For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sanjai_126162's avatar
sanjai_126162
Icon for Nimbostratus rankNimbostratus
Sep 26, 2016

clientless mode making issue

we have published web-service application under one VIP which clientless mode "1" irule using and mapped the default pool member,its working fine as expected in browser as well as soap tool.   We ...
devops
iRules
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Sep 27, 2016

Hi Sanjai,

I'd like to recommend to temporary rule out APM (e.g. via 

ACCESS::disable
for a specific Client IP) to see if your LTM is already able to route the request correctly.

If you're required to switch pools/nodes based on the provided URI you have to apply a OneConnect Profile (recommended) or 

LB::detach
the connection before each node selection (not optimal) to allow LTM to switch the server side connections as needed.

If this is working stable and the request are able to pass to every single web application, then you should reenable APM and tweak the SSO profiles as needed. Keep in mind, that in combination with OneConnect you're limited to NTLM, Basic, Forms SSO or something homegrown that doesn't require a Session_based-Authentication. If NTLM is used, then you have to attach a NTLM profile to allow LTM to reuse idle OneConnect connections on a per-user basis.

Cheers, Kai