Forum Discussion

george_liu_2124's avatar
george_liu_2124
Icon for Nimbostratus rankNimbostratus
Jul 18, 2017

ltm show connection any

fgl037@(dcaslb30)(cfg-sync In Sync)(/S1-green-P:Active)(/Common)(tmos) show sys connection ss-server-addr 10.2.188.117%24 ss-server-port 80 Sys::Connections any6.any any6.any 10.1.9.11%24:61142 10.2.188.117%24:80 tcp 1 (slot/tmm: 1/9) none any6.any any6.any 10.1.9.13%24:61238 10.2.188.117%24:80 tcp 1 (slot/tmm: 1/3) none any6.any any6.any 10.1.9.12%24:61028 10.2.188.117%24:80 tcp 2 (slot/tmm: 1/8) none Total records returned: 3 fgl037@(dcaslb30)(cfg-sync In Sync)(/S1-green-P:Active)(/Common)(tmos) show sys connection cs-server-addr 10.1.8.48%24 | grep 10.2.188.117 fgl037@(dcaslb30)(cfg-sync In Sync)(/S1-green-P:Active)(/Common)(tmos)

 

could any one show me the lights what any6.any on client side and floating ip and show connection on vip, it shows no connection to that node

 

any issue?

 

devops
LTM

6 Replies

Sort By
  • Aditya_248044's avatar
    Aditya_248044
    Icon for Nimbostratus rankNimbostratus
    Jul 18, 2017

    Your output shows the below:

     

    Sys::Connections

     

    any6.any any6.any 10.1.9.11%24:61142 10.2.188.117%24:80 tcp 1 (slot/tmm: 1/9) none

     

    any6.any any6.any 10.1.9.13%24:61238 10.2.188.117%24:80 tcp 1 (slot/tmm: 1/3) none

     

    any6.any any6.any 10.1.9.12%24:61028 10.2.188.117%24:80 tcp 2 (slot/tmm: 1/8) none

     

    So i believe your client IP and Virtual Server IPs are showing as any6.any

     

    10.1.9.12%24 will be your self IP and 10.2.188.117%24 is your pool member.

     

    Can you try just tmsh show sys connection | grep VS_IP

     

    For any6.any below may help:

     

    https://support.f5.com/csp/article/K7758

     

    https://support.f5.com/csp/article/K7208

     

    • george_liu_2124's avatar
      george_liu_2124
      Icon for Nimbostratus rankNimbostratus
      Jul 19, 2017

      thanks for reply

       

      we checked that there is no one connect profile on that VIP however on server side dmo440-a@dcvslx1599 $ netstat -na | grep :80 tcp 0 0 10.2.188.115:80 0.0.0.0:* LISTEN tcp 0 0 10.2.188.114:48114 10.1.8.48:80 TIME_WAIT tcp 1 0 10.2.188.114:48112 10.1.8.48:80 CLOSE_WAIT tcp 1 0 10.2.188.114:48120 10.1.8.48:80 CLOSE_WAIT tcp 0 0 10.2.188.114:48156 10.1.8.48:80 ESTABLISHED tcp 1 0 10.2.188.114:48094 10.1.8.48:80 CLOSE_WAIT tcp 0 0 10.2.188.114:48158 10.1.8.48:80 ESTABLISHED tcp 0 0 10.2.188.114:48140 10.1.8.48:80 ESTABLISHED tcp 0 0 10.2.188.114:48142 10.1.8.48:80 ESTABLISHED tcp 1 0 10.2.188.114:48110 10.1.8.48:80 CLOSE_WAIT tcp 0 0 10.2.188.114:48134 10.1.8.48:80

       

      it seems that f5 send FIN to server to close the connection however server did not respond

       

    • george_liu_2124's avatar
      george_liu_2124
      Icon for Nimbostratus rankNimbostratus
      Jul 19, 2017

      10.1.9.11, 12 and .13 are source NAT being natted ip address 10.2.188.117 is the pool member

       

    • Aditya_248044's avatar
      Aditya_248044
      Icon for Nimbostratus rankNimbostratus
      Jul 20, 2017

      The output shows load balancing happening all fine between the pool members : 10.2.188.119 , 10.2.188.121 and 10.2.188.117.

       

      10.1.8.48 being your virtual server

       

      10.2.188.114,10.2.188.116 and 10.2.188.118 being your source IPs.

       

      10.2.188.114%24:44428 10.1.8.48%24:80 10.1.9.13%24:44428 10.2.188.119%24:80 tcp 66 (slot/tmm: 1/8) none

       

      10.2.188.116%24:52890 10.1.8.48%24:80 10.1.9.12%24:52890 10.2.188.121%24:80 tcp 10 (slot/tmm: 1/4) none

       

      10.2.188.118%24:36408 10.1.8.48%24:80 10.1.9.12%24:36408 10.2.188.117%24:80 tcp 30 (slot/tmm: 1/1) none

       

  • Aditya_Mehra's avatar
    Aditya_Mehra
    Icon for Cirrus rankCirrus
    Jul 18, 2017

    Your output shows the below:

     

    Sys::Connections

     

    any6.any any6.any 10.1.9.11%24:61142 10.2.188.117%24:80 tcp 1 (slot/tmm: 1/9) none

     

    any6.any any6.any 10.1.9.13%24:61238 10.2.188.117%24:80 tcp 1 (slot/tmm: 1/3) none

     

    any6.any any6.any 10.1.9.12%24:61028 10.2.188.117%24:80 tcp 2 (slot/tmm: 1/8) none

     

    So i believe your client IP and Virtual Server IPs are showing as any6.any

     

    10.1.9.12%24 will be your self IP and 10.2.188.117%24 is your pool member.

     

    Can you try just tmsh show sys connection | grep VS_IP

     

    For any6.any below may help:

     

    https://support.f5.com/csp/article/K7758

     

    https://support.f5.com/csp/article/K7208