For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bob_Vance_75936's avatar
Bob_Vance_75936
Icon for Altostratus rankAltostratus
Apr 22, 2011

INET port exhaustion and ip forwarding VIP

Hello,     Every now and then we will have an issue with inet port exhaustion being logged for DNS traffic passing thru the LTM using the ip forwarding VIP:       local/tmm crit tmm[9177...
config
design
Bob_Vance_75936's avatar
Bob_Vance_75936
Icon for Altostratus rankAltostratus
Apr 29, 2011
Thanks hoolio. Very interesting info in that thread.

 

 

Does anyone have a link or info on how the LTM controls the port translation across a VIP? Below is the ip forwarding VIP and I am searching for why the LTM would proxy this connection and change the source ports.

 

 

 

 

 

virtual ip_forwarding {

 

enable

 

limit 0

 

rate class none

 

mirror disable

 

translate address disable

 

translate service disable

 

srcport preserve

 

fastl4

 

snat none

 

cmp enable

 

cmp processor none

 

lasthop pool none

 

snatpool none

 

pool none

 

fallback persist none

 

destination any:any

 

mask 0.0.0.0

 

ip protocol any

 

partition Common

 

rules none

 

httpclass none

 

persist none

 

auth none

 

clone pools none

 

profiles fastL4 {

 

all

 

}

 

traffic classes none

 

vlans none disable