Oneconnect profile and eligibility for reusing connection

Question

I see the following from the link https://support.f5.com/kb/en-us/solutions/public/7000/200/sol7208.f5.html&nbsp;
"When a new connection is initiated to the virtual server, if an existing server-side flow to the pool member is idle, the BIG-IP system applies the OneConnect source mask to the IP address in the request to determine whether it is eligible to reuse the existing idle connection."&nbsp;
What eligibility is it and how is it determined? &nbsp;

dylan_375544 · Answer

I wrote a post on exactly that if you are interested, OneConnect with SNAT on F5.&nbsp;
Hope that helps! If it does, please up-vote and select this answer, it would be greatly appreciated!&nbsp;
-Dylan&nbsp;

jamesdris · Answer

Thanks for the information. What is F5 recommendation when using oneconnect and CDNs like Akamai and Incapsula and other networks?
There is this recommendation from Akami about using oneconnect whenever akamai is involved. 
https://community.akamai.com/customers/s/article/Configuring-a-load-balancer-on-the-Origin-to-properly-work-with-Akamai?language=en_US&nbsp;
But is this also recommended by F5 ?&nbsp;

dylan_375544 · Answer

I don't think that F5 has a recommendation for that situation. I can't locate one anyways.&nbsp;
Until you run into issues, I would follow what Akamai suggests.&nbsp;
-Dylan&nbsp;

Forum Discussion

Oneconnect profile and eligibility for reusing connection

3 Replies

Recent Discussions

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Get associated pool name from VIP IP using F5-LTM

Disacard SSL::cert mode to ignore when default SSLClient profile is set to request or require

About custome Response Blocking Page

About IPI check ip list

Related Content

What is HTTP Part VII - OneConnect

Lightboard Lessons: OneConnect

How OneConnect Profile's max-size works

Troubeshooting website connection

F5 Connection Mirroring question