For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

gscholz's avatar
gscholz
Icon for Nimbostratus rankNimbostratus
Feb 20, 2019

Request for interpretation of iRule entries in ltm log and further troubleshooting steps

I have set up a wildcard forwarding virtual server in order to let outbound traffic from backend servers through the F5 to the internet. In order to restrict the permitted traffic (DNS, HTTP, HTTPS, ...
application delivery
iRules
LTM
Dave_McCauley_3's avatar
Dave_McCauley_3
Icon for Cirrostratus rankCirrostratus
Feb 20, 2019

What do the virtual servers look like? Just a 443 incoming and 0.0.0.0/0 forwarding for the outbound traffic? The 0 port typically means an all ports VIP, but that doesn't make sense for this scenario. It almost looks like the return traffic is missing the connection table on the inbound VIP, and hitting the forwarding VIP.

 

Can you post the second iRule and "tmsh list virtual" for those VIPs?

 

I'd recommend working with support on this, they should be able to hop on a call with you to track it down.