For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shiraz's avatar
Shiraz
Icon for Altostratus rankAltostratus
Jan 13, 2017

Connection Mirroring with connections showing on Standby

Hi All,

 

I have connection mirroring and persistence mirroring enabled on the vCMP guest (5250V series). I have the connections for Virtual Servers showing on the standby unit as well for all the new connections. When I took the packet capture on standby, I see that there are packets flowing IN F5 standby (Only IN Packets) .

 

SO, Is this normal behavior to see the packets and connections on VS Statistics when we have connection mirroring.

 

Regards,

 

Mohammed

 

application delivery
BIG-IP
connection mirroring
connections on standby
ha pair
security
TMOS
traffic on standby

1 Reply

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Jan 13, 2017

    Yes, that's completely normal. This information is kept in the table to make the Standby unit a "hot spare". In an event of a fail over, your Standby Unit is ready to resume existing stateful connections mid-stream. Without connection mirroring, your BigIP would respond to any alien TCP/ACK or TCP/PSH packets with a TCP/RST packet.

     

    Note that in case of HTTP-based services or other protocols that have built-in retry mechanism in L7, the connection mirroring feature is unlikely to add any value.