For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

danielo303_1961's avatar
danielo303_1961
Icon for Nimbostratus rankNimbostratus
Dec 11, 2012

Runaway Connection Counts on Virtual Server

  We have a BigIP 1500 running 9.4.3 which handles about 100 VIP's. The LTM does SSL offload for the backend servers, which are mostly tomcat/http. Throughput is around 60Mbps and average SSL TP...
config
design
danielo303_1961's avatar
danielo303_1961
Icon for Nimbostratus rankNimbostratus
Jan 23, 2013
Wanted to provide some follow up on this issue. Was able to bring the active connections down by tweaking the tcp profile used by this VIP. Created a new tcp profile "tcp_timeout" and lowered the idle timeout to 120 seconds, from the default of 300. After applying this profile, my active connections dropped from around 120K to about 30K. I noticed TMM memory usage also dropped from 400M to 200M which is a good thing, too.

 

 

Probably need to do further investigation as to why so many idle connections were hanging around, but at least I've reduced impact on my LTM without affecting the application.