Data group: integers not working

Question

I'm trying to configure GTM to avoid certain ports serverside due to some HBSS agent issues. I'm using a data group of integers to hold the list of ports I want GTM to avoid using a reselect action. I am not getting the behaviour I want and it doesn't appear that the logic is matching at all. Now I know the ports I want to avoid are being used because I'm logging on these ports in the SERVER_CONNECTED action.&nbsp;Here is the code I'm using for port avoidance - any ideas?&nbsp;when LB_SELECTED {
           if { [class match [UDP::local_port] equals hbss-port-exception] } { 
           log local0. "HBSS EXCEPTION LOG: [UDP::local_port] - GTM reselecting" 
           LB::reselect }
    }

eric_haupt1 · Answer

It just occurred to me: Maybe this code needs to be part of SERVER_CONNECTED vice LB_SELECTED&nbsp;

eric_haupt1 · Answer

Can't use LB::reselect in that context...&nbsp;

leonardo_souza3 · Answer

You probably referring to LTM and not GTM, as GTM does not care about ports.
I need more information about your configuration.&nbsp;
Can you please provide these parts of the configuration?&nbsp;
Datagroup hbss-port-exception&nbsp;
Virtual Server&nbsp;
Pool&nbsp;

eric_haupt1 · Answer

Why wouldn't GTM care about ports? It needs to allocate a local source port for both TCP and UDP when providing DNS LB to DNS servers, does it not?
I don't think the LB_SELECTED was the event that is able to identify the local port so I've shifted to calling it in the SERVER_CONNECTED event. This is working for us and I don't like it because it's brutal to the client, but this affects only TCP and we only see about 4 events per 12 hours that match across the 10 ports we want to avoid. The client would simply timeout and retransmit - thus getting a new port which is most likely no in the restricted port range.
when SERVER_CONNECTED {
       if { [class match [TCP::local_port] equals hbss-port-exception] } { 
       log local0. "HBSS EXCEPTION LOG: [TCP::local_port] - GTM dropping" 
       TCP::close }
}

eric_haupt1 · Answer

hbss-port-exception is an integer data group simply containing a list of numbers&nbsp;

Forum Discussion

Data group: integers not working

8 Replies

Recent Discussions

Open Redirection Mitigation

F5Access | MacOS Sonoma

enable tls1.2 on management interface on F5 ltm running version 10.x

[ASM] - what is "Browser Challenge file" ?

SMS server with BIGIP

Related Content

Certified Kubernetes Administrator - Study Group

Working with subsets of data-group records via iControl REST

GTM synchronization group

Intermediate iRules: Data-Groups

ha group