Forum Discussion

johnkrum_45755's avatar
johnkrum_45755
Icon for Nimbostratus rankNimbostratus
Jul 30, 2009

Forwarding virtual server stops after 15 sec

I was planning on setting up remote administration to servers physical address through the F5. I set up a Forwarding virtual server through the GUI (running latest 10 code) type = Host address is the physical address of the server 10.129.38.16. Service port 0, *all ports. Forwarding IP, TCP, All Vlans. I had a ping going to that address and once I hit update I received replys and then I remote desktoped to it successfully. Then after about 15 seconds my pings stopped and my session hung. I was able to recreate this by building the same setup in a different partition. Has anyone run into this before?

 

Thanks

 

config
design

5 Replies

Sort By
  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Jul 30, 2009
    This doesn't sound normal at all. I would suggest you contact F5 support to see if you encountering a bug.

     

    CB
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jul 31, 2009
    Maybe it's an ARP timeout expiring? A tcpdump on the client, LTM and server would help isolate this.

     

     

    Aaron
  • johnkrum_45755's avatar
    johnkrum_45755
    Icon for Nimbostratus rankNimbostratus
    Jul 31, 2009
    I did open a case yesterday. Just thought I would throw it out there to see if anyone had seen this before. It is odd so I am guessing I just missed something. Thanks
  • mniemiec_63167's avatar
    mniemiec_63167
    Icon for Nimbostratus rankNimbostratus
    Aug 03, 2009
    BTW..I had something similar with a forwarding VS. The only way I was able to solve it was to change the TCP profile to include the "allow loose connections" and also set the idle timeout to infinite. Honestly F5 TAC did not know what the problem was.
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Aug 04, 2009
    If you configure an indefinite timeout, LTM would never reap the connections itself. So you open yourself to a DOS attack if clients open a lot of TCP connections and neither the client or server closes them.

     

     

    Aaron