For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HSIIT_182055's avatar
HSIIT_182055
Icon for Nimbostratus rankNimbostratus
Oct 27, 2016

All monitors stopped working, sites acting strangely

This is on a BIP 3600 running 11.2.0

 

Everything was working correctly for a couple of months, and then multiple sites started not coming up, giving permissions errors, etc. If I bypass the LTM and browse directly to the server via host file I have no issues.

 

I rebooted the device, and all monitors (node, pool, and virtual server) showed blue squares and never recovered on their own. At this point the sites started working again.

 

I removed and re-added the default node monitor (basic icmp) and all nodes showed green. I started doing the same to the pool monitors and they started showing green, but then sites stopped responding correctly again (although it appears to be random as to which sites and when). I rebooted the device again and everything shows what it did before the reboot (in terms of monitors; most blue, and green for the ones we manually messed with). The sites appear to be working correctly again, but I am still afraid to go back to testing (this is on a new environment to replace our current production once testing is complete) until this has been resolved and all monitors show green and all sites stay working.

 

LTM
security

2 Replies

  • John_Heyer_1508's avatar
    John_Heyer_1508
    Icon for Cirrostratus rankCirrostratus
    Oct 27, 2016

    Sounds like a software bug. The 11.2.0 is several years old. I'd recommend at least getting to 11.2.1 and most folks these days seem to be on 11.6.1

     

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Oct 27, 2016

    I recommend 11.5.4 + HF2, if you are looking to migrate to a different code version. If you are still troubleshooting, there is a chance that you may have configured a lot of monitors and potentially exhausting the possible number of connections that can be initiated from the F5 to the servers. See if you can lower the number of monitors and clean up any unused pools.