Forum Discussion
Fiddler shows -Virtual Server actively refused connection
Hi
I have a load balanced pair of IIS servers on my 11.3 version of F5. The monitors aren't working , but even if I disable the monitors and just try to load the URL, we get a 502 Connection actively refused which is displayed via Fiddler. If I change the gateway of the IIS boxes , everything loads fine. Only over the F5 they fail to load. Any advise
Thanks in Advance S
7 Replies
- TayF5un
Nimbostratus
Could you please give more information;
deployment mode, gateway of IIS, snat etc.
I'm currently not in a position to reproduce this issue, but I thought I might give you a hint.
Do you have Auto Map option selected on Source Address Translation setup of the virtual server? If you don't, try turning this option on. If you do have this option enabled try performing a request to your pool members from the BIG-IP device using curl.
Let me know if this helps.
- muyal_222536
Nimbostratus
Cheers, let me check .
- muyal_222536
Nimbostratus
Hi Thanks for the reply. Issue has now been resolved by enabling default monitor and then identifying the right reply via SSH using CURL . Add that to the new monitor and all good now.
thanks
- Vijay_E
Cirrus
This could be network configuration issue or SNAT. I think you need to sort out the monitoring issue first before troubleshooting further. Try to use ICMP monitor and see if it works. If ICMP monitor works, check using TCP monitor. If TCP monitor fails but ICMP monitor had worked previously, this could indicate route asymmetry issues.
If possible try to sketch out packet flow from client to F5 to server and back based on existing network configuration in order to identify any issues.
- Nuruddin_Ahmed_
Cirrostratus
Hi,
if the monitors are not working then first that should be resolved, this may lead to resolving the other issue. What monitors have your configured? is there a firewall between F5 and IIS server? if yes, are you allowing monitor traffic on the firewall?
- muyal_222536
Nimbostratus
Hi Thanks for the reply. Issue has now been resolved by enabling default monitor and then identifying the right reply via SSH using CURL . Add that to the new monitor and all good now.
thanks
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com