I am running 11.3.0 build 3131.0. I am using ASM and DOS protection. When a user tries to download a large file the download gets interrupted. I can not find anything in the logs on the F5 that tells my why this is happening. I am guessing something either in ASM or DOS profile is causing the interruption. Any suggestions?
Is there any error message or something unusual on the client end when the download fails? Do small downloads succeed?
I've seen a client getting kicked back to the login screen during file download. This was due to the LTM not responding correctly to a web server's request for credentials.
I would test without ASM profile. Or using an iRule to disable ASM profile for this download.
What is for you a large file ??? 100Mo, 500Mo, 1Go ??
These files are provided to help users test their download speeds from our servers. You can also run a speed test however downloading files can be easier.
I would do a tcpdump of just the headers to try to find what is ending the download. Don't specify "-s" option, defaults to 68 bytes. Look for timeouts or ending statements; FIN/RST, etc. This should point to next area to investigate.
We are seeing this same issue with a couple small modifications:
-Our BigIP OS is 11.5.1
-We've noticed that it is not the size of the file, but the download time that matters.
When ASM policy is applied to the VIP (in transparent, non-blocking) our large video asset downloads fail at exactly 120 seconds. When ASM policy is not applied to the VIP, these same exact file downloads succeed even if they take longer than 120 seconds.
A also got the same error with below message:
error: RPC failed; result=56, HTTP code = 200iB (or 200B)
fatal: The remote end hung up unexpectedly
fatal: early EOF
fatal: index-pack failed