Forum Discussion
Ganesh_Ramamoor
Nimbostratus
NimbostratusClient losing connection with the F5
Hello!
The iRule I’m using is as follows:
when HTTP_REQUEST {
if { [HTTP::uri] contains "XXXX" } {
node 192.168.3.11 8888
}
elseif { [HTTP::uri] contains "YYYY" } {
node 192.168.3.10 80
}
}
And with this rule and the default HTTP profile, I lose connectivity to my client in the middle of receiving multiple TCP/HTTP packets, and I see on tcpdump that the F5 server is closing the TCP connection. And at the same time I see this error printed in /var/log/ltm:
Sep 20 19:57:24 tmm tmm[745]: 011f0005:3: http_process_state_prepend - Invalid action EV_INGRESS_DATA during ST_HTTP_PREPEND_HEADERS
Any idea on what could be the issue?
Thanks in advance.
- Hmm, the problem is probably with the server response; the rule looks ok to me.
We would need to look at your configuration and packet traces to see exactly whats happening. Can you open a support ticket and they will be able to guide you on what to do next. Thanks! - Be sure to tell support this isn't an iRule problem. You should be able to configure a pool with just one of those nodes and with no iRule still make the problem occur. As bl0ndie stated, this is more likely an issue with a malformed server response (perhaps more content than reported in the content-length).
Ganesh_RamamoorI don't have this problem when I don't have an iRule configured! When I have just a pool with the two ip addresses as members in that pool and without an iRule the client does not lose connection. The thing is when I configure an iRule I have to configure an HTTP profile and that's why I was thinking that this problem is with that HTTP profile. I used the default HTTP profile and I also created another profile and played around with some of the values, but no luck.
Thanks- Yes, when you add the HTTP profile that enables processing in the BIGIP that tracks the state of HTTP requests and responses. The error message you are seeing indicates that the previous response was not finished according to the BIGIP. You should be able to reproduce it with the HTTP profile added, but without the iRule. I was just pointing this out because it seems the support department will often first refer people to DevCentral if they think it is an iRule problem.
- Ganesh_RamamoorI see what you are saying. Yes the problem is just with the HTTP profile. If I remove the iRule and just have the HTTP profile the behavior is the same - the BIGIP closes the connection. If the set NONE for the HTTP profile, it works!
Thanks
