After upgrade to 14.1 ADC GUI response is slow resulting in operation timeout with tacacs auth

After upgrade to 14.1 ADC GUI response is slow resulting in operation timeout with tacacs auth

book

Article ID: CTX585679

calendar_today

Updated On:

Description

>After upgrading Citrix ADC to version 14.1-8.50 from version 13.1, users are facing management GUI access issue with Tacacs authentication. Almost all pages are opening very slowly and are giving error Operation timeout.

>Disabling RbaOnResponse resolves the issue as a workaround

image.png


 

Resolution

  1. Please follow the below steps to apply the solution after login to the ADC.
>shell
#sysctl -w netscaler.aaad_max_workers=1024
#killall -SIGKILL nsaaad
  1. To check the current value run below command
#sysctl -a | grep netscaler.aaad_max_workers
  1. Add the same command in the file /nsconfig/rc.netscaler to persist the reboots.

Problem Cause

When RbaOnResponse is enabled, each command execution triggers an nsaaad process for authorization. In the latest version there is a limitation introduced with the  maximum concurrent nsaaad processes to 512 to manage CPU usage. However, during quick page switching in the GUI, the command execution count surpasses this limit, leading to dropped authorizations and causing the 'operation timeout' issue.