RE: WCCP and WAE question regarding high cpu utilization.

From: Kambiz Agahian <kagahian_at_ccbootcamp.com>
Date: Sun, 2 May 2010 14:31:46 -0700

Usually using some default gateway, IP masquerading, port redirection
and IPtable tricks; it was not known as a hassle-free solution though.

But Carlos as you know there is a HUGE difference between WAAS and Squid
so you can't replace a WAAS/Stealhead with Squid *EVER*. Probably the
only similarity would be "sort of" Web object caching that they all do
at a minimum...Probably just 5% of what a WAAS/Riverbed box can do.

--------------------------
Kambiz Agahian
CCIE (R&S), CCSI, WAASSE, RSSSE
Technical Instructor
CCBOOTCAMP - Cisco Learning Solutions Partner (CLSP)
Email: kagahian_at_ccbootcamp.com
Toll Free: 877-654-2243
International: +1-702-968-5100
Skype: skype:ccbootcamp?call
FAX: +1-702-446-8012
YES! We take Cisco Learning Credits!
Training And Remote Racks: http://www.ccbootcamp.com

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
Carlos G Mendioroz
Sent: Sunday, May 02, 2010 2:19 PM
To: Radioactive Frog
Cc: Cisco certification
Subject: Re: WCCP and WAE question regarding high cpu utilization.

Frog, question:
how are you diverting the traffic to the squid ?

Cause the WAE is an independent CPU, should not bother. If you are not
using WCCP, then you are sending everything through the squid box ?

-Carlos

Radioactive Frog @ 1/05/2010 5:46 -0300 dixit:
> Yes, WCCP with WAE module will spike your router's CPU. i end up with
> throughing out the WAE module and use a linux box running Squid.
redirect
> traffic to a high speed machine. the router is not enough for WCCP.
>
>
> On Sat, May 1, 2010 at 6:42 AM, Group Study <gs_at_netengineer.org>
wrote:
>
>> I'm using a nme-wae card in an ISR router and using wccp to redirect
>> traffic, all traffic.
>>
>> I notice that the CPU utilization gets to 100% and when I do a "show
>> ip wccp" i notice CEF switched packets are zero and process switched
>> packets are many, leading me to believe that's the reason for high
>> cpu...
>>
>> Any suggestions on how to fix this?
>>
>> Global WCCP information:
>> Router information:
>> Router Identifier: 192.168.133.21
>> Protocol Version: 2.0
>>
>> Service Identifier: 61
>> Number of Service Group Clients: 1
>> Number of Service Group Routers: 1
>> Total Packets s/w Redirected: 141892759
>> Process: 141892759
>> CEF: 0
>> Service mode: Open
>> Service Access-list: -none-
>> Total Packets Dropped Closed: 0
>> Redirect Access-list: WAAS_PERMIT_ANY
>> Total Packets Denied Redirect: 0
>> Total Packets Unassigned: 7881
>> Group Access-list: -none-
>> Total Messages Denied to Group: 0
>> Total Authentication failures: 0
>> Total Bypassed Packets Received: 784
>>
>> Service Identifier: 62
>> Number of Service Group Clients: 1
>> Number of Service Group Routers: 1
>> Total Packets s/w Redirected: 138317602
>> Process: 137859756
>> CEF: 457846
>> Service mode: Open
>> Service Access-list: -none-
>> Total Packets Dropped Closed: 0
>> Redirect Access-list: WAAS_PERMIT_ANY
>> Total Packets Denied Redirect: 168333787
>> Total Packets Unassigned: 9094
>> Group Access-list: -none-
>> Total Messages Denied to Group: 0
>> Total Authentication failures: 0
>> Total Bypassed Packets Received: 732
>>
>>
>>
>> !
>> interface FastEthernet0/0
>> ip address 192.168.70.161 255.255.255.252 secondary
>> ip address 10.160.1.3 255.255.255.0
>> ip wccp 61 redirect in
>> ip pim sparse-dense-mode
>> ip cgmp
>> duplex full
>> speed 100
>> standby 1 ip 10.160.1.2
>> standby 1 timers 5 15
>> standby 1 priority 105
>> standby 1 preempt
>> standby 1 track Multilink1
>> end
>>
>> interface Multilink1
>> description
>> bandwidth 4096
>>
>> ip wccp 62 redirect in
>> ip flow ingress
>> ip flow egress
>> no peer neighbor-route
>> ppp chap hostname abc
>> ppp multilink
>> ppp multilink links minimum 1
>> ppp multilink group 1
>> ppp multilink fragment disable
>> service-policy output QOS
>> end
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>>
Received on Sun May 02 2010 - 14:31:46 ART

This archive was generated by hypermail 2.2.0 : Tue Jun 01 2010 - 07:09:52 ART