Access Gateway seeing negative capacity in some of GetBestServerIndex causing uneven distribution of load to Policy Servers

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

There are more than 1 Policy Server listed in the HCO in cluster mode.

Agent reports in the Agent Trace (with connection manager enabled) that some Policy Servers have negative capacity.

[09/23/2024][22:25:47.225][8143][140665683932928][][SmClient.cpp:2996][GetBestServerIndex][Entered Function][][][][][][][][][][2][][][1] [09/23/2024][22:25:47.225][8143][140665683932928][][SmClient.cpp:3000][GetBestServerIndex][-------------------- [09/23/2024][22:25:47.225][8143][140665683932928][][SmClient.cpp:3007][GetBestServerIndex][Server 192.168.0.11: Current total capacity: 43.4, current throughput: 1.01 [09/23/2024][22:25:47.225][8143][140665683932928][][SmClient.cpp:3007][GetBestServerIndex][Server 192.168.0.12: Current total capacity: -1.0, current throughput: 101. [09/23/2024][22:25:47.225][8143][140665683932928][][SmClient.cpp:3009][GetBestServerIndex][-------------------- [09/23/2024][22:25:47.225][8143][140665683932928][][SmClient.cpp:3054][GetServer][Selected server 192.168.0.11: Current total capacity: 42.4, current throughput: 1.01][][][][][][][][][][2][][][1] [09/23/2024][22:25:47.225][8143][140665683932928][][SmClient.cpp:3056][GetBestServerIndex][Leaving Function][][][][][][][][][][2][][][1] [09/23/2024][22:25:57.256][8143][140665606366976][][SmClient.cpp:2996][GetBestServerIndex][Entered Function][][][][][][][][][][2][][][1] [09/23/2024][22:25:57.256][8143][140665606366976][][SmClient.cpp:3000][GetBestServerIndex][-------------------- [09/23/2024][22:25:57.256][8143][140665606366976][][SmClient.cpp:3007][GetBestServerIndex][Server 192.168.0.11: Current total capacity: 41.4, current throughput: 1.01 [09/23/2024][22:25:57.256][8143][140665606366976][][SmClient.cpp:3007][GetBestServerIndex][Server 192.168.0.12: Current total capacity: -1.0, current throughput: 101. [09/23/2024][22:25:57.256][8143][140665606366976][][SmClient.cpp:3009][GetBestServerIndex][-------------------- [09/23/2024][22:25:57.256][8143][140665606366976][][SmClient.cpp:3054][GetServer][Selected server 192.168.0.11: Current total capacity: 40.4, current throughput: 1.01][][][][][][][][][][2][][][1] [09/23/2024][22:25:57.256][8143][140665606366976][][SmClient.cpp:3056][GetBestServerIndex][Leaving Function][][][][][][][][][][2][][][1] [09/23/2024][22:26:07.272][8143][140665605314304][][SmClient.cpp:2996][GetBestServerIndex][Entered Function][][][][][][][][][][2][][][1] [09/23/2024][22:26:07.272][8143][140665605314304][][SmClient.cpp:3000][GetBestServerIndex][-------------------- [09/23/2024][22:26:07.272][8143][140665605314304][][SmClient.cpp:3007][GetBestServerIndex][Server 192.168.0.11: Current total capacity: 39.4, current throughput: 1.01 [09/23/2024][22:26:07.272][8143][140665605314304][][SmClient.cpp:3007][GetBestServerIndex][Server 192.168.0.12: Current total capacity: -1.0, current throughput: 101. [09/23/2024][22:26:07.272][8143][140665605314304][][SmClient.cpp:3009][GetBestServerIndex][-------------------- [09/23/2024][22:26:07.272][8143][140665605314304][][SmClient.cpp:3054][GetServer][Selected server 192.168.0.11: Current total capacity: 38.3, current throughput: 1.01][][][][][][][][][][2][][][1]

In this condition, the agent is not sending request to Policy Server 192.168.0.12 because it is showing negative capacity.

Policy Server 192.168.0.12 is perfectly fine and in good working state but agent sees it having negative capacity.

Environment

Access Gateway version R12.9.0 and below

Cause

Capacity is a virtual state at the Access Gateway.

Agent calculates the throughput and capacity and in certain conditions it can become negative.

But when it becomes negative, agent recalibrates and sets the capacity to 100 but this is not happening correctly.

Resolution

Fix will be released in R12.9.1 Access Gateway.