Forum Discussion

seilemor_131269's avatar
seilemor_131269
Icon for Altostratus rankAltostratus
Aug 29, 2016

SSL errno 104 through F5 (vip), directly with curl ok

Hello community,   I've the following configuration design within a virtual server configuration:   - A virtual server will route the traffic based on the hostname within the request to differen...
application delivery
iRules
LTM
seilemor_131269's avatar
seilemor_131269
Icon for Altostratus rankAltostratus

Hey Kai,

 

I have executed the tcpdump, which was the base for the ssldump, without the "dst" option to receive also the answer packages. That the floating IP does not send correctly the clienthello I've also noticed... sadly I have no answer for these situation :(

 

What I've also checked is what happen if I create a virtual server with only the problem server and without policy routing. With this configuration I also have no success.

 

Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Aug 29, 2016

I guess this is more a node specific problem then? Configuration differences? Wrong Routing Tables? Bad SSL Chiphers? Some FW access-lists in transit? To get sure, I'd like to recomment to TCPDUMP directly on the affected nodes (or use a SPAN port on your switches)...

 

Cheers, Kai