Configuring Transparent Caching on the Content Switch Module

Similar documents
Configuring Secure (Router) Mode on the Content Switching Module

Configuring IOS Server Load Balancing with HTTP Probes in the Dispatched Mode

vserver vserver virtserver-name no vserver virtserver-name Syntax Description

Configuring Transparent and Proxy Media Redirection Using ACNS Software 4.x

RHI on the Content Switching Module Configuration Example

Content Switching Module with SSL Commands

Configure ACE with Source NAT and Client IP Header Insert

Catalyst Switches for Microsoft Network Load Balancing Configuration Example

Configuring Additional Features and Options

match protocol http cookie (cookie map submode)

Configuring Catalyst Switches for Polycom Conference Phones

Configuring the CSM-S SSL Services

Table of Contents. isco Configuring 802.1q Trunking Between a Catalyst 3550 and Catalyst Switches Running Integrated Cisco IOS (Nativ

CONFIGURATION DU SWITCH

Configuring ISL Trunking Between Catalyst Switches Running CatOS and Cisco IOS System Software

Configuring Different Modes of Operation

Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(10)

Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(9)

Support for policy-based routing applies to the Barracuda Web Security Gateway running version 6.x only.

How to Configure a Cisco Router Behind a Non-Cisco Cable Modem

Assignment Six: Configure Hot Standby Router Protocol. Brian Dwyer. Morrisville State College

Configuring Virtual Servers, Maps, and Policies

Configuring a Terminal/Comm Server

Using ANM With Virtual Data Centers

Configuring Real Servers and Server Farms

Configuring Real Servers and Server Farms

Configuration Professional: Site to Site IPsec VPN Between Two IOS Routers Configuration Example

Configuring Real Servers and Server Farms

Configuring Stickiness

VPN Connection through Zone based Firewall Router Configuration Example

Configuring a Cisco 827 Router to Support PPPoE Clients, Terminating on a Cisco 6400 UAC

Use NAT to Hide the Real IP Address of CTC to Establish a Session with ONS 15454

Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference

PIX/ASA 7.x and Later : Easy VPN with Split Tunneling ASA 5500 as the Server and Cisco 871 as the Easy VPN Remote Configuration Example

Configuring Dynamic Multipoint VPN Using GRE Over IPsec With OSPF, NAT, and Cisco IOS Firewall

Using NAT in Overlapping Networks

Cisco - VPN Load Balancing on the CSM in Dispatched Mode Configuration Example

Secure ACS Database Replication Configuration Example

Configuring Redundant Routing on the VPN 3000 Concentrator

Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and a Router (InterVLAN Routing)

Configuring Secure (Router) Mode, Redundancy, Fault Tolerance, and HSRP

Configuring IDS TCP Reset Using VMS IDS MC

cable modem dhcp proxy nat on Cisco Cable Modems

Lab 8.5.2: Troubleshooting Enterprise Networks 2

How to Configure IOS SLB Features

Cisco Virtual Office High-Scalability Design

Router Allows VPN Clients to Connect IPsec and Internet Using Split Tunneling Configuration Example

Configuring Route Health Injection

Static NAT Mapping with HSRP

Configuring Web Cache Services By Using WCCP

RPR+ on Cisco 7500 Series Routers

LAN to LAN IPsec Tunnel Between a Cisco VPN 3000 Concentrator and Router with AES Configuration Example

Configuring EtherChannel Between Catalyst 2900XL/3500XL Switches and CatOS Switches

IP Application Services Commands default (tracking) default {delay object object-number threshold percentage}

IOS Router : Easy VPN (EzVPN) in Network Extension Mode (NEM) with Split tunnelling Configuration Example

WCCPv2 and WCCP Enhancements

Configuring Network Side ISDN BRI Voice Interface Cards

Configuring IOS to IOS IPSec Using AES Encryption

Configuring Cache Services Using the Web Cache Communication Protocol

Device Interface IP Address Subnet Mask Default Gateway. Ports Assignment Network

