Forum Discussion
NimbostratusSlow browsing issue on internet and intranet sites using the F5 VIP but on F5 backend is ok
Hi,
We have some users who is using the F5 VIP (FQDN) configured on their browsers as their proxy server but having slow connection when they access the internet and intranet sites. But when they try to hard code the backend server (4 backend proxy servers) they can access the sites without no issues at all. The
Can you please guide me what are needed to check on F5 to resolve the issue? Could it be the http profile or the protocol client profile? I will really appreciate your help. Please advise.
Thanks.
5 Replies
Gus_135027Cirrus
Hello,
I would:
- Capture the packets using tcpdump.
- Open the captures in Wireshark. Try using Wireshark's Expert Info feature 'Analyse >> Expert Information'
- Check for any protocol anomalies: check for TCP windows size, fragmentation, tcp offload settings, etc.
- Create custom profiles for this service, so you don't disturb other VS.
- Try tuning the tcp and/or the http profiles.
- Check the routing between the clients and the F5 VS. And from the F5 to the nodes.
- You might get stuck, so worth opening a ticket with F5 and include all your investigation work.
jbhpe_254247Hi Gus, Thanks for your reply. Can you please guide me on how to run the tcpdump? From F5 side or client side? What is the recommended command or setup? What are the needed to check when I run the dump on wireshark? Thanks.- Gus_135027Sorry for delay... I've been away..
You can start with the following tcpdump command:
tcpdump -s0 -nni 0.0:nnnp -w /var/tmp/pcap/[filename] host [the virtual server ip] and port [the proxy port e.g. 8080]
E.g.:
tcpdump -s0 -nni 0.0:nnnp -w /var/tmp/pcap/19032016_1120_tcp.pcap host 192.168.1.200 and port 8080
Use a SFTP client like Filezilla to download the capture so you can open it in Wireshark, the capture will be in /var/tmp/pcap/
tatmotivCirrostratus
Which TCP profiles are you using? If you are using default profiles, please consider this post: https://devcentral.f5.com/articles/stop-using-the-base-tcp-profile
Tom_De_Boeser_1This really depends a lot on your network setup. If possible could write a short description of your networking on both the frontend and backend?
