{"id":977,"date":"2010-08-07T09:32:54","date_gmt":"2010-08-07T08:32:54","guid":{"rendered":"http:\/\/mccltd.net\/blog\/?p=977"},"modified":"2010-08-07T10:21:28","modified_gmt":"2010-08-07T09:21:28","slug":"wccp-service-groups","status":"publish","type":"post","link":"http:\/\/darenmatthews.com\/blog\/?p=977","title":{"rendered":"WCCP Service Groups"},"content":{"rendered":"<p>The routers and WAEs participating in the same service constitute a  service group. A service group defines a set of characteristics about  what types of traffic should be intercepted, as well as how the  intercepted traffic should be handled. There are two types of service  groups:<\/p>\n<ul>\n<li>Well-known services<\/li>\n<li>Dynamic services<\/li>\n<\/ul>\n<p>Well-known services, also referred to as static services, have a  fixed set of characteristics that are known by both IOS and WCCPv2  client devices. <!--more--><\/p>\n<p>There is currently a single well-known service called  web-cache. This service redirects all TCP traffic with a destination  port of 80. The characteristics of a dynamic service are initially only  known to the WCCPv2 clients within the service group. The  characteristics of the service group are communicated to the IOS devices  by the first WCCPv2 client device to join the service group.<\/p>\n<p>A unique service ID identifies service groups, which is a number from  0 to 255. Service IDs 0 to 50 are reserved for well-known services.<\/p>\n<p>The WCCPv2 implementation in WAAS supports a single dynamic WCCPv2  service, the tcp-promiscuous service. Although referred to in WAAS as a  single service, the tcp-promiscuous service is in fact two different  services:<\/p>\n<ul>\n<li>The two service IDs enabled with the tcp-promiscuous service  are <strong>61 and 62<\/strong>. These are the two service group IDs that are configured  in IOS when using WCCPv2 with WAAS.<\/li>\n<\/ul>\n<p>Two different service groups are  used because both directions (client-to-server and server-to-client) of a  TCP connection must be transparently intercepted.<\/p>\n<ul>\n<li>To optimize a  connection, WAAS must see both directions of the connection on the same  WAE.<\/li>\n<\/ul>\n<p><a href=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WAE.gif\"><img loading=\"lazy\" class=\"aligncenter size-full wp-image-981\" title=\"WAE\" src=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WAE.gif\" alt=\"WAE\" width=\"500\" height=\"220\" srcset=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WAE.gif 500w, http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WAE-300x132.gif 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/a><\/p>\n<p>Not only does WAAS intercept the connection in both directions, but  it also intercepts the connection on both sides of the WAN link.  Because the packet Layer 3 and Layer 4 headers are preserved,  transparent interception is used on both sides of the WAN in both  directions to redirect connections to the WAAS infrastructure for  optimization<\/p>\n<p><strong>What is the difference between services 61 and 62? <\/strong><\/p>\n<p>You can view the  service attributes using CLI commands in both WAAS and IOS. Example 4-9  shows the attributes of services 61 and 62 using the IOS CLI:<\/p>\n<pre>AST6-RTR-02# <strong>show ip wccp 61 service<\/strong>\r\nWCCP service information definition:\r\n        Type:          Dynamic\r\n        Id:            61\r\n        Priority:      34\r\n        Protocol:      6\r\n        Options:       0x00000501\r\n        --------\r\n            Hash:      SrcIP\r\n            Alt Hash:  SrcIP SrcPort\r\n            Ports:     -none-\r\n\r\nAST6-RTR-02#\r\nAST6-RTR-02# <strong>show ip wccp 62 service<\/strong>\r\nWCCP service information definition:\r\n        Type:          Dynamic\r\n        Id:            62\r\n        Priority:      34\r\n        Protocol:      6\r\n        Options:       0x00000502\r\n        --------\r\n            Hash:      DstIP\r\n            Alt Hash:  SrcIP SrcPort\r\n            Ports:     -none-\r\n\r\nAST6-RTR-02#<\/pre>\n<h4>WCCP Service Group Attributes<\/h4>\n<table border=\"0\">\n<thead>\n<tr>\n<td valign=\"top\"><strong>Value<\/strong><\/td>\n<td valign=\"top\"><strong>Description<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td valign=\"top\">Type<\/td>\n<td valign=\"top\">Well-known or dynamic service.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\">Id<\/td>\n<td valign=\"top\">The numeric service ID for the group.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\">Priority<\/td>\n<td valign=\"top\">The priority for the service group. When multiple service  groups are configured on the same interface in the same direction, they  are evaluated in descending priority order.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\">Protocol<\/td>\n<td valign=\"top\">The IP protocol number defined by the service group.