Configuring Virtual Servers

Table of Contents. Cisco NAT Order of Operation

1 of :22

Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and Catalyst Switches Running CatOS

Table of Contents. Cisco IPSec Tunnel through a PIX Firewall (Version 7.0) with NAT Configuration Example

Lab - Troubleshooting VLAN Configurations (Instructor Version Optional Lab)

Configuring Virtual Servers, Maps, and Policies

Basic Router Configuration using SDM

SSG Configuration Example

CWA URL Redirect support on C891FW

Configure the ASA for Dual Internal Networks

Internet. SonicWALL IP Cisco IOS IP IP Network Mask

co Configuring PIX to Router Dynamic to Static IPSec with

No Service Password-Recovery

Three interface Router without NAT Cisco IOS Firewall Configuration

Chapter 6 Lab 6-1, First Hop Redundancy Protocols HSRP and VRRP INSTRUCTOR VERSION

II+/II+TS/II+10GE/III/IV/V/V 10GE

Configuring Hookflash Relay on FXS/FXO Voice Ports

Configuring Web-Based Authentication

Bi-directional ADN Deployment Using WCCP with Reflect Client IP [Configuration Sample] Ken Fritz (PSS)

Configuring VLAN Interfaces

Catalyst 6500 Series Switch Content Switching Module Command Reference

Zeeshan Naseh, CCIE No Haroon Khan, CCIE No. 4530

Oracle E-Business Suite 11i with Cisco ACE Series Application Control Engine Deployment Guide, Version 1.0

Communication Media Module IP Connectivity

Configuring VLAN Interfaces

IP MultiLayer Switching Sample Configuration

TACACS+ on an Aironet Access Point for Login Authentication Configuration Example

Lab 1. CLI Navigation. Scenario. Initial Configuration for R1

LANE, CES, and VBR PVCs in Shaped VP Tunnels

Policy Based Routing with the Multiple Tracking Options Feature Configuration Example

Effective with Cisco IOS Release 15.0(1)M, the ssg default-network command is not available in Cisco IOS software.

Configuring FXS Ports for Basic Calls

Oracle 10g Application Server Suite Deployment with Cisco Application Control Engine Deployment Guide, Version 1.0

Configuring Layer 2 Tunneling Protocol (L2TP) over IPSec

Configuring Web-Based Authentication

This document provides a sample configuration for X25 Over TCP.

Lab Configuring Basic RIPv2 (Solution)

Lab Configuring Per-Interface Inter-VLAN Routing (Solution)

Quick Start Guide, Cisco ACE 4700 Series Application Control Engine Appliance

Transcription:

Configuring Transparent Caching on the Content Switch Module Document ID: 19680 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify CSM debug and show Commands Content Engine show Commands Troubleshoot Related Information Introduction This document describes how to configure a Content Switch Module (CSM) for transparent caching, with Cisco Content Engines as caches. The transparent cache sits between the user and the server. The CSM is introduced between the user and the cache. The CSM is intelligent because of its Layer 5 ability to dynamically analyze content and determine if it is cacheable or not. These guidelines apply: If cacheable, the CSM load balances the request to the cache service based on the configured predictor. If not cacheable, the CSM sends it directly to the origin server. This avoids the performance hit that occurs when the non cacheable object goes to the cache, only to have its request redirected by the cache to the origin server. There are several balancing methods available, which depend upon how you want to distribute data over the caches (for example, whole URL, URL string, and so forth). The CSM can be configured with a list of file extensions to send to the cache. This list is called an Extension Qualifier List (EQL). Once you configure the slb policy CACHE POLICY under vserver TRANSPARENT, only requests with the file extensions that are listed in the map CACHEABLE url list are sent the cache. If a file extensions is not listed in the map CACHEABLE url list, then the request will hit slb policy NONCACHE POLICY. Prerequisites Requirements There are no specific requirements for this document.

