Forum Discussion

Brian_Saunders1's avatar
Brian_Saunders1
Icon for Altostratus rankAltostratus
Sep 15, 2014

Separate TCP and UDP Forward (IP) Virtual Servers Instead of All Protocols

Hey All,

We have an LTM configured as the gateway for the servers that are being load balanced (inline mode). We have a forward (IP) virtual server configured to permit the flow to / from these load balanced servers:

ltm virtual FRWD_VIP {
    destination any:any
    ip-forward
    mask any
    profiles {
        FWD_VIP { }
    }
    translate-address disabled
    translate-port disabled
    vlans {
        FE1_NTWK
        ISERV_SERVERS
        ISERV_SERVERS_2
        ISERV_VIPS
    }
    vlans-enabled
}

ltm profile fastl4 FWD_VIP {
    defaults-from fastL4
    idle-timeout 3600
    ip-tos-to-client pass-through
    ip-tos-to-server pass-through
    keep-alive-interval disabled
    link-qos-to-client pass-through
    link-qos-to-server pass-through
    loose-close disabled
    loose-initialization disabled
    mss-override 0
    reassemble-fragments disabled
    reset-on-timeout enabled
    rtt-from-client disabled
    rtt-from-server disabled
    software-syn-cookie disabled
    tcp-close-timeout 5
    tcp-generate-isn disabled
    tcp-handshake-timeout 5
    tcp-strip-sack disabled
    tcp-timestamp-mode preserve
    tcp-wscale-mode preserve
}

We increased the timeout value to 3600 seconds on the forward VIP. What I have noticed is there has been a pretty big increase in the number of concurrent connections on this forward VIP which is to be expected. I was considering breaking apart the forward VIP into a TCP based and UDP based and dropping the timeout on the UDP based to 30 seconds. Has anyone had experience with this type of configuration?

Thanks,

Brian