Issues with the FTP health monitor
Hello,
We're experiencing some strange issue with the FTP health monitor and I'd appreciate any hints.
We have a pair of two BIG-IP appliances (10.2.2 build 763.3 Final) in active/standby mode with the simple FTP health monitor:
Type: FTP
Interval: 300 sec
Up Interval: Disabled
Time Until Up: 0 sec
Timeout: 600 sec
Manual Resume: No
Mode: Passive
Alias Address: * All Addresses
The problem is that occasionally (once or twice per day) the FTP health monitor on both F5 nodes fails to access the FTP server. Here is the debug info:
********** Debugging session beginning at: Wed Aug 21 21:02:45 2013
Arguments 1-2:
::ffff:10.9.36.165
21
Environment variables:
DEBUG=yes
GET=/test.txt
MODE=passive
MON_TMPL_NAME=TEST-FTP
NODE_IP=::ffff:10.9.36.165
NODE_PORT=21
PASSWORD=xxxxx
USERNAME=test
--
Recvd: '220 Serv-U FTP Server v15.0 ready...
'
Recvd: '331 User name okay, need password.
'
Failed to login...
**********
The snippet from the FTP server log:
[02] Wed 21Aug13 21:02:45 - (002818) Connected to 10.9.36.172 (local address 10.9.36.165, port 21)
[21] Wed 21Aug13 21:02:45 - (002818) 220 Serv-U FTP Server v15.0 ready...
[20] Wed 21Aug13 21:02:45 - (002818) USER test
[21] Wed 21Aug13 21:02:45 - (002818) 331 User name okay, need password.
[20] Wed 21Aug13 21:02:45 - (002818) PASS **********
[20] Wed 21Aug13 21:02:53 - (002818) QUIT
[21] Wed 21Aug13 21:02:53 - (002818) 221 Goodbye, closing session.
[02] Wed 21Aug13 21:02:53 - (002818) Closed session
It fails on a random basis, the only common thing that I noticed is that there is 10-15 sec delay between PASS and QUIT. The self/cluster IP of F5's and the IP of FTP server are in the same network segment hence no firewall in between.
I initially blamed the FTP server, so I setup five clients simultaneously accessing it every minute (using bat scripts) and none of them experienced any issues with the login.
Could it be related to the F5 software version we're using or I miss some timeout settings in the configuration?
Thank you in advance.