Components Used The information in this document is based on these software and hardware versions: Catalyst 6000 Supervisor Cisco IOS Software Release 12.1(8)EX for Supervisor Engine 1 with MSFC1 (c6sup11 dsv mz.121 8a.EX) Catalyst 6000 CSM Software Release 2.1(2) (c6slb apc.2 1 2.bin) Cisco Content Engine 565 running Cisco Application and Content Networking System (ACNS) Software Release 5.1.3 The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command. Conventions For more information on document conventions, refer to the Cisco Technical Tips Conventions. Configure In this section, you are presented with the information to configure the features that are described in this document. Network Diagram This document uses this network setup: Transparent Caching on the CSM

Configurations This document uses these configurations: CSM Content Engine CSM Building configuration... Current configuration : 4500 bytes version 12.1 service timestamps debug uptime service timestamps log uptime no service password encryption hostname cat boot buffersize 126968 enable password cisco redundancy main cpu auto sync standard ip subnet zero ip name server 10.107.241.185 CSM located in slot 3. Module is running as active cache and client side on the same CSM VLAN 100. module ContentSwitchingModule 3 vlan 100 client ip address 10.107.249.251 255.255.255.248 gateway 10.107.249.249 End user located in CSM VLAN 200. vlan 200 server ip address 10.107.249.251 255.255.255.248 Probe setup to check the availability of the Content Engine default probe values. Interval is 300 seconds. probe CACHEPROBE tcp Serverfarm CACHE. Note: Issue the no nat server command. CSM needs to do a Layer 2 rewrite. Balancing predictor is hash URL. no nat server no nat client predictor hash url real 10.107.249.254 real 10.107.249.252

probe CACHEPROBE Serverfarm OUTBOUND. Note: Use the serverfarm OUTBOUND to bypass the cache. Requests that do not match the map CACHEABLE url list will use serverfarm OUTBOUND. The NAT server has no effect, as no reals are configured. Balancing predictor forward. serverfarm OUTBOUND nat server no nat client predictor forward Map CACHEABLE URL. map CACHEABLE url Extension Qualifier List (EQL). match protocol http url *.pdf match protocol http url *.fdf match protocol http url *.au match protocol http url *.bmp match protocol http url *.z match protocol http url *.gif match protocol http url *.html match protocol http url *.js match protocol http url *.mocha match protocol http url *.jpeg match protocol http url *.jpg match protocol http url *.jpe match protocol http url *.jfif match protocol http url *.pjpeg match protocol http url *.pjp match protocol http url *.mp2 match protocol http url *.mpa match protocol http url *.abs match protocol http url *.mpeg match protocol http url *.mpg match protocol http url *.mpe match protocol http url *.mpv match protocol http url *.vbs match protocol http url *.m1v match protocol http url *.pcx match protocol http url *.txt match protocol http url *.text match protocol http url *.mov match protocol http url *.tiff match protocol http url *.tar match protocol http url *.avi match protocol http url *.wav match protocol http url *.gz match protocol http url *.zip map NONCACHABLE url match protocol http url * policy CACHE POLICY url map CACHEABLE policy NONCACHE POLICY url map NONCACHABLE

serverfarm OUTBOUND Vserver TRANSPARENT. Note: Virtual IP is all zeros. Use of persistence rebalance for HTTP 1.1. Parse lengh set to 2000 bytes. Two policies added to vserver TRANSPARENT. vserver TRANSPARENT virtual 0.0.0.0 0.0.0.0 tcp www persistent rebalance parse length 2000 slb policy CACHE POLICY slb policy NONCACHE POLICY Fault Tolerance group 1. Used to configure redundancy between modules 3 and 4. ft group 1 vlan 250 priority 20 CSM located in slot 4. Module is running as standby cache and client side on the same CSM VLAN 100. module ContentSwitchingModule 4 vlan 100 client ip address 10.107.249.253 255.255.255.248 gateway 10.107.249.249 End user located in CSM VLAN 200. Note: Module 3 and 4 VLAN IP addresses are different. vlan 200 server ip address 10.107.249.253 255.255.255.248 Probe setup to check availability of Content Engine. Default probe values. Interval 300 seconds. probe CACHEPROBE tcp Serverfarm CACHE. Note: Issue the no nat server command. CSM needs to do a Layer 2 rewrite. Balancing predictor is hash URL. no nat server no nat client predictor hash url real 10.107.249.254 real 10.107.249.252 probe CACHEPROBE Serverfarm OUTBOUND