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\">Options<\/td>\n<td valign=\"top\">Flags field indicating further service characteristics.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\">Hash<\/td>\n<td valign=\"top\">The value(s) in the redirected packet used as the hash key.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\">Alternate Hash<\/td>\n<td valign=\"top\">The value(s) in the redirected packet used as the alternate hash key.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\">Ports<\/td>\n<td valign=\"top\">The Layer 4 port numbers defined by the service group.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The command output shows that the only difference between services 61  and 62 is the value from the packet used as the hash key. By default,  service group 61 hashes on the source IP address and service group 62  hashes on the destination IP address.<\/p>\n<p><strong>PLACEMENT OF SERVICE GROUPS<\/strong><\/p>\n<p>The placement of service groups 61 and 62 should not be overlooked in  your deployment. The placement refers to which IOS interfaces are  configured with service group 61 and which interfaces are configured  with service group 62. In most environments, service group 61 should be  configured on the client-facing interfaces. For example, when deploying  WCCPv2 on a remote-office WAN router, service group 61 is configured to  intercept a client request. Configuring group 61 inbound on the router&#8217;s  LAN interface or outbound on the router&#8217;s WAN interface accomplishes  this.<\/p>\n<p><a href=\"javascript:popUp('\/content\/images\/chap4_9781587054945\/elementLinks\/dc470411.gif')\"><\/a>An example of configuring service group 61 inbound on the router&#8217;s LAN interface:<\/p>\n<div id=\"attachment_1011\" style=\"width: 510px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-Placement.gif\"><img aria-describedby=\"caption-attachment-1011\" loading=\"lazy\" class=\"size-full wp-image-1011\" title=\"WCCP Service Group 61 Placement\" src=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-Placement.gif\" alt=\"WCCP Service Group 61 Placement\" width=\"500\" height=\"197\" srcset=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-Placement.gif 500w, http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-Placement-300x118.gif 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/a><p id=\"caption-attachment-1011\" class=\"wp-caption-text\">WCCP Service Group 61 Placement<\/p><\/div>\n<p>For the reverse direction of the connection, service group 62 is used.  Service group 62 will be configured in the opposite direction of service  group 61. Using the same example shown in the diagram above, which shows service group 62 configured inbound on the router&#8217;s WAN  interface. The following figure shows the complete placement and  configuration using both service groups:<\/p>\n<div id=\"attachment_1012\" style=\"width: 510px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-and-62-Placement.gif\"><img aria-describedby=\"caption-attachment-1012\" loading=\"lazy\" class=\"size-full wp-image-1012\" title=\"WCCP Service Group 61 and 62 Placement\" src=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-and-62-Placement.gif\" alt=\"WCCP Service Group 61 and 62 Placement\" width=\"500\" height=\"320\" srcset=\"http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-and-62-Placement.gif 500w, http:\/\/darenmatthews.com\/blog\/wp-content\/uploads\/2010\/08\/WCCP-Service-Group-61-and-62-Placement-300x192.gif 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/a><p id=\"caption-attachment-1012\" class=\"wp-caption-text\">WCCP Service Group 61 and 62 Placement<\/p><\/div>\n<p><a href=\"javascript:popUp('\/content\/images\/chap4_9781587054945\/elementLinks\/dc470411.gif')\"><br \/>\n<\/a><a href=\"javascript:popUp('\/content\/images\/chap4_9781587054945\/elementLinks\/dc470411.gif')\"> <\/a><\/p>\n<p><a href=\"http:\/\/www.informit.com\">source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The routers and WAEs participating in the same service constitute a service group. A service group defines a set of characteristics about what types of traffic should be intercepted, as well as how the intercepted traffic should be handled. There are two types of service groups: Well-known services Dynamic services Well-known services, also referred to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[27],"tags":[46],"_links":{"self":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/977"}],"collection":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=977"}],"version-history":[{"count":12,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/977\/revisions"}],"predecessor-version":[{"id":1006,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/977\/revisions\/1006"}],"wp:attachment":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=977"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}