NetScaler StoreFront Monitors Over SSL Fails Intermittently

NetScaler StoreFront Monitors Over SSL Fails Intermittently

book

Article ID: CTX205160

calendar_today

Updated On:

Description

  • Monitor of type "STOREFRONT" on NetScaler fails intermittently. 

  • This results in StoreFront services flapping on NetScaler. 

  • The StoreFront services are added for secure connection i.e. port 443.

  • This issue is observed both in NetScaler 10.5 and 11.0 firmware.

  • The event logs on the NetScaler showed the following messages:
    1011788       0           2445          1        0 mon_tot_failed MonServiceBinding_x.x.x.x:443_(lb_mon_stg)(lb_svc_sf_a) Thu Apr 23 19:24:37 2015 (Aggr)
    1011789       0           2393          1        0 mon_tot_failed_code MonServiceBinding_x.x.x.x:443_(lb_mon_stg)(lb_svc_sf_a) Thu Apr 23 19:24:37 2015 (Aggr)

    40014   141 PPE-0 MonServiceBinding_x.x.x.x:443_(lb_mon_thin)(lb_svc_sf_a): DOWN; Last response: Failure - Probe failed. Thu Apr 23 20:50:17 2015
    40022    29 PPE-0 MonServiceBinding_x.x.x.x:443_(lb_mon_thin)(lb_svc_sf_a): UP; Last response: Success - Probe succeeded. Thu Apr 23 20:50:47 2015

Resolution

This is caused by an issue with an existing Perl (script) module that does not calculate the time accurately resulting in the incorrect reporting of timeout.

This issue has been fixed in the following firmware versions:

  • 10.5.60.7nc
  • 11.0.64.34nc

Workaround: If your deployment allows non-secure connections, use a non-secure StoreFront monitor.

For more information refer to issue #559164 and #582153 in NetScaler release notes.

Issue/Introduction

NetScaler StoreFront Monitors Over SSL Fails Intermittently