Forum Discussion

Demeter_Luo's avatar
Demeter_Luo
Icon for Nimbostratus rankNimbostratus
Nov 02, 2016

What is the _tmm_apm_fwd_vip_http virtual server ?

Hi All

 

I have a APM and version is 11.5.3.

 

I through the tcpdump capture traffic then I found traffic hit the _tmm_apm_fwd_vip_http virtual server.

 

Who can help me explain the VS in detail.

 

What is its purpose?

 

Thanks

 

D.Luo

 

1 Reply

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account

    This vip is created when you provision APM, it's part of 3 that handle Network Access traffic from a "connectivity profile", which is basically a special tunnel type of network interface. It's used as the forwarding virtual server for Network Access to process APM ACLs. The vips can be overridden by setting a higher-specificity (source or dest IP) vip on the connectivity profile vlan.

     

    _tmm_apm_fwd_vip_http: This vip catches the HTTP traffic on port 80 and applies L7 and L4 ACLs.

     

    _tmm_apm_fwd_vip: This vip catches everything besides port 80 and applies L4 ACLs.

     

    The reason these are in there is that when a new network flow ingresses to BIG-IP, it must consult the list of virtual servers to determine how to handle the traffic. If a new flow doesn't match any virtual server listeners, it's dropped.

     

    I'm not sure exactly what information you're looking for, but that's basically what it is.