Skip to main content
fl0at0xff
New Member
November 14, 2016
Question

HA session pickup configuration

  • November 14, 2016
  • 1 reply
  • 5074 views

Hello, I would know if it is possible to select which kind of traffic/protocol to enable in Session Pickup when configuring the HA. A client asked me for this and I think it is not possible but I just want to be sure. Thank you in advance.

    1 reply

    jintrah_FTNT
    Staff
    Staff
    November 14, 2016

    Hi,

     

    Please check the below options in CLI under 'config system ha'

     

    set session-pickup {enable | disable}

    ##If you enable session pickup the subordinate units maintain session tables that match the primary unit session table, indicates for TCP sessions, and

     

    set session-pickupconnectionless {enable | disable}

    ##Used for connectionless (UDP and ICMP) sessions

     

     

     

    ede_pfau
    SuperUser
    SuperUser
    November 14, 2016

    This may have less advantages than you might expect.

    For instance, internet-bound traffic will usually be NATted; after a failover the NAT port changes.

     

    With stateless protocols like UDP or ICMP you might find the packet loss tolerable. For incoming streams (like video, audio) session-pickup should make a difference: incoming traffic in the reply direction (e.g. a video stream from the internet) will not be allowed in after a failover without session pickup until the connection is reinitiated.