Forum Discussion
How to config PBR
can you help me , how to config PBR on the BIg Ip ?
on the web GUI , i can't see anywhere to config PBR
thanks all
78 Replies
Hi Stephan Will the below work? Condition has to be such that if pool is unavailable, then all traffic has to be forwarded to next hop.
rule pbr-rule {when CLIENT_ACCEPTED { log local0. "PBR iRule starting" if {[class match -- [IP::client_addr] equals subnet_bypass]} { if { [active_members pool_hop_1] < 1 } { log local0. "No active pool members so will forward to next-hop" } { forward } else {[class match -- [IP::client_addr] equals subnet_permit]}{ pool WHTTP_Transparent log local0. "PBR successful" } }
}
- StephanManthey
Nacreous
Hi Sumanta, I changed it a bit and added comments:
rule pbr-rule { when CLIENT_ACCEPTED { log local0. "PBR iRule starting" client IP is from subnet_bypass and will be forwarded via pool_hop_1 if {[class match -- [IP::client_addr] equals subnet_bypass]} { if pool_hop_1 has no members, connections will be forwarded according to routing table if { [active_members pool_hop_1] < 1 } { log local0. "No active pool members so will forward to next-hop" forward if pool_hop_1 has available members, connections will be forwarded via pool_hop_1 } else { pool pool_hop_1 } client IP is from subnet_permit and will be forwarded via WHTTP_Transparent } elseif {[class match -- [IP::client_addr] equals subnet_permit]} { pool WHTTP_Transparent log local0. "PBR successful" } } }Thanks, Stephan
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com