ADC

High Availability FAQs

  1. What are the various ports used to exchange the HA-related information between the nodes in an HA configuration?

    In an HA configuration, both nodes use the following ports to exchange HA-related information:

    • UDP Port 3003, to exchange heartbeat packets.
    • TCP Port 3008 or 3010, for synchronization and command propagation.
  2. What are the conditions that trigger config synchronization?

    Synchronization is triggered by any of the following conditions:

    • The incarnation number of the primary node, received by the secondary, does not match that of the secondary node. Note: Both nodes in an HA configuration maintain a counter called incarnation number, which counts the number of configurations in the node’s configuration file. Each node sends its incarnation number to each other node in the heartbeat messages. The incarnation number isn’t incremented for the following commands:
      1. All HA configuration related commands. For example, add ha node, set ha node, and bind ha node.
      2. All Interface related commands. For example, set interface and unset interface.
      3. All channel-related commands. For example, add channel, set channel, and bind channel.
    • The secondary node comes up after a restart.
    • The primary node becomes secondary after a failover.
  3. What configurations aren’t synced or propagated in an HA configuration in INC or non-INC mode?

    The following commands are neither propagated nor synced to the secondary node:

    • All node specific HA configuration commands. For example, add ha node, set ha node, and bind ha node.
    • All Interface related configuration commands. For example, set interface and unset interface.
    • All channel related configuration commands. For example, add channel, set channel, and bind channel.

    Note:

    The following configurations are neither synced nor propagated only in HA in INC mode. Each node has its own:

    • SNIPs
    • VLANs
    • Routes (except LLB routes)
    • Route monitors
    • RNAT rules (except any RNAT rule with VIP as the NAT IP)
    • Dynamic routing configurations
    • Net profiles
  4. Does a configuration added to the secondary node get synchronized on the primary?

    No, a configuration added to the secondary node isn’t synchronized to the primary.

  5. What can be the reason for both nodes claiming to be the primary in an HA configuration?

    The most likely reason is that the primary and secondary nodes are both healthy but the secondary does not receive the heartbeat packets from the primary. The problem can be with the network between the nodes.

  6. Does an HA configuration run into any issues if you deploy the two nodes with different system clock settings?

    Different system-clock settings on the two nodes can cause the following issues:

    • The time stamps in the log file entries do not match. This situation makes it difficult to analyze the log entries for any issues.
    • After a failover, you might have problems with any type of cookie-based persistence for load balancing. A significant difference between the times can cause a cookie to expire sooner than expected, resulting in termination of the persistence session.
    • Similar considerations apply to any time-related decisions on the nodes.
  7. What are the conditions for failure of the force HA sync command?

    Forced synchronization fails in any of the following circumstances:

    • You force synchronization when synchronization is already in progress.
    • You force synchronization on a standalone Citrix ADC appliance.
    • The secondary node is disabled.
    • HA synchronization is disabled on the current secondary node.
    • HA propagation is disabled on the current primary node and you force synchronization from the primary.
  8. What are the conditions for failure of the sync HA files command?

    Synchronizing configuration files fail in either of the following circumstances:

    • On a standalone system.
    • With the secondary node disabled.
  9. In an HA configuration, if the secondary node takes over as the primary, does it switch back to secondary status if the original primary comes back online?

    No. After the secondary node takes over as the primary, it remains as primary even if the original primary node comes back online again. To interchange the primary and secondary status of the nodes, run the force failover command.

  10. What are the conditions for failure of the force failover command?

    A forced failover fails in any of the following circumstances:

    • You force failover on a standalone system.
    • The secondary node is disabled.
    • The secondary node is configured to remain secondary.
    • The primary node is configured to remain primary.
    • The state of the peer node is unknown.
  11. What types of traffic flows between the nodes of a high availability set-up?

    In a high availability set-up, traffic related to maintaining the high availability configuration flows between the two nodes. This traffic is of the following types:

    • Config synchronization
    • Config propagation
    • Data connection mirroring (For features that have connection failover enabled. For more information see, Connection failover.)
    • Load balancing persistent session synchronization
    • Session state synchronization
    • Session state ICA sessions (If ICA session reliability is enabled. For more information, see Session reliability.)
High Availability FAQs