Forum Discussion
Awkrd1_7470
Nimbostratus
Jul 22, 2011Current connections not dropped when using command:discard
Hello,
I have a simple i-Rule implemented that is not doing what I expect it to do. I would like to discard any current or new connections to the pool (TCP reset) when the pool members <2. ...
Ryan_Paras_7933
Nimbostratus
Jul 26, 2011Most certainly NOT an elegant solution, but I think you could try this kludgy idea, which does not involve an irule....
For each member of your pool, create a monitor associated with that IP's destination specified. Apply all the monitors to the pool, with an "Availability Requirement" of 2 and set the "Action On Service Down" to either drop or reject....
For example... via the CLI...
tmsh
ltm
create monitor http http-192.168.0.1-80 destination 192.168.0.1:80 defaults-from http
create monitor http http-192.168.0.2-80 destination 192.168.0.2:80 defaults-from http
create monitor http http-192.168.0.3-80 destination 192.168.0.3:80 defaults-from http
create pool testpool members add {192.168.0.1:80 192.168.0.2:80 192.168.0.3:80} monitor min 2 of { http-192.168.0.1-80 http-192.168.0.2-80 http-192.168.0.3-80} service-down-action reset
You may want to replace 'reset' with 'drop' depending on whether or not you actually want to send resets or just kill the connection.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects