Forum Discussion

ecce_297791's avatar
ecce_297791
Icon for Altocumulus rankAltocumulus
Apr 03, 2018

VS does not pick up traffic

I've messed something up with my local BIGIP-VE on my laptop.

I cant get a HTTP response from a simple VS on port 80. I send the request from my laptop and I don't get a single byte back.

  • The VS is up
  • The pool is up
  • All pool members are up
  • All pool members answers with HTTP response when I curl it from BIGIP
  • The VS responds to ping from the client (but not HTTP). Verified by turning Echo reply off on the virtual address (ping response stopped).
  • No packet filters are configured (and packet filters are disabled)

tcpdump shows the traffic coming in to the BIGIP. I can see ping incoming and the responses leaving. When i do HTTP request, no listener seems to pick it up:

[root@bigipa:Active:Standalone] config  tcpdump -nni ext host 10.1.10.20

12:36:36.239555 ARP, Request who-has 10.1.10.20 (00:0c:29:ab:31:cf) tell 10.1.10.1, length 53 in slot1/tmm0 lis=
12:36:36.239563 IP 10.1.10.1.56017 > 10.1.10.20.80: Flags [S], seq 1636708799, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 811456166 ecr 0,sackOK,eol], length 0 in slot1/tmm0 lis=
12:36:36.239905 ARP, Reply 10.1.10.20 is-at 00:0c:29:ab:31:cf, length 53 out slot1/tmm1 lis=
12:36:37.242992 IP 10.1.10.1.56017 > 10.1.10.20.80: Flags [S], seq 1636708799, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 811457166 ecr 0,sackOK,eol], length 0 in slot1/tmm0 lis=
12:36:38.243349 IP 10.1.10.1.56017 > 10.1.10.20.80: Flags [S], seq 1636708799, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 811458166 ecr 0,sackOK,eol], length 0 in slot1/tmm0 lis=
12:36:39.244998 IP 10.1.10.1.56017 > 10.1.10.20.80: Flags [S], seq 1636708799, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 811459166 ecr 0,sackOK,eol], length 0 in slot1/tmm0 lis=

Here is the VS config:

ltm virtual /Common/f5trn.cmos.lab-p80-vs {
destination /Common/10.1.10.20:80
ip-protocol tcp
mask 255.255.255.255
pool /Common/f5trn.cmos.lab-pool
profiles {
    /Common/http { }
    /Common/tcp { }
}
source 0.0.0.0/0
source-address-translation {
    type automap
}
translate-address enabled
translate-port enabled

}

So the traffic reach the BIGIP, but not the VS, as I understand it. Provisioned modules are LTM, ASM, APM and AVR. There is no APM policy applied, ASM is disabled under the security tab. The appliance is standalone. The LTM log shows nothing related to this. BIGIP is 13.1, running as a VM on vmware fusion on MacOS. The pool consists of the F5 LAMP image.

Suggestions?

  • I don't think your this particular VS alone is having issues. Your issue may be on the VM setup itself. Can you check if your vlans are properly set.

     

  • What do the statistics look like for the VS? Do they show any connections or requests? How is the http profile configured? Can you post that?

     

  • ecce's avatar
    ecce
    Icon for Cirrostratus rankCirrostratus

    VLANs seems correct, I have looked though it and cant find anything wrong. I only have two: INT and EXT. And the traffic shows up when I tcpdump traffic on the BIGIP. And the ping works.

     

    The statistics for the VS is all zeroes. The HTTP profile is just the default http profile applied in the VS settings.

     

    I set the self IP lockdown to "allow all" on the floating IP on both VLANs, and I cannot get any response from that either.

     

  • ecce's avatar
    ecce
    Icon for Cirrostratus rankCirrostratus

    I "solved it" by factory resetting the BIGIP. Set the VS up again and it worked right away. Then I provisoned AVR, had to reboot and after that a bunch of services never started like they should. I found K7551 and the description fits almost perfectly (although I use 13.1 and did not factory reset it that way).

     

    I have a feeling this was a weird underlying error in a service or something.

     

    Restored a snapshot from a few months back, it seems to work fine for now.

     

  • Could you please try disabling and enabling the VIP and also you can try recreating VIP

     

    • ecce's avatar
      ecce
      Icon for Cirrostratus rankCirrostratus

      I did try that (should have said that). I also deleted all VLANs, selfIPs and recreated them. But the result was the same, ping worked but not HTTP.

       

  • Could you please try disabling and enabling the VIP and also you can try recreating VIP

     

    • ecce's avatar
      ecce
      Icon for Cirrostratus rankCirrostratus

      I did try that (should have said that). I also deleted all VLANs, selfIPs and recreated them. But the result was the same, ping worked but not HTTP.