Forum Discussion

rbunix's avatar
rbunix
Icon for Nimbostratus rankNimbostratus
Apr 04, 2023

F5 11.6.5.3 returns uncompressed HTTP response

Our backend servers run Apache and the gzip/deflate is done on this servers, after this we have a Varnish system that queries the apache servers and store the compressed javascript in cache. If we query the apache server we get a gzip response of 100kb, if we query the Varnish server directly we receive a gzipped response of 100kb but if we use the F5 VIP to query the same file, the file is returned uncrompressed with 400kb.

Here's our VIP settings using show running-config command:

 

ltm virtual VIP-test {
destination ip:http
ip-protocol tcp
mask 255.255.255.255
pool w-g1
profiles {
tcp { }
}
source 0.0.0.0/0
source-address-translation {
pool snat_pool_1
type snat
}
translate-address enabled
translate-port enabled
vs-index 108
}

Any idea on what may be the issue?

devops
    • rbunix's avatar
      rbunix
      Icon for Nimbostratus rankNimbostratus
      Apr 04, 2023

      Hello Paulius! Thanks for sharing that link, I actually saw that link earlier and tried to debug from there but I don't have nothing configured in the VIP so guess it must be something different.

       

      Thanks anyway!

      • Paulius's avatar
        Paulius
        Icon for MVP rankMVP
        Apr 04, 2023

        rbunix You might consider performing the same troubleshooting that they did in the referenced article to see if something similar is happening. It could be that the F5 isn't agreeing to the compression and that is why it isn't passing to the user compressed. If you are not able to figure this one out you could open an F5 case to see if they can assist. I would imagine that in addition to the QKVIEW they will want captures of the communication both from the client to the VS and from the F5 to the pool member. You should be able to get this all in one tcpdump by doing the following because it will follow the connection through the SNAT that occurs and it will add additional fields that show what the F5 is doing with the connection as it passes through it. You could also add on "-w <directory_path_with_filename>" to the end and save the capture so you can provide it to F5.

        tcpdump -nni 0.0:nnp host <client_IP>

  • Leslie_Hubertus's avatar
    Leslie_Hubertus
    Ret. Employee
    Apr 11, 2023

    rbunix - were you able to figure this one out, or are you still having issues? If the latter, the advice from Paulius to open a case with F5 Support is probably the way to go. Let us know how things go!