For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jerrysimila's avatar
jerrysimila
Icon for Nimbostratus rankNimbostratus
Aug 17, 2020

F5 Virtual Server responds to clients with pool member port instead of VS port

I have an F5 HA cluster deployed in one-arm mode with SNAT and source port preserve enabled (by default since i used iApp templates). The VS is configured to listen on port 443 with an http to https ...
application delivery
LTM
Andrew-F5's avatar
Andrew-F5
Icon for Employee rankEmployee
Aug 26, 2020

The response should be using port 443 between client and virtual server but may not be if your server is including a port within a redirect or location header, in which case we honor HTTP RFC.

 

Also make sure you have "Port Translation" enabled within the advanced virtual server configuration.

  • Hoang_Hung's avatar
    Hoang_Hung
    Icon for Cirrus rankCirrus
    Aug 26, 2020

    Hi  

    I have depoloy many my customer and I have same error with  .

    Default Virtual Server advanced " enable default ".

    I sometime use irule or customize context path on Web.

    Do you known workround for it ?

     

    0691T000009i7dKQAQ.png

    Thanks all

    Hung Hoang