CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > High-End Security > VPN-1 VSX
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-02-05
sisu-up sisu-up is offline
Member
 
Join Date: 2007-03-07
Location: Detroit, Michigan
Posts: 37
Rep Power: 0
sisu-up has an average reputation (10+)
Default VSX R60 SPLAT Cluster Failure

Yesterday I had a total failure of a two node cluster using SPLAT. It appeared that after the first member crashed the standby followed within one minute. Cluster is VSX R60 HFA01 and is hot-standby only. Total of 8 customer VS's totaling about 4000 users.

The cluster required a power cycle to recover, the console was blank screen no response from keyboard. These are Dell 2850 with Intel Pro1000 Quad Card. Using the on-board Intel nics for sync and mgt. Layer 3 only, no bridging. The only thing I've found so far is a log message stating the cluster is under high-load and will stop logging to the CLM.

Looks like the largest customer was pushing 15k connections steady and the bandwidth throughput was less then 300 mbps. Check Point hasn't said much yet, has anyone seen anything like this using SPLAT and VSX?
Reply With Quote
  #2 (permalink)  
Old 2008-06-17
sisu-up sisu-up is offline
Member
 
Join Date: 2007-03-07
Location: Detroit, Michigan
Posts: 37
Rep Power: 0
sisu-up has an average reputation (10+)
Default Re: VSX R60 SPLAT Cluster Failure

I really am having some issues with my R60 VSX clusters. Since Feb 2008 I've had a total 7 cluster crashes. One cluster seems to crash every 7 days. This particular cluster doesn't have a high load at all, it processes about 9 million connections per day. Nothing ever shows up in the messages file before the crash, and the first attempt at getting a stack trace failed, the failed cluster member would not respond to a laptop on the console.

The only thing I've found is a lot of high load messages in the log files of each VS, about stopping log forwarding due to high load. Top and cpstat -f os cpu, does not show a high load and the MDS and MLM are not loaded at all.

Check Point has not seen this before, and need a stack trace to debug the issue.

The hardware is Dell 2850's and run R60 VSX. Any insite on this would really be helpful.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 07:21.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0