For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Paul_Kuykendal1's avatar
Paul_Kuykendal1
Icon for Nimbostratus rankNimbostratus
Nov 22, 2005

Documentation for modifying TCP profile settings with an iRule

Hi,

We are currently trying to tune the TCP session settings based on the upstream client and downstream server's location.

For instance:


when CLIENT_ACCEPTED {
     Tune settings for Partner 1
    if {[IP::addr "[IP::client_addr]/24" equals "192.168.1.0/24"]} {
        <<< Tune TCP session here >>>
     Tune settings for Partner 2
    } elseif {[IP::addr "[IP::client_addr]/24" equals "192.168.2.0/24"]} {
        <<< Tune TCP session here >>>
     Tune settings for rest of Internet connections
    } else {
        <<< Tune TCP session here >>>
    }
}

I am looking for a reference that contains the exact mapping between items in the TCP profile GUI page and the iRule profile settings. I've got the "iRule Desktop Reference" however it seems to be missing various items as well as having incorrect syntax on others.

Having a complete reference of all readable and settable profile parameters would be most helpful.

Thanks.

/Paul Kuykendall
application delivery
dev
devops
iRules

3 Replies

  • johns's avatar
    johns
    Icon for Employee rankEmployee
    Aug 16, 2006
    I am looking for a similar information. I basically want to have LAN-tcp-profile and WAN-tcp-profiles optimized for each, and apply them based on the source IP range.

     

     

    when CLIENT_ACCEPTED {

     

    if {[IP::addr "[IP::client_addr]/24" equals "192.168.1.0/24"]} {

     

    use LAN-tcp-profile

     

     

    } else {

     

    use WAN-tcp-profiles

     

    }

     

    }

     

     

    Is this possible?
  • Adrian_1807's avatar
    Adrian_1807
    Icon for Nimbostratus rankNimbostratus
    Mar 29, 2011
    Hi.

     

     

    I am also looking for something similar. I need to change FIN WAIT parameter in TCP profile.

     

     

    I afraid there is no command for doing: use WAN-tcp-profiles, for example.

     

     

    Did you found any way for developing your iRule???

     

     

    I am afraid it is not possilbe modifying Profiles inside iRules.

     

     

    Thank you!!!

     

     

    Best Regards
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Mar 31, 2011
    Tuning the traffic currently on the wire and updating the profile are two very different things. You're right though, there currently isn't a way to permanently modify the profile from within an iRule. You can change options that are controlled from within the profile, but it's only for the current traffic, not a permanent change made to the profile itself.

     

     

    Colin