Forum Discussion
current connections won't decrease in Nodes
Hi,
I think this output is for another VS than Terminal_2012_UDP
10.110.10.86:63026 10.19.23.85:3389 18.1.1.72:3389 tcp 1
10.110.10.86:63745 10.19.23.85:3389 18.1.1.72:3389 udp 0
10.19.71.202:52968 18.1.1.72:3389 18.1.1.72:3389 tcp 1
10.19.71.202:53000 18.1.1.72:3389 18.1.1.72:3389 tcp 1
To filter the connections of this VS, use tmsh 'show sys conn cs-server-addr 10.19.23.50'
your correct i see from every user 3 - 4 TCP connections from the same ip... (i use the command "tmsh show sys connection ss-server-addr serverip") how can i allow or force only 1 TCP connection?
I think you would need to set up an irule for that, there is some examples in DevCentral. However, I would double check that this limit won't break things because depending on the application that will transit on this VS -which is an all ports VS- you'll likely have traffic that needs more than one active TCP connection. Additionally sometimes clients or servers just hang up without properly closing the TCP connection, this will let an idle TCP connection referenced on F5 for a default of 5 minutes preventing legitimate connection to establish if you set up a limit of 1
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com