For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Songseajoon_222's avatar
Songseajoon_222
Icon for Nimbostratus rankNimbostratus
Jun 07, 2016

Content-Length Header responses being Reset by LTM

Hi,

 

please help me.

 

first, i used BIG-IP 11.5.3 HF 2

 

and Resource Provisioning is LTM(Local Trafic Manage)

 

data group is

 

 

and iRule is

 

 

Use phpauction is blocked during login at the login page fails four times.

 

good. It is good. But there is a problem.

 

The liver has the disadvantage login speed is very slow. It takes time for about 17 seconds.

 

And this rule will be used in reverse proxy,

 

The current test was conducted in the VE.

 

How can we do to speed quickly?

 

Help me please

 

8 Replies

  • Hi,

    Try disabling the debug level on the irule itself :

    set static::debug 0

    Try also to send a reset instead of dropping the connection. You can replace occurences of

    drop
    by
    reject

    There can be several other factors that slow down.

    • Songseajoon_222's avatar
      Songseajoon_222
      Icon for Nimbostratus rankNimbostratus
      Thank you but When I success log on, speed is slow too I tryed content-lentgh "1024" . logon Fail -> fast . Logon ok -> slow What happen? Sorry i dont know english
    • Yann_Desmarest_'s avatar
      Yann_Desmarest_
      Icon for Nacreous rankNacreous
      Can you publish your Virtual Server configuration ? Did you use a tcp-optimized profile ?
  • Hi,

    Try disabling the debug level on the irule itself :

    set static::debug 0

    Try also to send a reset instead of dropping the connection. You can replace occurences of

    drop
    by
    reject

    There can be several other factors that slow down.

    • Songseajoon_222's avatar
      Songseajoon_222
      Icon for Nimbostratus rankNimbostratus
      Thank you but When I success log on, speed is slow too I tryed content-lentgh "1024" . logon Fail -> fast . Logon ok -> slow What happen? Sorry i dont know english
    • Yann_Desmarest's avatar
      Yann_Desmarest
      Icon for Cirrus rankCirrus
      Can you publish your Virtual Server configuration ? Did you use a tcp-optimized profile ?
  •  

    Virtual Server Protocol Profile is tcp profile

     

    I tryed "debug1 --> debug 0" --> it was not loged. i tryed "drop --> reject" it was slow too I tryed "tcp profile --> tcp loan optimized" it was slow too

     

    • Songseajoon_222's avatar
      Songseajoon_222
      Icon for Nimbostratus rankNimbostratus
      I using Source Address Traslation >> Auto map. and, if i'm not use iRule --> Fast i used iRule --> Slow.. Content length ↓ --> logon Fail speed ↑ Content length ↓ --> logon OK speed ↓ Content length ↑ --> logon Fail speed ↓ Content length ↑ --> logon OK speed ↓