Forum Discussion
NimbostratusF5 float IP causing website issues
Hi All,
Slightly odd one here, we have a standard website on 443 with the F5 SSL bridging, single VIP in use on the front going to two servers in the back via a vShield edge appliance. It works absolutely fine until a float IP is introduced for the backend VLAN, at this point the website may work for a 5 or 10 minutes but then go down, everything still looks fine at this point on all devices.
As soon as the float IP is removed everything comes back up, any suggestions? We've eliminated anything ARP related with any errant MAC entries but it's not something I've ever seen before.
Thanks
Jay
5 Replies
- Kevin_Stewart
Employee
Just a thought, but can you change the active unit's local self-IP to what would normally be the floating IP and retest? It almost sounds like a duplicate IP issue.
Also, what do you see in tcpdump captures when it starts failing?
jay_britton_414So far in the tcpdump of both the F5 and the client server everything looks exactly as it does before the float IP fails which is even more bizarre!
Good thought for the local IP, will try that and see what happens.
- jay_britton_414
So a brief updated but I tried to use both the Self-IP and a completely different IP for the float address and the issue appeared both times, as soon as I take the float IP off everything comes back to life!
- nitass
until a float IP is introduced for the backend VLAN, at this point the website may work for a 5 or 10 minutes but then go down
what does "go down" mean? were virtual server and pool marked down or virtual server and pool were up but user could not access to the website?
are you using snat automap?
sol7336: The SNAT Automap and self IP address selection
http://support.f5.com/kb/en-us/solutions/public/7000/300/sol7336.html - jay_britton_414
By "go down" I mean everything looks absolutely fine on the F5, exactly as it does before the float IP is introduced but access to the website becomes intermittent at best and completely inaccessible at worst
