Forum Discussion

ipman_1988_5418's avatar
ipman_1988_5418
Icon for Nimbostratus rankNimbostratus
Sep 25, 2013

GeoLocation iRule Client_Accepted missing some traffic

I have an iRule that fires on client_accepted applied to a virtual forwarder (0.0.0.0) that basically forwards all tcp and udp traffic (not destined to our GTM DNS virtual). The iRule does a whereis ...
application delivery
devops
iRules
ipman_1988_5418's avatar
ipman_1988_5418
Icon for Nimbostratus rankNimbostratus
Sep 26, 2013

I've seen tcp and udp get through. Also, every packet I've seen get through thus far has been dropped by my firewall. So for tcp traffic it's just dropping the syn packet. It never completes a three way handshake so I'm not sure why it would drop anything if it requires the three way handshake to complete.

 

I'm using the default fastL4 profile. It has 300 second idle timeout, 5 second handshake timeout and 5 second tcp close timeout. I believe everything is default on that.

 

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Sep 26, 2013
    Thanks and what TMOS version are you running? This might be relevant: http://support.f5.com/kb/en-us/solutions/public/8000/300/sol8332.html. Can you confirm in the FastL4 profile that Loose Initiation and Close are not enabled please?