For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ferny1_29424's avatar
ferny1_29424
Icon for Nimbostratus rankNimbostratus
Sep 23, 2010

How to configure an iRule to allow one particular host to have a different TCP profile ?

Hi Forum, I am new to F5. I need to confgure an iRule which would allow one particular host to have unlimited TCP connection to a virtual server. Logically I know what is required but I am not familiar with the iRule syntax. Your help would be much appreciated. Please see below a pseudocode of what I am trying to achieve. class unlimited_TCP_timeout_client { host x.x.x.x } when CLIENT_ACCEPTED { is client IP address defined in the Unlimited TCP timeout group? if { [matchclass [IP::client_addr] equals $::unlimited_TCP_timeout_client] } { Use TCP profile 'Customised to unlimited timeout' } else { Use TCP profile 'Default' } }
application delivery
dev
devops
iRules

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Sep 23, 2010
    That's a great start. Rather than specifying a new TCP profile, you can set the IP idle timeout from the iRule using IP::idle_timeout. There are a couple of examples on the wiki page:

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/IP__idle_timeout.html

     

     

    Aaron
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Sep 25, 2010
    I think you'll want to set the idle timeout for both the client and serverside connections.

     

     

    Aaron