APIRef_tm_ltm_global-settings_traffic-control¶
mgmt/tm/ltm/global-settings/traffic-control
General configuration options for traffic
REST Endpoints
- Collection URI
/mgmt/tm/ltm/global-settings/traffic-control- Collection Methods
OPTIONS, GET- Resource URI
/mgmt/tm/ltm/global-settings/traffic-control/~resource id- Resource Methods
OPTIONS, GET, PUT, PATCH
Properties
| Name | Type | Default Value | Required | Access | Description |
|---|---|---|---|---|---|
acceptIpOptions |
string | optional | read/write | Specifies whether the system accepts IPv4 packets with IP options. The default is disable. | |
acceptIpSourceRoute |
string | optional | read/write | Specifies whether the system accepts IPv4 packets with IP source route options that are destined for Traffic Management Microkernel (TMM). The default is disable. To enable this option, you must also enable the accept ip options setting. | |
allowIpSourceRoute |
string | optional | read/write | Specifies whether the system allows IPv4 packets with IP source route options enabled to be routed through Traffic Management Microkernel (TMM). The default is disable. To enable this option, you must also enable the accept ip options setting. | |
continueMatching |
string | optional | read/write | Specifies whether the system matches against a less-specific virtual server when the more-specific one is disabled. When continue matching is disabled, the system drops connections that request a disabled virtual server. In this case, the system rejects or drops packets depending on the setting of the reject unmatched option. | |
maxIcmpRate |
integer | optional | read/write | Specifies the maximum rate per second at which the system issues Internet Control Message Protocol (ICMP) errors. The default is 100 errors per second. The range is from 0 (zero) to 2147483647 errors per second. This option is useful for preventing ICMP message storms. | |
maxRejectRate |
integer | optional | read/write | Specifies the maximum rate per second that the system issues reject packets (TCP RST or ICMP port unreach). The default value is 250 per second. The range is from 1 to 1000 per second. | |
maxRejectRateTimeout |
integer | optional | read/write | Specifies the time in seconds which the system ignores icmp port unreach and tcp rst ratelimits on becoming active after a failover. The default value is 30 seconds. The range is from 0 to 300 seconds. | |
minPathMtu |
integer | optional | read/write | Specifies the minimum packet size that can traverse the path without suffering fragmentation, also known as path Maximum Transmission Unit (MTU). The default is 296. The range is from 68 to 1500. | |
pathMtuDiscovery |
string | optional | read/write | Specifies, when enabled, that the system discovers the maximum transmission unit (MTU) that it can send over a path, without fragmenting TCP packets. The default is enable. | |
portFindLinear |
integer | optional | read/write | Specifies the maximum of ports to linearly search for outbound connections. The default is 16. The range is from 0 to 61439. | |
portFindRandom |
integer | optional | read/write | Specifies the maximum of ports to randomly search for outbound connections. The default is 16. The range is from 0 to 1024. | |
portFindThresholdTimeout |
integer | optional | read/write | Specifies the threshold warning’s timeout. This is the time in seconds since the last trigger value was hit and will throttle the output warnings from logging too often. The default is 30 seconds with range from 0 to 300. | |
portFindThresholdTrigger |
integer | optional | read/write | Specifies the threshold warning’s trigger which is the value of random port attempts when attempting to find an unused outbound port for a connection. A warning is issued when the second trigger level is reached within the timeout period. The default is 8. The valid range is 1 to 12. | |
portFindThresholdWarning |
string | optional | read/write | Specifies if the ephemeral port-exhaustion threshold warning is to be monitored. The default is enabled. | |
rejectUnmatched |
string | optional | read/write | Specifies, when enabled, that the system returns a TCP RESET or ICMP_UNREACH packet if no virtual servers on the system match the destination address of the incoming packet. When this setting is disabled, the system silently drops the unmatched packet. The default is enable. |
Copyright (c) 2016, F5 Networks Inc. All Rights Reserved.
The BIG-IP API Reference documentation contains community-contributed content. F5 does not monitor or control community code contributions. We make no guarantees or warranties regarding the available code, and it may contain errors, defects, bugs, inaccuracies, or security vulnerabilities. Your access to and use of any code available in the BIG-IP API reference guides is solely at your own risk.