SSL Orchestrator Troubleshooting Guide

Introduction

• Introduction

Architecture

• Architecture Overview
  • Control Plane Diagram
  • Control Plane Components
  • Data Plane Diagram
  • Data Plane Component Descriptions
  • Configuration Architecture
  • SSLO Topologies vs LTM Virtual Servers
  • SSL Orchestrator HA verification

Troubleshooting

• Fault Identification Chart
  • General
  • Data Plane

Troubleshooting Procedures

• Various Procedures
  • Review Data Plane Logs
  • Use the Echo Worker to poll each device
  • Determine how a block was configured
  • Extract block(s) from qkview
  • Determine current gossip sync state
  • Verify HA peer information
  • Verify Application ID
  • Verify correct CMI and device group status
  • List Blocks With Bad State
  • Delete BINDING and ERROR blocks
  • List all SSLO related MCP objects
  • List all the application services
  • Completely remove SSLO
  • Get List of MCP objects associated with the SSLO Deployment
  • Get Live Block Configuration
  • Get Current Templates
  • Show Gossip Conflict Cache
  • Delete Gossip conflict cache
  • Restart REST subsystem
  • List Blocks With Bad State
  • Re-deploy affected topologies
  • List open REST database files
  • Provoking deployment errors
  • MCP Force Reload

SSLOFIX Repair Script

• About SSLOFIX
  • Introduction
  • Download
  • History of SSLOFIX
  • Version Compatibility
  • Why use SSLOFIX?
  • How does SSLOFIX work?
  • Does this tool impact production traffic?
• How to use SSLOFIX
  • Initial Diagnostic
  • Run in Repair Mode
  • Verify Repair is Complete

Miscellaneous

• Glossary