For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hui_37443's avatar
hui_37443
Icon for Nimbostratus rankNimbostratus
Nov 29, 2012

Oneconnec, tcp port reuse & LB_FAILED

Could anyone help me understand on how Oneconnect works to at TCP level? I see frequent & short TCP sessions to the pool members (web servers), over the same source TCP port. My understanding is that...
config
design
hui_37443's avatar
hui_37443
Icon for Nimbostratus rankNimbostratus
Nov 30, 2012
Dr. W,

 

 

Thanks for your insights.

 

 

We do apply cookie persistence, i.e. each client sticks to one particular pool member. We also have a SNAT pool of 3 IPs. We have a couple of pools attached to the VIP, and VIP has a bunch of http class profiles to do the dispatching. Most pools share the same server farm, but occupy different port numbers. It is like pool A consists of 10.10.1.100:22880 & 10.10.1.200:22880; while pool B consists of 10.10.1.100:1234 & 10.10.1.200:1234. We noticed when F5 connects to pool A, there is no port reuse visible in tcp trace. When it connects to pool B, a lot of port number reuse. Therefore I am quite puzzled by the different behaviour patterns.

 

 

Cheers,