For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kenny_Lussier_5's avatar
Kenny_Lussier_5
Icon for Nimbostratus rankNimbostratus
Jun 13, 2011

Tracking triggers in an iRule

Hi All,     I have the following iRule which checks a data group to see if the server is marked as online or off-line. If it is marked as online, traffic passes as normal, if it is off-line, it...
application delivery
dev
devops
iRules
Kenny_Lussier_5's avatar
Kenny_Lussier_5
Icon for Nimbostratus rankNimbostratus
Jun 14, 2011
Thanks for the pointers. Tracking connections is a little tough, since there are thousands of connections to the front end, and the pool/node is a load balancer. finding the one SYN that isn't ACKd is like finding a needle in a needle stack :-)

 

 

One thing to note is that I replaced some old Linux servers running Apache using mod_proxy with the LTM. We never had this issue until we went to the LTM. I am trying to figure out which of the hundreds of differences is causing the problem, and if there is a way to adjust the LTM so that it doesn't behave this way. I suppose increasing the SYN retry is an option. Would using an LB::reselect work if there is only one node in a pool?

 

 

Thanks,

 

Kenny