For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mahnsc's avatar
mahnsc
Icon for Nimbostratus rankNimbostratus
Jan 13, 2009

Selectively Disabling Keep-Alives

This is probably going to be another odd-ball post but there is a good reason for it.

 

 

We have a site with a recently discovered bug that sends our app servers into full garbage collection mode for very, very long periods of time when specific customer conditions are met. While reproducing the problem and upon further investigation, we've learned that after a period of 5 minutes (and Yes, people seem to be waiting that long on this site for a response), the bigip issues a connection reset and then the browser retransmits the POST. 5 minutes later, another reset followed by in some cases, another retransmit. This appears to be standard browser behavior.

 

 

I don't want to disable keep-alives wholesale--I am wondering if there is a way to disable keep-alives on POSTs using an irule? But I'm more concerned whether this is something I should not even think about attempting.
application delivery
dev
devops
iRules

11 Replies

Show More
  • mahnsc's avatar
    mahnsc
    Icon for Nimbostratus rankNimbostratus
    Jan 14, 2009
    Thanks for all your help on this. I'm thinking now that maybe the resolution might be simply setting a slightly shorter timeout at the mod_jk level so that it actually times the request out. Right now, the browser, the bigip, and mod_jk all share the same timeout value of 5 minutes. If the mod_jk timeout is shortened to, say, 3 minutes, then the BigIP would not issue a reset and the browser would not retransmit the request.