For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bibilthaysose's avatar
bibilthaysose
Icon for Altocumulus rankAltocumulus
Jun 08, 2022

How many layers is too many layers of Virtual Servers?

I am trying to set up a multi-layered proxy in an F5 LTM.  Layer 1 policy forwards requests to layer 2 virtual servers based on the first segment of the path, layer 2 policy then does more intensive ...
application delivery
AS3
policy
virtual server
Gym's avatar
Gym
Icon for Cirrus rankCirrus
Jun 13, 2022

Surely the 2nd layer itself could return a 404 as its default action, so you wouldn't need a 3rd layer?

bibilthaysose's avatar
bibilthaysose
Icon for Altocumulus rankAltocumulus
Jun 13, 2022

Hi Gym,

Yea, in short you're right, but the issue I was having was that I couldn't figure out how to determine in an iRule whether a valid pool had been selected (or a redirect response been sent) by one of the endpoint policies.  What I ended up doing was adding the following condition to the iRule:

 

when HTTP_REQUEST {
  set selected_pool [lindex [LB::server] 0]
  if { [HTTP::has_responded] } { return }
  if { $selected_pool ends_with "default_pool" } {
    HTTP::respond 404 -version auto content [ifile get custom_404.html] noserver
  }
}

 

where the "default_pool" is the default pool of the VS.

Is that what you mean by "default action"?  Or is there some simpler way to do this?

Thanks,
Greg