For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tevzadze_208045's avatar
tevzadze_208045
Icon for Nimbostratus rankNimbostratus
Apr 10, 2018

Delete sys connection

Hello, For deleting client connection we use command:   tmsh delete sys connection cs-client-addr $IP   For our point of view this command works very slow, about 1-3 sec per command.   We n...
BIG-IP
devops
TMSH
tevzadze_208045's avatar
tevzadze_208045
Icon for Nimbostratus rankNimbostratus
Apr 10, 2018

Task is following :

 

Hardware: BIG-IP VPR-C2400 Build: BIG-IP v11.6.1 (Build 2.107.338) License: CGN

 

We use this device for CGNAT , after subscriber disconnected we need delete immediately all its connections from connection table and also from PBA, because we have some suspicious traffic after subscriber disconnect.

 

First off all i try do this with with magic iRules and tmsh, based on received Radius Account-disconnect meessages from NAS. 50-100 msg/sec are number discoonect messages in realtime received from NAS.

 

I try also play with timeouts of Virtual Server , TCP/UDP/FastL4 profile , PBA - unfortunately without results, some subscriber session stay alive until not closed from server side , often this is udp traffic.

 

If there are some other way please tell me.

 

Thanks.