Forum Discussion

Jason_Keating's avatar
Jason_Keating
Icon for Altostratus rankAltostratus
Aug 02, 2012

ASM ICAP and Route Domains

Does anyone know if the 10.2.3 ASM ICAP client can use an ICAP server in a route domain. I suspect not as I have been unable to provide a a.b.c.d%routedomain_id form address (not a valid IP address)

 

I suspect the ICAP client is trying to use the Common Partition route domain (my ICAP server is in another partition) I also suspect the ICAP client can not use route domains in other partitions as I have not even seen an attempt to connect.

 

 

 

Has anyone done this before ?

 

 

 

Thanks

 

J

 

config
design
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Aug 02, 2012
    Hi Jason,

     

     

    I don't think there is full support for route domains for ICAP servers. You could confirm this and/or open a request for enhancement with F5 Support.

     

     

    In the meantime, are you able to put the ICAP server(s) in the default partition and route domain?

     

     

    Aaron
  • Jason_Keating's avatar
    Jason_Keating
    Icon for Altostratus rankAltostratus
    Aug 05, 2012
    Hi Aaron,

     

     

    I finally got a lab environment running with an ICAP server in common and route domain 0, with my virtual, HTTP Class and Policy in a second partition and route domain with strict isolation turned on in both. It works well.

     

     

    Hopefully today I will have a new VLAN at my disposal to attempt this in my test environment (identical to the target environment) which I will configure in the common partition. I'll configure a virtual in common to load balance the two ICAP servers in this new VLAN and expect to see a much better result.

     

     

    I have also opened a case but no response yet.

     

     

    I'll let the community know the result of both the case and my configuration.

     

     

    Thanks

     

    J

     

     

  • Jason_Keating's avatar
    Jason_Keating
    Icon for Altostratus rankAltostratus
    Aug 12, 2012
    OK, so using the common partition and default route domain for the ICAP server worked a treat, HTTP classes and the relative Web Apps/Policies in other partitions/route domains with Virus Detection configured in the policy use the ICAP servers as promised.

     

     

    I've created a VIP in common for redundant ICAP's also, so it does the job.

     

     

    Cheers