For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gibby69_345881's avatar
Gibby69_345881
Icon for Nimbostratus rankNimbostratus
Mar 10, 2018

modify tcp_half_open

I have several pools that monitor tcp_half_open and I would like to modify them so that they monitor tcp. So my goal is to remove the tcp_half_open on each pool and have it monitor tcp. Below is an...
devops
TMSH
crodriguez's avatar
crodriguez
Ret. Employee
Mar 10, 2018

It should be as simple as executing the following TMSH command:

tmsh modify /ltm pool  monitor tcp
`


For example, to modify the pool you cited in your question:


`tmsh modify /ltm pool ARCH_PE_DataJunction_arch_pe_DJport7110 monitor tcp

As for whether changing the monitor will produce issues or not, there are always things to consider. The tcp_half-open monitor does a SYN/SYN-ACK followed by a RST. The tcp monitor does a full 3-way handshake (SYN/SYN-ACK/ACK) and then sends a FIN. This may have an impact in your environment as clearly the volume of traffic per monitor test is different.