Forum Discussion
Separate TCP and UDP Forward (IP) Virtual Servers Instead of All Protocols
Hey All,
We have an LTM configured as the gateway for the servers that are being load balanced (inline mode). We have a forward (IP) virtual server configured to permit the flow to / from these load balanced servers:
ltm virtual FRWD_VIP {
destination any:any
ip-forward
mask any
profiles {
FWD_VIP { }
}
translate-address disabled
translate-port disabled
vlans {
FE1_NTWK
ISERV_SERVERS
ISERV_SERVERS_2
ISERV_VIPS
}
vlans-enabled
}
ltm profile fastl4 FWD_VIP {
defaults-from fastL4
idle-timeout 3600
ip-tos-to-client pass-through
ip-tos-to-server pass-through
keep-alive-interval disabled
link-qos-to-client pass-through
link-qos-to-server pass-through
loose-close disabled
loose-initialization disabled
mss-override 0
reassemble-fragments disabled
reset-on-timeout enabled
rtt-from-client disabled
rtt-from-server disabled
software-syn-cookie disabled
tcp-close-timeout 5
tcp-generate-isn disabled
tcp-handshake-timeout 5
tcp-strip-sack disabled
tcp-timestamp-mode preserve
tcp-wscale-mode preserve
}
We increased the timeout value to 3600 seconds on the forward VIP. What I have noticed is there has been a pretty big increase in the number of concurrent connections on this forward VIP which is to be expected. I was considering breaking apart the forward VIP into a TCP based and UDP based and dropping the timeout on the UDP based to 30 seconds. Has anyone had experience with this type of configuration?
Thanks,
Brian
- What_Lies_Bene1Cirrostratus
Probably the best way to go, as described in this: http://support.f5.com/kb/en-us/solutions/public/7000/500/sol7595.html
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com