vService Sessions
What Is vService Sessions?
vService Sessions is the live, instantaneous list of the connections currently open on a vService. At the moment it is viewed, it presents a snapshot of the existing connections in the system.
Each row represents one connection and shows the connection's source, its destination, the route table it belongs to, its current state and (depending on the vService type) client or Backend Service address information.
vService Sessions answers the question "what is happening right now?" on a vService: how many connections are open, which sources they come from, which Backend Services they are directed to and what state they are in. It is used for instant troubleshooting and traffic verification.
vService Sessions is enabled by default for every vService created; it does not require a separate profile assignment or enabling. This view is read-only; when a row is clicked, the preview of the related connection opens, but it does not include a management operation such as terminating a session.
Supported vService Types
Accessing vService Sessions
vService Sessions can be used in every vService type; it does not require a separate profile assignment or enabling. The view is open to users who have Load Balancer monitoring permission.
- Left Monitor Panel is opened.
- Load Balancer vServices is selected from the category tabs at the top left.
- The vServices defined on TR7 are listed.
- The vService to be monitored is clicked; the screen opens with the Dashboard tab that carries the vService's name.
- On the screen that opens, the Logs & Tracking tab is clicked and vService Sessions is selected.
vService Sessions Listing Screen
When the vService Sessions source is selected in the Logs & Tracking tab, the instant list of the open connections on the vService is shown as a table. The list is fetched once when the screen opens and is not refreshed automatically.
vService Sessions Listing Screen
The displayed columns vary according to the vService type. The columns and the types in which they appear:
| Column | Description | vService Type |
|---|---|---|
| Source | The name of the device that fetched the record. Hidden by default and added from the column selector. | All |
| Route Table | The route table the connection belongs to. | All |
| Status Code | The current state of the connection (TCP connection state). | All |
| Client IP | The IP address of the client that established the connection. | Network |
| Client Port | The client's connection port. | Network |
| Source IP | In HTTP and L7 TCP vServices, the address of the remote end of the connection, that is, the client; in Network vServices, the virtual service address the connection landed on. | All |
| Source Port | The source port. | All |
| Destination IP | In HTTP and L7 TCP vServices, the listening address of the vService; in Network vServices, the address of the real server the connection is directed to. | All |
| Destination Port | The destination port. | All |
| Backend IP | The IP address of the connected Backend Service. | L7 TCP |
| Backend Port | The port of the connected Backend Service. | L7 TCP |
| Backend Name | The name of the connected Backend Service. | L7 TCP |
| Expires In | The remaining time until the connection ends. | Network |
The table is different in Network vServices that use a port range or the Any protocol
In Network vServices whose protocol is Any or that have a port range defined, the sessions are read from a different source and the table changes completely: the Source, Protocol, SNAT IP, Source IP, Destination IP and Status Code columns are present. Route Table, the port columns, Client IP, the Backend columns and Expires In are not present in this variant. The filter criteria are also limited to Protocol, Source IP, Destination IP and Status Code; there is no Route Table filter.
Status Code
Despite its title, the Status Code column shows not an HTTP status code but the current state of the connection. The values below are produced in HTTP and L7 TCP vServices; in Network vServices, since the state name comes ready from the data source, it is written without a prefix, such as ESTABLISHED, TIME_WAIT.
| State | Meaning |
|---|---|
| TCP_ESTABLISHED | Established and active connection. |
| TCP_SYN_SENT / TCP_SYN_RECV | The connection is being established (handshake stage). |
| TCP_FIN_WAIT1 / TCP_FIN_WAIT2 | The connection is being closed. |
| TCP_CLOSE_WAIT / TCP_LAST_ACK / TCP_CLOSING | The connection is in the closing stage. |
| TCP_TIME_WAIT | The connection is closed and in the waiting period. |
| TCP_CLOSE | The connection is closed. |
| TCP_LISTEN | In the listening state. |
| TCP_NEW_SYN_RECV | A connection request was received but not yet established. |
The items in the toolbar are arranged from left to right in the following order; the last two items (Page Information and Page Size) are located in the information strip below the table.
Columns
Which columns are shown in the table is selected. In the same panel, columns are reordered by dragging and alignment is selected per column; the row height is fitted to the page with the Fit rows to the page button, and the column layout is reset to default with the Reset button. The layout is stored per user.
Logs Type
Determines the source to be viewed. vService Sessions is selected to see the open connections. The selector is populated according to the vService's configuration and leaves out the WAF and Bot/DDoS sources.
Filter
Opens and closes the filter panel; the panel comes open by default. While the panel is open, the filters are listed above the table as a strip of cards, and the number next to a card is the number of distinct values found for that criterion. When a card is clicked, the values open as chips; the number next to each chip is the number of connections carrying that value. The available filter criteria:
| Filter | Description |
|---|---|
| Route Table | The route table the connection belongs to. |
| Status Code | The current state of the connection (TCP connection state). |
| Source IP | The source IP address of the connection. |
| Destination IP | The destination IP address of the connection. |
| Client IP | The IP address of the client that established the connection. Present only in Network vServices. |
Export
The table is exported as Excel, CSV or PDF by clicking the Export button. In the window that opens, the Filename, Format and Data Source, together with the Columns to be exported, are determined; the remaining fields are displayed according to the format: CSV Separator for CSV, Excel Sheet Name for Excel, and Page Orientation and Page Size for PDF.
Refresh
An up-to-date snapshot of the currently open connections is fetched by clicking the Refresh button. Since the list is not refreshed automatically, the current state is obtained with this button. While fetching is in progress, the button stays inactive and shows a spinning icon. If the vService is stopped, the button stays inactive; since the sessions are read from a live source, the list cannot be fetched from a stopped vService, and no fetch is done when the screen opens either.
Search
Used to search all information in the table.
RegExp Search
Used to search all information in the table with a regular expression (RegExp).
Column Based Search
Used to perform a column-based search on the information in the table.
Page Information
Contains information about the total number of fetched records and the range of records displayed in the list: Showing N-M of T records. Since rows cannot be selected in this source, the number of selected rows is not shown.
Page Size
The maximum number of connections to be displayed on the page is selected. The default is 100; the options are 50, 100, 250 and All. The selection is not stored.
Line Limit is not present in this source
The Line Limit box, which limits the number of records to be scanned, is displayed only in file-based sources; since vService Sessions reads a live table, it is not present in the toolbar.
Preview of the Selected Session
When any row in the list is clicked, a preview panel of that connection opens on the right side of the screen. Unlike HTTP and Debug Logs, this panel is tabless: the basic information of the connection is shown one below the other. The panel title shows the name vService Sessions, with the source and destination address of the connection below it.
Rows cannot be selected; in this view, there is no checkbox column and no bulk operation button.
The fields shown in the panel also vary according to the vService type: Protocol and SNAT IP are present only in Network vServices whose protocol is Any or that have a port range defined, Client IP and Expires In only in Network vServices, and Backend Name only in L7 TCP vServices, where it is written on a single line in the name (ip:port) format.
Preview of the Selected Session
| Information | Description |
|---|---|
| Source | The name of the device that fetched the record. |
| Route Table | The route table the connection belongs to. |
| Status Code | The current state of the connection (TCP connection state; e.g. TCP_TIME_WAIT). |
| Source IP | The source IP address and port of the connection. |
| Destination IP | The destination IP address and port of the connection. |
