Forum Discussion

Joshua_Ruybal_2's avatar
Joshua_Ruybal_2
Icon for Nimbostratus rankNimbostratus
Apr 07, 2016

Periodic surge in connections from OneConnect

We're experiencing a number of strange surges in connections while using the OneConnect profile.

 

Established connections on one port will hover around 8k spread across 4 servers, then surge to 40k out of nowhere. This surge is tanking throughput and we see inconsistent established connections on other ports until connections return to under 10k on the problematic port.

 

Strangely this only seems to happen when I'm running the OneConnect profile on all our major ports. When I move a few ports to the Fast L4 profile I no longer see these surges on the problematic port.

 

Are there changes I need to make on the LB or tcp settings on the servers?

 

BIG-IP
devops
oneconnect

6 Replies

Sort By
  • DEJ's avatar
    DEJ
    Icon for Nimbostratus rankNimbostratus
    Apr 07, 2016
    Hello Joshua, if you haven't already, i would review the Recommendations section at the bottom of https://support.f5.com/kb/en-us/solutions/public/7000/200/sol7208.html. What type of traffic are you balancing (http, ftp, https, etc)?
  • Joshua_Ruybal_2's avatar
    Joshua_Ruybal_2
    Icon for Nimbostratus rankNimbostratus
    Apr 07, 2016
    Thank you for the reply. We're balancing simple http traffic. I'm not sure what is meant by "apply an HTTP profile to the virtual server"
  • DEJ_159363's avatar
    DEJ_159363
    Icon for Cirrus rankCirrus
    Apr 07, 2016

    You can assign more than one profile to a VS depending on need. In the case of OneConnect, you would want to add a tcp and an http profile along with OneConnect to meet best practice. For a more comprehensive guide to optimizing OnceConnect, you may want to look at https://www.f5.com/pdf/deployment-guides/oneconnect-tuning-dg.pdf. Towards the bottom of page 2 it begins the Configuration overview. This guide is a bit old and I'm currently looking for one more up to date.

     

    • DEJ_159363's avatar
      DEJ_159363
      Icon for Cirrus rankCirrus
      Apr 07, 2016
      Looks like the most up to date information will be sol7208 after all. I've looked around and I don't see a newer deployment guide.
  • DEJ's avatar
    DEJ
    Icon for Nimbostratus rankNimbostratus
    Apr 07, 2016

    You can assign more than one profile to a VS depending on need. In the case of OneConnect, you would want to add a tcp and an http profile along with OneConnect to meet best practice. For a more comprehensive guide to optimizing OnceConnect, you may want to look at https://www.f5.com/pdf/deployment-guides/oneconnect-tuning-dg.pdf. Towards the bottom of page 2 it begins the Configuration overview. This guide is a bit old and I'm currently looking for one more up to date.

     

    • DEJ's avatar
      DEJ
      Icon for Nimbostratus rankNimbostratus
      Apr 07, 2016
      Looks like the most up to date information will be sol7208 after all. I've looked around and I don't see a newer deployment guide.