F5 BIG-IP Pool Member Down but App Works: Health Monitor Troubleshooting Matrix

A pool member is red, but the application opens in your browser. Or every member looks healthy while users report errors. Start by asking what the health check actually requests, from which source, and what response it accepts—not by removing the monitor.

This F5 BIG-IP LTM troubleshooting guide provides a reusable symptom matrix, a monitor request worksheet and a controlled acceptance test plan. It targets conventional BIG-IP TMOS LTM, with the official BIG-IP 17.0 monitoring guide as a conceptual reference; confirm settings against your installed release.[3] All examples are hypothetical and unexecuted, not customer configurations or measured incident results.

X Follow @ipexptobe

OSPF Stuck in ExStart or Exchange: MTU and DBD Troubleshooting

An OSPF neighbor that keeps returning to ExStart or Exchange has moved beyond basic neighbor discovery but cannot complete database synchronization.^[1] This guide focuses on OSPFv2 and the practical interview question: why do Hellos work while the adjacency never reaches Full?

Short answer: Check the interface MTU first, then verify Database Description (DBD/DD) packet delivery, unique router IDs, and DBD sequence negotiation.^[1] An MTU mismatch can cause a router to reject even a small DBD packet because the packet advertises an interface MTU larger than the receiver supports.^[4]

X Follow @ipexptobe

Palo Alto NAT Troubleshooting: Why the Rule Matches but Traffic Still Fails

A destination NAT rule can match while the application remains unreachable: translation and permission are separate decisions on a Palo Alto Networks firewall.[1] Before widening a Security rule, prove which address, zone and return path the failing connection actually uses.

This guide answers a specific troubleshooting question: why does Palo Alto destination NAT match, but the connection still fail? It includes a policy worksheet, a symptom-to-test matrix and an acceptance checklist you can reuse during a change. The example is hypothetical, uses symbolic objects rather than production addresses, and does not claim a firewall lab run.

X Follow @ipexptobe

AI GPU Cluster Network Calculator: Ports, Bandwidth and Switch Sizing for 8–512 GPUs

Most AI-cluster articles describe products. Engineers usually need a different answer: how many ports, switches, links and watts are implied by the GPU count? This page starts that answer with a practical calculator and a repeatable sizing method for early design conversations.

The calculator below is intentionally conservative: it performs visible arithmetic for GPU count, network links and switch-port demand. It does not pretend to be a validated reference architecture, a quote, or a benchmark. Use it to catch impossible assumptions before a vendor design review.

X Follow @ipexptobe

NVIDIA InfiniBand for AI Clusters: NDR vs XDR, Rail Design and Acceptance Tests

A GPU cluster can have every cable connected and still be unready for training. The useful engineering question is not simply “NDR or XDR?” It is whether the port map, subnet management, routing policy, GPU-to-NIC alignment and failure behavior describe the same system.

This focused AI infrastructure installment develops a hypothetical 64-server, 512-GPU InfiniBand design, then turns it into a commissioning workflow. Calculations below are theoretical capacity accounting, executed with Python—not benchmark results. The example assumes eight GPUs and eight independent 400Gb/s network ports per server; it is not a claim that every eight-GPU server has that topology.

X Follow @ipexptobe

Weekly BGP Table Watch: IPv4, IPv6 and ASN Changes — 2026-09-07

The global BGP table keeps moving every day. This weekly BGP Table Watch snapshot tracks IPv4 prefixes, IPv6 prefixes, visible ASNs and the largest routing-table changes reported during the last week.

The goal is not to alarm on every change. BGP is noisy by design. The goal is to build a simple operational habit: watch the size of the routing table, notice large origin-AS changes, and keep an eye on where new ASNs and route withdrawals appear.

X Follow @ipexptobe

LACP Load Balancing Troubleshooting: Why One Flow Uses Only One Link

A four-member port channel can be healthy while one transfer uses only one member. Before replacing optics or increasing buffers, separate aggregate capacity from the forwarding decision for an individual flow. Linux bonding documentation explicitly notes that its layer3+4 policy can distribute traffic to one peer across members, but a single connection does not span multiple members.[1]

This guide is a practical diagnostic workflow for conventional Ethernet LACP and Linux 802.3ad bonds—not a claim about RDMA multipathing or GPU fabric performance. The design and test cases below are hypothetical; no production benchmark or failover test was run for this article.

X Follow @ipexptobe

Network freak Weekly Roundup: 2026-W36

This is the weekly Network freak roundup for 2026-W36. It collects the latest practical networking articles published this week, so the X feed can stay quiet while readers still get all links in one place.

GPT-6 Astra in the Last 24 Hours: Real Projects, New Ideas and the Risks Behind the Demos

Research window: 5 September 2026, 09:12 UTC → 6 September 2026, 09:12 UTC. This is a curated review of timestamped public material, not a complete census of the internet. Older safety documents are explicitly identified as background. Project results below are their authors’ reports; we did not rerun the projects or independently audit their outputs.

