Forum Discussion
Virtual server stopped working
I have a virtual server on port 80 with tcp profiles and http profile and iRule which is udes for http->https redirection. Also, AutoLastHop is enabled, and we are using SNAT pool with two addresses. there is default pool assigned on virtual server. Yesterday, it stopped working. All other virtual servers on the box are working correctly.
Tcpdump looks like this:
11:12:59.397603 IP client_ip.65312 > vip.80: Flags [S], seq 4279187032, win 5840, options [mss 1380,sackOK,TS val 2894092240 ecr 0,nop,wscale 6], length 0 in slot1/tmm0 lis= 11:12:59.397632 IP vip.80 > client_ip.65312: Flags [S.], seq 1879338434, ack 4279187033, win 4140, options [mss 1460,nop,nop,TS val 1691634714 ecr 2894092240,sackOK,eol], length 0 out slot1/tmm0 lis=/Common/ 11:12:59.479132 IP client_ip.65312 > vip.80: Flags [.], ack 1, win 5840, options [nop,nop,TS val 2894092260 ecr 1691634714], length 0 in slot1/tmm0 lis= 11:12:59.479145 IP vip.80 > client_ip.65312: Flags [R.], seq 1, ack 1, win 0, length 0 out slot1/tmm0 lis= 11:12:59.480597 IP client_ip.65312 > vip.80: Flags [P.], seq 1:166, ack 1, win 5840, options [nop,nop,TS val 2894092261 ecr 1691634714], length 165 in slot1/tmm0 lis= 11:12:59.480605 IP vip.80 > client_ip.65312: Flags [R.], seq 1, ack 166, win 0, length 0 out slot1/tmm0 lis=
So, if I change type of virtual server to Performance L4 then F5 is sending traffic to pool members, but when the type of virtual server is standard then application is not working. also, this is my irule:
when CLIENT_ACCEPTED { log local0. "accepted" } when HTTP_REQUEST { log local0. "irule" if { [string tolower [HTTP::host]] starts_with "myhost" or [string tolower [HTTP::host]] starts_with "myhost" } { if { [HTTP::uri] equals "/"} { log local0. "redirect" HTTP::redirect "" return } else { log local0. "redirect1" HTTP::redirect "[HTTP::uri]" return } } else { log local0. "error" reject return } }
And when this is not working, then none of these messages from irule are logged. We fixed that yesterday by deleting virtual and creating it again. But today it stopped working again.
We are running v12, HF2. Somebody has any clue abot why is this behaving like it does? Thank you.
1 Reply
- Vijay_E
Cirrus
Based on this: IP vip.80 > client_ip.65312: Flags [R.], seq 1, ack 166, win 0, length 0 out slot1/tmm0 lis=
It looks like the VS is sending a RST to the client for whatever reason.
I would recommend using Standard VS without iRule and see if it is working. Try this to log the RST reason:
sol13223: Configuring the BIG-IP system to log TCP RST packets
See if you can identify the RST reason based on this:
sol9812: Overview of BIG-IP TCP RST behavior
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com