For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Michael_107360's avatar
Michael_107360
Icon for Cirrus rankCirrus
Feb 10, 2017

Fastl4 TCP Profile Best Practice

Fastl4 TCP Profile Recommendations:   I have seen conflicting recommendations concerning the Forwarding Virtual Server. and the Settings for the TCP Fastl4 profile. Goal is to do nothing more than...
application delivery
LTM
TMOS
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Feb 11, 2017

In general, for the forwarding-type Virtual Server (which act as mere routers), you do not need any advanced functionality. So your current configuration is better than the default settings.

 

It makes your BigIP transparent/non-intrusive in terms of idle timeout enforcement. It's also better from memory-use perspective. One notable drawback is that it doesn't align well with AFM module. You couldn't apply any ACL rules to this VS while retaining the stateless behavior. AFM is strictly stateful.