Forum Discussion

eliezer_ramos_2's avatar
eliezer_ramos_2
Icon for Nimbostratus rankNimbostratus
Jun 17, 2014

Issue with app pushing F5 LTM out of the way!!! HELP

I have an application that is configured to go through the LTM. But, sometimes it decides to push the LTM out of the way and talk directly to the client. At that point the client get certs errors and such. Anyone know how to force the app not to remove the LTM from the equation?

 

ElI

 

3 Replies

  • It sounds like the application may be at some point in the transaction sending a redirect to the client that references the hostname of the server instead of whatever FQDN is being used to access the virtual server on the LTM. You can use stream profiles on the LTM to change the redirects going back to the client if you know what the redirect is coming back from the server. You'd probably have to grab a packet capture on the LTM to determine this, and then build an iRule using a stream profile, like is explained here:

     

    http://support.f5.com/kb/en-us/solutions/public/8000/100/sol8115.html

     

  • HI Thanks for the prompt reply. WE really don't know when the redirect will happen. Its a hit or miss things. If I knew what was causing it, I would have had it turn off at the app. I will try a pcap to see what going on. Was hoping I would not have to get complicated with profiles and irules. Anyone else has seen this before?

     

    • Cory_50405's avatar
      Cory_50405
      Icon for Noctilucent rankNoctilucent
      It sounds like you'll have to get lucky enough to grab a pcap when the issue presents itself. If it is the case of a redirect being sent by the server, then the server/application could also be modified. Based on experience though, this is almost impossible to make happen. Guess it all depends on your environment.