Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Baqar_Husain_81's avatar
Baqar_Husain_81
Icon for Nimbostratus rankNimbostratus
Jul 11, 2007

Prevent three way handshake on VIP when nodes unavailable

Very simple setup VIP and pool, if all nodes are unavailable (failed health check) we don't want the VIP to respond on a three-way handshake ... which it does by default due to the full-proxy feature ...
application delivery
dev
devops
irules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 12, 2007
Oddly enough, when I tested on 9.4, I think 'discard' also triggered a reset (!?).

 

 

I believe that when you add a TCP profile to a virtual server, there is no way to prevent TMM from completing a three way handshake.

 

 

Check this post from rapmaster_c for more info (Click here).

 

 

Aaron