F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

gscholz's avatar
gscholz
Icon for Nimbostratus rankNimbostratus
Feb 20, 2019

Request for interpretation of iRule entries in ltm log and further troubleshooting steps

I have set up a wildcard forwarding virtual server in order to let outbound traffic from backend servers through the F5 to the internet. In order to restrict the permitted traffic (DNS, HTTP, HTTPS, ...
application delivery
iRules
LTM
Dave_McCauley_3's avatar
Dave_McCauley_3
Icon for Cirrostratus rankCirrostratus
Feb 20, 2019

What do the virtual servers look like? Just a 443 incoming and 0.0.0.0/0 forwarding for the outbound traffic? The 0 port typically means an all ports VIP, but that doesn't make sense for this scenario. It almost looks like the return traffic is missing the connection table on the inbound VIP, and hitting the forwarding VIP.

 

Can you post the second iRule and "tmsh list virtual" for those VIPs?

 

I'd recommend working with support on this, they should be able to hop on a call with you to track it down.