Forum Discussion

jonnyb01_141696's avatar
jonnyb01_141696
Icon for Nimbostratus rankNimbostratus
Jan 20, 2014
Solved

Tomcat pool member not replying to the syn from F5

I have an F5 LTM sitting in front of two tomcat servers which host 4 applications. When I initially create the pools and add the members to the LTM I can hit all applications. This is the weird part, after an undetermined amount of time the tomcat servers stop responding to SYN requests sent by the F5. Makes me think it is some type of time out issue. I can still hit the tomcat servers directly and can curl pages on the tomcat servers via the CLI of the F5.

Here is a TCP dump from the F5 when I attempt to access the one of the tomcat applications via a VIP.

2014-01-17 15:38:50.50032420.980713017710.192.209.110.192.209.11TCP808165281209177OUT s1/tmm3 : 65281 > 8081 [SYN] Seq=0 Win=4380 Len=0 MSS=1460 WS=1 TSval=2716693891 TSecr=0 SACK_PERM=1

I have disabled tcp_timestamps and tcp_window_scaling on the tomcat host. Any ideas? I have been working on this for about a week and have hit a wall.

  • Have you run a simultaneous tcpdump on the Tomcat server? That will tell you if the traffic is being sent, but not arriving, or if it's not being sent at all.

     

2 Replies

  • Have you run a simultaneous tcpdump on the Tomcat server? That will tell you if the traffic is being sent, but not arriving, or if it's not being sent at all.