For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Marvin_129795's avatar
Marvin_129795
Icon for Nimbostratus rankNimbostratus
Mar 25, 2014

Big IP APM includes limited LTM functionality for free also URL redirect in Irule?

Dear all, I am wondering with kind of limited LTM functionality is already available when buying a new Big IP 2000 APM. I know SSL offloading is included, but does it also include URL rewriting, for example http:\google.com to https:\www.google.com. This is a requirement for our hosted SSL websites.

 

Anyone experience with URL redirection within the free LTM functionality included in the Big IP APM? Do I need to buy an extra LTM license to be able to configure this feature?

 

7 Replies

  • You can do simple http to https rewriting via an irule. This functionality is included in base APM. If you want to use any advanced load balancing functionality like pools with more than one member you will need to purchase full LTM. You should talk to your sales representative about good/better/best pricing model to ensure you get the most bang for your buck.

     

    • Marvin's avatar
      Marvin
      Icon for Cirrocumulus rankCirrocumulus
      Thank you for your answer. So simple rewriting is possible via an irule, like rewriting http:\\domain.com to https:\\www.domain.com? That is enough for us and we also need some basic round robin load balancing to our internal servers. So we don't need the advanced load balancing features. We only need the basic load balancing features similar as the Link Controller can do. So can you confirm that the URL rewriting is possible as I describe here in the base APM, please? If I know that URL rewriting is possible and basic load balancing is included in the base APM that will help me a lot at this moment. Thank you again!
    • Marvin's avatar
      Marvin
      Icon for Cirrocumulus rankCirrocumulus
      I mean redirecting instead of rewriting.
  • Without a LTM license you cannot build pools with more than 1 member. If you are planning on performing local load balancing to multiple servers you will need LTM. Doing basic redirects is possible with just APM because it can be done in iRules. Load balancing to multiple pool members cannot be done with just APM. I would highly recommend reaching out to your sales team to properly size and price out the best solution for you, but it sounds like you need LTM+APM.

     

  • gbbaus_104974's avatar
    gbbaus_104974
    Historic F5 Account

    Hi

     

    Unfortunately the rule "xPM Standalone = 1 Pool member" does not hold true/constant across ASM, APM, AFM, AAM, etc

     

    In the 'old days' ASM Standalone was the only real 'standalone product, and it only allowed a single pool member.

     

    Since then there was the introduction of 'EdgeGateway' which was effectively "LTM Lite + APM + Web Accelerator". This combination allowed for multiple pool members but the LTM was limited in the fact that it did not support cookie persistence, and some advanced load balancing methods.

     

    APM Standalone is based on the EdgeGateway mantra, but without the Web Accelerator piece. So you CAN support more that 1 pool member in a pool.

     

    As for the rewrite piece, this is supported in APM standalone .... but double check with the F5 sales guy just to be 110% sure

     

  • Thanks for the clarification. I was not aware of the change in functionality. When in doubt, reach out to your sales team.

     

  • Marvin's avatar
    Marvin
    Icon for Cirrocumulus rankCirrocumulus

    I contacted F5 Sales;

     

    They told me that URL redirecting is possible in Base APM changing from http to https, but I am still not sure because manipulation of traffic on L7 is not included in the APM base.

     

    When buying an APM only compared to a LTM + APM combo the folowing features will be missing;

     

    Within APM 1.Oracle Access Manager (OAM) Integration 2.GPAnywhere (Group Policy enforcement)

     

    Within LTM 1.Persistence Profiles 2.Most Health Monitors 3.Most load balancing features (except basic ones like round robbin etc.) 4.Advanced Virtual Server Settings 5.All LTM functionality on layer 7 (also manipulation of traffic on L7 in iRules). 6.Pools are limited to three members

     

    I just sent another email to ask if I can change the URL while redirecting to https. Keep you all posted if I know more!