For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Reqbaln's avatar
Reqbaln
Icon for Nimbostratus rankNimbostratus
May 24, 2023

GRPC through F5 Virtual Server [RST_STREAM with error code: INTERNAL_ERROR]

Hello everyone.  We have a GRPC service running in a K8s cluster and it's reachable through Nginx ingress from inside the cluster.   We need to access the GRPC service from outside the cluster thro...
security
JRahm's avatar
JRahm
Icon for Admin rankAdmin
May 25, 2023

hi Reqbaln ,

  I don't have experience with this setup, but have you taken a tcpdump on the BIG-IP to capture the transaction? You can enable some flags in tcpdump to allow for the tls keys to be included in the capture so it's easily decrypted in wireshark. I wrote a python script to actually take the capture, download it, and decrypt it for you for these situations.

On the solution info, do you have a confirmed working monitor with the nginx ingress as a pool member, and do you get successful feedback when running this from the BIG-IP command line?

nghttp -ynv https://<server_IP_address>:<port number>