Forum Discussion

RAQS's avatar
RAQS
Icon for Cirrus rankCirrus
Jan 31, 2023

F5 | LTM | Server Hello packet is not coming

Hi Team, Hope you all are doing great! i have an issue, where i have F5 LTM VS (Standard - SSL Passthrough (no client/server SSL profile). Issue - URL is not accessible, getting error message site...
application delivery
f5 ltm
RAQS's avatar
RAQS
Icon for Cirrus rankCirrus
Feb 01, 2023

Paulius ==> updated packet capture screenshot. Connectivity is in place. TCP handshake is happening. But SSL Handshake is not happening. Regarding that tcp timeout, its all default value, only idle timeout is set as 600 seconds.

  • RAQS's avatar
    RAQS
    Icon for Cirrus rankCirrus
    Feb 01, 2023

    Any help ?

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      Feb 05, 2023

      Can you do the curl command via the CLI from the BIG-IP toward the pool member?

      To be honest if you send a client helo and there is no response it would start with looking at the server. Does it perhaps have certain ACLs or such?

  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Feb 06, 2023

    RAQS can you run the following tcpdump on the F5 please? For a bit more accurate tcpdump you can replace the IP in the following command with the IP of the client.

    tcpdump -nni 0.0:nnp host 10.11.11.1

    As boneyard has stated I would also ensure that you can curl from the F5 to the pool members as well and receive a valid response from them.