For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dmitriy_Tiper's avatar
Dmitriy_Tiper
Icon for Altocumulus rankAltocumulus
Oct 04, 2023

Redirect on user browser inactivity on LTM VIP

We have a type Standard F5 LTM VIP (no APM, no ASM,  just LTM) with a pool of application servers.   Only SSL, TCP and HTTP profiles are applied to that VIP. Connection is made by browser to URL htt...
application delivery
LTM
timeout
vip
Dmitriy_Tiper's avatar
Dmitriy_Tiper
Icon for Altocumulus rankAltocumulus
Oct 04, 2023

Correct, other than keep-alive no data. Request came from applicaiton team; for them idle conneciton is no browser activity. They don't care or don't know about lower OSI model levels activity, like TCP keep-alive.

 

Paulius's avatar
Paulius
Icon for MVP rankMVP
Oct 04, 2023

Dmitriy_Tiper Sadly, the only thing that I have seen recently is someone creating a counter that will arbitrarily close a connection after x amount of time used rather than closing a connection that has no data traversing it over a certain period of time. The best option here would be to disable TCP keepalive on the server side if open connections is the large of a problem.