Forum Discussion
Steve_Luke_8796
Nimbostratus
Oct 15, 2010ICMP/TCP Deny on Pool Down
I know this topic was discussed some time ago but i have not yet seen any solid answers, and am wondering if it made it to a feature request.
I want to be able to automatically deny the tcp ...
steve_87989
Nimbostratus
Aug 31, 2011yep I have done that on my GSS, tcp probing answers configured as VIPs on the ports the VIP is listening on at the F5, in this case port 80. The thing I don't understand is the event here is CLIENT_ACCEPTED, doesn't that imply the F5 has to complete the 3 way handshake before the irule is evaluated? I do see when I telnet to the vip with the irules I mentioned above the connection is dropped right away, but that is after the initial handshake completes thus it's too late for the GSS to know better, it has already considered the keepalive passing. I have also tried reset and graceful on the GSS termination method, no dice.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
