Forum Discussion

Vishwanath's avatar
Vishwanath
Icon for Nimbostratus rankNimbostratus
Apr 11, 2018

One Application web URL not working

I have 2 VIPs on 443 with same pool members on different port with FQDN named abc-qa.dev.xyz.com (having pool member on 5001 )and def-qa.dev.xyz.com (having pool member on 7302 )both are in same datacenter. They are having a tcp monitor and members are showing up. But when I put in browser abc-qa is working fine but def-qa not. I checked virtual-address both are having routing advertisements disabled. Only configuration mismatch I am able to see is, server-scope any and icmp-echo is selective is of abc-qa (working one) where as for non working def-qa server-scope is all and icmp-echo is enabled. Can someone suggest what could be the issue?

 

application delivery
BIG-IP
LTM
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 11, 2018

    Hello,

     

    here is your configuration:

     

    abc-qa.dev.xyz.com:443 (having pool member on 5001 )

     

    def-qa.dev.xyz.com:443 (having pool member on 7302 )

     

    First question, Can you join your VS? to validate this just enter the following command from cli:

     

    tcpdump -nni 0.0 host "IP of the VS" and port 443.

     

    If you can reach this service it could be that you are stuck in amon on a fw for example.

     

    -> Second point, the standard error. Did you open flow from F5 Virtual IP (because some people open only from self ip and your monitor will be up but your business flow will be blocked)

     

    To check that, check your FW logs or via TCPDUMP:

     

    tcpdump -nni 0.0 host "floating IP" and port 7302 (and check your request and wait a response from server)

     

    Regards