This message was deleted.
# citrix-netscaler
s
This message was deleted.
n
I'm monitoring the flows to and from that VM with a hypervisor based tool and there is no inbound flow except the one from my management station accessing the web GUI of the ADC. The only outbound flows are backend services that have been defined in the config and are expected. Yet it's showing 25 Mbps throughput.
c
What license is installed and have you enabled features like WAF and IP Rep? They do constant connections to the internet if allowed.
n
It's an enterprise license, nothing fancy enabled, just the type of services you'd typically see for load balancing and ICA proxy. I can see all network flows going to and from the ADC and nothing is talking to it, except my browser. The only outbound traffic is what's been defined as a service. I doubt my browser on the dashboard or config pages is generating that kind of bandwidth and there's nothing "outbound" (0 to 1 Mbps at any point in time) so it's not like it's getting extra chatty with some backend server.
f
Looks like there is a lot of incoming broadcast type of traffic that is then dropped by the ADC. What is your hypervisor ? It could be a virtual switch in promiscious mode
n
Nutanix AHV / KVM. Which the other ADC its replacing is also running on and not seeing this issue, but there are some differences in the config such as PBR's and ACL's on some of the lbvips etc. None that I figure would result in an elevated amount of "inbound" bandwidth.
Well I believe I've isolated the "what" but not the "why". I removed two lbvips that load balance LDAPS for two separate domains and the traffic dropped to 0 Mbps throughput in/out, which is what I'd expect to see for an ADC not being used. I removed the first and the traffic dropped significantly from ~25 Mbps to ~7 Mbps, and then after removing the second lbvip it dropped to 0. The LDAPS load balancing config on this new ADC is setup the same as it is on the ADC it's replacing, but the other isn't experiencing the same issue.