For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

3 Replies

  • The LB_FAILED event is triggered "when LTM is ready to send the request to a pool member and one hasn’t been chosen (the system failed to select a pool or a pool member), is unreachable (when no route to the target exists), has reached a queue limit, or is non-responsive (fails to respond to a connection request)"

     

    https://devcentral.f5.com/wiki/iRules.LB_FAILED.ashx

     

    So this basically says that when this event is triggered, and an active members check of the specified pool indicates that no pool members are available, then send the traffic to the specified node on port 8100 (presumably not one of the pool members). Ironically, if the LB_FAILED event is triggered, there's a good chance that the active members check will also return 0 (if the check is for the pool applied to the VIP), so the two are somewhat redundant. You normally find the active_members Boolean command in other events like CLIENT_ACCEPTED or HTTP_REQUEST, where you can make this pool member determination BEFORE an LB failure occurs.

     

  • Hi Kevin, Thanks for your response. I have below irule associated to one of our VIP. when LB_FAILED { LB::reselect node 147.249.172.37 8100 } This server 147.249.172.37 is behind firewall and now the policy on the firewall that allows LB to server traffic is getting 1000s of hits in a minute. Is it due to this irue ??
  • This server 147.249.172.37 is behind firewall and now the policy on the firewall that allows LB to server traffic is getting 1000s of hits in a minute. Is it due to this irue ??

    It very well could be, but I think it would also depend on the state of the pool members. Try adding a log statement to this iRule to see if that truly is getting triggered:

    when LB_FAILED {
        log local0. "LB failed to server"
        LB::reselect node 147.249.172.37 8100         
    }