For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

f5beginner's avatar
f5beginner
Icon for Cirrostratus rankCirrostratus
Jun 23, 2019
Solved

Exceed bandwidth utilization on standby device

Hello All, I have two virtual F5 in HA, one of them Active and second one is in standby mode. From my monitoring I received ping delay, which is around 400ms, so I checked logs on F5.   On acti...
  • Dario_Garrido's avatar
    Dario_Garrido
    Jun 25, 2019

    Yes, the problem you are facing is because of this UDP 8116 traffic. There are 360 packets (of 500) related to this flow.

    # cat output.txt | grep 8116 | wc -l
360

    This is not a specific problem of F5, so you should check your enviroment to figure out what the source of traffic is and how to stop it.

    BTW, I would appreciate if you mark my answer as 'the best' or give me some upvote :-).

    KR,

    Dario.

f5beginner's avatar
f5beginner
Icon for Cirrostratus rankCirrostratus
Jun 24, 2019

Hello,Dario Garrido,

 

I have checked my configuration of Mirroring and I found out, there was only IPs of mirroring(I remove them), so it looks, it was not enabled finally, I have restarted standby box, but there is still exceeded bandwidth limit and this logs are only on standby device, on Active device there are any logs regarding bandwidth exceed.

 

I have already checked bandwidth throughput and graph show me that there is maximumum 50Mbits.

 

Thank you

Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Jun 24, 2019

Check your connections in both devices. Is there more connections in your standby device?

# tmsh show sys connection

Also, do you have any 3rd party script configured in your device?

You can check with tcpdump what type of traffic is exceeding the network limits.

tcpdump -nnei 0.0 -c 500
tcpdump -nnei eth0 -c 500

KR,

Dario.