Forum Discussion
A question about "use irules to filter the TCP payload 's keywords"
Hi Luojichen,
I don't have experiences with Oracle SQL. But its very unlikely that you can interupt a TCP-Session midstream and then forward just a single TCP-Segment (containing a specific query) to a different pool/member.
I strongly believe it is required to capture the initial client authentication packet exchange and then replay those packets for every Oracle pool reselection, to initially authenticate the backend TCP connection (aka. establishing the TCP session based authentication) and to finaly be able to forward the given SQL query over the "now" trusted connection.
Note: The outlined TCP-session based authentication bahavior is as least valid for MSSQL, MYSQL and LDAP databases to increase the performance of keep-alive connections. If Oracle wouldn't do that too, then it would be required to authenticate each single SQL-Query which would in turn degrate the overall performance to a great extent.
Cheers, Kai
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com