For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mgamez_60648's avatar
mgamez_60648
Icon for Nimbostratus rankNimbostratus
Dec 18, 2013

Assistance needed to load balance / persistence across multiple hosts with multiple ports including SSL (weblogic)

Brocade appliances have options in place such as port sticky and port tracking however, f5 appliances do not have similar features but may be duplicated with an iRule. This is our problem:

 

We have a vs:80 and vs:443 using the same IP. We want to round robin all the nodes behind port 80 despite the different ports. When a connection is made, we want to persist the connection and make it sticky as to not break/reset the connection so if a client lands on node 10.1.1.1:7000 and enters part of the site that is SSL, the client needs to connect to 10.1.1.1:7001. Can someone help us with this issue?

 

vs_vip:80

 

* vs_80_pool:

 

10.1.1.1:7000

 

10.1.1.1:8000

 

10.1.1.1:9000

 

10.1.1.2:7000

 

10.1.1.2:8000

 

10.1.1.2:9000

 

vs_vip:443

 

* vs_443_pool:

 

10.1.1.1:7001

 

10.1.1.1:8001

 

10.1.1.1:9001

 

10.1.1.2:7001

 

10.1.1.2:8001

 

10.1.1.2:9001

 

4 Replies

  • Chris_Akker_129's avatar
    Chris_Akker_129
    Historic F5 Account

    Hi Mgamez, F5 has been doing this type of persistence matching since the first DotCom web shopping cart was created on a webserver, over a decade ago.

     

    The feature is called "Match Across", and you have several options depending on how you want additional connections persisted. You will find an overview here:

     

    http://support.f5.com/kb/en-us/solutions/public/5000/800/sol5837.html?sr=34009954

     

    You shouldn't need an iRule.

     

    -Chris.