For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tatmotiv's avatar
tatmotiv
Icon for Cirrostratus rankCirrostratus
Jan 13, 2016

load balance ICMP echo requests to pool members

Hi there, I'm trying to setup a virtual server which will forward ICMP to pool members and let them handle answering ICMP instead of letting the BigIP handle ICMP itself. My plan was to: disab...
application delivery
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 13, 2016

Hi Tatmotiv,

 

this feature looks somewhat broken to me...

 

  1. ICMP=enable and ARP=enable will cause LTM to respond

     

  2. Switching to ICMP=disable and ARP=enable will cause ICMP messages to become dropped.

     

  3. Switching to ICMP=disable and ARP=disable will cause the servers respond to ICMP messages, until the ARP caches are timed out (with static MAC entries it would continue to work)

     

  4. Switching to ICMP=disable and ARP=enable will cause half of the ICMP messages to become dropped and the other half is still responded by the servers.

     

  5. Switching to ICMP=enable and ARP=enable will cause LTM to respond half of the ICMP messages and the other half is responded by the servers.

     

  6. Clearing the Connection-Table while having ICMP=enable and ARP=enable will immediatly cause LTM to respond to everything.

     

  7. Going back to the state of 4.) and then clearing the Connection-Table will cause the ICMP messages to become dropped.

     

  8. Going back to the state of 3.) and then clearing the Connection-Table will cause the servers respond to ICMP messages.

     

I'd recommend to call F5 support and ask for a fix/assitence...

 

FYI: I'm using TMOS v12

 

Cheers, Kai