For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Muhammad_57196's avatar
Muhammad_57196
Icon for Nimbostratus rankNimbostratus
Aug 04, 2009

Persistent timeout and drainstop

Hi,

 

 

We had a requirement to have persistent enabled for 1 hour timeout. The persistent is based on source address. The server team has the capability of drain stop the node. Since the persistent is set for an hour, the F5 LTM keeps on sending the traffic for the disable node until the persistent timeout.

 

 

Is there any way where when the server team disable the node, the F5 LTM will not send the traffic anymore to that node even if the persistent is configured.

 

 

Thanks for the reply.

 

 

Regards,

 

 

Dr. Muhammad Malik
config
design

8 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Aug 04, 2009
    Hi Muhammad,

     

     

    You can set the node address to forced offline:

     

     

    Enabled (All traffic allowed)

     

    Disabled (Only persistent or active connections allowed)

     

    Forced Offline (Only active connections allowed)

     

     

    Aaron
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Aug 04, 2009
    Joe wrote a powershell script that affords this control:

     

    http://devcentral.f5.com/Default.aspx?tabid=63&articleType=ArticleView&articleId=369 Click here

     

     

    ...your application could be modified to issue the forced offline commands directly. The example is in powershell, but there are also examples in the iControl forums and the codeshare in C, java, perl, and python. Maybe ruby and php too.
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Aug 05, 2009
    I think this is the logic but it would be good to test it.

     

     

    b node 1.1.1.1 up/down = equates to Forced Offline (Only active connections allowed)

     

    b node 1.1.1.1 sessions enable/disable = Disabled (Only persistent or active connections allowed)

     

     

    Aaron
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Aug 05, 2009
    For specific pool members that might share node with others, you can specify this way:

     

     

    b pool myPool { members 1.1.1.1:http down 1.1.1.2:http }

     

     

    Note that with the bigpipe commands you'll need to specify each pool member even if you are not downing them. Or, in v.10 you can do this in tmsh, which will only impact the pool member you specify:

     

     

    tmsh modify ltm pool myPool members modify { 1.1.1.1:http { state down } }

     

     

  • Desai_124243's avatar
    Desai_124243
    Icon for Nimbostratus rankNimbostratus
    Nov 26, 2015

    We don't have Tmsh access in our environment and we have persist timeout 200 sec. But after taking pool members, connections are running till more than 2 hours.

     

    Is there any way drop connection when pool member goes offline? I tried session disable and monitor force down, but active connection isn't moving different pool member.

     

    any help would be appreciate on it.

     

    Thanks

     

    • melcaniac's avatar
      melcaniac
      Icon for Cirrus rankCirrus
      Nov 30, 2015
      I would be sure that the pool setting Action On Service Down is set to Reselect so that the connections would move to a new server once the member is forced down.
    • Desai_124243's avatar
      Desai_124243
      Icon for Nimbostratus rankNimbostratus
      Dec 01, 2015
      Thanks Melcaniac for reply. Can I do from powershell icontrol command ? if yes, do you have command for it? Thanks