For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kirit_Patel_521's avatar
Kirit_Patel_521
Icon for Nimbostratus rankNimbostratus
Dec 16, 2010

Stickiness by cookie with AKAMAI NOT WORKING

Folks

 

 

 

I have stickiness by cookie configured for a pool that uses akamai and what i have found is that its not sticking to the same server . what am i missing?

 

config
design

6 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Dec 16, 2010
    Hi Kirit,

     

     

    Do you have OneConnect enabled on the virtual server? If not, can you try? See this wiki page for details:

     

     

    http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/oneconnect.html

     

     

    Aaron
  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Dec 16, 2010
    Can you describe you scenario a bit more? Perhaps traffic flow, how you're using Akamai, etc?
  • L4L7_53191's avatar
    L4L7_53191
    Icon for Nimbostratus rankNimbostratus
    Dec 16, 2010
    This is a common issue with proxies that use connection optimizing tricks ( like Akamai). Enable oneconnect with a /32 mask. See this SOL for more information: http://support.f5.com/kb/en-us/solutions/public/7000/900/sol7964.html?sr=11716037

     

     

    -Matt
  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Dec 16, 2010
    Posted By L4L7 on 12/16/2010 07:33 AM

     

    This is a common issue with proxies that use connection optimizing tricks ( like Akamai). Enable oneconnect with a /32 mask. See this SOL for more information: http://support.f5.com/kb/en-us/solutions/public/7000/900/sol7964.html?sr=11716037

     

     

    -Matt

     

    What type of optimizing are you talking about? We suspected they might be doing some pipelining with us, but they confirmed that wasn't the case. Have you heard of them doing some other stuff?
  • L4L7_53191's avatar
    L4L7_53191
    Icon for Nimbostratus rankNimbostratus
    Dec 17, 2010
    Yes, I'm referring to their pipelines as well as their version of one connect/muliplexing (I'm not sure what it's called). There's probably more, as well; they can actually do some specific things with traffic, although it requires some customization...

     

     

    -Matt
  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Dec 17, 2010
    Posted By L4L7 on 12/17/2010 05:10 AM

     

    Yes, I'm referring to their pipelines as well as their version of one connect/muliplexing (I'm not sure what it's called). There's probably more, as well; they can actually do some specific things with traffic, although it requires some customization...

     

     

    -Matt

     

    Interesting. We use their DSA (Dynamic Site Accelerator) product and besides proxying connections, they say they aren't doing anything else. I use OneConnect so wouldn't have a problem with my iRules anyways, but interesting nonetheless.