For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dayesh_263997's avatar
Dayesh_263997
Icon for Nimbostratus rankNimbostratus
Dec 06, 2018
Solved

Client request not hitting the VIP.

Hello Team,   The client is initiating a request on HTTP/HTTPs and needs to access contents from the backend server on port 5432.   Line layout :   Client---HTTP--->VIP(VS listening on port ...
application delivery
BIG-IP
LTM
  • pushkar_misra_2's avatar
    pushkar_misra_2
    Dec 15, 2018

    If you could post your configs, that would help. Please see if you are using SNAT or two arm deployment? If using SNAT, make sure the SNAT IP can reach the backend servers. If not using SNAT, snat exception, make sure to check the servers are configured with F5 as gateway.

     

    Check the routes F5 is taking to servers. ip route get serverip

     

    issue telnet from F5 telnet serverip port

     

    I you run capture with -s0 option it would capture the backend traffic and you can see if the TCP handshake is completing or not.

     

youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Dec 06, 2018

Hi,

Can you try to reach the backend from CLI:

curl -i http://1.1.1.1:5432/uri -H "Host: myapp.domain.com"

Where:

  • 1.1.1.1 will be your backend IP
  • myapp.domain.com will be hostname using to reach your app
  • and uri will be the uri of your app.

It will allow you to check if you receive anything body/header.

keep me update.

regards,