Forum Discussion

fabianlumy's avatar
fabianlumy
Icon for Nimbostratus rankNimbostratus
Jan 31, 2013

TCP KeepAlive - Avoid long client connection without data

Hello,   I have virtual servers with type "Standard", TCP profile and HTTP profile. (BigIP LTM 1600, v 11.2.0)   The problem is that some users stay connected indefinitly using TCP keep alive. ...
config
design
fabianlumy's avatar
fabianlumy
Icon for Nimbostratus rankNimbostratus
Feb 04, 2013

Yes I've used my script the other public website, and for all I've tested, send a RST after a timeout even if tcp keepalive are sent.

Here is the very simple configuration: 


ltm profile tcp /Common/tcptest {
  app-service none
  close-wait-timeout 5
  defaults-from /Common/tcp
  fin-wait-timeout 5
  idle-timeout 360
  keep-alive-interval 4294967295
  max-retrans 8
  receive-window-size 65535
  send-buffer-size 65535
  syn-max-retrans 3
  time-wait-timeout 2000
  zero-window-timeout 20000
}

ltm profile http /Common/http-conf1 {
  app-service none
  defaults-from /Common/http
  insert-xforwarded-for disabled
  max-requests 200
}

ltm virtual /Common/VS {
  destination /Common/X.X.X.X:80
  ip-protocol tcp
  mask 255.255.255.255
  pool /Common/POOL1
  profiles {
    /Common/http-conf1 { }
    /Common/oneconnect { }
    /Common/tcptest { }
  }
  snat automap
  translate-address enabled
  translate-port enabled
  vlans-disabled
}

ltm virtual-address /Common/X.X.X.X {
  address X.X.X.X
  mask 255.255.255.255
  traffic-group none
}