Forum Discussion
GEAH_138957
Nimbostratus
Nimbostratuswhy http 503 is returned to the client
Hi,
I am a newbie to F5.
F5 BigIP 6900 BigIP 10.2.0 build 1707
I have a F5 in front of my nginx. My nginx sits in front of a tomcat.
My client (a mobile app) uploads a file (500kb let's say) via HTTP POST.
Both my nginx error.log and tomcat log indicated that a 200 was returned, but the client received a 503.
How can I find out where F5 returns a http status code 503 or not? It has to come from somewhere and I am almost positive that it's not from nginx or tomcat.
It happens sporadically, on some devices, but not all the time. We need some logging on F5 to determine what's going on.
Please point me to the right documentation.
PeteWhiteEmployee
There are number of things that you can do. Start by running tcpdump on the f5 internal and external interfaces to see properly what is going on. tcpdump -i -s0 -w /var/tmp/_1.cap host and port
in a different window, run tcpdump -i -s0 -w /var/tmp/_1.cap host or etc
This should capture the traffic. If it is SSL then use ssldump to decrypt it - ssldump -Aer -k -r _1.cap>>/var/tmp/ssldump_1.txt
Copy the files off with SCP, open them in Wireshark and look at both sides of the connection.
GEAH_138957Thanks! Will try that!
IheartF5_45022Nacreous
The F5 would never 'alter' a response (unless you are doing so in an iRule). Are you sure there's no corporate proxy in the way (between client and F5)? Proxies will give you 503 if they get a RST, or if the backend server fails to respond.