Forum Discussion
tux143
Cirrus
CirrusSNAT pool Inet port exhaustion
We are running XMPP application and we have 500k users so in short 500k TCP persistent connection and total 4 XMPP servers, based on math i created 15 ips SNAT pool (assuming 15 ipaddress are enough ...
Persistence="none" means you are not sticking any clients to any particular web servers.
Regarding your logs, the two IPs shown are the following:
10.0.0.61
10.0.0.68
Are those IPs used in other virtual servers? In other words, are other VIPs/apps also using those SNAT IPs and contributing to SNAT port exhaustion.
I would also do a show ltm pool <name-of-pool> to check pool member stats of your XMPP servers. What are the max concurrent connections ever held by each XMPP server. There will be current, max, and total. Total is all connections over time...not needed right now. Max will show the max concurrent connections ever seen by that pool member. I'm curious how high each server got in terms of connections.
Also, if setup correctly as it sounds then you might be running into something else. There may be long-lived connections consuming those IPs as active flows. Not sure. I would recommend opening an F5 support case and providing a fresh qkview next time you see SNAT port exhaustion.