For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Feb 11, 2010

Connection Mirroring and IRule Problem

Hi All,     New to the wonderful world of F5 and getting this error when trying to run connection mirroring and iRule.     This is the iRule we're using to permit only trusted IP...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 11, 2010
Hi Andy,

 

 

Also, if the connections through the VIP are short lived, connection mirroring is generally not worth the additional resources it requires. Specifically, for HTTP, it doesn't make sense to use connection mirroring as the protocol can handled a brief drop at the TCP layer. So if there is a failover, HTTP clients should recover automatically or with a refresh of the page.

 

 

Connection mirroring makes more sense for long lived connections that don't handle TCP resets, like telnet. SOL7222 has details on this:

 

 

SOL7222: Overview of connection and persistence mirroring

 

https://support.f5.com/kb/en-us/solutions/public/7000/200/sol7222.htmlbestpractice

 

 

Aaron