Forum Discussion

muyal_222536's avatar
muyal_222536
Icon for Nimbostratus rankNimbostratus
Jan 10, 2017

Fiddler shows -Virtual Server actively refused connection

Hi

 

I have a load balanced pair of IIS servers on my 11.3 version of F5. The monitors aren't working , but even if I disable the monitors and just try to load the URL, we get a 502 Connection actively refused which is displayed via Fiddler. If I change the gateway of the IIS boxes , everything loads fine. Only over the F5 they fail to load. Any advise

 

Thanks in Advance S

 

7 Replies

  • Could you please give more information;

     

    deployment mode, gateway of IIS, snat etc.

     

  • I'm currently not in a position to reproduce this issue, but I thought I might give you a hint.

     

    Do you have Auto Map option selected on Source Address Translation setup of the virtual server? If you don't, try turning this option on. If you do have this option enabled try performing a request to your pool members from the BIG-IP device using curl.

     

    Let me know if this helps.

     

    • muyal_222536's avatar
      muyal_222536
      Icon for Nimbostratus rankNimbostratus

      Hi Thanks for the reply. Issue has now been resolved by enabling default monitor and then identifying the right reply via SSH using CURL . Add that to the new monitor and all good now.

       

      thanks

       

  • This could be network configuration issue or SNAT. I think you need to sort out the monitoring issue first before troubleshooting further. Try to use ICMP monitor and see if it works. If ICMP monitor works, check using TCP monitor. If TCP monitor fails but ICMP monitor had worked previously, this could indicate route asymmetry issues.

     

    If possible try to sketch out packet flow from client to F5 to server and back based on existing network configuration in order to identify any issues.

     

  • Hi,

     

    if the monitors are not working then first that should be resolved, this may lead to resolving the other issue. What monitors have your configured? is there a firewall between F5 and IIS server? if yes, are you allowing monitor traffic on the firewall?

     

    • muyal_222536's avatar
      muyal_222536
      Icon for Nimbostratus rankNimbostratus

      Hi Thanks for the reply. Issue has now been resolved by enabling default monitor and then identifying the right reply via SSH using CURL . Add that to the new monitor and all good now.

       

      thanks