For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

brad_11440's avatar
brad_11440
Icon for Nimbostratus rankNimbostratus
Jan 15, 2009
Solved

FastL4 vs Optimized TCP Profiles

We run active/standby 6400 (platform D63a) LTM's for our production applications. They are accessed via clients on a private network with an average latency around 80ms. Nearly all of our virtual se...
config
design
  • smp_86112's avatar
    smp_86112
    Jan 20, 2009
    Maybe it's about the right time to have you post your VIP config from the bigip.conf. It's possible you have other settings applied to the VIP which conflict with a FastL4 profile??? Also it might be helpful to paste the values of the TCP profile you have applied.

     

     

    Regarding the window size...the behavior you see was bothering me for a long time until it finally clicked in my brain. Yes, the TCP window size always starts at 4380. The trick is to understand whether the LTM is sending or receiving data. When the LTM is sending data, as in this case, there is no need for the LTM to increase its receive window - which is the parameter you refer to in the trace.

     

     

    When the LTM is receiving large amounts of data and you do a trace, you'll see that the LTM receive window starts out at 4380, and quickly increases to the value of the Receive Window as specified in the TCP profile that is applied.

     

     

    The LTM is smart - it starts out with a small window size so it does not need to allocate more memory than necessary for the TCP connection. If it needs to adjust the receive window (when it is receiving data), you'll see it go up.
brad_11440's avatar
brad_11440
Icon for Nimbostratus rankNimbostratus
Jan 16, 2009
Thanks for the quick and detailed responses. Still though, I am not sure which one to use (FastL4 or Optimized). We are already moving a single VIP over to FastL4 on Tuesday morning. Doing so will put more of a burden on the physical servers themselves, correct ? That's why I am leaning towards using the optimized profile but obviously I want whatever is fastest and most efficient. Maybe after a week of running on FastL4, I'll see about switching it over to the TCP optimized profile to compare the results.... Thanks once again !