High Availability, Monitoring, and Troubleshooting Traffic Management
HA behavior
The exam tests whether you can distinguish node-level HA from service-level health. An HA pair has two nodes, each with its own NSIP, and VIPs/SNIPs float to the active node. Active-passive is the usual pair model; active-active distributes traffic across nodes and is a different design. Heartbeats and HA monitors detect node or link failure. Failover is not triggered merely because one monitored service is down; that affects load-balancing selection, not the whole appliance. show ha node shows node state and synchronization; force failover tests takeover; sync ha files pushes configuration and certificate files to the peer.
Monitoring commands
show lb vservershows the vserver state, bound services, and current connections.show serviceandshow servicegroupshow administrative state, effective state, and monitor results.show monitorshows monitor configuration and bindings.stat lb vserverandstat serviceshow live counters.nstracecaptures packet traces;nsconmsgreads counters;show techsupportbundles diagnostics.show ns runningConfig,show route,show arp,show interface, andns.logsupport network and configuration checks.
Worked example
Users receive a 503 from a VIP. show lb vserver shows the vserver as DOWN and lists bound services. show service shows the service administratively enabled but effectively DOWN; the bound HTTP monitor is failing. The monitor sends a request to the server IP with no Host header, but the backend virtual host requires Host: app.example.com, so it returns an error and the monitor marks the service down. The fix is to set the monitor's Host header or use an HTTP-ECV monitor that matches the application's expected response. Restarting the ADC would not fix this, and forcing an HA failover would move the same misconfigured monitor to the peer.
Traps
Do not read only the vserver state; check effective service state and monitor output. Do not expect a failed service monitor to cause HA failover. Do not assume HA synchronization is automatic for every change or certificate; verify and run sync ha files when needed. A 503 can come from no available service, not only from a down vserver.