Forum Discussion

EJM_358200's avatar
EJM_358200
Icon for Nimbostratus rankNimbostratus
Apr 10, 2018

can't access to my virtual server

Hi team,

 

I have problem to access to my virtual server (VS) i receive the error that this page is unreachable.

 

However, when i try to access my servers (pool members) are reachable just i can't balance by VS.

 

Options configured on this VS : (Profil http, SNAT, Persistence Source Addr)

 

I have tried to change SNAT to Automap but no-result.

 

Someone have an idea about how i can resolve this issue ?

 

7 Replies

  • Can you please paste your virtual server configurations. Also, verify Network translation and port translation options in virtual server properties.

     

  • I think you're vip is on 443, but your not offloading anything on the LTM but have applied http profile. You can try out the below options.

     

    • Add the default client ssl profile.
    • Try removing your http profile and see the behavior.

    To help this understand, when you send the traffic over secure (https - your vip is on port 443), the ltm needs to know what traffic its receiving and process it accordingly. When you apply http profile, it is expecting a http traffic and can process only http functionalities. But without offloading it on the ltm, its still a https traffic. So flow breaks, to avoid this, you can offload it first using a clientssl profile and then inspect the layer 7 attributes.

     

  • In your configuration you don't need HTTP profile. You can pass your VS to L4 without standard. In the future if you need to activate HTTP profile for sticking (cookies) or HTTP manipulation (Irule) you will need to set client ssl profile and server ssl profile. jaikumar_f5 made a good summary in his answer

     

  • I will try to pass my VS to L4 and i get back with result. Thanks Youssef :)