cancel
Showing results for 
Search instead for 
Did you mean: 

iRule causing http connection resets

JoeH
Nimbostratus
Nimbostratus

I have an iRule that is set up to do redirects based on host and uri. Whenever I try to access sites on the virtual server that the iRule is attached to, I immediately get a "connection reset" error in the browser. Fiddler shows "[Fiddler] ReadResponse() failed: The server did not return a complete response for this request. Server returned 0 bytes."

I've turned on RST logging, and attached a screenshot of the relevant section of the log. aaa.aaa.aaa.aaa is the main external IP address (no virtual servers assigned to it). bbb.bbb.bbb.bbb is the external IP address of the virtual server having the issue. This is a virtual edition running in Azure. Any ideas?

 

un 2 18:03:50 nameofF5VE err tmm2[17730]: 01230140:3: RST sent from aaa.aaa.aaa.aaa:30968 to 169.254.169.254:80, [0x29da995:271] {peer} handshake timeout

Jun 2 18:03:50 nameofF5VE err tmm2[17730]: 01230140:3: RST sent from 169.254.169.254:80 to aaa.aaa.aaa.aaa:54230, [0x29da995:271] handshake timeout

Jun 2 18:03:51 nameofF5VE.westeurope.cloudapp.azure.com warning httpd[3451]: 0118000a:4: The Service Check Date check was skipped.

Jun 2 18:03:53 nameofF5VE err tmm2[17730]: 01220001:3: TCL error: /Common/iRule_SelectURL_PRD_mydomain_com_443 <HTTP_REQUEST> - Can't call after responding - ERR_NOT_SUPPORTED (line 2)   invoked from within "HTTP::uri"   ("csr.mydomain.com" arm line 12)   invoked from within "switch [ string tolower [HTTP::host]] {  "timesheet.mydomain.com" {   #log local0. "BGI Timesheet PRD: [HTTP::host] uri : [HTTP::uri]"    if {[a..."

Jun 2 18:03:53 nameofF5VE warning tmm2[17730]: 01260020:4: SSL Connection terminated for TCP 99.55.158.9:61481 -> bbb.bbb.bbb.bbb:443

Jun 2 18:03:53 nameofF5VE err tmm2[17730]: 01230140:3: RST sent from bbb.bbb.bbb.bbb:443 to 99.55.158.9:61481, [0x2a155c4:1878] iRule execution error

Jun 2 18:03:53 nameofF5VE err tmm1[17730]: 01220001:3: TCL error: /Common/iRule_SelectURL_PRD_mydomain_com_443 <HTTP_REQUEST> - Can't call after responding - ERR_NOT_SUPPORTED (line 2)   invoked from within "HTTP::uri"   ("csr.mydomain.com" arm line 12)   invoked from within "switch [ string tolower [HTTP::host]] {  "timesheet.mydomain.com" {   #log local0. "BGI Timesheet PRD: [HTTP::host] uri : [HTTP::uri]"    if {[a..."

Jun 2 18:03:53 nameofF5VE warning tmm1[17730]: 01260020:4: SSL Connection terminated for TCP 99.55.158.9:37962 -> bbb.bbb.bbb.bbb:443

Jun 2 18:03:53 nameofF5VE err tmm1[17730]: 01230140:3: RST sent from bbb.bbb.bbb.bbb:443 to 99.55.158.9:37962, [0x2a155c4:1878] iRule execution error

Jun 2 18:03:53 nameofF5VE err tmm2[17730]: 01220001:3: TCL error: /Common/iRule_SelectURL_PRD_mydomain_com_443 <HTTP_REQUEST> - Can't call after responding - ERR_NOT_SUPPORTED (line 2)   invoked from within "HTTP::uri"   ("csr.mydomain.com" arm line 12)   invoked from within "switch [ string tolower [HTTP::host]] {  "timesheet.mydomain.com" {   #log local0. "BGI Timesheet PRD: [HTTP::host] uri : [HTTP::uri]"    if {[a..."

Jun 2 18:03:53 nameofF5VE warning tmm2[17730]: 01260020:4: SSL Connection terminated for TCP 99.55.158.9:44158 -> bbb.bbb.bbb.bbb:443

Jun 2 18:03:53 nameofF5VE err tmm2[17730]: 01230140:3: RST sent from bbb.bbb.bbb.bbb:443 to 99.55.158.9:44158, [0x2a155c4:1878] iRule execution error

Jun 2 18:03:56 nameofF5VE.westeurope.cloudapp.azure.com warning httpd[30653]: 0118000a:4: The Service Check Date check was skipped.

Jun 2 18:03:59 nameofF5VE err tmm1[17730]: 01220001:3: TCL error: /Common/iRule_SelectURL_PRD_mydomain_com_443 <HTTP_REQUEST> - Can't call after responding - ERR_NOT_SUPPORTED (line 2)   invoked from within "HTTP::uri"   ("csr.mydomain.com" arm line 12)   invoked from within "switch [ string tolower [HTTP::host]] {  "timesheet.mydomain.com" {   #log local0. "BGI Timesheet PRD: [HTTP::host] uri : [HTTP::uri]"    if {[a..."

Jun 2 18:03:59 nameofF5VE warning tmm1[17730]: 01260020:4: SSL Connection terminated for TCP 99.55.158.9:14261 -> bbb.bbb.bbb.bbb:443

Jun 2 18:03:59 nameofF5VE err tmm1[17730]: 01230140:3: RST sent from bbb.bbb.bbb.bbb:443 to 99.55.158.9:14261, [0x2a155c4:1878] iRule execution error

Jun 2 18:04:01 nameofF5VE.westeurope.cloudapp.azure.com warning httpd[30652]: 0118000a:4: The Service Check Date check was skipped.

Jun 2 18:04:05 nameofF5VE err tmm[17730]: 01230140:3: RST sent from aaa.aaa.aaa.aaa:29511 to 169.254.169.254:80, [0x29da995:271] {peer} handshake timeout

Jun 2 18:04:05 nameofF5VE err tmm[17730]: 01230140:3: RST sent from 169.254.169.254:80 to aaa.aaa.aaa.aaa:54348, [0x29da995:271] handshake timeout

Jun 2 18:04:06 nameofF5VE.westeurope.cloudapp.azure.com warning httpd[30653]: 0118000a:4: The Service Check Date check was skipped.

4 REPLIES 4

could you share your irule?

JoeH
Nimbostratus
Nimbostratus

Found the answer. https://support.f5.com/csp/article/K23237429, even though this was a new BIG-IP install with 15.1 an upgrade. I had tried the first workaround, but the second one fixed it.

Perfect!!

SriniM
Nimbostratus
Nimbostratus

Below is not working. Any ideas ?

when HTTP_REQUEST {

if { [HTTP::has_responded] } { return }

  switch -glob [string tolower [HTTP::host]] {

    "abc,company.org" {

      if { [HTTP::has_responded] } { return }

       HTTP::redirect "https://abc,company.org/sites/policies"

          return

     }

    }

   }