Forum Discussion
Hi Brad,
OK. The packets from the client (172.16.33.1) to VIP (172.16.33.103) captured on the client:
21:33:01.361864 IP 172.16.33.1.59917 > 172.16.33.103.80: Flags [S]
21:33:01.363374 IP 172.16.33.103.80 > 172.16.33.1.59917: Flags [S.]
21:33:01.363407 IP 172.16.33.1.59917 > 172.16.33.103.80: Flags [.]
21:33:01.363856 IP 172.16.33.1.59917 > 172.16.33.103.80: Flags [P.] len 391 (GET)
21:33:01.364272 IP 172.16.33.103.80 > 172.16.33.1.59917: Flags [.] len 0
The packets from VIP to real server (172.16.34.101) captured on real server. I can see F5 tried 4 times to establish that connection):
21:32:09.770673 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [S]
21:32:09.770813 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [R]
21:32:09.770814 IP 172.16.34.101.80 > 172.16.33.1.59917: Flags [S.]
21:32:11.769808 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [S]
21:32:11.769934 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [R]
21:32:11.769937 IP 172.16.34.101.80 > 172.16.33.1.59917: Flags [S.]
21:32:13.769422 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [S]
21:32:13.769667 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [R]
21:32:13.769673 IP 172.16.34.101.80 > 172.16.33.1.59917: Flags [S.]
21:32:15.769861 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [S]
21:32:15.770155 IP 172.16.33.1.59917 > 172.16.34.101.80: Flags [R]
21:32:15.770162 IP 172.16.34.101.80 > 172.16.33.1.59917: Flags [S.]
I had to remove additional options presented by tcpdump because of antispam filters of devcentral. We can see that from the client side i was able to send HTTP GET request, but got just empty ACK (no HTTP response with payload). On the server side we do see F5 prematurely sending RST packet and because of that connection is never established.
I have around 60s time difference on client/server machine.
Does that looks like any known issue ? Or maybe my misconfiguration (i do have experience with loadbalancers but not with F5 so i am newbie).
Thanks, Michal