Forum Discussion
Pav_70755
Nimbostratus
NimbostratusAccessing individual servers / nodes via a different port
I came accross a complete Irule which I used a few years ago which had this section in it:
when HTTP_REQUEST {
set srvr [findclass [TCP::local_port] $::TST_Individual_Servers " "]
...
hoolio
Cirrostratus
CirrostratusHi Pav,
If you want to give admin access to the pool members behind LTM, I'd use a separate virtual server from your client traffic. You can do this a few ways:
sol7229: Methods of gaining administrative access to nodes through the BIG-IP system
http://support.f5.com/kb/en-us/solutions/public/7000/200/sol7229.html
Separating your client and admin traffic makes it simple to perform access control. It also allows you to optimize traffic based on protocol using different profiles and timeouts. ie, you probably don't want to use a very long TCP idle timeout for web traffic but do for administrator's remote desktop sessions.
Aaron
