Forum Discussion
CirrusTimeout issue
Hello,
I am using a fast L4 forwarding vip to send all the traffic to back end and AFM associated with it. The source address is 0.0.0.0/0 and destination is 10.0.0.0/8. The time out settings are default (300 seconds).
Now I am facing issue with this time out value. Users running query to the DB behind F5 BIG IP getting time out issues if they gonna run a long query. We can't increase the time out value on the VIP because it gonna affect all the connections through the VIP and leave so many open connections for a while. This would be risky because the number of connection through the vip is too high.
Is there any way to define time-out settings for each firewall rule in AFM?
Regards, Jinshu
3 Replies
Stanislas_Piro2Cumulonimbus
Hi,
try this irule:
when CLIENT_ACCEPTED { if {[IP::protocol] == 6 && [TCP::local_port] == XXXX} { IP::idle_timeout 1800 } }- Stanislas_Piro2
In AFM version 12.0 and above, you can configure timer policies :
Hannes_RappNimbostratus
I think the best solution for your scenario is to go for a custom fastL4 profile:
Reset on Timeout: Disabled Loose Initiation: Enabled Loose Close: Enabled
