For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rajendra_129865's avatar
Rajendra_129865
Icon for Nimbostratus rankNimbostratus
Jun 13, 2014

Load Balancing for new connections fails when jsessionid persistence profile is applied to VIP

Hi, We have applied jsessionid based persistence profile to the VIP to maintain active session persistence to same node. Also observed all new connections from different source ip's are getting to the same server instead of load balancing among pool members and later maintaining the session persistence. However with cookie persistence new connections are getting load balanced.

 

Below mentioned Configuration example.

 

virtual VS_X.X.X.X_https { snat automap pool Pool_APPServers destination X.X.X.X:https ip protocol tcp persist JSESSIONID_Persistence profiles { http_xforward {} oneconnect {} Client_CERT { clientside } tcp {} } } pool Pool_APPServers { monitor all http members { 1.2.3.4:8002 {} 1.2.3.4:8003 {} } }

 

Please let me know if my understanding related to jsessionid persistence for new connection is correct? or Any additional configuration is required to fix the issue.

 

Thanks, Rajendra

 

application delivery
devops
iRules

4 Replies

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Jun 13, 2014

    This could be due to OneConnect:

     

    http://support.f5.com/kb/en-us/solutions/public/2000/000/sol2055.html

     

    • Rajendra_129865's avatar
      Rajendra_129865
      Icon for Nimbostratus rankNimbostratus
      Jun 16, 2014
      Thank You Cory for the information. We have applied oneconnect profile applied to the VIP. We observed load balancing works when cookie persistence with oneconnect profile applied to it. Will this profile impact load balancing only for JsessionID based persistence or for all persistence profiles? Thanks, Rajendra
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Icon for Nacreous rankNacreous
    Jun 16, 2014
    Can you provide more information on the jsession persistence setup? as in how you are doing this... iRule or hash cookie?
  • Rajendra_129865's avatar
    Rajendra_129865
    Icon for Nimbostratus rankNimbostratus
    Jun 16, 2014
    Hi, We have applied customized universal persistence (JSESSIONID_Persistence) which has an iRule in it. Below is the persistence setup for your reference. ******************************************* profile persist JSESSIONID_Persistence { defaults from universal mode universal rule rule_JSESSIONID_persistenceprofile } rule rule_JSESSIONID_persistenceprofile { when HTTP_REQUEST { if { [HTTP::cookie exists "JSESSIONID"] } { persist uie [HTTP::cookie "JSESSIONID"] 3600 log local0. " Added persistence for session [HTTP::cookie "JSESSIONID"]; Server address: [IP::server_addr]" } else { set jsess [findstr [HTTP::uri] "JSESSIONID" 11 ";"] if { $jsess != "" } { persist uie $jsess 3600 log local0. " Used persistence record from path $jsess; Server address: [IP::server_addr]" } } } when HTTP_RESPONSE { if { [HTTP::cookie exists "JSESSIONID"] } { persist add uie [HTTP::cookie "JSESSIONID"] 3600 log local0. " Found persistence for session [HTTP::cookie "JSESSIONID"]; URL is [HTTP::host][HTTP::uri]" } } } ***************************************** Thanks, Rajendra