For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yuce_sungur_100's avatar
yuce_sungur_100
Icon for Nimbostratus rankNimbostratus
Sep 29, 2009

iband monitor

Hi,   I have a virtual server on port 80 and there is a pool attached to it.The monitor for the pool is inband monitor.The nodes in the pool are sending 500 but the inband monitor still don no...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Sep 30, 2009
As Matt suggested, the inband monitor only applies at layer 4. It wouldn't necessarily make sense to try to check a layer 7 application response code for this. You could argue for a layer 7 inband monitor which marks the pool member down on specific response codes.

 

 

Though this is generally too strict for most customer's applications as you wouldn't want to consider a server down if it generates a single HTTP 500 response. Marking a member down on a specific response code in a potential new monitor type or in an iRule would probably open yourself up to a denial of service scenario if a single attacker can trigger an HTTP 500 from each server in the pool by crafting a bad request.

 

 

Aaron