For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Florian_Loos_11's avatar
Florian_Loos_11
Icon for Nimbostratus rankNimbostratus
Jul 23, 2013

How to update datagroup on a regular basis from external data source

Hello,   we are currently looking into a specfic topic with F5 networks technologies. We would like to implement a filter for the Exchange activesync protocol to allow connection only from "known"...
application delivery
dev
devops
iRules
Michael_Yates's avatar
Michael_Yates
Icon for Nimbostratus rankNimbostratus
Jul 24, 2013
Hi Florian,

 

 

I think what you are trying to do is programmatically possible if you really want to do it.

 

 

- Your first problem is going to be the information from the source into a Properly Formatted External Datagroup on the LTM. See the class command for more formatting information on the formatting. If you cannot get your data into the the proper format then the rest of what you are trying to do is mute.

 

- Your second problem will be getting the LTM to trigger a reload of the contents of the Datagroup (the methodology could be as easy as changing the permissions on the file itself (tmsh modify ltm data-group DATA.GROUP.NAME access-mode {read-only or read-write}). Changing the permission on the External Datagroup file will trigger the LTM to reload the data into memory and then be used by the iRule. Changing the content within the file will not trigger a reload automatically.

 

 

You may want to take a look at and collect performance data to compare before and after you do this if you get all of this done and working. It may make you reconsider doing this every 60 seconds (or not). Just a suggestion.

 

 

Hope this helps.