editing a Netmask Sticky Group
• Editing an SSL Sticky Group
Viewing Cookie Sticky Groups
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Cookies from the object selector. The Cookie Sticky Group table appears, displaying the following columns.
Column
|
Action/Description
|
Sticky ID
|
ID of the sticky group to which the virtual server belongs.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Associated Policy
|
The list of policies to which this sticky group is associated.
|
Step 3 When you select any row, the configuration details of the corresponding cookie sticky group appears in the Details pane, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
The unique ID of the sticky group.
|
Type
|
Type of sticky group. Here it would be Cookie.
|
Name
|
Name of the cookie sticky group.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Secondary Cookie Name
|
The secondary name of the sticky group attached to the sticky ID value.
|
Insert Cookie
|
The cookie insert feature allows the CVDM-CSM to insert a cookie in the Set-Cookie header of the header response.
|
Offset
|
Specifies the byte offset count.
|
Length
|
Specifies the length of the portion of the cookie.
|
Static Sticky
|
Value
|
Value of the static sticky.
|
Real Server IP Address
|
IP address of the real server.
|
From the Cookie Sticky Group dialog box, you can do the following:
•Click Add to add a new cookie sticky group. For more information, see Adding a Cookie Sticky Group.
•Select a cookie sticky group and click Edit to edit its configuration details. For more information, see Editing a Cookie Sticky Group.
•Select a cookie sticky group and click Delete to delete it.
Adding a Cookie Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Cookies from the object selector.
Step 3 Click Add to add a new cookie sticky group. The Add Sticky Group dialog box appears, displaying the following columns.
Column
|
Action/Description
|
Sticky ID
|
Enter the ID of the sticky group to which the virtual server belongs.
|
Name
|
Enter the name of the cookie sticky group.
|
Timeout
|
Enter the sticky timer duration (in minutes).
|
Secondary Cookie Name
|
Enter the secondary name of the sticky group attached to the Sticky ID value.
|
Insert Cookie
|
Select the check box to allow the CVDM-CSM to insert a cookie in the Set-Cookie header of the header response.
|
Offset/Length
|
Select the check box to enable the Offset and Length fields.
|
Offset
|
Specify the byte offset count.
|
Length
|
Specify the length of the portion of the cookie.
|
Static Sticky
|
Value
|
Enter the value of the static sticky.
|
Real Server IP Address
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the value and real server IP address.
•Select a row and click Delete to delete a static route.
Editing a Cookie Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Cookies from the object selector.
Step 3 Click Edit to edit a cookie Sticky Group. The Edit Sticky Group dialog box appears, displaying the following columns.
Column
|
Action/Description
|
Sticky ID
|
Unique ID of the sticky group to which the virtual server belongs.
|
Name
|
Enter the name of the cookie sticky group.
|
Type
|
Type of sticky group. Here it will be Cookie.
|
Timeout
|
Enter the sticky timer duration (in minutes).
|
Secondary Cookie Name
|
Enter the secondary name of the sticky group attached to the Sticky ID value.
|
Insert Cookie
|
Select the check box to allow the CVDM-CSM to insert a cookie in the Set-Cookie header of the header response.
|
Offset/Length
|
Select the check box to enable the Offset and Length fields.
|
Offset
|
Specify the byte offset count.
|
Length
|
Specify the length of the portion of the cookie.
|
Static Sticky
|
Value
|
Specify the value of the static sticky.
|
Real Server IP Address
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the value and real server IP address.
•Select a row and click Delete to delete a static route.
Viewing Header Sticky Groups
Note You can view Header Sticky Groups only in 12.2(18)SXD1 and later IOS versions.
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Header from the object selector. The Header Sticky Group table appears, displaying the following columns:
Column
|
Description
|
Sticky ID
|
Unique ID of the header Sticky Group.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Associated Policy
|
The list of policies to which this sticky group is associated.
|
Step 3 When you select any row, the configuration details of the corresponding header sticky group appears, displaying the following columns.
Field
|
Description
|
Sticky ID
|
Unique ID of the header Sticky Group.
|
Type
|
Type of sticky group. Here it will be header.
|
Name
|
Enter the name of the header sticky group.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Offset
|
Specify the byte offset count.
|
Length
|
Specify the length of the HTTP header.
|
Static Sticky
|
Value
|
Value of the static sticky.
|
Real Server IP Address
|
IP address of the real server.
|
From the Header Sticky Group dialog box, you can do the following:
•Click Add to add a new header Sticky Group. For more information, see the Adding a Header Sticky Group.
•Click Edit to edit a header Sticky Group. For more information, see the Editing a Header Sticky Group.
•Select a header Sticky Group and click Delete to delete it.
Adding a Header Sticky Group
Note You can view Header Sticky Groups only in 12.2(18)SXD1 and later IOS versions.
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Policies > Sticky Groups > Header from the object selector.
Step 3 Click Add to create a new header Sticky Group. The Add Sticky Group dialog box appears, displaying the following columns.
Column
|
Description
|
Sticky ID
|
Enter the ID of the header Sticky Group.
|
Name
|
Enter the name of the header sticky group.
|
Timeout
|
Enter the sticky timer duration (in minutes).
|
Offset/Length
|
Select the check box to enable the Offset and Length fields.
|
Offset
|
Specify the byte offset count.
|
Length
|
Specify the length of the HTTP header.
|
Static Sticky
|
Value
|
Value of the static sticky.
|
Real Server IP Address
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the value and real server IP address.
•Select a row and click Delete to delete a static sticky.