Note: Use the serverfarm OUTBOUND to bypass the cache. Requests that do not match the CACHEABLE URL list will use serverfarm OUTBOUND. The NAT server has no effect, as no reals are configured. Balancing predictor forward. serverfarm OUTBOUND nat server no nat client predictor forward Map CACHEABLE URL. map CACHEABLE url Extension Qualifier List (EQL). match protocol http url *.pdf match protocol http url *.fdf match protocol http url *.au match protocol http url *.bmp match protocol http url *.z match protocol http url *.gif match protocol http url *.html match protocol http url *.js match protocol http url *.mocha match protocol http url *.jpeg match protocol http url *.jpg match protocol http url *.jpe match protocol http url *.jfif match protocol http url *.pjpeg match protocol http url *.pjp match protocol http url *.mp2 match protocol http url *.mpa match protocol http url *.abs match protocol http url *.mpeg match protocol http url *.mpg match protocol http url *.mpe match protocol http url *.mpv match protocol http url *.vbs match protocol http url *.m1v match protocol http url *.pcx match protocol http url *.txt match protocol http url *.text match protocol http url *.mov match protocol http url *.tiff match protocol http url *.tar match protocol http url *.avi match protocol http url *.wav match protocol http url *.gz match protocol http url *.zip map NONCACHABLE url match protocol http url * policy CACHE POLICY url map CACHEABLE policy NONCACHE POLICY url map NONCACHABLE serverfarm OUTBOUND Vserver TRANSPARENT.

Note: Virtual IP is all zeros. Use of persistence rebalance for HTTP 1.1. Parse lengh set to 2000 bytes. Two policies added to vserver TRANSPARENT. vserver TRANSPARENT virtual 0.0.0.0 0.0.0.0 tcp www persistent rebalance parse length 2000 slb policy CACHE POLICY slb policy NONCACHE POLICY Fault Tolerance group 1. Used to configure redundancy between modules 3 and 4. ft group 1 vlan 250 interface GigabitEthernet1/1 shutdown interface GigabitEthernet1/2 shutdown CSM client side VLAN. Uplink to the Internet. interface FastEthernet2/1 switchport switchport access vlan 100 interface FastEthernet2/2 shutdown Cache Engine connected to FE2/3 and FE2/4. CSM client side VLAN. interface FastEthernet2/3 duplex full speed 100 switchport switchport access vlan 100 interface FastEthernet2/4 duplex full speed 100 switchport switchport access vlan 100 CSM Server side VLAN. Connection to end users. interface FastEthernet2/5 switchport switchport access vlan 200

MSFC VLAN 100. Content Engine and client uses this address as the default gateway. interface Vlan100 ip address 10.107.249.250 255.255.255.248 ip classless ip route 0.0.0.0 0.0.0.0 10.107.249.249 no ip http server line con 0 line vty 0 4 password cisco login end device mode content engine hostname ce1 http proxy incoming 80 Content Engine Accept proxy requests on port 80. http l4 switch enable Instructs the Content Engine to accept traffic that is directed to any destination IP. ip domain name cisco.com interface Fastethernet 0/0 ip address 10.107.249.254 255.255.255.248 exit interface Fastethernet 0/1 exit ip default gateway 10.107.249.250 primary interface Fastethernet 0/0 no auto register enable ip name server 10.107.241.185 username admin password 1 bvmdmmmmzapjy username admin privilege 15 authentication login local enable primary authentication configuration local enable primary End of ACNS configuration

