URL Page is working but Search is not working.

[RAQS]

Hi Team,

Hope you all are doing great.

I have setup, in which user access application. User is accessing http://displacement-t.organization.com. This URL resolve to LB VIP.

User is able to access page via F5, but when they search barcode in SEARCH tab its giving error. If they bypass F5 it works.

There are 4 backend member behind F5. Cookie persistence is in place and set to "Session Expired", apart from that we have default TCP profile and default HTTP profile.

What we can check to fix this issue from F5 LTM perspective.

Regards,

RAQS

[oguzy]

Hi Raqs,

First, I recommend to open developer tools in a browser and check "Console" and "Network" tabs that can give you some clues.

Second, you can leave only one backend member available and test it again.

Do you have an ASM profile associated to virtual server?

[RAQS]

Hi Oguzy,

Thanks for replying.

What specific you would like to see in Network tab. Yeah i did enable/disable ad its same behavior.

No we do not have ASM.

[oguzy]

Hi Raqs,

You may encounter some client-side errors (4xx status codes) or redirection issues, if something has gone wrong when F5 is in place. That's why I have recommended to check network part of connection.

Did you check /var/log/ltm file?

[RAQS]

Hi Oguzy,

We have multiple partitions, I checked logs normally in default partition means didn't selected partition in which VIP reside but didn't get any relevant information.

Do i need to check LTM files somewhere else ?

In Network Tab I see http1.1 302 Found .

[oguzy]

Hi Raqs,

The ltm logs are in one place regardless of partition. Do you redirect to another place in same virtual server or another host or IP?

Do you have iRules associated to VS?

[RAQS]

Yes we do have iRule, which will look for http header "host" in http request and based on that do SSO.

when HTTP_REQUEST {

   switch [HTTP::header "Host"] 

   5freek.dederpte-c.company.com { HTTP::redirect "https://sso.connect.com/sso} and so on for multiple host.

But I do not see anything for my above mentioned URL ""http://displacement-t.organization.com"".Means irule will not applicable in this case .. right ?

[oguzy]

Hi Raqs,

You are right, if your current and subsequent request don't match any condition in switch clause. However please make sure, your iRule is not on the stage in that problem. To be able to that, you can add logging for each case in switch clause. I am not sure how I can further help you in that issue.

You can start a tcpdump. If you see any TCP RST packet when you search something. The possible reasons may stated in the following article:

Overview of BIG-IP TCP RST behavior (f5.com)

Maybe another DC member may shed light on to a reasonable solution.

[RAQS]

Thanks Oguzy. You helped alot. I really appreciate your time and effort.

[oguzy]

Hi Raqs,

You are welcome. I would like to add one more thing. You told that you have multiple partition. Please don't forget to check the route domains of pool members, if you have separate pools for search function.

If you find the exact reason of the problem, please share with us 🙂

[Fallout1984]

This may be out of left field, but do you have a oneconnect profile assigned to the vserver (see the Acceleration section of the vserver config)?