Forum Discussion
Natalia_Wolosec
Aug 31, 2011Nimbostratus
Virtual Server Redirection Issue
Hi All,
I'm having some abnormailities with a virtual server and a redirection pool.
In total I have 3 seperate DMZ vlans.
Vlan 1 is used for the IP addresses of the virtual server
Vlan 2 is used for pool1
Vlan 3 is used for pool2
At the moment I have one virtual server which the default pool is pool1 which is working perfectly.
I've added an irule which has a redirection, that if it sees the string new in the uri path it redirects to pool2.
I can see that the irule is working as the statistics for the pool2 is incrementing when a connection attempt is made, however this does not communicate correctly to the server.
I'm able to see from the firewall that there are denied packets going from pool2 server back to the floating ip address of vlan 2 (pool1) which is confusing.
I would have expected that the load balancer would attempt to make the connection to pool2 using the self ip address assigned to vlan 3 so the response would not be blocked coming back.
Is anyone aware of how the load balancers behaviour is when making a connection to a pool? Should it be using the self ip address assigned to vlan3 which pool2 is hosted?
Sorry if this is confusing, however the health monitors show the pool to be up and the nodes within up also.
Thanks,
- nitassEmployeehave u defined floating selfip on every vlan?
- Natalia_WolosecNimbostratusYes floating IP address for the new vlan has been configured.
- nitassEmployeeThe server itself cannot ping the load balancer which they are both in the same subnet? Do I need to allow this to be openned on the F5?
- Natalia_WolosecNimbostratusYes all is correct, however do I need to setup packet filtering to allow it to be pingable?
- nitassEmployeepacket filter is not needed to make selfip pingable.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects