For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_Harbison_29's avatar
Joe_Harbison_29
Icon for Nimbostratus rankNimbostratus
Jul 13, 2017

Load Balancing with Oneconnect and clients coming from same IP

We have a customer that is PAT'd (single IP) coming to the VIP on the F5, there are 2 servers in the pool but it seems that only one receives the traffic for a given day. There is a OneConnect Profi...
application delivery
LTM
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jul 13, 2017

Joe, with oneconnect you configure a source mask for the BIG-IP to evaluate upon every request, see Managing connection reuse using OneConnect source mask. However, if the IP address the BIG-IP sees is the same IP address, then irrespective of the configured source mask it will mask an idle serverside connection. That way clients will be sent to the same backend pool member.

 

You may be better disabling oneconnect and using Cookie persistence / your chosen load balancing algorithm to better distribute connections.

 

Hope this helps,

 

N