For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

shantidutbansod's avatar
shantidutbansod
Icon for Nimbostratus rankNimbostratus
Mar 20, 2019

New Virtual Servers are sending RESETS to all the traffic

Hello Everyone! On our F5 cluster, if we create any new VS, it is just Reseting all the traffic. Configuration of one of the VS is as   ltm virtual VPN { description VPN_VS destination 10....
application delivery
BIG-IP
LTM
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Mar 20, 2019

Resets are being send because of Policy action

According to your logs you are hitting the Virtual Server address on port 80 not 443:

 

Mar 19 09:38:07 EMS-AAT-LB-1 err tmm[19589]: 01230140:3: RST sent from 10.194.1.155:80 to 10.194.1.52:50811, [0x1ee0645:1729] Policy action

 

Your TCP dump is showing you are hitting port 443 but could be for a different reason. Test again and post the logs when you are hitting HTTPS and check the reason code here: K13223: Configuring the BIG-IP system to log TCP RST packets