16-Sep-2021 08:10
Hi Team,
Hope you all are doing great.
I have setup, in which user access application. User is accessing http://displacement-t.organization.com. This URL resolve to LB VIP.
User is able to access page via F5, but when they search barcode in SEARCH tab its giving error. If they bypass F5 it works.
There are 4 backend member behind F5. Cookie persistence is in place and set to "Session Expired", apart from that we have default TCP profile and default HTTP profile.
What we can check to fix this issue from F5 LTM perspective.
Regards,
RAQS
16-Sep-2021 08:28
Hi Raqs,
First, I recommend to open developer tools in a browser and check "Console" and "Network" tabs that can give you some clues.
Second, you can leave only one backend member available and test it again.
Do you have an ASM profile associated to virtual server?
16-Sep-2021 08:32
Hi Oguzy,
Thanks for replying.
What specific you would like to see in Network tab. Yeah i did enable/disable ad its same behavior.
No we do not have ASM.
16-Sep-2021 08:38
Hi Raqs,
You may encounter some client-side errors (4xx status codes) or redirection issues, if something has gone wrong when F5 is in place. That's why I have recommended to check network part of connection.
Did you check /var/log/ltm file?
16-Sep-2021 08:46
Hi Oguzy,
We have multiple partitions, I checked logs normally in default partition means didn't selected partition in which VIP reside but didn't get any relevant information.
Do i need to check LTM files somewhere else ?
In Network Tab I see http1.1 302 Found .
16-Sep-2021 09:17
Hi Raqs,
The ltm logs are in one place regardless of partition. Do you redirect to another place in same virtual server or another host or IP?
Do you have iRules associated to VS?
16-Sep-2021 09:36
Yes we do have iRule, which will look for http header "host" in http request and based on that do SSO.
when HTTP_REQUEST {
switch [HTTP::header "Host"]
5freek.dederpte-c.company.com { HTTP::redirect "https://sso.connect.com/sso} and so on for multiple host.
But I do not see anything for my above mentioned URL ""http://displacement-t.organization.com"".Means irule will not applicable in this case .. right ?
16-Sep-2021 10:03
Hi Raqs,
You are right, if your current and subsequent request don't match any condition in switch clause. However please make sure, your iRule is not on the stage in that problem. To be able to that, you can add logging for each case in switch clause. I am not sure how I can further help you in that issue.
You can start a tcpdump. If you see any TCP RST packet when you search something. The possible reasons may stated in the following article:
Overview of BIG-IP TCP RST behavior (f5.com)
Maybe another DC member may shed light on to a reasonable solution.
16-Sep-2021 10:14
Thanks Oguzy. You helped alot. I really appreciate your time and effort.
16-Sep-2021 12:36
Hi Raqs,
You are welcome. I would like to add one more thing. You told that you have multiple partition. Please don't forget to check the route domains of pool members, if you have separate pools for search function.
If you find the exact reason of the problem, please share with us 🙂
16-Sep-2021 11:58
This may be out of left field, but do you have a oneconnect profile assigned to the vserver (see the Acceleration section of the vserver config)?