For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kalpesh_48932's avatar
Kalpesh_48932
Icon for Nimbostratus rankNimbostratus
Oct 23, 2012

Problem with http/https connection

Hello all,

 

 

i have created new VIP with below config.

 

 

virtual r_vs_sitcom_lso_24105 {

 

pool pool_sitcom_lso_24105

 

destination 10.155.65.64:24105

 

ip protocol tcp

 

persist profile_sitcom_persist

 

profiles {

 

http {}

 

tcp {}

 

}

 

vlans INTERCO enable

 

}

 

[root@STG1F5LDB01:Active] config b pool pool_sitcom_lso_24105 list

 

pool pool_sitcom_lso_24105 {

 

monitor all sitcom_http_24105

 

members {

 

10.155.62.112:24105 {}

 

10.155.62.113:24105 {}

 

}

 

}

 

 

However when i tested, i get below output.

 

 

The URL fail with “Error 101 (net::ERR_CONNECTION_RESET) : The connection was reset.”

 

http://10.155.62.112:24105 works

 

http://10.155.62.113:24105 works

 

 

is associated with VIP 10.155.65.64:24105 in DNS.

 

 

direct connection to server is working well, but via F5 does not work well.

 

 

please suggest

 

 

config
design

4 Replies

  • Kalpesh_48932's avatar
    Kalpesh_48932
    Icon for Nimbostratus rankNimbostratus
    Oct 23, 2012

    profile persist profile_sitcom_persist {

     

    defaults from source_addr

     

    mode source addr

     

    timeout 1800

     

    }

     

     

    profile info....

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Oct 23, 2012
    Where do you see that error?

     

     

    What happens if you try http://10.155.65.64:24105?

     

     

    Does the server have a route back to the client IP that's pointing at the F5? I suspect not, you may need to configure an SNAT on the VS. Automap would do just to confirm that's the issue.