For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jarrod_Lucia_40's avatar
Jarrod_Lucia_40
Icon for Nimbostratus rankNimbostratus
Mar 08, 2010

Configuring LTM as transparent Bridge

Hi All,

 

 

I'm interested in using the LTM as a rate shaper for a bunch of users, more specifically shaping p2p traffic as outlined in the "Bandwidth Management for Peer-to-Peer" Whitepaper from F5.

 

 

I understand the irule and the rate shaping but having a hard time getting it to detect anything other than vlan broadcasts once its placed inline.

 

 

Anyone got any information on the vlan / virtual server sertup for this kind of deployment ?

 

 

Cheers,

 

 

Jarrod.
config
design

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 08, 2010
    Hi Jarrod,

     

     

    Can you post a link to the whitepaper you're referencing, a copy of the VIP, iRule and pool config you're testing and any debug log output from /var/log/ltm? You can list the config objects from the bigip.conf or by running 'b virtual VIP_NAME list', 'b rule RULE_NAME list' and 'b pool POOL_NAME list'.

     

     

    Thanks,

     

    Aaron
  • Jarrod_Lucia_40's avatar
    Jarrod_Lucia_40
    Icon for Nimbostratus rankNimbostratus
    Mar 08, 2010
    Hi Aaron,

     

     

    Please see the information requested, I hope I got everything you wanted.

     

     

    Whitepaper: http://www.f5.com/pdf/white-papers/rateshaping-wp.pdf

     

     

    VIP:

     

    virtual fwd_all {

     

    l2 forward

     

    destination any:any

     

    mask 0.0.0.0

     

    rules test_irule

     

    profiles fastL4_udp_rtp {}

     

    vlans Bridge enable

     

    }

     

     

    irule (just for logging at this stage):

     

    rule test_irule {

     

    when CLIENT_ACCEPTED {

     

    log "traffic seen from local [IP::local_addr]"

     

    log "traffic seen from client [IP::client_addr]"

     

    }

     

     

    VLAN Setup:

     

    vlan Bridge {

     

    tag 4094

     

    interfaces {

     

    1.1

     

    1.2

     

    }

     

    }

     

     

    Debug Log from /var/log/ltm :

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from local 255.255.255.255

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from client 10.1.5.13

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from local 255.255.255.255

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from client 10.1.5.13

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from local 255.255.255.255

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from client 10.1.5.13

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from local 10.1.5.255

     

    Mar 9 08:45:46 local/tmm info tmm[6628]: 01220002:6: Rule test_irule : traffic seen from client 10.1.5.13

     

     

    Network Diagram (Basic):

     

     

    Internet router 10.1.5.1

     

    |

     

    |

     

    |

     

    BIGIP (bridging VLAN)

     

    |

     

    |

     

    |

     

    LNS 10.1.5.50

     

    |

     

    |

     

    Customer Pool (10.1.20.0)

     

     

    Cheers,

     

     

    Jarrod.