For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Aug 29, 2005

Allowing only active connections when member is disabled

Is there a way within an iRule to mandate that disabled members receive active connections only, and persistent and new connections are killed? This way the thin client in the field will requery from...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Aug 30, 2005
I guess I was making it too complicating, this achieves my goals:


when CLIENT_ACCEPTED {
   if { ([IP::client_addr] eq "10.10.192.8") || ([IP::client_addr] eq "10.20.192.8") } {
      persist none
      }
   if { [active_members stl-ac24-pool] == 0 } {
      reject          
      }
}

What is still unknown is whether or not I can "force down* the nodes with iRules so that the VIP doesn't respond to syn requests. Any ideas???