For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MR_RJ's avatar
MR_RJ
Icon for Cirrus rankCirrus
Jan 28, 2009

Issue with SSH and RDP connections times out

Hi,     When we first installed our BIG-IP LTM we had issues that RDP sessions going through the LTM was disconnected, same thing with SSH session to the LTM CLI.   To solve this I cre...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 28, 2009
Hi Robert,

 

 

Using an indefinite timeout would open yourself up to potential resource issues (ports and memory). If the VIPs are open to untrusted traffic, I'd definitely not use an indefinite timeout. Even for trusted clients, is it really a requirement to leave an idle connection up for more than eight hours? As Citizen Elah suggests in his article, it's more ideal if you can configure separate VIPs for separate protocols. If you want to keep the number of VIPs down and decide to use a single VIP for multiple protocols, then the iRule he provided does make good sense.

 

 

Aaron