Inuse Memory increasing due to MEM_SSLVPN despite no Gateway config on Netscaler
Article ID: CTX217459
Updated On:
Description
High Memory utilisation due to MEM_SSLVPN pool on Netscaler. There is no SSLVPN or Gateway related config done on Netscaler.
If you run below command from CLI on Netscaler from shell prompt we will notice MEM_SSLVPN pool is consuming lot of memory:
nsconmsg -s ConMEM=2 -d oldconmsg | more
MEM_SSLVPN 4294967295 1721996032(40.09% 67.08%) 0 0 0
Resolution
This issue is fixed in 11.0-69.x and 11.1-49.x builds. Issue ID for your reference is 651140.
Below are some of the artefacts which can be checked to further confirm if it is a similar issue. For any further queries please contact Citrix Support so that this can be confirmed.
a) Please confirm from logs that you are seeing MEM_SSLVPN consuming lot of memory as shown below:
Please run the below command from CLI on Netscaler from shell prompt scroll down and notice if MEM_SSLVPN pool is consuming lot of memory as shown below:
nsconmsg -s ConMEM=2 -d oldconmsg | more
MEM_SSLVPN 4294967295 1721996032(40.09% 67.08%) 0 0 0
b) Make sure you do not have any Gateway vserver or SSLVPN related config on the Netscaler.
c) Check in ns.conf if you have any traffic policy as shown below:
add tm trafficAction traf_act_OWA -appTimeout 1 -SSO ON -formSSOAction sso_form_owa -persistentCookie OFF -InitiateLogout OFF -kcdAccount citrix_test
Below are some of the artefacts which can be checked to further confirm if it is a similar issue. For any further queries please contact Citrix Support so that this can be confirmed.
a) Please confirm from logs that you are seeing MEM_SSLVPN consuming lot of memory as shown below:
Please run the below command from CLI on Netscaler from shell prompt scroll down and notice if MEM_SSLVPN pool is consuming lot of memory as shown below:
nsconmsg -s ConMEM=2 -d oldconmsg | more
MEM_SSLVPN 4294967295 1721996032(40.09% 67.08%) 0 0 0
b) Make sure you do not have any Gateway vserver or SSLVPN related config on the Netscaler.
c) Check in ns.conf if you have any traffic policy as shown below:
add tm trafficAction traf_act_OWA -appTimeout 1 -SSO ON -formSSOAction sso_form_owa -persistentCookie OFF -InitiateLogout OFF -kcdAccount citrix_test
Problem Cause
This is a memory leak issue caused due to SSO using KCD as enabled in traffic action which is invoking the MEM_SSLVPNIssue/Introduction
This article talks about the issue where we notice Inuse memory is increasing gradually. From the logs when we check we find MEM_SSLVPN pool is consuming lot of memory but there is no SSL VPN or Gateway related config on the Netscaler.
Was this article helpful?
Yes
No
Powered by
