For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

emircanbas's avatar
emircanbas
Icon for Nimbostratus rankNimbostratus
Sep 07, 2023

F5 WAAP - Error 503 - Service Unavailable

Hello Everyone, having a problem with F5 WAAP while im trying to take a service behind WAAP. here is my architecture. i have a Customer Edge on my network and this customer edge is on same subnet ...
application delivery
cloud
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Sep 07, 2023

You have not provided a lot of info.

 

Is the origin pool health monitor http/htttps and is it up ?

 

Have you seen if you can connect to the server when you remove the WAF and service policies under the LB?

 

In the logs investigate if you see any errors like TLS errors as maybe you have not enable tls under the origin or the tls level need to be set to medium and low and to not check the server certificates under the origin. Also in the http logs (review the security and performance logs under the Dashboards in XC) you can see the real server response code (upstream response) but better remove the WAF and Service policies as I said.

 

Other than that F5 XC by default overwites the Host header value when sending traffic to the origin servers and this can be dissabled under the route objects.

https://community.f5.com/t5/technical-articles/introduction-to-f5-distributed-cloud-platform-per-route-waf/ta-p/304079

You will need to do some investigation on your own I suggest maybe taking the F5 training in the link below if you are going to support this product:

 

https://www.f5.com/learn/training#sort=%40f5_title_sort%20ascending&f:@f5_primary_product=[Distributed%20Cloud]

 

 

emircanbas's avatar
emircanbas
Icon for Nimbostratus rankNimbostratus
Sep 08, 2023

Hello,

thank you for your kind responses, here is the detailed log im seeing,

scheme - http
"rsp_code - 503"
"rsp_code_details - cluster_not_found"
"dst_site - NOT-APPLICABLE"
 
is it enough or would you want me to give more detailed.
  • Nikoolayy1's avatar
    Nikoolayy1
    Icon for MVP rankMVP
    Sep 11, 2023

    As I mentioned better go through the F5 XC training for you to be able to narrow down the issue and then maybe to provide a more detailed info in the forum when the issue is complex and you can't solve it. The error for me suggests that maybe the issue is with your Customer Edge (CE) in some way as probably your Load Balancer or origin pool is on the CE not on the XC Global Cloud Regional Edge RE.

     

    Edit:

     

    This message cluster_not_found could be related to your CE cluster of 3 nodes but why it is not found when you mentioned that the CE is ok I can't tell.