Forum Discussion

jefp_185700's avatar
jefp_185700
Icon for Nimbostratus rankNimbostratus
Feb 22, 2016

APM for ad auth on LTM is consuming CCU?

Hi all,

 

A question where I cannot find any explanation for, I have enabled the APM module on an LTM vip but only for the authentication part. so a logon page with an AD auth and an ad query, nothing more. I would assume that this is not consuming any CCU? According to: https://support.f5.com/kb/en-us/solutions/public/13000/200/sol13267 But for some reason I see that our LTM is using CCU, does anybody knows where this should come from?

 

7 Replies

  • running version 11.5.3 and we are having our monitoring system graph following MIB on both APM (dedictated) and LTM (where this specific APM config is used): snmpwalk -v 2c -c public localhost F5-BIGIP-APM-MIB::apmAccessStatCurrentActiveSessions
  • This object returns the current active Access Sessions. That is not the same as the CCU. One CCU will equal to one Access Session but the opposite is not always true.

     

    A connection to a VS with associated Access Policy will generate an Access Session.

     

    To check CCU I think the object is apmGlobalConnectivityStatCurConns (but there is an open issue with that object in various version, please check AskF5).

     

  • I believe that will only show you how many people are connected, not how many CCU are used. In 11.5 (possibly earlier) they changed it so that only SSL VPN/App Tunnels things like that would use the CCU not just logon pages to sites and things that didn't establish a VPN/Tunnel.