For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sandiksk_35282's avatar
sandiksk_35282
Icon for Altostratus rankAltostratus
Sep 16, 2015

how can i setup a vip listening on 2 different ports.

Below is the config from cisco ,please assist me on how to configure on F5 using Irules

 

serverfarm host text-2 probe PROBE_TCP_11090 rserver apps1 inservice rserver apps2 inservice

 

class-map match-all text-2_CLASS 2 match virtual-address 10.129.12.134 tcp eq 11090

 

class-map type http loadbalance match-any text_CLASSURL 2 match http url /jmx-console/* 3 match http url /web-console/* 4 match http url /mediamanager/* 5 match http url /teams/* 6 match http url /teamswebservices/* 7 match http url /artesia-ws/* 8 match http url /artesia/* 9 match http url /brs/* 10 match http url /content/* 11 match http url /OTMedia/* 12 match http url .* 13 match http url /mediamanager 14 match http url /teams

 

policy-map type loadbalance first-match text-2_POLICY class opentext_CLASSURL sticky-serverfarm text-2_STICKY

 

sticky ip-netmask 255.255.255.255 address source text-2_STICKY serverfarm text-2 timeout 30 replicate sticky

 

parameter-map type http Case_PARAM persistence-rebalance parsing non-strict

 

policy-map multi-match POLICY class text-2_CLASS loadbalance vip inservice loadbalance policy text-2_POLICY loadbalance vip icmp-reply active nat dynamic 23 vlan 20 appl-parameter http advanced-options Case_PARAM

 

2:)

 

serverfarm host text-https probe PROBE_TCP_11443 rserver apps1 inservice rserver apps2 inservice

 

class-map match-all text-https_CLASS 2 match virtual-address 10.129.12.134 any

 

policy-map type loadbalance first-match text-https_POLICY class class-default sticky-serverfarm text-https_STICKY

 

sticky ip-netmask 255.255.255.255 address source text-https_STICKY serverfarm text-https timeout 30 replicate sticky

 

policy-map multi-match POLICY class text-https_CLASS loadbalance vip inservice loadbalance policy text-https_POLICY loadbalance vip icmp-reply active nat dynamic 23 vlan 20

 

5 Replies

  • t-roy's avatar
    t-roy
    Icon for Nimbostratus rankNimbostratus
    Sep 16, 2015

    I suspect you have some additional config that would need to be provided to do this conversion as I see some L7 decisions above. If you are doing several of these migrations you will benefit greatly from reading an ACE deployment guide. If are doing L7 you will need to learn some basic iRules as well.

     

  • DevBabu's avatar
    DevBabu
    Icon for Cirrus rankCirrus
    Sep 16, 2015

    1. You need to create two virtual server and two different pools for each vip

       

      • one vip with port 11090
      • other vip with port any
      • pools as required and assign to those vips.

    For vip with port 11090 - iRule is required

     

    Both has source address persistence.

     

    Do you have any specific ports for vip with "any port". If so, I would suggest to use specific port on any VIP.

     

  • sandiksk_35282's avatar
    sandiksk_35282
    Icon for Altostratus rankAltostratus
    Sep 17, 2015

    thanks for ur response ,but for conditional load balancing can i get some help creating a data group and add the string and configure an irule

     

    class-map type http loadbalance match-any text_CLASSURL 2 match http url /jmx-console/* 3 match http url /web-console/* 4 match http url /mediamanager/* 5 match http url /teams/* 6 match http url /teamswebservices/* 7 match http url /artesia-ws/* 8 match http url /artesia/* 9 match http url /brs/* 10 match http url /content/* 11 match http url /OTMedia/* 12 match http url .* 13 match http url /mediamanager 14 match http url /teams