Forum Discussion
ppphatak_127926
Nimbostratus
NimbostratusCPU utilization upon adding irule condition
Hi, I have a 540 device in place to cater for quite a few websites and peak SSL connections at a time can be around 300. The 540 SSL accl. is capable of supporting 800 per sec. Current CPU util is 30-...
ppphatak_127926Nimbostratus
NimbostratusI guess the link you provided to check for time reqd for each rule is for 9.x, not 4.6.x. Do you have it for 4.6.x?
If I use vmstat command, will it be user cpu or kernel cpu which will overshoot? Which one would overshoot for SSL? Are rules compiled and saved in cache or engine picks it up from disk everytime? Sorry about so manu questions.
Existing rule looks like following, where I want to add 4 more "nested if".
if (tolower(http_uri) starts_with one of class-A) {
redirect to "https://sitename-A/%u"
}
else if (not (http_header("SSLClientCipher") contains one of ssl_bits)) {
redirect to "http://%h/error/html/403_5.htm?403;https://%h/%u"
}
else if (tolower(http_uri) starts_with one of class-B) {
use pool Pool-B
}
else if (tolower(getfield(http_uri, "/", 2)) == one of Class-C) {
use pool Pool-C
}
else if (tolower(getfield(http_uri, "/", 2)) == one of Class-D) {
use pool Pool-D
}
else {
use pool Pool-E
}
