Skip to content

Conversation

@yyzh1
Copy link

@yyzh1 yyzh1 commented Dec 4, 2023

Description

extlb healthcheck maps to loopback.1 to hit nat rule

Motivation and Context

The current configuration on the PANW vm series does not map the extlb healthcheck correctly.
Due to the existence of loopback.1, the extlb heathcheck coming into ethernet1/1 will then be targeting loopback.1, which fails to match the NAT for healthcheck probes.

With the current configuration, from GCP load balancer, both active and passive backends behind external load balancer will show health check as failed.

How Has This Been Tested?

Have followed the steps in README.md to apply the new configuration. Both internal and external load balancer will behave correctlty with active vm series showing healthy and forwarding traffic.

Screenshots (if appropriate)

image

Types of changes

  • Bug fix (non-breaking change which fixes an issue)

Checklist

  • I have updated the documentation accordingly.
  • I have read the CONTRIBUTING document.
  • I have added tests to cover my changes if appropriate.
  • All new and existing tests passed.

@advaittoraskar007
Copy link

Thank you @yyzh1. This saved me after hours long of troubleshooting the unhealthy external load balancer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants