For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

morrie_63651's avatar
morrie_63651
Icon for Nimbostratus rankNimbostratus
Oct 11, 2007

kerberos

I am planning to use my new F5 LTM to load balance a number of components that are protected by Microsoft Active Directory - Kerberos. I am being told that the F5 device must join the Kerberos domain...
microsoft
partner
Will_F_98397's avatar
Will_F_98397
Icon for Nimbostratus rankNimbostratus
Oct 21, 2009
I've been caught out with Nagles Algorithm before, it's one of the first thing's I disable now.

 

Been running in production with a persistence profile configured for about a month now (default timeout set - 180 seconds). I see the occasional error on the services, but this may possibly be narrowed down to kerberos timeouts due to inactivity from low client volume. I expect the client volume to ramp up and these errors will no longer exsist (tokens will be renewed regurally) over the next few months.