Forum Discussion
SteveD1979
Cirrostratus
CirrostratusHelp with APM irule to append URI and URL to call to kill individual sessions
Hi I'm trying to figure out the best way to get this to work. I need to take the incoming http request https://application.mydomain.com and append a URI. Part of it is static URL/static/static/stat...
SteveD1979Cirrostratus
CirrostratusRequest comes in on URL and hits one VIP a the common partition which has the access policy tied to it. The access policy looks at the SAML XML to authenticate then if it is allowed it is sent to another VIP on the same pair of LTMs but a different partition (doesn't have its own DNS record). The application configured behind the second VIP runs in Openshift and requires seeing that /static/static/static/%session.saml.last.attr.name in order to route the traffic correctly. I've been able to add a redirect at the end of the access policy instead of an allow but not using the same DNS record that points to the VIP. I'm assuming this just sends it in a loop when it is the same? Hopefully that makes sense
Michael_Waechter
Employee
EmployeeWhat is the URL the final application is expecting?
is it www.test.com = apm vip
forward session variables and continue request to www.test.com on vip 2 or is it expecting another url all together?
- SteveD1979
The openshift container is expecting one of 3. Either the oringal URL, the IP or the openshift proxy URL. We just obviously don't want to expose the IP or the proxy. So sending it through with the original URL with the added URI would be fine. It just seemed like redirecting to the original would send it back through the entire process hitting the VIP the DNS resolves to with the access policy attached.
Mayur_TTo avoid loop, may want to use ‘MRHSession and LastMRH_Session’ cookies in your irule while sending it through with the original URL with added URI. And use ‘STREAM::disable’ then for return traffic ‘STREAM::enable’
So when it comes with the session ID inside the query parameters, disable the Access.