Forum Discussion

hsahar1's avatar
hsahar1
Icon for Nimbostratus rankNimbostratus
Jan 29, 2025

ltm vip port list

ltm vip with port list what happens when one or two of the  port is down will it cause the vip down 

  • hsahar1 I wouldn't do a port list, I would split the virtual server up on a per destination IP and destination port.

    • hsahar1's avatar
      hsahar1
      Icon for Nimbostratus rankNimbostratus

      i have a vip with 50 services 

      why you think its better vip with the specific port 

       

       

      • Paulius's avatar
        Paulius
        Icon for MVP rankMVP

        hsahar1
        1. You have a better security posture on the F5 by splitting these ports up.
        2. You remove dependencies of a port working because another unrelated port isn't working.
        3. You can change the TCP/UDP connection details on a per port basis.

  • hello hsahar1 

     

    If you have an F5 LTM VIP configured with a list of ports, and one or two of those ports become unavailable due to a server issue, the VIP itself will not automatically go down. Please let me know if you done any testing relating to it

    BR
    Aswin

    • hsahar1's avatar
      hsahar1
      Icon for Nimbostratus rankNimbostratus

      thank you 

      will i be able to see winch   port fail  ? by log or any show command line ?

      • The status of the virtual server typically relies on the status of the default pool and health check monitor that is bound to it. The virtual server will only show as offline if *ALL* pool members fail their load balancer health checks. This is true for virtual servers that use traffic-matching-criteria (such as port lists and address-lists). You can't check the status of the virtual server that is using a port list by a port-by-port basis; the virtual server statistics are aggregated for all ports.