Verify This section provides information that you can use to confirm that your configuration is working properly. Certain show commands are supported by the Output Interpreter Tool (registered customers only), which allows you to view an analysis of show command output. Note: Before you issue debug commands, refer to Important Information on Debug Commands. CSM debug and show Commands show module show arpprovides the Server Load Balancing (SLB) Address Resolution Protocol (ARP) cache listing. show connsprovides SLB connection information. show dfp Provides SLB Dynamic Feedback Protocol (DFP) manager information. show ftprovides SLB Fault Tolerance (FT) information. cat# show module csm 3 ft FT group 1, vlan 250 This box is active priority 20, heartbeat 1, failover 3, preemption is off cat# show module csm 4 ft FT group 1, vlan 250 This box is in standby state priority 10, heartbeat 1, failover 3, preemption is off show map Provides SLB map information. show memoryprovides SLB memory information. show natpoolsprovides SLB client NAT pool information. show policyprovides SLB policy information. show probeprovides SLB probe information. show realsprovides SLB real server information. show serverfarmsprovides SLB server farm information. show staticprovides SLB static server NAT information. show statsprovides SLB statistics. show statusprovides SLB status information. show stickyprovides SLB sticky database. show tech supportprovides SLB technical debug information. show vlanprovides SLB VLAN information. show vserversprovides SLB virtual server information. show module csm 3 vservers name transparent detail TRANSPARENT, state = OPERATIONAL, v_index = 10 virtual = 0.0.0.0/0:80, TCP, service = NONE, advertise = FALSE idle = 3600, replicate csrp = none, vlan = ALL max parse len = 2000, persist rebalance = TRUE conns = 0, total conns = 47 Default policy: server farm = CACHE sticky: timer = 0, subnet = 0.0.0.0, group id = 0 Policy Tot Conn Client pkts Server pkts CACHE POLICY 44 249 203 NONCACHE POLICY 37 111 37

(default) 0 0 0 module csm?configures the CSM for transparent caching. Also specifies the location of the CSM that you are configuring. cat(config)# module csm? <1 6> slot where the CSM module resides vserver proxyconfigures the virtual server. cat(config module csm)# vserver proxy cat(config slb vserver)#? vserver advertiseadvertise the virtual IP address. vserver clientsets the client IP addresses. vserver defaultsets a command to its defaults. vserver exitexits server load balancing submode. vserver idlesets idle timer. vserver Enables service for this virtual server. no vservernegates a command or sets its defaults. vserver parse lengthsets the maximum Layer 7 parse length. vserver persistentenables or disables connection persistence. vserver replicatesets vserver fault tolerance replication. vserver serverfarmsets real server farm. vserver slb policysets server load balancing policy. vserver stickysets sticky timer. vserver url hashsets prefix/suffix match for url hash algorithm. vserver virtualconfigures a virtual server. serverfarm cache Configures the server farm. cat(config module csm)# serverfarm cache cat(config slb sfarm)#? serverfarm bindidbinds ID for DFP. serverfarm defaultsets a command to its defaults. serverfarm exitexits SLB server farm submode. serverfarm failactionaction to take on real server failure. serverfarm natsets the address translation for SLB. no serverfarmnegates a command or sets its defaults. serverfarm predictorsets the load balancing prediction algorithm. serverfarm probeconfigures for the use of a probe. serverfarm real Configures a real server. serverfarm redirect vserverconfigures an SLB redirect virtual server. Content Engine show Commands show statistics http savingssaves the statistics from the Content Engine. ce1# show statistics http savings Statistics Savings Requests Bytes Total: 635 2764599 Hits: 113 254517 Miss: 505 2483555 Savings: 17.8 % 9.2 %

As you can see, there were 113 hits. Troubleshoot There is currently no specific information available to troubleshoot this configuration. Related Information Cisco ACNS Software Product Support Content Networking Technology Support Technical Support & Documentation Cisco Systems Contacts & Feedback Help Site Map 2014 2015 Cisco Systems, Inc. All rights reserved. Terms & Conditions Privacy Statement Cookie Policy Trademarks of Cisco Systems, Inc. Updated: Jan 30, 2006 Document ID: 19680