The most interesting Astra story this weekend is not another leaderboard. It is the emergence of a practical workflow: ask for an artifact, let an agent operate an existing application, inspect the result, and iterate. Simon Willison documented that loop with editable Blender scenes; Ethan Mollick shared a reconstruction of an unbuilt architectural concept. These are more useful signals than a screenshot labelled “AGI,” because they reveal something about how the work was produced.[1][2]

There is a less comfortable parallel story. Mollick warns that an agent’s local notes can contaminate supposedly fresh experiments. Meanwhile, OpenAI’s launch safety document describes both stronger safeguards and reduced monitorability. A model can become better at following boundaries while also becoming harder to inspect when deliberately pushed to evade monitoring. Those are different measurements, not mutually exclusive claims.[4][8]

X Follow @ipexptobe

EVPN/VXLAN BUM Traffic Troubleshooting: Head-End Replication vs Multicast

EVPN/VXLAN BUM traffic troubleshooting becomes painful when everyone starts at the wrong layer. A missing ARP reply, a silent PXE boot, or a VM that only fails before it has learned a unicast MAC address is often blamed on the application, but the real issue is usually in broadcast, unknown-unicast and multicast replication.

This article gives a practical checklist for finding BUM failures in an EVPN/VXLAN fabric, with special attention to head-end replication versus multicast underlay designs. It is written for operators who need a repeatable workflow, not a protocol theory lecture.

X Follow @ipexptobe

Top 10 GPT-6 Astra Projects and Demos: Early Apps, 3D Worlds, Games and Builder Workflows

GPT-6 Astra has only just started rolling out, but the first public demos already show where the model feels different: it is being used less like a chatbot and more like a hands-on builder across websites, 3D scenes, games, animation, CAD-style workflows and browser apps.

This ranking collects the most interesting early GPT-6 Astra projects and demos I found from OpenAI’s launch material and public posts on X. A note of caution: many social posts are creator claims, not independently audited case studies. Treat them as early examples of what people are experimenting with, not as formal benchmarks.

X Follow @ipexptobe

GPT-6 Astra: What OpenAI’s New Flagship Model Can Do, How It Compares, and Where It Wins

GPT-6 Astra is OpenAI’s new flagship model for end-to-end work: reasoning, coding, computer use, research and document creation. The headline is not only that the model is smarter. The more important shift is that Astra is designed to complete larger workflows across tools, files, browsers and professional software.

OpenAI released GPT-6 Astra on September 3, 2026, with availability rolling out to ChatGPT Plus, Pro, Business and Enterprise users, plus the OpenAI API, Microsoft Azure and AWS Bedrock. In the API, the model ID is gpt-6-astra.

X Follow @ipexptobe

EVPN/VXLAN Anycast Gateway Drift: Fix Intermittent First-Hop Failures

EVPN/VXLAN anycast gateway drift is one of those fabric problems that looks random from the server side: a VM can ping outside its subnet for a few minutes, then traffic stalls, then it recovers after an ARP refresh or a host move. The underlay is clean, BGP EVPN is established, and the SVI IP is configured on both leaves. The real issue is usually smaller: the fabric no longer has one consistent first-hop gateway identity for that VLAN/VNI.

This article gives a practical checklist for finding and fixing anycast gateway MAC, ARP/ND, and EVPN route ownership drift without turning a troubleshooting session into a broad outage. For more related fabric notes, see the Data Center, AI Infrastructure, and Start Here pages.

X Follow @ipexptobe

BGP Route-Map Order Troubleshooting: Fix Policies That Match the Wrong Prefix

BGP route-map order troubleshooting is a small operational skill that prevents large routing surprises. A policy can look correct line by line, yet still produce the wrong result because an earlier sequence matched the route before the more specific rule was ever evaluated.

This is common on data center border leaves, internet edges, MPLS VPN handoffs and lab fabrics where engineers add a new exception to an existing policy. The neighbor comes up, prefixes are visible, but local preference, community tagging, route filtering or AS-path prepending does not behave as expected.

X Follow @ipexptobe

EVPN/VXLAN DHCP Relay Troubleshooting: Find Missing Leases Fast

EVPN/VXLAN DHCP relay troubleshooting is one of those operational tasks where the first packet capture often tells only half of the story. You may see the client broadcast leave the access VLAN, the relay agent forward it toward a central DHCP service, and still the host never receives an address.

The most useful way to debug it is to treat DHCP as a routed workflow across two planes: the local anycast gateway and relay behavior on the leaf, plus the EVPN control-plane state that lets the DHCP reply find its way back to the correct tenant subnet.

X Follow @ipexptobe