Editing a Header Sticky Group
Note You can view Header Sticky Groups only in 12.2(18)SXD1 and later IOS versions.
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Header from the object selector.
Step 3 Click Edit to edit a header sticky group. The Edit Sticky Group dialog box appears, displaying the following columns:
Field
|
Description
|
Sticky ID
|
ID of the header sticky group.
|
Name
|
Enter the name of the header sticky group.
|
Timeout
|
Enter the sticky timer duration (in minutes).
|
Offset/Length
|
Select the check box to enable the Offset and Length fields.
|
Offset
|
Specify the byte offset count.
|
Length
|
Specify the length of the HTTP header.
|
Static Sticky
|
Value
|
Value of the static sticky.
|
Real Server IP Address
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the value and real server IP address.
•Select a row and click Delete to delete a static sticky.
Viewing Netmask Sticky Groups
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Netmask from the object selector. The Netmask Sticky Group dialog box appears, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
ID of the netmask sticky group.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Associated Policy
|
The list of policies to which this sticky group is associated.
|
Step 3 When you select a netmask sticky group, its the configuration details appears, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
ID of the netmask sticky group.
|
Type
|
Type of sticky group. Here it will be Netmask.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Mask Type
|
It can be one of the following:
•Source
•Destination
•Both
|
Mask
|
Specifies the type of IP mask to be applied. It can be Class A, Class B, Class C, or Class D mask.
If it is not specified, the default for network mask is 255.255.255.255.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Static Sticky
|
Source IP
|
IP address of the source.
|
Destination IP
|
IP address of the destination.
|
Real Server IP
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a netmask sticky group. For more information, see Adding a Netmask Sticky Group.
•Click Edit to edit a netmask sticky group. For more information, see Editing a Netmask Sticky Group.
•Select a netmask sticky group and click Delete to it.
Adding a Netmask Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Netmask from the object selector.
Step 3 Click Add to add a new netmask sticky group. The Add Sticky Group dialog box appears, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
Enter the ID of the netmask sticky group.
|
Mask Type
|
From the list, select source, destination or both.
|
Mask
|
Specify the type of IP mask to be applied. It can be Class A, Class B, Class C, or Class D mask.
If it is not specified, the default for network mask is 255.255.255.255.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Static Sticky
|
Source IP
|
IP address of the source.
|
Destination IP
|
IP address of the destination.
|
Real Server IP
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the source IP address, destination IP address and the real server IP address.
•Select a row and click Delete to delete a static sticky.
Editing a Netmask Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > Netmask from the object selector.
Step 3 Click Edit to edit a netmask sticky group. The Edit Sticky Group dialog box appears, displaying the following columns.
Column
|
Action/Description
|
Sticky ID
|
ID of the netmask sticky group.
|
Type
|
Type of sticky group. Here it will be netmask.
|
Mask Type
|
From the list, select source, destination or both.
|
Mask
|
Specify the type of IP mask to be applied. It can be Class A, Class B, Class C, or Class D masks.
If it is not specified, the default for network mask is 255.255.255.255.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Static Sticky
|
Source IP
|
IP address of the source.
|
Destination IP
|
IP address of the destination.
|
Real Server IP
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the source IP address, destination IP address and the real server IP address.
•Select a row and click Delete to delete a static sticky.
Viewing SSL Sticky Groups
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > SSL from the object selector. The SSL Sticky Group dialog box appears, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
ID of the sticky group to which the virtual server belongs.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Associated Policy
|
The list of policies to which this sticky group is associated.
|
Step 3 When you select any row, the configuration details of the corresponding SSL sticky group appears, displaying the following columns:
Column
|
Action/Description
|
Sticky ID
|
ID of the SSL sticky group.
|
Type
|
Type of sticky group. Here it will be SSL.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Static Sticky
|
SSL ID
|
ID of the SSL map.
|
Real Server IP Address
|
IP address of the real server.
|
From the SSL sticky group dialog box, you can do the following:
•Click Add to add a new SSL sticky group. For more information, see Adding an SSL Sticky Group.
•Click Edit to edit an SSL sticky group. For more information, see Editing an SSL Sticky Group.
•Select a row and click Delete to delete SSL sticky group.
Adding an SSL Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or:
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > SSL from the object selector.
Step 3 Click Add to add a new SSL sticky group. The Add Sticky Group dialog box appears, displaying the following columns.
Column
|
Action/Description
|
Sticky ID
|
Enter the ID of the SSL sticky group.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Static Sticky
|
SSL ID
|
ID of the SSL map.
|
Real Server IP Address
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the SSL ID and real server IP address.
•Select a row and click Delete to delete the static route.
Editing an SSL Sticky Group
Step 1 Do one of the following:
•Click Home at the top of the window and click Policies under Services Dashboard.
Or
•Click Setup from the task bar and click Policies in the Setup pane.
Step 2 Select Sticky Groups > SSL from the object selector.
Step 3 Click Edit to edit a SSL sticky group. The Edit Sticky Group dialog box appears, displaying the following columns.
Column
|
Action/Description
|
Sticky ID
|
ID associated with the SSL sticky group.
|
Type
|
Type of sticky group. Here it will be SSL.
|
Timeout
|
Specifies the sticky timer duration (in minutes).
|
Static Sticky
|
SSL ID
|
ID of the SSL map.
|
Real Server IP Address
|
IP address of the real server.
|
From this dialog box, you can do the following:
•Click Add to add a static sticky by entering the SSL ID and real server IP address.
•Select a row and click Delete to delete a static sticky.
