Forum Discussion

tbernath_90565's avatar
tbernath_90565
Historic F5 Account
Aug 08, 2009

Creating a full blown LDAP Cache on LTM

Ok,

 

I have a high traffic (application authentication) service and currently the LTM (V9) is managing a VIP and a pool of servers for LDAP queries.

 

 

For customers that are querying for service access, I want to cache the query and response. What I was thinking was to MD5(LDAP Query) and store the Query as key, and the response as the value.

 

 

I can't figure out how to use the cache except for HTTP caching. It seems there must be a way to have an iRule level global cache.

 

 

All the sample code I've found here show great ways to look into the SERVER_DATA and get the LDAP components, and since the queries and responses are static, this u just a matter of:

 

- eating the CLIENT_DATA packet with the request, if it's in the cache

 

- sending the CLIENT_RESPONSE with the value from the cache

 

- if it's not in the cache, let it go through to the pool

 

 

If you hash the LDAP query string, can you set it in the session so that when you receive the SERVER_DATA you have the key to go with the value of the response?

 

 

If you use the caching, can you still set it to expire the data every 6 hours, or something?

 

 

Thanks for any pointers,

 

 

TmB

 

 

  • Patrick_Chang_7's avatar
    Patrick_Chang_7
    Historic F5 Account
    Use the session command to put key/value pairs into memory (with a set expiration time). This will not be CMP compatible in v9, but will be in v10.