For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Amanpreet_Singh's avatar
Amanpreet_Singh
Icon for Cirrostratus rankCirrostratus
Oct 23, 2015

Are you able to simulate the connection from LB itself. Just login to ssh of ltm and try to telnet 11.240.64.30 on port 3753. See it makes any difference in current connection count. you can also check the session table entry in another ssh window to see if lb has selected the appropriate member, that is, server side connection.

 

  • JotaCePena_1783's avatar
    JotaCePena_1783
    Icon for Nimbostratus rankNimbostratus
    Oct 23, 2015
    I simulated the connection from LB itself but there are not any difference in current connection count. In session table I saw current connection like this: jcpena@(F2000S-SBD1-00A-CORE-C1U1)(cfg-sync In Sync)(Active)(/Common)(tmos) show /sys connection ss-server-addr 11.240.67.38 Sys::Connections 7.240.71.15:60552 11.240.64.30:3753 11.240.67.103:3093 11.240.67.38:3753 tcp 169 (tmm: 0) none
  • JotaCePena_1783's avatar
    JotaCePena_1783
    Icon for Nimbostratus rankNimbostratus
    Oct 25, 2015
    When I run this command, the server backend replies with right answer: "Server Online". [jcpena@F2000S-SBD1-00A-CORE-C1U1:Active:In Sync] ~ curl http://11.240.67.38:3753 Server Online[jcpena@F2000S-SBD1-00A-CORE-C1U1:Active:In Sync] ~ [jcpena@F2000S-SBD1-00A-CORE-C1U1:Active:In Sync] ~ curl http://11.240.67.39:3753 Server Online[jcpena@F2000S-SBD1-00A-CORE-C1U1:Active:In Sync] ~ [jcpena@F2000S-SBD1-00A-CORE-C1U1:Active:In Sync] ~ I think the issue is in the client side, may be I need a custom profile different of http profile? Any idea?