For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

teknet7_237497's avatar
teknet7_237497
Icon for Nimbostratus rankNimbostratus
Dec 07, 2015

TCP Profile - extremely pushy F5 (RST after 300 us)

Hello Team, I do have VIP with the Pool of two servers and standard profile protocol: TCP. What i have noticed that after TCP SYN packet is routed by F5 to real server F5 is extremely pushy and e...
application delivery
BIG-IP
LTM
teknet7_237497's avatar
teknet7_237497
Icon for Nimbostratus rankNimbostratus
Dec 08, 2015

OK, few more tests: ihealth - very nice tool (i will use it from now on) but with this specific issue did not help.

 

But i have found one profile which is working fine: fasthttp.

 

If i do understand correctly the only big difference between this profile (working) and all others (non working) is SNAT.

 

To confirm this i have configured Standard profile but with SNAT enabled - and indeed it's working fine.

 

Any ideas/suggestions ? Why do i need to have SNAT enabled to have it working ? Why without SNAT F5 is behaving that strangely ?

 

Thanks, Michal