Forum Discussion

jay_britton_414's avatar
jay_britton_414
Icon for Nimbostratus rankNimbostratus
Jul 29, 2014

F5 float IP causing website issues

Hi All,

 

Slightly odd one here, we have a standard website on 443 with the F5 SSL bridging, single VIP in use on the front going to two servers in the back via a vShield edge appliance. It works absolutely fine until a float IP is introduced for the backend VLAN, at this point the website may work for a 5 or 10 minutes but then go down, everything still looks fine at this point on all devices.

 

As soon as the float IP is removed everything comes back up, any suggestions? We've eliminated anything ARP related with any errant MAC entries but it's not something I've ever seen before.

 

Thanks

 

Jay

 

5 Replies

  • Just a thought, but can you change the active unit's local self-IP to what would normally be the floating IP and retest? It almost sounds like a duplicate IP issue.

     

    Also, what do you see in tcpdump captures when it starts failing?

     

  • So far in the tcpdump of both the F5 and the client server everything looks exactly as it does before the float IP fails which is even more bizarre!

     

    Good thought for the local IP, will try that and see what happens.

     

  • So a brief updated but I tried to use both the Self-IP and a completely different IP for the float address and the issue appeared both times, as soon as I take the float IP off everything comes back to life!

     

  • until a float IP is introduced for the backend VLAN, at this point the website may work for a 5 or 10 minutes but then go down

     

    what does "go down" mean? were virtual server and pool marked down or virtual server and pool were up but user could not access to the website?

     

    are you using snat automap?

     

    sol7336: The SNAT Automap and self IP address selection

     

    http://support.f5.com/kb/en-us/solutions/public/7000/300/sol7336.html

     

  • By "go down" I mean everything looks absolutely fine on the F5, exactly as it does before the float IP is introduced but access to the website becomes intermittent at best and completely inaccessible at worst