How do I block ping for vs

Hi,

 

 

It isn't possible do disable ICMP to a virtual address with an iRule on a virtual server. You can check this post for details:

 

 

vserver ALWAYS replies to ping

 

http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=55930&ptarget=55932

 

 

Aaron

Faced similar issue when migrating from GSS to GTM. Changed the monitor to TCP from ICMP and build iRule to drop requests if no active pool members are present.

Jason,

 

 

I'm having a similar issue at this time but we are still using a GSS to monitor our F5 Virtuals. I can't figure how we can accurately monitor the health of the Virtual if it responds to Ping and TCP port are responsive. Any suggestions?

I assume you'd need to configure the GSS to check for a specific string in the response--not just that a TCP connection is completed. With the iRule you could send a reset in CLIENT_ACCEPTED if [active_members [LB::server pool]] == 0. The GSS health check should then fail when the VS's pool is down.

 

 

Aaron