For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kirit_Patel_521's avatar
Kirit_Patel_521
Icon for Nimbostratus rankNimbostratus
Dec 30, 2009

disable arp not working

We had a situation where we have virtual servers defined and pools. If the backend servers lets say ip 172.16.34.2 and 172.16.34.5 listening on port 80 were down     But we are still able ...
config
design
The_Bhattman's avatar
The_Bhattman
Icon for Nimbostratus rankNimbostratus
Dec 30, 2009
Hi Kirit,

I believe that it is by function that the VIP will respond even though the backend is not available - Performance L4 simply changes that due the nature of the setting. We had the same issue for an app that was simply checking the port of the VIP rather then checking the content so I put the following in place while we fixed the app to do content checking 

  
  when HTTP_REQUEST {  
    if { [active_members pool_http_servers] == 0 } {  
      reject  
    }  
  }

or 

  
  when CLIENT_ACCEPTED {  
    if { [active_members pool_http_servers] == 0 } {  
      reject  
    }  
  }

The reject statement sends out a TCP reset

I hope this helps

Bhattman