For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

F5_Jeff's avatar
F5_Jeff
Icon for Cirrus rankCirrus
Mar 02, 2017

GTM WIP is disabled but website is still accessible?

Hi all,   We have 2 GTM deployed in two different data centers. All are synced. However, when I disable the pool and the WIP, we can see that the WIP is still accessible and the Public IP is still...
application delivery
BIG-IP DNS
LTM
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Mar 02, 2017

There are 2 settings that could be related with the problem you have. First is in DNS -> Settings -> GSLB -> Load Balancing, and is called " Verify Virtual Server Availability". Second, is in the GTM pool configuration, called "Verify Member Availability". Both are enabled by default.

 

However, I just tested, that if you disable the wideip, those options are not relevant as expected. If you disable the wide ip, it should stop reply with IP for that wide IP.

 

DNS uses many caches, from your operation system, to browsers, etc... To exclude cache from the problem, use dig or nslookup to query direct the GTMs listener. If you get a reply, something is wrong. If you don't, the problem is very likely to be caching.

 

Also, very important, but I dont think applies to this case, is something called link or DNS prefetching.

 

https://support.f5.com/csp/article/K13930